last executing test programs: 55.577526681s ago: executing program 0 (id=97): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa95aa86dd608a37f200142c00fe8000000000000000000000000000bbff0f"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x142, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x1000, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000214235027c07000fddbdf250a00", @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x24044044}, 0x4008000) 55.507333835s ago: executing program 0 (id=100): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf251b0000000c00060001"], 0x50}, 0x1, 0x0, 0x0, 0x320400d4}, 0x2000c044) 55.450561987s ago: executing program 0 (id=103): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x24, 0x2e, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x10, 0x9b, 0x0, 0x1, [@typed={0xc, 0x7e, 0x0, 0x0, @u64=0x7}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@caif=@util={0x25, "885ccfb5c87f49a3b9f84cc315ebb51d"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="136b18ef8a73b84dfb432c83b412a4b58e440331148ec5d65d01849766bd7a58310c9adbfee48bc68a1049dd7f636f793df0bcdeff13845a4bebf4dc24eadf884ddc10ed3a793293a634758ba2059d500c6228d74b53c10993cf2595f64fb3740554f94743986633ae80a0ae3e0def0d86e7f35a07c33257aa238755215b7931ba2d7c2ec9de6f932caac96a871f837ff2c81e8a15da34808115964fb2c970cd192edac918451207f21bc5bf27840418fda918d638c37bf82b335139d025", 0xbe}, {&(0x7f0000000140)}, {&(0x7f0000000180)="60cee7246d8f03a157a14518340d4042d63247623eb5f6891e52c6188518e031f979f593a16b5537e09fd0930ea44bc41370719c3da8a2a88ea0dd7711476e897b346cdc6d0eac706266d8f7b75dff6db7e8cf7a5108adb2a69e0f590fbcd6a38cf53ed632ef9fe28726758aefef520941fba2eb602d646b21605a5f49409b03715f133bc11bd3fbf741bc58590011937440b95fbe4aa6115d00390c81b9769d97b504806a57a9681bf3f371", 0xac}, {&(0x7f0000000240)="6f571b5c2f55136e80de0fa85ecba1a90ae06877678cf6ddb928a191da547722846f9eb695050b3546e89ff86d3e2cb7b62a16270ae4ef787b38d49f6c561f6016f566f227bf8de6888a982c", 0x4c}], 0x4, &(0x7f0000000300)=[{0x78, 0x118, 0x80000000, "3e0f869f07fb0b9b7955103c81e254234954cfc985ce57e05bdf17ad679c87534cec26f8f08d0bf01818cc0610e92bd62757b93035d7a39ef44aebc29a61902c46a27ac582e4174b6bf5f720dd2365a6ad0295853de2dd046e409234ec94eef20856"}, {0xc0, 0x119, 0x24e, "26dd83de0c8b0d74f2e1775fe0b6c13ad628d9a8edf994503574fef0de56fa9007ffd0c471f09c062d8db5a3eace5a2401b5c85085ea8a2c5c8c6282eeef1025954b247ef7684a54e3e1e63f9ef0eee34e89e64f8880a91e64c3c35381d301a3072adfb765655cfda2325dc97b96d74c85f004cf66040209ec20bad90a846fcbec48a5c14f67a3af5c99a0a8603c25957aa6b2cf52f31cc2eaaf686d887ff964ff94f93c03ced0d97a2fa500daa609"}], 0x138}, 0x80) socket$rds(0x15, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000001cc0)) 55.38964875s ago: executing program 0 (id=104): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) getpid() syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x8040, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x2d1, &(0x7f0000000740)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_set$pid(0x2, 0x0, 0x2007) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) unshare(0x2000080) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@gettaction={0x108, 0x32, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ee062b9}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x40000}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x805c}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x108}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4577, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(0x3) timerfd_create(0x7, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000180)={0xab000500, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x806, r5, 0x0}]) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',\x00']) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 55.165559322s ago: executing program 0 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x66}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a917a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d1e3c", 0x9a}, {&(0x7f0000001180)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a6cb6faab2a777d", 0xb2}, {&(0x7f0000000f80)="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", 0x131}], 0x3}, 0x8bb3a321ef809a) 51.711338887s ago: executing program 0 (id=139): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000003700), r0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003800)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004080) 51.698579108s ago: executing program 32 (id=139): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000003700), r0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003800)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004080) 8.255008981s ago: executing program 5 (id=560): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0x9, 0x0, 0x0) r4 = syz_open_dev$sg(0x0, 0x0, 0x5) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23", 0x11}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000) mlockall(0x3) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) brk(0x600000000000) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x2400c000) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 8.051220722s ago: executing program 2 (id=563): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x10, 0x2, 0x3be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="feff0f00", @ANYRES16=r7, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002006c6f00"/38], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="810200000000000014001a80100004800c000180088000"], 0x34}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x74, r8, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4050}, 0xc0d79b6ff367b940) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xca, &(0x7f0000000700)=""/202}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r2, 0x22d0, 0x20, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x4, {0xa, 0x4e22, 0x6a0a, @remote, 0x8}}}, 0x32) setsockopt(r0, 0x400002a, 0x6, &(0x7f0000000000), 0x0) 7.345916718s ago: executing program 2 (id=566): r0 = io_uring_setup(0x660c, &(0x7f00000006c0)={0x0, 0x103, 0x0, 0xfffffffc, 0x211}) close(r0) pipe(&(0x7f0000000080)) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0xa}}, {@usrquota}, {@data_err_ignore}, {@dax}, {@abort}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) fallocate(r2, 0x0, 0x22001, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x28011, r4, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) sendfile(r3, r3, 0x0, 0xe3aa6ea) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r6 = dup(r5) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/206, 0xce}, {&(0x7f0000000000)=""/78, 0x4e}], &(0x7f00000002c0)=[0xc9, 0x0, 0x2, 0x3, 0x0, 0xfffffffffffffffe, 0x94, 0x7, 0x5], 0x2}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x2, 0x1, 0x1, 0xfffe}) lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 6.437293373s ago: executing program 2 (id=569): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000180), 0x0, 0x0, 0x1) r1 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='\x00', 0x100c404, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRESDEC=0x0], 0x1, 0x1ff, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000180)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fc, &(0x7f00000004c0)="$eJzs3c1vVFUbAPDn3n7Svu/bQt6ouJAmxkCitLSAIcZE2BOCHztXlRaCFEpojRZJLAluTIwbFyauXIj/hZK4deHWhRtXhoQYw0IMkTF3em+ZTmdKv+aDmd8vufSce5l7zi08fe6cnnMngK41lv2RRuyPiKtJxEjFsd7ID46t/L37f944l21JlEpv/5HEjU+S5cpzJfnX4fzF/4xE8nMasa9nfbsLS9cvTc/NzV7L6xOLl69OLCxdP3zx8vSF2QuzV6ZenTpx/NjxE5NHdnR9pVxWPn3r/Q9HPjvz7rdfP0wmv/v1TBIn41Het+y6ql87sKOWs+/ZWNH+g8r92ff1xA7P3S7+Gin+nzyWVO+gbZ2PiCzC+iLi2RiJnop/zZH49M2Wdg5oqFLyOEcC3SbZVvwP7n5HgCYr7gOK9/a13gevlzb4rgRohnunVgakVmK/LyKK+O9dGRuMwfLYwND9ZM04T5KPG+xU1sZPP565lW1RZxwOaIzlm8Uod3X+T8qxORqD5drQ/XRN/KcVW7b/rW22P1ZVF//QPMs3I+K5PP/3x5bif6wi/t/bZvviHwAAAAAAAHbPnVMR8Uqt+X/p6vyf/hrzf4Yj4uQutP/k3/+ld/NCsgvNARXunYp4veb839U5vqM9ee2/5fkAfcn5i3OzRyLifxFxKPoGsvpk1XkrZwgf/nzfV/Xar5z/l21Z+8VcwPxMd3urFuLOTC9O7/S6gYh7NyOeL8//PZDvWTv/J8v/SY38n8X31U22se+l22frHXty/AONUvom4mDN/P/4djvZ+PkcE+X7gYnirmC9Fz7+4vt67Yt/aJ0s/w9tHP8DSeXzeha2dv7+iDi61Fuqd3y79//9yTs9xfkzH00vLl6bjOhPTq/fP7W1PkOnKuKhiJcs/g+9uPH43+r9f0Uc7omI5U22+cyj4d/qHZP/oXWy+J/ZOP+Prs3/Wy9M3R79oV77ZzeV/4+Vc/qhfI/xP6i0/nkcmw3QlnQXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5yaUT8J5J0fLWcpuPjEcMR8f8YSufmFxZfPj//wZWZ7Fj58//T4pN+R1bqSfH5/6MV9amq+tGI2BsRX/bsKdfHz83PzbT64gEAAAAAAAAAAAAAAAAAAKBNDJfX/JcGqtf/Z37vaXXvgIbrzb+Kd+g+vdt+ZWlgVzsCNN324x942m0+/vsa2g+g+erH/4OHpbKmdgdoIvf/0L22Gf9+XQAdQP6HbrXJMb3BRvcDaAX5HwAAAAAAOsreA3d+SSJi+bU95S3Tnx8z2R86W9rqDgAtYw4vdK/e+Vb3AGgV7/GBZLX0d83F/vVn/yeN6RAAAAAAAAAAAAAAsM7B/db/Q7faeP2/uf3QyTZY/18r+D0uADpI/Y/+kPuh03mPDzwp21v/DwAAAAAAAAAAAABtYPD6pem5udlrC0tPX+GN9ujG1grL023RjV0tPGrMmfsioj0usNmF4hEcLexGi38uAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAq/4NAAD//yOCL58=") r3 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x1, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000dc0), &(0x7f0000000480)='./file0\x00', 0x40, &(0x7f0000001340)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="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", @ANYRES16=0x0, @ANYRESOCT=r2, @ANYBLOB="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"], 0x8, 0x2f3, &(0x7f0000000ac0)="$eJzs3M9PE1sUwPHTFkpbAmXx8l7eS1640Y1uJlBdK42BxNhEgtT4IzEZYKpNx5bMNJgaI+LGrfGPcEFYsiNR/gE27nTjxh0bExeyMI7pdIb+BKSUFuH7Scgc5t5z596WknMnDNt3Xj/OZWwtoxclGFESEBHZERmRoPgC3jHoxmGp9UIuDn77+P+tu/duJFOpyRmlppKzlxJKqeHRd0+eRb1uGwOyNfJg+2viy9bfW/9u/5x9lLVV1lb5QlHpaq7wuajPmYZayNo5Talp09BtQ2XztmFV2guV9oxZWFwsKT2/MBRbtAzbVnq+pHJGSRULqmiVVOihns0rTdPUUExwkPTqzIyebDN5vsOTwTGxrKQeEpFoU0t6tScTAgAAPdVY/wdFdbL+Xzu3WRy8vT7s1f8b4Vb1/+VPlbHq6v+IiLSs//3rt6z/9cPV/80V0dlypPofJ8NouOlUoBqWG62kHvM+v66V+2tjbkD9DwAAAAAAAAAAAAAAAAAAAADAn2DHceKO48T9o/81ICIREfG/b5EaEpGrPZgyOugI7z9OgeqDeysBEfPVUnopXTl6HTZFxBRDxiQuP9yfB0859p88UmUj8t5c9vKXl9IhtyWZkaybPy7xfmnMd5yVmhHq8/slVpufkLj81Zw/dT01mVAV9flhuXC+Jl+TuHyYl4KYsuDOo5r/fFypazdTDflRtx8AAAAAAKeBpna13L9r2l7tlfzd/XXj/YFQdX891nJ/3if/9fV27QAAAAAAnBV26WlON03D2ieIysF92g/6jmlkf4W/m+X/LcPxrXSfwL94XVPEO9nxlyXQ9LK8dBznUOMEpZ2rj5ZXo466Cv+20V59ZHqi+++gG/zz5u33zg14ZT1ywErbD0L7fy76u/YLCAAAAEDXVIt+/8xEbycEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAZ1I3/jtbrNQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnxa8AAAD//wzMBlY=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, 0x0, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x5412, &(0x7f0000000040)=0xd) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000000c0)) 5.1238838s ago: executing program 5 (id=581): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e6df0000000000000000000000000a20000000000a03000000000000000000070000010900010073797a300000000014000000090a0500000000000000000005000000300000001e0a05010000000000000000070000070900020073797a31000000000900010073797a301b00000004000380140000001000010000000000000000000284000a"], 0x8c}}, 0x40000) mlockall(0x3) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cd04000000", @ANYRES16=r6, @ANYBLOB="010025bd7000ffdbdf251a00000007002100626200000c0022800400008004000080"], 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x2400c000) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0, 0xfffffe0f}], 0x2}}], 0x2, 0x0) 4.610883026s ago: executing program 2 (id=586): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setresuid(0x0, 0xee00, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 4.493166462s ago: executing program 2 (id=587): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'perf_event'}, {0x6396f4247c996636, 'cpuset'}, {0x2d, 'rdma'}, {0x0, 'perf_event'}, {0x2d, 'net_prio'}, {0x2b, 'rlimit'}]}, 0x38) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x65, 0x0, 0x40, 0x0, 0x0, 0x5, 0x280a8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x8}, 0x8016, 0xb1d9, 0x10ffe, 0x0, 0x2, 0x80000011, 0x7, 0x0, 0x6, 0x0, 0x25e}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r2 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x40000, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x10d00, 0xf) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 4.179894458s ago: executing program 1 (id=591): syz_mount_image$vfat(&(0x7f00000022c0), &(0x7f00000008c0)='./file0\x00', 0x100000, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c9, &(0x7f0000002300)="$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") r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2a2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xe}, 0x818, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x2, 0x0, @val=0x80}}}}}}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xffff, 0xf, 0x0, @opaque="66b71b4468e24e"}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@dont_hash}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) keyctl$setperm(0x5, r2, 0x802) keyctl$get_security(0x11, r2, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r0, @ANYBLOB="01002cbd0800fbdbdf2501"], 0x34}}, 0x4) 3.233759496s ago: executing program 1 (id=593): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x400, &(0x7f00000ce000/0x1000)=nil, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r0}, 0x18) 3.186380668s ago: executing program 1 (id=594): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x4c}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.96323495s ago: executing program 1 (id=595): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="effd00001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 2.773383239s ago: executing program 1 (id=597): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x80001ca1, &(0x7f0000001180)={0x0, 0x7a21, 0xc000, 0x7, 0x1d9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4004, 0x401, 0x10218, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x80000000, 0x0, @void, @value, @value=r2}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, 0xffffffffffffffff, 0x5}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@barrier}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x4, 0x2, 0x200, 0x100, 0x1, 0x6, 0x6, 0xf64, 0xffeffffd}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_getres(0xfffffffffffffff1, &(0x7f0000000040)) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0xb01a2500, &(0x7f0000001200)="3e5e02c6338b92126733ca0dafe9ba6b9a580114ad57fe804c30b2c9ee9cf4283637d1a412af8d9b888ac37b794fc3568276ba9e1a636d95d05da700000000a81a3f2aefc4366c12b20ba6aa0409a02c308f49d73890d1b5ae17a388fb1d3441c39357007610073c1f8c25a8799a663bce1cd36083131f496436f33bc38dced16e5184210adbc7eefbd8b8a0d4afd11a9a6aefa52e93e01f0f34b8a2cd9e2e2de6d5a2fe2a618b245a5d0bebd5a4c0a4f4ebe9178babebc6ab8532cef2bd6a4670943faf4ceaf8e1", 0xc8, &(0x7f0000001080), &(0x7f0000000100), &(0x7f0000000400)="d3fc48a8afd275589894eff888c41612887b5d4703d5ecee0973d649e51164d910ff3b8c141ec3c2e47552d4481baa9d9338d12103319353ba1fbe2af15cb69574de1252dcd86486770edf673970ba2ef4f314210a3ba7a8346ea0c325f54149e324c65622270a442bed30beb493da85ca0f2f0b57d49618c7e0020000005bdc0231c1c13f3d64af21d9b89a928b054d8dfb74d2bce4b8fb9957c3faaff1770c1c57a4a15f8926704cee2cb6911acb84715d5a3a2cb932b064479a02435ee149f7a2a58f7c4c5caf3106f25acf7c7c7e2bcd27361421d16f33867fcf1535d0dc4c97df1b267726a31cea72f1d120715f869ce10c261e0d549c1501647eb13462fd0d754e54f27a63d56a8db85c5e448fc7ee367744e6f628a521e01188db3b7953d8777eea9a25f8e7777904440600"/314) 1.77270019s ago: executing program 5 (id=602): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8000, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x3c}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) timer_create(0x2, &(0x7f0000000700)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000740)) splice(r3, 0x0, r0, 0x0, 0x810002, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.281690445s ago: executing program 4 (id=610): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0xfffc, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 1.261173086s ago: executing program 4 (id=612): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806"], 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x18002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000003900070101000000fbdbdf25047c0000a61a8c80140001800600060088070000080016"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x4}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffd, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f00000002c0)=0xf) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000100)=0x8) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x101c552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x122e, &(0x7f00000024c0)="$eJzs3E2LW1UYB/BnxnmJqfOi1moL4kE3ugmdWbjRzSBTkAYqbUdoBeHWuWPDXJNhbhiIiG1Xbv0cIojgThBxo5vZ+A0Ed7Nx2YV4JYmZjiXFDthJKb/fJg85559zbnITuOGce/D2l59sb5WNrawb01NTMb0Tke6mSDEdI7fjjbd+/uXlK9euX1xrNtcvp3Rh7erKmymlxVd++OCzr1/9sXvq/e8Wv5+P/eUPD/5Y/X3/zP7Zg7+u3myVqVWmdqebsnSj0+lmN4o8bbbK7UZK7xV5Vuap1S7z3W7K5gYj9du3is7OTi9l7c2F+s5uXpYpa/fSdt5L3U7q7vZS9nHWaqdGo5EW6sHxzRxWG1/draoqoqpmYy6qqqqejnqcimdiIRZjKZbj2Xguno/Td16IM/FivBTf/vZNr58AAAAAAAAAAAAAAAAAAAAA/j8Puf8/Rvv/zw56TXrWAAAAAAAAAAAAAAAAAAAA8GS5cu36xbVmc/1ySrWI4ou9jb2N4eOwfW0rWlFEHudjKf6Mwe7/oWF94d3m+vla6luOO8Wtf/K3fpq/L78yuJ3A2PxKGjqa39uYj/rR/Gosxenx+dWx+Vq8/tqRfCOW4tePohNFbEY/ey//+UpK71xq3pc/N+gHAAAAT4JGOrT87+vfp4btjQe1D/MP9f/AmOvzfvbcTH2ix05E2ft0OyuKfPfEitmIOF5q9oRn+LgWcyc/aO3wmZszo1NmbOdL9cm/P4+gqI2KB39T5o+cz1MRt481xFRETOgAp/+jz2R/lzgZ9z70Sc8EAAAAAAAAAACA43hUCwxHr29lGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7MDBwIAAAAAgvytN5igAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATgEAAP///kzCmA==") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0x8800000, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.085508685s ago: executing program 4 (id=614): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x120, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0xcc, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_ACT={0xa4, 0x3, [@m_connmark={0xa0, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x6d, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c443d003af1f22d796733e174a55728b309ff94c380276aa4c273687acbac759cf82dcb64f9e61b78c605fb"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x60000000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.016317978s ago: executing program 4 (id=615): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'ip6erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000c8d052149f88e5b8645399304104", @ANYRES32=r2, @ANYBLOB="71000000bf3f9f801400350069703665727370616e30000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(r5, 0x0, 0x100) sched_setscheduler(r3, 0x6, &(0x7f0000000340)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x80}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x8c014) 892.775475ms ago: executing program 4 (id=618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x2, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x400) 860.880556ms ago: executing program 4 (id=620): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r8, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xfffffffffffffdd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) 689.503645ms ago: executing program 1 (id=621): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x8, 0x4f3, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpid() syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x1, 0x400, 0x0, 0x37d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x2) readv(r7, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x3f00000000000000) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000240)='./file1\x00', 0x154884, &(0x7f0000000cc0)=ANY=[@ANYRESDEC=r7, @ANYRES8=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT=r0, @ANYBLOB="05c65dec9dd65b8379328fe93bf2e3d7628fb4f32bcea0120ce0894b3c0df7a888b213199ebd89b2080d20e9fccaf139286e192a38a502fb9a3b942f71ddd2ab46c092eb05874e639382ed0990e1e4fb05954400f555e6a18607e09989", @ANYBLOB="681f8e3da58e322bda81a43180ec31fe70cc3400041ce1a877febe3b2b834a15006275872bcdaca5dd5c82ee5a36a325102703b4297281c147f5a9c223c248ec803af18089e3bcc76428", @ANYRESOCT=r6], 0x0, 0x276, &(0x7f0000000640)="$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") r8 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r8, &(0x7f0000000080)=ANY=[], 0xfefb) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) 678.154955ms ago: executing program 5 (id=622): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0xfffc, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) 634.291718ms ago: executing program 3 (id=623): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1b4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000080)={0x0, 0x9, 0x4000000, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000480)={r2, 0xe2b, 0x7, 0x1}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/zoneinfo\x00', 0x0, 0x0) io_uring_enter(r3, 0x606d, 0xe90c, 0x4, &(0x7f00000008c0)={[0x3]}, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000d80)={0x98, 0x0, &(0x7f0000000c80)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/203, 0xcb, 0x1, 0x2}, @fda={0x66646185, 0x4, 0x2, 0x7}, @ptr={0x70742a85, 0x0, &(0x7f0000000a00)=""/219, 0xdb, 0x1, 0x2b}}, &(0x7f0000000b80)={0x0, 0x28, 0x48}}}, @enter_looper, @release={0x40046306, 0x1}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000bc0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000c40)={0x0, 0x18, 0x30}}}], 0x2, 0x0, &(0x7f0000000d40)="b904"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000dc0)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000e40)={0x5}) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000e80)=0x1) r4 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r3, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0], 0x0, 0x45, &(0x7f0000000fc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001000), &(0x7f0000001040), 0x8, 0xe, 0x8, 0x8, &(0x7f0000001080)}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000001280)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=@gettclass={0x24, 0x2a, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xfff5}, {0xe, 0x2}, {0x0, 0xe}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x20048085) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001300), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x40, r7, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x8000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000001400)={0x0, @in={{0x2, 0x6, @multicast2}}}, &(0x7f00000014c0)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001500)={r8, 0x4, 0x20, 0x2, 0x3}, &(0x7f0000001540)=0x18) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x50, 0x2, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0xc, 0x17, [0x1, 0x1]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4040) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000016c0)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000001780)=0x84) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001840)=0x0) r10 = perf_event_open(&(0x7f00000017c0)={0x0, 0x80, 0x9, 0xb, 0xaa, 0x2, 0x0, 0x8, 0x40042, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x7, 0x6}, 0xa0, 0x1, 0x8065, 0x6, 0xff, 0xd1, 0xa552, 0x0, 0x8, 0x0, 0xc229}, r9, 0x8, r3, 0x3) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000001a40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000018c0)={0x138, 0x15, 0xa, 0xa00, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xe1, 0x8, "994d883a6485b574de354485ed61e3f104e486c074f0bacf1c226ffd6eb08fb09f6f8d5202ee2a502638d42790a730111b72249b3ef3065a6e7d53fc3343be9e53214f7ced749e5cdecb6033bae7903f82962c7179517fec9fbed034f4f58a828d5b785dd32e5702f9202deaebe5a3144fa4e6c84eabfa123aae1c93aa1c2e02d51ec7cce6a5623151c513b8afce0da58203b65a21358cf530612bf20bbd848213845d65f31741d3cc874f7aab91b9dbcb3e44427bdaf18a97c36652a4228dd356e49596b8d806c1359e99ea735f14ebb210918b1747fda31ffe0cab9d"}]}, 0x138}, 0x1, 0x0, 0x0, 0x24048014}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r10, {0x3}}, './file0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001ac0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xa0d, '\x00', r5, r11, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000001b40)={'wg1\x00'}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000855}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001fc0)={r0, 0x0, 0x67, 0xe7, &(0x7f0000001c80)="b2156ebf68a2b2f3452f68fc964207164baa289a8fb0625e071b7f80f4a3d3edcdccd7793a236ca44210e5c5cc612712517ffe9fb4fc3c402ae78f63e4522829dcf1aa91e518a268389a1bfe717a0663289c9cb049cbefcaeddd67930eed0bd6466aab0ab22c82", &(0x7f0000001d00)=""/231, 0x600000, 0x0, 0xf6, 0x97, &(0x7f0000001e00)="82e8989f46bd3edd4013ba2b9b712da6d6822bb26c4b7ca489dd2c3911b44a27cad61c504ee43ee6d25221dfa3f77da9d5696bf6463a7f7bd83013a89bd1cb48a2c3a8856ace8317e5e4025ce84370ab1893b310b2511f2a903e53ac5ef8d8781b6af632504a492df2ba4a9f1e5294d25f99f5fd318f1385d829521a6754e69186e32bf2cc4377ef1d172a46d58c72b75d52576d585ee57fd2654cff757bc0648a2f864a29c4feb56e49c84ce943130eeec44d1118ac0a983ba0770ccbd982174d388368817b9ead1cef8b55c843242c1b9a9457c33c29a30a093e4efde135ad0624d1d5b7acd7f2e6393d325d394eff09820477dd67", &(0x7f0000001f00)="20543c05eb80b79c6cf7b34ceb0234fc9adebb528123eaf08192729470c498a32d058b761d70a954729a0000b31e2177bad89e968c41fc061e66fba9f84c94483a87886568c21bdf356c66664fdc0ecc6e633f4223a22430a39ad87145206c81ea469f62fd72c1c5af8ddaf118e7f6fc5bd2b4fa517ff0f618978cf44aa8fdf1f391e1e90d416dfdd34a030a3215c5ace10652b1ba0220", 0x6, 0x0, 0xf26}, 0x50) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44005}, 0x1) 607.787589ms ago: executing program 5 (id=624): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, 0x0) 525.761643ms ago: executing program 3 (id=625): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x8, 0xfffffffe, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x20044841) 514.776824ms ago: executing program 3 (id=626): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x501000, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a00010037bd700003dcdf250220200100000000001f1201"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x4040010) 495.425335ms ago: executing program 5 (id=627): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, @perf_bp={0x0, 0x9}, 0x0, 0x11006, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@jqfmt_vfsold}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9752}}, 0x5, 0x7f}, &(0x7f0000000240)=0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb5, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x96, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) open(0x0, 0x149442, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setrlimit(0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x6000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000200)) 433.682588ms ago: executing program 3 (id=628): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000380), 0x12, 0x549, &(0x7f0000000ac0)="$eJzs3UFvG1kdAPD/uHHjdt1NF/YACNiyLBSpqtO4u9FqL3QvILRaCbHixKEbEm8Uxa6j2BWb0EN65L4SlTgB34AbB6Q9ceATgMRhL3BAKlCBNkgcjGY8SbyJnTgktZP495MmM+/NZP7vxX3zPM/1vAAm1o2I2IqIyxHxfkTM5PlJvsS97pIe9+mzR4vbzx4tJtHpvPePJNuf5kXP76ReyM9ZiogffDfix8nBuK2NzdWFer22nqdn24212dbG5u2VQp5TnZ+bv/Pm3Teqp1bXVxq/efqdlXd++LvffqUcET9Ni1X+2bVsX2899hRPHDPJz1PuyZuKiHdOfOazYyr/98P5k7a2z0XEq1n7n4lL2asJAFxknc5MdGZ60wDARZfe/5cjKVTysYByFAqVSncM7+W4Wqg3W+1bM82HD5YiG8O6HsXCByv12p18rPB6FJM0PZdt76Wrn0l/VLsbES9FxEfTV7L9lcVmfWmcb3wAYIK9sK////d0t//vdfJPwQCAM6c07gIAACPX0/9fH2c5AIDRcf8PAJPnGP2/bwcCwAXh/h8AJo/+HwAmz5H9/+PRlAMAGInvv/tuunS2u8+/3nlS9+2lWmu10ni4WFlsrq9VlpvN5XqtstjpHHW+erO5Nvf6brK1sXm/0Xz4oH1/pbGwXLtf8ywBABi/l175+E9pp7/11pVsiZ65HPTVcLEVTvLLif8NDOfZpXEXABgbPThMriHu8Q0DwAXXZ4rernyAIBl0wBOTv8J5dfOLxv9hUh17/L9nwNDYAZxv/9/4/7dPvRzA6OnDYXJ1OsnBOf/7ZAEAF4cxfmDg5/+5gY8IeTLEye8dvzwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwHpSzJSlUsrnAt9KfhUol4lpEXI9i8sFKvXYnIl6MiD9OF6fT9Ny4Cw0AnFDhb0k+/9fNmdfK+/deTv4zna0j4ie/eO/nHy602+tzaf4/d/PbT9L8K+316uVxVAAA6LUz7+Yne1lZ/13N1z038p8+e7S4s4yyiE/fjojSlSz+dr5090zFVLYuRTEirv4rydNd6fuVS6cQf+txRHxhp/6l+LAnQjkbA+nOfLo/fhr72qnH7/37749f+Ex9C9m+dF3M/hafj32FA4708dvd62Te9tImnre/QtzI1v3bfym7Qp1cev1Lm+v2getfYff6d+lA/CRr8zd204eX5Onrv//egczOTHff44gvTfWLn+zGT/pff4uvDVnHT7781VcH7ev8MuJm3/rvzEjdyC6zs+3G2mxrY/P2SmNhubZce1Ctzs/N33nz7hvV2WyMuvvzD/1i/P2tWy8Oip/W/+qA+KXD6x/fGLL+v/rv+z/62iHxv/X1/q//y4fET/vEbw4Zf+HqvYHTd6fxlwbU/4jXP24NGf8vf91cGvJQAGAEWhubqwv1em39iI30veZRx9gYfiO9tz8Dxcg2YivitE6YDUpERN9j0nfUZ6PKz2sjGVv0X5/KeUp7OeO+MgHP217rH3zMn0dZIAAAAAAAAAAAAAAA4IDWxubqdP9vaw3YmDrGtwaP+mYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnMz/AgAA//8aTsAE") syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000280)='./bus\x00', 0x3d3c9b, 0x0, 0x80, 0x0, &(0x7f0000000600)) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_gettime(r1, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000080)={'syzkaller1\x00', {0x2, 0x0, @remote}}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="1000"/14, 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 255.893977ms ago: executing program 3 (id=629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7, 0x20}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 38.906958ms ago: executing program 3 (id=630): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff8001}], 0x1c) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x40) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}]}, &(0x7f00000003c0)=0x10) 0s ago: executing program 2 (id=631): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket(0x10, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff000000", @ANYRES16=0x0, @ANYBLOB="010003000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000000000000000000"], 0x28}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r3, 0x402, 0x3d) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xe27, 0xffffffb9, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}}, 0x20040054) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): 3700] veth0_to_team: entered promiscuous mode [ 43.897378][ T3700] veth1_to_team: entered promiscuous mode [ 43.907496][ T3700] veth0_to_batadv: entered promiscuous mode [ 43.915313][ T3700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.922929][ T3700] batadv_slave_0: entered promiscuous mode [ 43.932131][ T3700] veth1_to_batadv: entered promiscuous mode [ 43.940179][ T3700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.947921][ T3700] batadv_slave_1: entered promiscuous mode [ 43.956263][ T3700] xfrm0: entered promiscuous mode [ 43.963259][ T3700] veth0_to_hsr: entered promiscuous mode [ 43.972376][ T3700] veth1_to_hsr: entered promiscuous mode [ 43.981789][ T3700] hsr0: entered promiscuous mode [ 43.988793][ T3700] veth1_virt_wifi: entered promiscuous mode [ 43.996958][ T3700] veth0_virt_wifi: entered promiscuous mode [ 44.014418][ T3700] vlan0: entered promiscuous mode [ 44.020085][ T3700] vlan1: entered promiscuous mode [ 44.032261][ T3700] macvlan0: entered promiscuous mode [ 44.040257][ T3700] macvlan1: entered promiscuous mode [ 44.047445][ T3700] ipvlan0: entered promiscuous mode [ 44.052943][ T3700] ipvlan1: entered promiscuous mode [ 44.064367][ T3700] macvtap0: entered promiscuous mode [ 44.074675][ T3700] macsec0: entered promiscuous mode [ 44.088637][ T3700] geneve0: entered promiscuous mode [ 44.098391][ T3700] geneve1: entered promiscuous mode [ 44.106706][ T3700] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 44.185762][ T3700] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 44.194735][ T3700] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 44.206515][ T3700] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 44.215614][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.250420][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.311202][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.370499][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.598184][ T3729] bridge_slave_0: left allmulticast mode [ 44.622116][ T3729] bridge_slave_0: left promiscuous mode [ 44.649140][ T3729] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.185243][ T3729] bridge_slave_1: left allmulticast mode [ 45.191093][ T3729] bridge_slave_1: left promiscuous mode [ 45.200261][ T3729] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.218714][ T3729] bond0: (slave bond_slave_0): Releasing backup interface [ 45.229537][ T3729] bond0: (slave bond_slave_1): Releasing backup interface [ 45.242057][ T3729] team0: Port device team_slave_0 removed [ 45.257601][ T3729] team0: Port device team_slave_1 removed [ 45.271153][ T3729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.327587][ T3729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.390740][ T3729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.398997][ T3729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.410499][ T3729] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.459305][ T3801] dvmrp6: entered allmulticast mode [ 45.504149][ T3850] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.523535][ T3851] tipc: Started in network mode [ 45.528455][ T3851] tipc: Node identity a25d0fc8c64a, cluster identity 4711 [ 45.535910][ T3851] tipc: Enabled bearer , priority 0 [ 45.545493][ T3850] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.557291][ T3851] syzkaller0: entered promiscuous mode [ 45.563389][ T3851] syzkaller0: entered allmulticast mode [ 45.573987][ T3851] tipc: Resetting bearer [ 45.580058][ T3851] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.70' sets config #1 [ 45.608719][ T3849] tipc: Resetting bearer [ 45.615776][ T3849] tipc: Disabling bearer [ 45.625190][ T3850] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.689368][ T3860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 45.698360][ T3860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 45.796256][ T3850] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.809814][ T2076] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.822111][ T2076] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.831030][ T2076] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.840570][ T2076] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.869975][ T3832] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.882789][ T3832] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.895819][ T3832] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.908802][ T3832] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.179749][ T3872] netlink: 84 bytes leftover after parsing attributes in process `syz.4.75'. [ 46.465444][ T3877] xt_hashlimit: size too large, truncated to 1048576 [ 47.102507][ T3885] netlink: 'syz.2.81': attribute type 1 has an invalid length. [ 47.150224][ T3885] netlink: 32 bytes leftover after parsing attributes in process `syz.2.81'. [ 47.397365][ T3897] loop2: detected capacity change from 0 to 1024 [ 47.442060][ T3897] EXT4-fs: inline encryption not supported [ 47.467445][ T3897] EXT4-fs: Ignoring removed nobh option [ 47.512575][ T3897] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 47.553643][ T3897] System zones: 0-1, 3-12 [ 47.578856][ T3897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.632184][ T28] kauditd_printk_skb: 403 callbacks suppressed [ 47.632195][ T28] audit: type=1400 audit(1774413191.657:631): avc: denied { create } for pid=3896 comm="syz.2.84" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.666797][ T28] audit: type=1400 audit(1774413191.687:632): avc: denied { name_bind } for pid=3908 comm="syz.3.87" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 47.688551][ T28] audit: type=1400 audit(1774413191.687:633): avc: denied { node_bind } for pid=3908 comm="syz.3.87" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 47.710864][ T28] audit: type=1400 audit(1774413191.687:634): avc: denied { mount } for pid=3908 comm="syz.3.87" name="/" dev="ramfs" ino=6375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 47.744062][ T28] audit: type=1400 audit(1774413191.687:635): avc: denied { append open } for pid=3896 comm="syz.2.84" path="/13/file1/memory.events" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.768112][ T3888] netlink: 'syz.0.82': attribute type 28 has an invalid length. [ 47.778825][ T3888] netlink: 'syz.0.82': attribute type 29 has an invalid length. [ 47.788592][ T3888] netlink: 132 bytes leftover after parsing attributes in process `syz.0.82'. [ 47.791349][ T28] audit: type=1400 audit(1774413191.757:636): avc: denied { append } for pid=3896 comm="syz.2.84" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.820501][ T3907] syz.0.82(3907): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 47.859237][ T28] audit: type=1400 audit(1774413191.757:637): avc: denied { write } for pid=3896 comm="syz.2.84" name="memory.events" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.881983][ T28] audit: type=1400 audit(1774413191.797:638): avc: denied { connect } for pid=3910 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.904309][ T28] audit: type=1400 audit(1774413191.797:639): avc: denied { ioctl } for pid=3910 comm="syz.1.89" path="socket:[7466]" dev="sockfs" ino=7466 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.939025][ T28] audit: type=1400 audit(1774413191.797:640): avc: denied { write } for pid=3910 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.012783][ T3913] lo speed is unknown, defaulting to 1000 [ 48.241553][ T3937] Illegal XDP return value 4294967294 on prog (id 35) dev N/A, expect packet loss! [ 48.261285][ T3938] netlink: 'syz.0.97': attribute type 7 has an invalid length. [ 48.328337][ T3945] netlink: 48 bytes leftover after parsing attributes in process `syz.0.100'. [ 48.342141][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.380473][ T3947] bridge_slave_1: left allmulticast mode [ 48.391268][ T3947] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.417503][ T3947] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 48.448739][ T3955] loop0: detected capacity change from 0 to 256 [ 48.489083][ T3955] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 48.514067][ T3955] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 48.538769][ T3955] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 48.576231][ T3955] 9p: Bad value for 'rfdno' [ 48.615678][ T3316] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 48.623540][ T3316] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 48.663614][ T3953] loop2: detected capacity change from 0 to 764 [ 49.102218][ T3965] loop4: detected capacity change from 0 to 512 [ 49.112994][ T3965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.125647][ T3965] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.149708][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.264489][ T3977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 49.285609][ T3979] tmpfs: Bad value for 'mpol' [ 49.321337][ T3982] FAULT_INJECTION: forcing a failure. [ 49.321337][ T3982] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.334945][ T3982] CPU: 0 UID: 0 PID: 3982 Comm: syz.2.112 Not tainted syzkaller #0 PREEMPT(full) [ 49.334977][ T3982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.334993][ T3982] Call Trace: [ 49.335001][ T3982] [ 49.335010][ T3982] __dump_stack+0x1d/0x30 [ 49.335044][ T3982] dump_stack_lvl+0x95/0xd0 [ 49.335135][ T3982] dump_stack+0x15/0x1b [ 49.335164][ T3982] should_fail_ex+0x263/0x280 [ 49.335275][ T3982] should_fail+0xb/0x20 [ 49.335304][ T3982] should_fail_usercopy+0x1a/0x20 [ 49.335341][ T3982] strncpy_from_user+0x27/0x250 [ 49.335361][ T3982] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 49.335404][ T3982] do_getname+0x59/0x1c0 [ 49.335427][ T3982] __se_sys_mkdir+0x1e/0xf0 [ 49.335453][ T3982] __x64_sys_mkdir+0x31/0x40 [ 49.335552][ T3982] x64_sys_call+0x2eab/0x3020 [ 49.335587][ T3982] do_syscall_64+0x12c/0x370 [ 49.335619][ T3982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.335640][ T3982] RIP: 0033:0x7fe49ccec799 [ 49.335736][ T3982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.335759][ T3982] RSP: 002b:00007fe49b73f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 49.335782][ T3982] RAX: ffffffffffffffda RBX: 00007fe49cf65fa0 RCX: 00007fe49ccec799 [ 49.335800][ T3982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 49.335815][ T3982] RBP: 00007fe49b73f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.335835][ T3982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.335847][ T3982] R13: 00007fe49cf66038 R14: 00007fe49cf65fa0 R15: 00007fff74071e48 [ 49.335866][ T3982] [ 49.700838][ T3989] loop2: detected capacity change from 0 to 512 [ 49.782188][ T3989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.796264][ T3989] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.891793][ T3996] FAULT_INJECTION: forcing a failure. [ 49.891793][ T3996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.924120][ T3996] CPU: 1 UID: 0 PID: 3996 Comm: syz.3.117 Not tainted syzkaller #0 PREEMPT(full) [ 49.924167][ T3996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.924185][ T3996] Call Trace: [ 49.924192][ T3996] [ 49.924200][ T3996] __dump_stack+0x1d/0x30 [ 49.924225][ T3996] dump_stack_lvl+0x95/0xd0 [ 49.924307][ T3996] dump_stack+0x15/0x1b [ 49.924376][ T3996] should_fail_ex+0x263/0x280 [ 49.924420][ T3996] should_fail+0xb/0x20 [ 49.924465][ T3996] should_fail_usercopy+0x1a/0x20 [ 49.924538][ T3996] _copy_from_iter+0xcf/0xea0 [ 49.924564][ T3996] ? __alloc_skb+0x4f6/0x690 [ 49.924661][ T3996] ? __alloc_skb+0x200/0x690 [ 49.924692][ T3996] netlink_sendmsg+0x4ae/0x6f0 [ 49.924750][ T3996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.924811][ T3996] ____sys_sendmsg+0x563/0x5b0 [ 49.924952][ T3996] ___sys_sendmsg+0x195/0x1e0 [ 49.925005][ T3996] __x64_sys_sendmsg+0xd4/0x160 [ 49.925039][ T3996] x64_sys_call+0x194c/0x3020 [ 49.925142][ T3996] do_syscall_64+0x12c/0x370 [ 49.925173][ T3996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.925195][ T3996] RIP: 0033:0x7fb4c530c799 [ 49.925214][ T3996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.925236][ T3996] RSP: 002b:00007fb4c3d67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.925260][ T3996] RAX: ffffffffffffffda RBX: 00007fb4c5585fa0 RCX: 00007fb4c530c799 [ 49.925344][ T3996] RDX: 0000000004000050 RSI: 00002000000000c0 RDI: 000000000000000b [ 49.925389][ T3996] RBP: 00007fb4c3d67090 R08: 0000000000000000 R09: 0000000000000000 [ 49.925402][ T3996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.925429][ T3996] R13: 00007fb4c5586038 R14: 00007fb4c5585fa0 R15: 00007ffe720f6ba8 [ 49.925453][ T3996] [ 50.131977][ T3997] loop4: detected capacity change from 0 to 1024 [ 50.142088][ T3997] EXT4-fs: inline encryption not supported [ 50.148120][ T3997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.203941][ T3997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.283146][ T4004] serio: Serial port ttyS3 [ 50.517551][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.743357][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.873120][ T4017] loop2: detected capacity change from 0 to 512 [ 50.887773][ T4017] ext4: Unknown parameter 'euid' [ 50.972584][ T4022] loop2: detected capacity change from 0 to 512 [ 50.984173][ T4022] EXT4-fs: Ignoring removed nobh option [ 50.995734][ T4022] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.009294][ T4022] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.022062][ T4022] EXT4-fs (loop2): 1 truncate cleaned up [ 51.040238][ T4022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.095602][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.195276][ T4033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4033 comm=syz.2.131 [ 51.285862][ T4034] sctp: [Deprecated]: syz.2.131 (pid 4034) Use of int in maxseg socket option. [ 51.285862][ T4034] Use struct sctp_assoc_value instead [ 52.001384][ T4058] loop4: detected capacity change from 0 to 512 [ 52.010723][ T4058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.104992][ T2076] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.143809][ T2076] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.239193][ T4061] lo speed is unknown, defaulting to 1000 [ 52.267203][ T2076] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.303684][ T2076] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.318076][ T4061] chnl_net:caif_netlink_parms(): no params data found [ 52.382333][ T4061] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.410576][ T4061] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.419393][ T4061] bridge_slave_0: entered allmulticast mode [ 52.426524][ T4061] bridge_slave_0: entered promiscuous mode [ 52.456982][ T4061] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.476305][ T4061] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.498274][ T4083] FAULT_INJECTION: forcing a failure. [ 52.498274][ T4083] name failslab, interval 1, probability 0, space 0, times 0 [ 52.511604][ T4061] bridge_slave_1: entered allmulticast mode [ 52.518181][ T4061] bridge_slave_1: entered promiscuous mode [ 52.541268][ T4083] CPU: 0 UID: 0 PID: 4083 Comm: syz.1.144 Not tainted syzkaller #0 PREEMPT(full) [ 52.541291][ T4083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 52.541375][ T4083] Call Trace: [ 52.541381][ T4083] [ 52.541388][ T4083] __dump_stack+0x1d/0x30 [ 52.541415][ T4083] dump_stack_lvl+0x95/0xd0 [ 52.541434][ T4083] dump_stack+0x15/0x1b [ 52.541451][ T4083] should_fail_ex+0x263/0x280 [ 52.541526][ T4083] should_failslab+0x8c/0xb0 [ 52.541543][ T4083] kmem_cache_alloc_noprof+0x66/0x400 [ 52.541560][ T4083] ? audit_log_start+0x34c/0x730 [ 52.541584][ T4083] audit_log_start+0x34c/0x730 [ 52.541671][ T4083] ? kstrtouint_from_user+0xa8/0xf0 [ 52.541698][ T4083] audit_seccomp+0x47/0x100 [ 52.541731][ T4083] ? __seccomp_filter+0x8db/0x1350 [ 52.541756][ T4083] __seccomp_filter+0x8ec/0x1350 [ 52.541799][ T4083] ? __rcu_read_unlock+0x4e/0x70 [ 52.541816][ T4083] ? __fget_files+0x184/0x1c0 [ 52.541887][ T4083] ? mutex_lock+0x57/0x90 [ 52.541915][ T4083] ? mutex_unlock+0x4e/0x90 [ 52.541942][ T4083] __secure_computing+0x81/0x150 [ 52.542029][ T4083] do_syscall_64+0xd3/0x370 [ 52.542052][ T4083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.542075][ T4083] RIP: 0033:0x7fda579fc799 [ 52.542119][ T4083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.542137][ T4083] RSP: 002b:00007fda5644f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ac [ 52.542157][ T4083] RAX: ffffffffffffffda RBX: 00007fda57c75fa0 RCX: 00007fda579fc799 [ 52.542172][ T4083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 52.542184][ T4083] RBP: 00007fda5644f090 R08: 0000000000000000 R09: 0000000000000000 [ 52.542250][ T4083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.542260][ T4083] R13: 00007fda57c76038 R14: 00007fda57c75fa0 R15: 00007ffc27942358 [ 52.542281][ T4083] [ 52.750296][ T4083] audit_log_lost: 123 callbacks suppressed [ 52.750311][ T4083] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 52.764102][ T2076] bridge_slave_1: left allmulticast mode [ 52.769761][ T2076] bridge_slave_1: left promiscuous mode [ 52.782974][ T2076] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.793615][ T28] audit: type=1326 audit(1774413708.818:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda579bcfce code=0x7ffc0000 [ 52.817120][ T4083] audit: out of memory in audit_log_start [ 52.823195][ T28] audit: type=1326 audit(1774413708.848:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda579bcfce code=0x7ffc0000 [ 52.846768][ T28] audit: type=1326 audit(1774413708.868:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda579bcfce code=0x7ffc0000 [ 52.871020][ T28] audit: type=1326 audit(1774413708.888:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda579bcfce code=0x7ffc0000 [ 52.897895][ T2076] bridge_slave_0: left allmulticast mode [ 52.903709][ T2076] bridge_slave_0: left promiscuous mode [ 52.912159][ T2076] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.919596][ T28] audit: type=1326 audit(1774413708.938:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda579bcfce code=0x7ffc0000 [ 52.943270][ T28] audit: type=1326 audit(1774413708.938:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda579bcfce code=0x7ffc0000 [ 52.966639][ T28] audit: type=1326 audit(1774413708.968:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fda579bcfce code=0x7ffc0000 [ 52.989872][ T28] audit: type=1326 audit(1774413708.968:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4082 comm="syz.1.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fda579bcfce code=0x7ffc0000 [ 53.063552][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.165067][ T2076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.189396][ T2076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.196796][ T4095] cgroup: fork rejected by pids controller in /syz4 [ 53.206751][ T2076] bond0 (unregistering): Released all slaves [ 53.217516][ T4061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.228204][ T4061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.243862][ T4093] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 53.286459][ T4061] team0: Port device team_slave_0 added [ 53.301430][ T4061] team0: Port device team_slave_1 added [ 53.318007][ T4061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.325164][ T4061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.352086][ T4061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.367398][ T2076] hsr_slave_0: left promiscuous mode [ 53.373237][ T2076] hsr_slave_1: left promiscuous mode [ 53.378921][ T2076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.386508][ T2076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.394684][ T2076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.402814][ T2076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.413608][ T2076] veth1_macvtap: left promiscuous mode [ 53.419180][ T2076] veth0_macvtap: left promiscuous mode [ 53.424907][ T2076] veth1_vlan: left promiscuous mode [ 53.430197][ T2076] veth0_vlan: left promiscuous mode [ 53.517742][ T4845] netlink: 144 bytes leftover after parsing attributes in process `syz.3.150'. [ 53.650225][ T4851] loop2: detected capacity change from 0 to 512 [ 53.660674][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.152'. [ 53.687974][ T4854] netlink: 84 bytes leftover after parsing attributes in process `syz.1.149'. [ 53.709378][ T2076] team0 (unregistering): Port device team_slave_1 removed [ 53.717443][ T4855] netlink: 'syz.4.152': attribute type 13 has an invalid length. [ 53.725722][ T4855] netlink: 44 bytes leftover after parsing attributes in process `syz.4.152'. [ 53.749324][ T4851] EXT4-fs: Ignoring removed bh option [ 53.828494][ T2076] team0 (unregistering): Port device team_slave_0 removed [ 53.948640][ T4851] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 54.005592][ T4061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.027647][ T4851] EXT4-fs (loop2): 1 truncate cleaned up [ 54.050329][ T4061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.099013][ T4851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.293786][ T4061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.339686][ T4851] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 54.339686][ T4851] program syz.2.151 not setting count and/or reply_len properly [ 54.378637][ T4061] hsr_slave_0: entered promiscuous mode [ 54.392134][ T4061] hsr_slave_1: entered promiscuous mode [ 54.421408][ T4061] debugfs: 'hsr0' already exists in 'hsr' [ 54.438212][ T4061] Cannot create hsr debugfs directory [ 54.467384][ T3394] lo speed is unknown, defaulting to 1000 [ 54.479412][ T3394] infiniband syz2: ib_query_port failed (-19) [ 54.653860][ T4883] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 54.691158][ T4883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.154'. [ 54.756072][ T4883] bond1: entered promiscuous mode [ 54.763383][ T4851] syz.2.151 (4851): attempted to duplicate a private mapping with mremap. This is not supported. [ 54.774560][ T4883] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.827189][ T4883] vlan2: entered promiscuous mode [ 54.853940][ T4883] bond0: entered promiscuous mode [ 54.890480][ T4883] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 54.955283][ T4061] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.986418][ T4061] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 55.039325][ T4061] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 55.066653][ T4061] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 55.217068][ T4061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.273089][ T4061] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.311182][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.318334][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.347138][ T2076] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.354301][ T2076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.379997][ T4061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.491109][ T4061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.514591][ T4928] loop4: detected capacity change from 0 to 512 [ 56.566380][ T4928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.612084][ T4928] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.668436][ T4061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.821690][ T3420] IPVS: starting estimator thread 0... [ 56.981653][ T4958] serio: Serial port ttyS3 [ 57.923932][ T4964] loop1: detected capacity change from 0 to 1024 [ 57.930901][ T4964] EXT4-fs (loop1): Invalid log cluster size: 31 [ 57.941727][ T4954] IPVS: using max 2304 ests per chain, 115200 per kthread [ 57.961078][ T4961] netlink: 40 bytes leftover after parsing attributes in process `syz.1.162'. [ 58.929576][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.032666][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.187049][ T4986] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.262397][ T4061] veth0_vlan: entered promiscuous mode [ 59.269332][ T28] kauditd_printk_skb: 451 callbacks suppressed [ 59.269346][ T28] audit: type=1400 audit(1774413715.288:1223): avc: denied { ioctl } for pid=4989 comm="syz.4.164" path="socket:[9227]" dev="sockfs" ino=9227 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.313699][ T4061] veth1_vlan: entered promiscuous mode [ 59.321355][ T4983] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 59.353831][ T4983] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 59.365921][ T4983] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 59.385766][ T4061] veth0_macvtap: entered promiscuous mode [ 59.393770][ T4999] loop1: detected capacity change from 0 to 512 [ 59.414365][ T4986] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 59.427050][ T4999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.447043][ T4061] veth1_macvtap: entered promiscuous mode [ 59.456434][ T4999] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.469165][ T4983] bond1: (slave gretap1): making interface the new active one [ 59.482241][ T28] audit: type=1400 audit(1774413715.478:1224): avc: denied { create } for pid=4982 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 59.511821][ T4983] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 59.524462][ T4061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.640853][ T4061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.648293][ T28] audit: type=1400 audit(1774413715.478:1225): avc: denied { write } for pid=4982 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 59.672106][ T4986] macvlan3: entered promiscuous mode [ 59.681967][ T4986] macvlan3: entered allmulticast mode [ 59.691062][ T4986] bond1: entered promiscuous mode [ 59.711759][ T4986] gretap1: entered promiscuous mode [ 59.717257][ T4986] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 59.733360][ T4986] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 59.792967][ T5008] serio: Serial port ttyS3 [ 59.809946][ T4986] bond1: left promiscuous mode [ 59.815201][ T4986] gretap1: left promiscuous mode [ 60.000923][ T2076] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.085608][ T2076] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.118202][ T5011] loop4: detected capacity change from 0 to 512 [ 60.206423][ T2076] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.225913][ T4986] syz.2.163 (4986) used greatest stack depth: 9344 bytes left [ 60.233586][ T5011] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.272208][ T3832] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.299596][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.329993][ T5011] EXT4-fs (loop4): 1 truncate cleaned up [ 60.340511][ T5018] netlink: 148 bytes leftover after parsing attributes in process `syz.2.171'. [ 60.342580][ T5011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.395736][ T5011] tipc: Enabled bearer , priority 10 [ 60.428270][ T5011] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 60.507631][ T28] audit: type=1400 audit(1774413716.528:1226): avc: denied { create } for pid=5032 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.590566][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.600653][ T5041] loop2: detected capacity change from 0 to 512 [ 60.617603][ T5041] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.833611][ T5041] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.178: iget: bad i_size value: 38620345925642 [ 60.890527][ T5041] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.891206][ T5041] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.178: couldn't read orphan inode 15 (err -117) [ 60.900591][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 60.900605][ C1] EXT4-fs (loop2): initial error at time 1774413716: ext4_orphan_get:1391: inode 15 [ 60.900642][ C1] EXT4-fs (loop2): last error at time 1774413716: ext4_orphan_get:1391: inode 15 [ 61.091109][ T5041] loop2: lost filesystem error report for type 5 error -117 [ 61.092855][ T5041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.115066][ T5041] SET target dimension over the limit! [ 61.179105][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'. [ 61.220321][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.410207][ T5064] loop2: detected capacity change from 0 to 256 [ 61.416824][ T5064] vfat: Unknown parameter '@' [ 61.441771][ T35] tipc: Node number set to 1679232968 [ 61.470905][ T28] audit: type=1326 audit(1774413717.488:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.2.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49ccec799 code=0x7ffc0000 [ 61.632990][ T28] audit: type=1326 audit(1774413717.498:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.2.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49ccec799 code=0x7ffc0000 [ 61.771926][ T28] audit: type=1326 audit(1774413717.498:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.2.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe49ccec799 code=0x7ffc0000 [ 61.917491][ T28] audit: type=1326 audit(1774413717.498:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.2.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49ccec799 code=0x7ffc0000 [ 61.982059][ T28] audit: type=1326 audit(1774413717.508:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.2.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe49ccec799 code=0x7ffc0000 [ 62.005327][ T28] audit: type=1326 audit(1774413717.508:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.2.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49ccec799 code=0x7ffc0000 [ 62.057507][ T5072] loop2: detected capacity change from 0 to 512 [ 62.067479][ T5072] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.186: iget: bogus i_mode (755) [ 62.084945][ T5072] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.085081][ T5072] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.186: couldn't read orphan inode 15 (err -117) [ 62.094291][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 62.094312][ C0] EXT4-fs (loop2): initial error at time 1774413718: ext4_orphan_get:1391: inode 15 [ 62.094345][ C0] EXT4-fs (loop2): last error at time 1774413718: ext4_orphan_get:1391: inode 15 [ 62.133413][ T5072] loop2: lost filesystem error report for type 5 error -117 [ 62.134641][ T5072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.189684][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.225810][ T5079] netlink: 128 bytes leftover after parsing attributes in process `syz.2.187'. [ 62.239054][ T5079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.187'. [ 62.262720][ T5079] 9pnet_fd: Insufficient options for proto=fd [ 62.497884][ T5087] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 63.243372][ T5114] loop5: detected capacity change from 0 to 512 [ 63.265825][ T5114] EXT4-fs: Ignoring removed bh option [ 63.286072][ T5114] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 63.373274][ T5114] EXT4-fs (loop5): 1 truncate cleaned up [ 63.407234][ T5114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.870930][ T4061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.880311][ T5125] loop1: detected capacity change from 0 to 1024 [ 63.897711][ T5125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.923184][ T5125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.063646][ T5129] loop5: detected capacity change from 0 to 512 [ 64.088233][ T5130] FAULT_INJECTION: forcing a failure. [ 64.088233][ T5130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.101399][ T5130] CPU: 0 UID: 0 PID: 5130 Comm: syz.1.205 Not tainted syzkaller #0 PREEMPT(full) [ 64.101493][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 64.101504][ T5130] Call Trace: [ 64.101509][ T5130] [ 64.101517][ T5130] __dump_stack+0x1d/0x30 [ 64.101546][ T5130] dump_stack_lvl+0x95/0xd0 [ 64.101573][ T5130] dump_stack+0x15/0x1b [ 64.101651][ T5130] should_fail_ex+0x263/0x280 [ 64.101683][ T5130] should_fail+0xb/0x20 [ 64.101709][ T5130] should_fail_usercopy+0x1a/0x20 [ 64.101733][ T5130] _copy_from_user+0x1c/0xb0 [ 64.101804][ T5130] ___sys_sendmsg+0xc1/0x1e0 [ 64.101883][ T5130] ? path_openat+0x1b01/0x2050 [ 64.101974][ T5130] __sys_sendmmsg+0x185/0x320 [ 64.102076][ T5130] __x64_sys_sendmmsg+0x57/0x70 [ 64.102175][ T5130] x64_sys_call+0x27aa/0x3020 [ 64.102202][ T5130] do_syscall_64+0x12c/0x370 [ 64.102227][ T5130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.102255][ T5130] RIP: 0033:0x7fda579fc799 [ 64.102279][ T5130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.102300][ T5130] RSP: 002b:00007fda5642e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 64.102355][ T5130] RAX: ffffffffffffffda RBX: 00007fda57c76090 RCX: 00007fda579fc799 [ 64.102368][ T5130] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 000000000000000a [ 64.102381][ T5130] RBP: 00007fda5642e090 R08: 0000000000000000 R09: 0000000000000000 [ 64.102399][ T5130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.102414][ T5130] R13: 00007fda57c76128 R14: 00007fda57c76090 R15: 00007ffc27942358 [ 64.102437][ T5130] [ 64.284288][ T5129] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.331400][ T5129] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 64.358690][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 64.358706][ T28] audit: type=1400 audit(1774413720.378:1260): avc: denied { write } for pid=5131 comm="syz.4.208" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.401067][ T5134] netlink: 168 bytes leftover after parsing attributes in process `syz.2.207'. [ 64.410580][ T5129] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 64.420712][ T5134] capability: warning: `syz.2.207' uses deprecated v2 capabilities in a way that may be insecure [ 64.431875][ T5129] EXT4-fs (loop5): orphan cleanup on readonly fs [ 64.438632][ T5129] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.206: bg 0: block 361: padding at end of block bitmap is not set [ 64.505303][ T5129] loop5: lost filesystem error report for type 5 error -117 [ 64.505436][ T5129] EXT4-fs (loop5): Remounting filesystem read-only [ 64.512811][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 64.512826][ C0] EXT4-fs (loop5): initial error at time 1774413720: ext4_validate_block_bitmap:441 [ 64.512843][ C0] EXT4-fs (loop5): last error at time 1774413720: ext4_validate_block_bitmap:441 [ 64.567650][ T5141] loop2: detected capacity change from 0 to 512 [ 64.582126][ T5141] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 64.600028][ T5142] lo: Caught tx_queue_len zero misconfig [ 64.607542][ T5142] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 64.647508][ T5129] EXT4-fs (loop5): 1 truncate cleaned up [ 64.654942][ T3822] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 64.664595][ T5129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 64.736670][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.763332][ T5129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.206'. [ 64.787219][ T28] audit: type=1400 audit(1774413720.808:1261): avc: denied { create } for pid=5146 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.836921][ T28] audit: type=1400 audit(1774413720.828:1262): avc: denied { setopt } for pid=5146 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.862676][ T5129] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 64.879987][ T28] audit: type=1400 audit(1774413720.828:1263): avc: denied { read } for pid=5146 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.908765][ T28] audit: type=1400 audit(1774413720.838:1264): avc: denied { getopt } for pid=5128 comm="syz.5.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.928668][ T28] audit: type=1400 audit(1774413720.898:1265): avc: denied { block_suspend } for pid=5150 comm="syz.2.215" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.951623][ T28] audit: type=1400 audit(1774413720.898:1266): avc: denied { mounton } for pid=5150 comm="syz.2.215" path="/46/file0" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.990408][ T5155] loop1: detected capacity change from 0 to 128 [ 65.005550][ T28] audit: type=1326 audit(1774413721.008:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c530c799 code=0x7ffc0000 [ 65.032502][ T28] audit: type=1326 audit(1774413721.008:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fb4c530c799 code=0x7ffc0000 [ 65.056275][ T28] audit: type=1326 audit(1774413721.008:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4c530c799 code=0x7ffc0000 [ 65.116837][ T5170] netlink: 56 bytes leftover after parsing attributes in process `syz.3.220'. [ 65.126493][ T5170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.220'. [ 65.137270][ T5170] netlink: 31 bytes leftover after parsing attributes in process `syz.3.220'. [ 65.146247][ T5170] netlink: 'syz.3.220': attribute type 3 has an invalid length. [ 65.154126][ T5170] netlink: 'syz.3.220': attribute type 2 has an invalid length. [ 65.162899][ T5170] netlink: 31 bytes leftover after parsing attributes in process `syz.3.220'. [ 65.180653][ T5168] loop1: detected capacity change from 0 to 1024 [ 65.188805][ T5168] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 65.231774][ T5168] loop1: detected capacity change from 0 to 128 [ 65.255235][ T5168] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 65.438584][ T5177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 65.636033][ T5203] loop1: detected capacity change from 0 to 1024 [ 65.643563][ T5203] EXT4-fs: test_dummy_encryption option not supported [ 65.898607][ T5209] loop1: detected capacity change from 0 to 512 [ 65.973308][ T5209] EXT4-fs (loop1): 1 orphan inode deleted [ 65.985623][ T5209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.023833][ T5209] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.196490][ T5214] loop5: detected capacity change from 0 to 256 [ 66.268854][ T5214] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.295434][ T5217] process 'syz.4.232' launched './file1' with NULL argv: empty string added [ 66.449788][ T5220] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 66.548708][ T5220] FAT-fs (loop5): Filesystem has been set read-only [ 66.572694][ T5228] loop4: detected capacity change from 0 to 512 [ 66.598893][ T5220] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 66.615995][ T5228] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.237: bg 0: block 248: padding at end of block bitmap is not set [ 66.658549][ T5228] loop4: lost filesystem error report for type 5 error -117 [ 66.658779][ T5228] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.237: Failed to acquire dquot type 1 [ 66.666172][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 66.666190][ C1] EXT4-fs (loop4): last error at time 1774413722: ext4_validate_block_bitmap:441 [ 66.702186][ T5220] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 66.751049][ T3818] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 66.777094][ T5228] loop4: lost filesystem error report for type 5 error -117 [ 66.777661][ T5228] EXT4-fs (loop4): 1 truncate cleaned up [ 66.806959][ T5228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.829949][ T5228] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.890328][ T5228] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.237: deleted inode referenced: 12 [ 66.915255][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.925468][ T5228] syz.4.237 (5228) used greatest stack depth: 9160 bytes left [ 67.037053][ T5247] FAULT_INJECTION: forcing a failure. [ 67.037053][ T5247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.050391][ T5247] CPU: 1 UID: 0 PID: 5247 Comm: syz.5.244 Not tainted syzkaller #0 PREEMPT(full) [ 67.050416][ T5247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 67.050429][ T5247] Call Trace: [ 67.050434][ T5247] [ 67.050441][ T5247] __dump_stack+0x1d/0x30 [ 67.050498][ T5247] dump_stack_lvl+0x95/0xd0 [ 67.050595][ T5247] dump_stack+0x15/0x1b [ 67.050614][ T5247] should_fail_ex+0x263/0x280 [ 67.050636][ T5247] should_fail+0xb/0x20 [ 67.050661][ T5247] should_fail_usercopy+0x1a/0x20 [ 67.050722][ T5247] _copy_from_iter+0xcf/0xea0 [ 67.050799][ T5247] ? skb_set_owner_w+0x19b/0x200 [ 67.050833][ T5247] ? sock_alloc_send_pskb+0x469/0x500 [ 67.050944][ T5247] skb_copy_datagram_from_iter+0xb2/0x480 [ 67.050981][ T5247] ? terminate_walk+0x1e6/0x210 [ 67.051009][ T5247] ? path_openat+0x1ab2/0x2050 [ 67.051064][ T5247] ? skb_put+0xa9/0xf0 [ 67.051086][ T5247] tun_get_user+0x90b/0x27c0 [ 67.051202][ T5247] ? ref_tracker_alloc+0x1eb/0x2f0 [ 67.051232][ T5247] tun_chr_write_iter+0x15e/0x210 [ 67.051307][ T5247] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 67.051327][ T5247] vfs_write+0x5a6/0x9f0 [ 67.051360][ T5247] ksys_write+0xdc/0x1a0 [ 67.051415][ T5247] __x64_sys_write+0x40/0x50 [ 67.051429][ T5247] x64_sys_call+0x27e1/0x3020 [ 67.051451][ T5247] do_syscall_64+0x12c/0x370 [ 67.051477][ T5247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.051519][ T5247] RIP: 0033:0x7f0e4c8ecfce [ 67.051564][ T5247] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 67.051579][ T5247] RSP: 002b:00007f0e4b37efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.051601][ T5247] RAX: ffffffffffffffda RBX: 00007f0e4b37f6c0 RCX: 00007f0e4c8ecfce [ 67.051616][ T5247] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 00000000000000c8 [ 67.051630][ T5247] RBP: 00007f0e4b37f090 R08: 0000000000000000 R09: 0000000000000000 [ 67.051643][ T5247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.051654][ T5247] R13: 00007f0e4cba6038 R14: 00007f0e4cba5fa0 R15: 00007ffef7c638a8 [ 67.051718][ T5247] [ 67.376716][ T5257] loop5: detected capacity change from 0 to 256 [ 67.384284][ T5257] vfat: Unknown parameter '0x0000000000000003' [ 67.545655][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.619542][ T5269] loop4: detected capacity change from 0 to 512 [ 67.638065][ T5269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.651865][ T5269] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.714323][ T5279] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 67.732446][ T5279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.255'. [ 67.742086][ T5279] bond1: entered promiscuous mode [ 67.747351][ T5279] bond1: entered allmulticast mode [ 67.753160][ T5279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.832970][ T5279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.842335][ T5279] bond1: (slave geneve2): making interface the new active one [ 67.850133][ T5279] geneve2: entered promiscuous mode [ 67.855673][ T5279] geneve2: entered allmulticast mode [ 67.861805][ T5279] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 67.875226][ T3818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 67.899059][ T3818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 67.950508][ T5290] serio: Serial port ttyS3 [ 67.977502][ T3818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 67.991264][ T3818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 68.092609][ T5295] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.164222][ T5295] sctp: [Deprecated]: syz.1.259 (pid 5295) Use of int in maxseg socket option. [ 68.164222][ T5295] Use struct sctp_assoc_value instead [ 68.392329][ T5301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 68.489025][ T5310] EXT4-fs: Ignoring removed nobh option [ 68.542619][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.624543][ T5312] vfat: Unknown parameter '' [ 68.633364][ T5310] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.655897][ T5310] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.261: EA inode hash validation failed [ 68.668777][ T5323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.270'. [ 68.686888][ T5310] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 68.700588][ T5310] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.261: corrupted inode contents [ 68.712821][ T5310] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.713027][ T5323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.270'. [ 68.722292][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 68.722305][ C1] EXT4-fs (loop1): initial error at time 1774413724: ext4_do_update_inode:5569: inode 15 [ 68.722349][ C1] EXT4-fs (loop1): last error at time 1774413724: ext4_do_update_inode:5569: inode 15 [ 68.883235][ T5310] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.261: mark_inode_dirty error [ 68.916518][ T5329] netlink: 28 bytes leftover after parsing attributes in process `syz.5.272'. [ 68.925950][ T5310] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.926337][ T5310] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.261: corrupted inode contents [ 69.016785][ T5310] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.017691][ T5310] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.261: mark_inode_dirty error [ 69.195534][ T5310] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.195945][ T5310] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.261: mark inode dirty (error -117) [ 69.258538][ T5339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.276'. [ 69.284135][ T5310] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.284289][ T5310] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 69.303166][ T5310] EXT4-fs (loop1): 1 orphan inode deleted [ 69.309362][ T5310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 69.339365][ T5342] FAULT_INJECTION: forcing a failure. [ 69.339365][ T5342] name failslab, interval 1, probability 0, space 0, times 0 [ 69.372476][ T5342] CPU: 1 UID: 0 PID: 5342 Comm: syz.5.277 Not tainted syzkaller #0 PREEMPT(full) [ 69.372503][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 69.372515][ T5342] Call Trace: [ 69.372522][ T5342] [ 69.372529][ T5342] __dump_stack+0x1d/0x30 [ 69.372556][ T5342] dump_stack_lvl+0x95/0xd0 [ 69.372657][ T5342] dump_stack+0x15/0x1b [ 69.372679][ T5342] should_fail_ex+0x263/0x280 [ 69.372747][ T5342] should_failslab+0x8c/0xb0 [ 69.372808][ T5342] kmem_cache_alloc_noprof+0x66/0x400 [ 69.372830][ T5342] ? skb_clone+0x151/0x1f0 [ 69.372861][ T5342] skb_clone+0x151/0x1f0 [ 69.372897][ T5342] __netlink_deliver_tap+0x2c9/0x500 [ 69.372932][ T5342] netlink_unicast+0x66b/0x690 [ 69.372961][ T5342] netlink_sendmsg+0x5c8/0x6f0 [ 69.373065][ T5342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.373098][ T5342] ____sys_sendmsg+0x563/0x5b0 [ 69.373132][ T5342] ___sys_sendmsg+0x195/0x1e0 [ 69.373240][ T5342] __x64_sys_sendmsg+0xd4/0x160 [ 69.373281][ T5342] x64_sys_call+0x194c/0x3020 [ 69.373317][ T5342] do_syscall_64+0x12c/0x370 [ 69.373422][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.373444][ T5342] RIP: 0033:0x7f0e4c92c799 [ 69.373458][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.373549][ T5342] RSP: 002b:00007f0e4b37f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.373566][ T5342] RAX: ffffffffffffffda RBX: 00007f0e4cba5fa0 RCX: 00007f0e4c92c799 [ 69.373578][ T5342] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 69.373591][ T5342] RBP: 00007f0e4b37f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.373604][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.373676][ T5342] R13: 00007f0e4cba6038 R14: 00007f0e4cba5fa0 R15: 00007ffef7c638a8 [ 69.373756][ T5342] [ 69.583486][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.601815][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 69.601829][ T28] audit: type=1400 audit(1774413725.618:1304): avc: denied { setopt } for pid=5343 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.652216][ T28] audit: type=1400 audit(1774413725.618:1305): avc: denied { ioctl } for pid=5343 comm="syz.3.278" path="socket:[8834]" dev="sockfs" ino=8834 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.703460][ T28] audit: type=1400 audit(1774413725.668:1306): avc: denied { relabelfrom } for pid=5345 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 69.726194][ T28] audit: type=1400 audit(1774413725.668:1307): avc: denied { relabelto } for pid=5345 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 69.728017][ T5348] set_capacity_and_notify: 3 callbacks suppressed [ 69.728055][ T5348] loop4: detected capacity change from 0 to 4096 [ 69.761718][ T5348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.762104][ T28] audit: type=1326 audit(1774413725.668:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5345 comm="syz.1.279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda579fc799 code=0x0 [ 69.817119][ T5348] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 69.840259][ T5348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.880360][ T28] audit: type=1400 audit(1774413725.898:1309): avc: denied { create } for pid=5349 comm="syz.5.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 69.961194][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.112832][ T5377] loop4: detected capacity change from 0 to 512 [ 70.120674][ T5377] EXT4-fs: Ignoring removed bh option [ 70.154073][ T5377] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 70.174868][ T5377] EXT4-fs (loop4): 1 truncate cleaned up [ 70.193059][ T5377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.270488][ T28] audit: type=1400 audit(1774413726.288:1310): avc: denied { ioctl } for pid=5382 comm="syz.5.291" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.545867][ T5406] netlink: 76 bytes leftover after parsing attributes in process `syz.3.296'. [ 70.691709][ T28] audit: type=1400 audit(1774413726.698:1311): avc: denied { kexec_image_load } for pid=5430 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 70.712736][ T28] audit: type=1400 audit(1774413726.698:1312): avc: denied { cmd } for pid=5430 comm="syz.3.300" path="socket:[10048]" dev="sockfs" ino=10048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.841260][ T28] audit: type=1326 audit(1774413726.858:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5446 comm="syz.2.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe49ccec799 code=0x7ffc0000 [ 71.379984][ T5512] netlink: 6 bytes leftover after parsing attributes in process `syz.2.313'. [ 71.421822][ T5512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.998156][ T5531] loop2: detected capacity change from 0 to 512 [ 72.030696][ T5531] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.183154][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.198167][ T5531] syzkaller0: entered promiscuous mode [ 72.210702][ T5531] syzkaller0: entered allmulticast mode [ 72.231367][ T5549] loop4: detected capacity change from 0 to 164 [ 72.332414][ T5552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.321'. [ 72.347880][ T5549] loop4: detected capacity change from 0 to 512 [ 72.397472][ T5554] loop5: detected capacity change from 0 to 128 [ 72.500729][ T5549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.574475][ T5549] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.620948][ T5576] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.326'. [ 73.138120][ T5609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.339'. [ 73.153643][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.211741][ T5612] netlink: 24 bytes leftover after parsing attributes in process `syz.4.341'. [ 73.260062][ T5609] veth3: entered allmulticast mode [ 73.613902][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.346'. [ 73.804862][ T5635] loop2: detected capacity change from 0 to 2048 [ 73.842354][ T5635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.882620][ T5635] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.128846][ T5644] loop4: detected capacity change from 0 to 512 [ 74.184582][ T5644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.212195][ T5644] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.249131][ T3828] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 345: padding at end of block bitmap is not set [ 74.274145][ T3828] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 74.286716][ T3828] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.286716][ T3828] [ 74.370769][ T3830] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 2048 with error 117 [ 74.383580][ T3830] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.383580][ T3830] [ 74.446453][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.979193][ T5662] loop2: detected capacity change from 0 to 1024 [ 74.998788][ T5662] ext4: Unknown parameter 'pcr' [ 75.054364][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.774823][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 75.774839][ T28] audit: type=1400 audit(1774413731.798:1331): avc: denied { create } for pid=5689 comm="syz.5.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.071690][ T28] audit: type=1400 audit(1774413732.068:1332): avc: denied { read append } for pid=5689 comm="syz.5.365" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.116446][ T28] audit: type=1400 audit(1774413732.068:1333): avc: denied { open } for pid=5689 comm="syz.5.365" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.220931][ T28] audit: type=1400 audit(1774413732.118:1334): avc: denied { ioctl } for pid=5689 comm="syz.5.365" path="socket:[11341]" dev="sockfs" ino=11341 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.418543][ T5708] loop1: detected capacity change from 0 to 1024 [ 76.426008][ T5708] EXT4-fs: Ignoring removed i_version option [ 76.432097][ T5708] EXT4-fs: Ignoring removed bh option [ 76.437862][ T5708] EXT4-fs: inline encryption not supported [ 76.445152][ T5708] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.497565][ T5708] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 76.509766][ T5708] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 76.524733][ T5708] EXT4-fs (loop1): mount failed [ 76.765074][ T5715] FAULT_INJECTION: forcing a failure. [ 76.765074][ T5715] name failslab, interval 1, probability 0, space 0, times 0 [ 76.836500][ T5715] CPU: 0 UID: 0 PID: 5715 Comm: syz.2.372 Not tainted syzkaller #0 PREEMPT(full) [ 76.836576][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.836589][ T5715] Call Trace: [ 76.836647][ T5715] [ 76.836654][ T5715] __dump_stack+0x1d/0x30 [ 76.836677][ T5715] dump_stack_lvl+0x95/0xd0 [ 76.836701][ T5715] dump_stack+0x15/0x1b [ 76.836726][ T5715] should_fail_ex+0x263/0x280 [ 76.836889][ T5715] should_failslab+0x8c/0xb0 [ 76.836908][ T5715] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 76.836928][ T5715] ? perf_event_alloc+0x14b/0x18e0 [ 76.836982][ T5715] ? cred_has_capability+0x224/0x2a0 [ 76.837004][ T5715] perf_event_alloc+0x14b/0x18e0 [ 76.837031][ T5715] ? __rcu_read_unlock+0x4e/0x70 [ 76.837091][ T5715] ? __fget_files+0x184/0x1c0 [ 76.837118][ T5715] __se_sys_perf_event_open+0x656/0x1290 [ 76.837159][ T5715] __x64_sys_perf_event_open+0x67/0x80 [ 76.837228][ T5715] x64_sys_call+0x2789/0x3020 [ 76.837257][ T5715] do_syscall_64+0x12c/0x370 [ 76.837284][ T5715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.837310][ T5715] RIP: 0033:0x7fe49ccec799 [ 76.837369][ T5715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.837387][ T5715] RSP: 002b:00007fe49b73f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 76.837405][ T5715] RAX: ffffffffffffffda RBX: 00007fe49cf65fa0 RCX: 00007fe49ccec799 [ 76.837421][ T5715] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000000c0 [ 76.837431][ T5715] RBP: 00007fe49b73f090 R08: 0000000000000000 R09: 0000000000000000 [ 76.837445][ T5715] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 76.837482][ T5715] R13: 00007fe49cf66038 R14: 00007fe49cf65fa0 R15: 00007fff74071e48 [ 76.837504][ T5715] [ 77.550581][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'. [ 77.637386][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.377'. [ 77.667025][ T5730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5730 comm=syz.5.377 [ 77.778601][ T5733] loop2: detected capacity change from 0 to 512 [ 77.864463][ T5733] EXT4-fs: Ignoring removed bh option [ 77.938950][ T5733] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 78.005668][ T5733] EXT4-fs (loop2): 1 truncate cleaned up [ 78.050316][ T5733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.632909][ T5763] loop4: detected capacity change from 0 to 8192 [ 78.772945][ T5765] netlink: 60 bytes leftover after parsing attributes in process `syz.3.386'. [ 78.785162][ T4089] loop4: p1 < > p2 p4 < p5 > [ 78.794395][ T28] audit: type=1400 audit(1774413734.708:1335): avc: denied { create } for pid=5762 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 78.825161][ T4089] loop4: partition table partially beyond EOD, truncated [ 78.857300][ T4089] loop4: p1 start 134217728 is beyond EOD, truncated [ 78.898011][ T4089] loop4: p2 size 591360 extends beyond EOD, truncated [ 78.915947][ T28] audit: type=1400 audit(1774413734.798:1336): avc: denied { create } for pid=5762 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 78.951395][ T4089] loop4: p5 size 591360 extends beyond EOD, truncated [ 79.015026][ T28] audit: type=1400 audit(1774413734.888:1337): avc: denied { write } for pid=5762 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.065374][ T28] audit: type=1326 audit(1774413734.988:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda579fc799 code=0x7ffc0000 [ 79.117551][ T28] audit: type=1326 audit(1774413734.988:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5754 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fda579fc799 code=0x7ffc0000 [ 79.194285][ T5763] loop4: p1 < > p2 p4 < p5 > [ 79.198981][ T5763] loop4: partition table partially beyond EOD, truncated [ 79.206160][ T5763] loop4: p1 start 134217728 is beyond EOD, truncated [ 79.212912][ T5763] loop4: p2 size 591360 extends beyond EOD, truncated [ 79.220949][ T5763] loop4: p5 size 591360 extends beyond EOD, truncated [ 79.407301][ T5781] loop1: detected capacity change from 0 to 512 [ 79.453690][ T5781] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 79.504305][ T5781] EXT4-fs (loop1): 1 truncate cleaned up [ 79.544749][ T5781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.709695][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.777622][ T5804] FAULT_INJECTION: forcing a failure. [ 79.777622][ T5804] name failslab, interval 1, probability 0, space 0, times 0 [ 79.790365][ T5804] CPU: 0 UID: 0 PID: 5804 Comm: syz.3.401 Not tainted syzkaller #0 PREEMPT(full) [ 79.790392][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.790404][ T5804] Call Trace: [ 79.790411][ T5804] [ 79.790420][ T5804] __dump_stack+0x1d/0x30 [ 79.790445][ T5804] dump_stack_lvl+0x95/0xd0 [ 79.790543][ T5804] dump_stack+0x15/0x1b [ 79.790567][ T5804] should_fail_ex+0x263/0x280 [ 79.790597][ T5804] should_failslab+0x8c/0xb0 [ 79.790620][ T5804] kmem_cache_alloc_noprof+0x66/0x400 [ 79.790677][ T5804] ? io_submit_one+0xcf/0x1350 [ 79.790707][ T5804] io_submit_one+0xcf/0x1350 [ 79.790751][ T5804] __se_sys_io_submit+0xfb/0x280 [ 79.790787][ T5804] __x64_sys_io_submit+0x43/0x50 [ 79.790913][ T5804] x64_sys_call+0x19d5/0x3020 [ 79.790945][ T5804] do_syscall_64+0x12c/0x370 [ 79.791072][ T5804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.791108][ T5804] RIP: 0033:0x7fb4c530c799 [ 79.791126][ T5804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.791141][ T5804] RSP: 002b:00007fb4c3d67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 79.791158][ T5804] RAX: ffffffffffffffda RBX: 00007fb4c5585fa0 RCX: 00007fb4c530c799 [ 79.791243][ T5804] RDX: 0000200000000940 RSI: 0000000000000001 RDI: 00007fb4c3d26000 [ 79.791257][ T5804] RBP: 00007fb4c3d67090 R08: 0000000000000000 R09: 0000000000000000 [ 79.791270][ T5804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.791353][ T5804] R13: 00007fb4c5586038 R14: 00007fb4c5585fa0 R15: 00007ffe720f6ba8 [ 79.791374][ T5804] [ 79.974663][ T5802] FAULT_INJECTION: forcing a failure. [ 79.974663][ T5802] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 79.989819][ T5802] CPU: 1 UID: 0 PID: 5802 Comm: syz.4.400 Not tainted syzkaller #0 PREEMPT(full) [ 79.989900][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.989914][ T5802] Call Trace: [ 79.989920][ T5802] [ 79.989930][ T5802] __dump_stack+0x1d/0x30 [ 79.989959][ T5802] dump_stack_lvl+0x95/0xd0 [ 79.989984][ T5802] dump_stack+0x15/0x1b [ 79.990055][ T5802] should_fail_ex+0x263/0x280 [ 79.990084][ T5802] should_fail_alloc_page+0xf2/0x100 [ 79.990106][ T5802] alloc_pages_bulk_noprof+0x101/0x530 [ 79.990139][ T5802] copy_splice_read+0xf3/0x6c0 [ 79.990213][ T5802] ? __pfx_copy_splice_read+0x10/0x10 [ 79.990233][ T5802] splice_direct_to_actor+0x26e/0x670 [ 79.990258][ T5802] ? __pfx_direct_splice_actor+0x10/0x10 [ 79.990364][ T5802] do_splice_direct+0x119/0x1a0 [ 79.990385][ T5802] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 79.990490][ T5802] do_sendfile+0x382/0x650 [ 79.990530][ T5802] __x64_sys_sendfile64+0x105/0x150 [ 79.990551][ T5802] x64_sys_call+0x2dc4/0x3020 [ 79.990593][ T5802] do_syscall_64+0x12c/0x370 [ 79.990622][ T5802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.990686][ T5802] RIP: 0033:0x7f682d00c799 [ 79.990703][ T5802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.990723][ T5802] RSP: 002b:00007f682ba67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 79.990786][ T5802] RAX: ffffffffffffffda RBX: 00007f682d285fa0 RCX: 00007f682d00c799 [ 79.990802][ T5802] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 79.990813][ T5802] RBP: 00007f682ba67090 R08: 0000000000000000 R09: 0000000000000000 [ 79.990823][ T5802] R10: 0000020000023892 R11: 0000000000000246 R12: 0000000000000001 [ 79.990833][ T5802] R13: 00007f682d286038 R14: 00007f682d285fa0 R15: 00007ffdf5d5f6a8 [ 79.990851][ T5802] [ 80.205828][ T5798] loop5: detected capacity change from 0 to 1024 [ 80.212953][ T5798] EXT4-fs: Ignoring removed bh option [ 80.263154][ T5798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.278585][ T5795] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 80.433830][ T5820] netem: invalid attributes len -9 [ 80.445302][ T5820] netem: change failed [ 80.451728][ T4061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.493626][ T5820] mmap: syz.1.407 (5820): VmData 29204480 exceed data ulimit 137. Update limits or use boot option ignore_rlimit_data. [ 80.676418][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 80.687904][ T5834] netlink: 48 bytes leftover after parsing attributes in process `syz.1.413'. [ 80.750665][ T5836] FAULT_INJECTION: forcing a failure. [ 80.750665][ T5836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.779659][ T5836] CPU: 0 UID: 0 PID: 5836 Comm: syz.1.413 Not tainted syzkaller #0 PREEMPT(full) [ 80.779723][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.779734][ T5836] Call Trace: [ 80.779739][ T5836] [ 80.779745][ T5836] __dump_stack+0x1d/0x30 [ 80.779775][ T5836] dump_stack_lvl+0x95/0xd0 [ 80.779961][ T5836] dump_stack+0x15/0x1b [ 80.779980][ T5836] should_fail_ex+0x263/0x280 [ 80.780007][ T5836] should_fail+0xb/0x20 [ 80.780073][ T5836] should_fail_usercopy+0x1a/0x20 [ 80.780097][ T5836] _copy_from_user+0x1c/0xb0 [ 80.780127][ T5836] proc_do_submiturb+0x85c/0x1d00 [ 80.780213][ T5836] ? proc_do_submiturb+0x141/0x1d00 [ 80.780235][ T5836] ? should_fail_ex+0xd9/0x280 [ 80.780258][ T5836] proc_submiturb+0x7b/0xa0 [ 80.780360][ T5836] usbdev_ioctl+0xcb4/0x1750 [ 80.780387][ T5836] ? __pfx_usbdev_ioctl+0x10/0x10 [ 80.780417][ T5836] __se_sys_ioctl+0xce/0x140 [ 80.780478][ T5836] __x64_sys_ioctl+0x43/0x50 [ 80.780568][ T5836] x64_sys_call+0x1563/0x3020 [ 80.780618][ T5836] do_syscall_64+0x12c/0x370 [ 80.780640][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.780723][ T5836] RIP: 0033:0x7fda579fc799 [ 80.780785][ T5836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.780805][ T5836] RSP: 002b:00007fda5642e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.780827][ T5836] RAX: ffffffffffffffda RBX: 00007fda57c76090 RCX: 00007fda579fc799 [ 80.780843][ T5836] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000008 [ 80.780854][ T5836] RBP: 00007fda5642e090 R08: 0000000000000000 R09: 0000000000000000 [ 80.780876][ T5836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.780886][ T5836] R13: 00007fda57c76128 R14: 00007fda57c76090 R15: 00007ffc27942358 [ 80.780904][ T5836] [ 81.025028][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.049360][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 81.049374][ T28] audit: type=1400 audit(1774413737.048:1355): avc: denied { map } for pid=5839 comm="syz.2.414" path="socket:[10682]" dev="sockfs" ino=10682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 81.134035][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 81.147118][ T28] audit: type=1400 audit(1774413737.168:1356): avc: denied { ioctl } for pid=5839 comm="syz.2.414" path="socket:[10686]" dev="sockfs" ino=10686 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.418586][ T28] audit: type=1326 audit(1774413737.438:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5830 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4c92c799 code=0x7fc00000 [ 81.453431][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 81.462335][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 81.532629][ T5858] netlink: 'syz.5.420': attribute type 39 has an invalid length. [ 81.560473][ T5856] loop1: detected capacity change from 0 to 1024 [ 81.567304][ T5856] EXT4-fs: inline encryption not supported [ 81.577284][ T5856] EXT4-fs: Ignoring removed bh option [ 81.599139][ T5856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.730227][ T5856] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.421: Allocating blocks 449-513 which overlap fs metadata [ 81.747864][ T5856] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.421: Allocating blocks 497-513 which overlap fs metadata [ 81.847170][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.176235][ T5872] loop4: detected capacity change from 0 to 128 [ 82.194628][ T5872] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.243918][ T5872] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.477292][ T5888] rdma_op ffff88810430a580 conn xmit_rdma 0000000000000000 [ 82.497826][ T28] audit: type=1400 audit(1774413738.518:1358): avc: denied { setopt } for pid=5889 comm="syz.5.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 82.533678][ T28] audit: type=1400 audit(1774413738.538:1359): avc: denied { mount } for pid=5889 comm="syz.5.432" name="/" dev="configfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 82.597336][ T28] audit: type=1400 audit(1774413738.578:1360): avc: denied { search } for pid=5889 comm="syz.5.432" name="/" dev="configfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.655571][ T5888] loop2: detected capacity change from 0 to 764 [ 82.672759][ T28] audit: type=1400 audit(1774413738.648:1361): avc: denied { search } for pid=5889 comm="syz.5.432" name="/" dev="configfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.695349][ T28] audit: type=1400 audit(1774413738.648:1362): avc: denied { read open } for pid=5889 comm="syz.5.432" path="/" dev="configfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.734032][ T5888] rock: directory entry would overflow storage [ 82.749702][ T5888] rock: sig=0x4f50, size=4, remaining=3 [ 82.755981][ T5888] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 82.773849][ T28] audit: type=1400 audit(1774413738.798:1363): avc: denied { write } for pid=5895 comm="syz.5.435" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.856320][ T28] audit: type=1400 audit(1774413738.818:1364): avc: denied { ioctl } for pid=5895 comm="syz.5.435" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.986953][ T5907] loop2: detected capacity change from 0 to 512 [ 83.005664][ T30] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.029574][ T5907] EXT4-fs warning (device loop2): ext4_multi_mount_protect:314: fsck is running on the filesystem [ 83.085421][ T5907] EXT4-fs warning (device loop2): ext4_multi_mount_protect:314: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 83.308015][ T5922] loop1: detected capacity change from 0 to 1024 [ 83.329867][ T5922] EXT4-fs: Ignoring removed bh option [ 83.387772][ T5922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.493199][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.474433][ T5969] loop4: detected capacity change from 0 to 1024 [ 84.495959][ T5969] EXT4-fs: Ignoring removed bh option [ 84.524101][ T5969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.894766][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.949937][ T5994] ------------[ cut here ]------------ [ 84.955626][ T5994] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 84.975503][ T5994] WARNING: kernel/bpf/verifier.c:2823 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.5.458/5994 [ 84.986367][ T5994] Modules linked in: [ 84.990411][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.5.458 Not tainted syzkaller #0 PREEMPT(full) [ 84.999757][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 85.009975][ T5994] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 85.016410][ T5994] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 85.036100][ T5994] RSP: 0018:ffffc9000182f370 EFLAGS: 00010246 [ 85.042246][ T5994] RAX: ffff888104bb6f48 RBX: 00000000ffffffff RCX: 0000000000000000 [ 85.050241][ T5994] RDX: ffffffff86819242 RSI: ffffffff8682d7b0 RDI: ffffffff871d2340 [ 85.058343][ T5994] RBP: ffff88810d7b0840 R08: 0000007800000000 R09: 0000000000000000 [ 85.066429][ T5994] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88810d7b0800 [ 85.074440][ T5994] R13: 0000000000000000 R14: ffff88810d7b084c R15: ffff88810d7b0838 [ 85.082461][ T5994] FS: 00007f0e4af1a6c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 85.091466][ T5994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.098111][ T5994] CR2: 0000001b32824220 CR3: 000000010b7f6000 CR4: 00000000003506f0 [ 85.106137][ T5994] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.114136][ T5994] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 85.122138][ T5994] Call Trace: [ 85.125437][ T5994] [ 85.128399][ T5994] reg_set_min_max+0x1f2/0x260 [ 85.133224][ T5994] check_cond_jmp_op+0x13b2/0x1a80 [ 85.138371][ T5994] do_check+0x4a9b/0x9840 [ 85.142901][ T5994] do_check_common+0xd0b/0x1630 [ 85.147779][ T5994] bpf_check+0x2f78/0xcc30 [ 85.152286][ T5994] ? __perf_event_task_sched_in+0xa65/0xad0 [ 85.158210][ T5994] ? css_rstat_updated+0xbb/0x280 [ 85.163301][ T5994] ? __rcu_read_unlock+0x4e/0x70 [ 85.168266][ T5994] ? __perf_event_task_sched_in+0xa65/0xad0 [ 85.174275][ T5994] ? __perf_event_task_sched_out+0x192/0x710 [ 85.180327][ T5994] ? __schedule+0x93c/0xd40 [ 85.184877][ T5994] ? css_rstat_updated+0xbb/0x280 [ 85.189969][ T5994] ? __rcu_read_unlock+0x4e/0x70 [ 85.195030][ T5994] ? avc_has_perm_noaudit+0xab/0x130 [ 85.200445][ T5994] ? avc_has_perm+0x101/0x190 [ 85.205209][ T5994] ? selinux_bpf_prog_load+0x197/0x1c0 [ 85.210708][ T5994] ? security_bpf_prog_load+0x9e/0x140 [ 85.216294][ T5994] bpf_prog_load+0xf76/0x1140 [ 85.221062][ T5994] ? security_bpf+0x2b/0x90 [ 85.225618][ T5994] __sys_bpf+0x505/0x7e0 [ 85.229965][ T5994] __x64_sys_bpf+0x41/0x50 [ 85.234428][ T5994] x64_sys_call+0x10cb/0x3020 [ 85.239148][ T5994] do_syscall_64+0x12c/0x370 [ 85.243865][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.249834][ T5994] RIP: 0033:0x7f0e4c92c799 [ 85.254303][ T5994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.274011][ T5994] RSP: 002b:00007f0e4af1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 85.282457][ T5994] RAX: ffffffffffffffda RBX: 00007f0e4cba6270 RCX: 00007f0e4c92c799 [ 85.290494][ T5994] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 85.298550][ T5994] RBP: 00007f0e4c9c2c99 R08: 0000000000000000 R09: 0000000000000000 [ 85.306611][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.314616][ T5994] R13: 00007f0e4cba6308 R14: 00007f0e4cba6270 R15: 00007ffef7c638a8 [ 85.322638][ T5994] [ 85.325689][ T5994] ---[ end trace 0000000000000000 ]--- [ 85.335193][ T5995] loop5: detected capacity change from 0 to 512 [ 85.341794][ T5995] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.428651][ T5995] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 85.442135][ T5995] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 85.450328][ T5995] EXT4-fs (loop5): orphan cleanup on readonly fs [ 85.450346][ T5998] loop2: detected capacity change from 0 to 2048 [ 85.463768][ T5995] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.458: bg 0: block 361: padding at end of block bitmap is not set [ 85.477967][ T5995] loop5: lost filesystem error report for type 5 error -117 [ 85.478285][ T5995] EXT4-fs (loop5): Remounting filesystem read-only [ 85.485685][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 85.485700][ C1] EXT4-fs (loop5): initial error at time 1774413741: ext4_validate_block_bitmap:441 [ 85.485727][ C1] EXT4-fs (loop5): last error at time 1774413741: ext4_validate_block_bitmap:441 [ 85.505220][ T5998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.511926][ T5995] EXT4-fs (loop5): 1 truncate cleaned up [ 85.535475][ T5995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 85.552392][ T5998] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 85.567450][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.458'. [ 85.571310][ T5998] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 85.605590][ T6006] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 85.606603][ T5998] EXT4-fs (loop2): This should not happen!! Data will be lost [ 85.606603][ T5998] [ 85.757667][ T4061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 85.782397][ T5998] EXT4-fs (loop2): Total free blocks count 0 [ 85.791526][ T5998] EXT4-fs (loop2): Free/Dirty block details [ 85.797485][ T5998] EXT4-fs (loop2): free_blocks=66060288 [ 85.812653][ T5998] EXT4-fs (loop2): dirty_blocks=48 [ 85.817789][ T5998] EXT4-fs (loop2): Block reservation details [ 85.824113][ T5998] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 85.877948][ T6014] loop5: detected capacity change from 0 to 128 [ 85.909800][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.474'. [ 85.924445][ T6016] geneve2: entered promiscuous mode [ 85.930794][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.058871][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 86.058896][ T28] audit: type=1400 audit(1774413741.988:1433): avc: denied { write } for pid=6005 comm="syz.4.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.104374][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.124472][ T28] audit: type=1400 audit(1774413741.988:1434): avc: denied { read } for pid=6005 comm="syz.4.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.265762][ T28] audit: type=1326 audit(1774413742.118:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5997 comm="syz.2.469" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe49ccec799 code=0x0 [ 87.081569][ T6014] msdos: Bad value for 'umask' [ 87.111796][ T6021] FAULT_INJECTION: forcing a failure. [ 87.111796][ T6021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.124920][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: syz.3.473 Tainted: G W syzkaller #0 PREEMPT(full) [ 87.125003][ T6021] Tainted: [W]=WARN [ 87.125009][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.125021][ T6021] Call Trace: [ 87.125026][ T6021] [ 87.125033][ T6021] __dump_stack+0x1d/0x30 [ 87.125059][ T6021] dump_stack_lvl+0x95/0xd0 [ 87.125100][ T6021] dump_stack+0x15/0x1b [ 87.125128][ T6021] should_fail_ex+0x263/0x280 [ 87.125207][ T6021] should_fail+0xb/0x20 [ 87.125233][ T6021] should_fail_usercopy+0x1a/0x20 [ 87.125259][ T6021] _copy_from_user+0x1c/0xb0 [ 87.125329][ T6021] ___sys_sendmsg+0xc1/0x1e0 [ 87.125381][ T6021] __x64_sys_sendmsg+0xd4/0x160 [ 87.125495][ T6021] x64_sys_call+0x194c/0x3020 [ 87.125563][ T6021] do_syscall_64+0x12c/0x370 [ 87.125594][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.125620][ T6021] RIP: 0033:0x7fb4c530c799 [ 87.125639][ T6021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.125735][ T6021] RSP: 002b:00007fb4c3d25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.125788][ T6021] RAX: ffffffffffffffda RBX: 00007fb4c5586180 RCX: 00007fb4c530c799 [ 87.125801][ T6021] RDX: 0000000004000884 RSI: 0000200000000940 RDI: 0000000000000007 [ 87.125813][ T6021] RBP: 00007fb4c3d25090 R08: 0000000000000000 R09: 0000000000000000 [ 87.125825][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.125836][ T6021] R13: 00007fb4c5586218 R14: 00007fb4c5586180 R15: 00007ffe720f6ba8 [ 87.125900][ T6021] [ 87.294311][ T28] audit: type=1400 audit(1774413742.148:1436): avc: denied { write } for pid=6015 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.313797][ T28] audit: type=1326 audit(1774413743.118:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda579fc799 code=0x7ffc0000 [ 87.337414][ T28] audit: type=1326 audit(1774413743.128:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fda579fc799 code=0x7ffc0000 [ 88.073415][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.114621][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.310889][ T28] audit: type=1326 audit(1774413743.128:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda579fc799 code=0x7ffc0000 [ 88.344545][ T28] audit: type=1400 audit(1774413743.128:1440): avc: denied { create } for pid=5997 comm="syz.2.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 88.471888][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 88.532378][ T6032] cgroup: release_agent respecified [ 88.573777][ T6032] loop1: detected capacity change from 0 to 1024 [ 88.597136][ T6032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.647372][ T6043] loop5: detected capacity change from 0 to 512 [ 88.654138][ T6032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.670916][ T28] audit: type=1326 audit(1774413743.128:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fda579fc799 code=0x7ffc0000 [ 88.703927][ T6043] EXT4-fs: Ignoring removed bh option [ 88.710516][ T28] audit: type=1326 audit(1774413743.128:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda579fc799 code=0x7ffc0000 [ 88.735836][ T6043] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 88.774235][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 88.783189][ T6043] EXT4-fs (loop5): 1 truncate cleaned up [ 88.789406][ T6043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.832204][ T6048] @: renamed from bond_slave_0 [ 88.838465][ T6043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.898876][ T6060] loop5: detected capacity change from 0 to 764 [ 88.922511][ T6060] rock: directory entry would overflow storage [ 88.928746][ T6060] rock: sig=0x4654, size=5, remaining=4 [ 88.970993][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.138592][ T6073] netlink: 112 bytes leftover after parsing attributes in process `syz.4.487'. [ 89.246550][ T6082] netlink: 60 bytes leftover after parsing attributes in process `syz.1.492'. [ 89.397959][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 89.408100][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.418993][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.428581][ T6094] bond0 (unregistering): Released all slaves [ 89.502944][ T6104] loop1: detected capacity change from 0 to 1024 [ 89.509928][ T6104] EXT4-fs: Ignoring removed orlov option [ 89.531424][ T6104] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.544827][ T6104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.601191][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.694488][ T6116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.964404][ T6130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.984177][ T6130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.009902][ T6133] loop1: detected capacity change from 0 to 512 [ 90.039277][ T6133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.061181][ T6133] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.369017][ T6143] serio: Serial port ttyS3 [ 90.840538][ T6155] netlink: 'syz.4.514': attribute type 29 has an invalid length. [ 90.848982][ T6155] netlink: 'syz.4.514': attribute type 29 has an invalid length. [ 90.857436][ T6155] netlink: 500 bytes leftover after parsing attributes in process `syz.4.514'. [ 90.866537][ T6155] unsupported nla_type 58 [ 90.901401][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.918718][ T6158] dvmrp6: left allmulticast mode [ 90.935264][ T6159] netlink: 'syz.4.516': attribute type 4 has an invalid length. [ 91.118779][ T28] kauditd_printk_skb: 249 callbacks suppressed [ 91.118796][ T28] audit: type=1400 audit(1774413747.138:1692): avc: denied { ioctl } for pid=6175 comm="syz.3.521" path="socket:[12244]" dev="sockfs" ino=12244 ioctlcmd=0x8911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.170099][ T28] audit: type=1400 audit(1774413747.188:1693): avc: denied { read } for pid=6180 comm="syz.4.522" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.193415][ T28] audit: type=1400 audit(1774413747.188:1694): avc: denied { open } for pid=6180 comm="syz.4.522" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.217993][ T28] audit: type=1400 audit(1774413747.188:1695): avc: denied { ioctl } for pid=6180 comm="syz.4.522" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.246559][ T6182] netlink: 'syz.4.522': attribute type 2 has an invalid length. [ 91.299471][ T6184] FAULT_INJECTION: forcing a failure. [ 91.299471][ T6184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.312630][ T6184] CPU: 1 UID: 0 PID: 6184 Comm: syz.3.523 Tainted: G W syzkaller #0 PREEMPT(full) [ 91.312688][ T6184] Tainted: [W]=WARN [ 91.312693][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.312702][ T6184] Call Trace: [ 91.312707][ T6184] [ 91.312713][ T6184] __dump_stack+0x1d/0x30 [ 91.312734][ T6184] dump_stack_lvl+0x95/0xd0 [ 91.312757][ T6184] dump_stack+0x15/0x1b [ 91.312774][ T6184] should_fail_ex+0x263/0x280 [ 91.312796][ T6184] should_fail+0xb/0x20 [ 91.312857][ T6184] should_fail_usercopy+0x1a/0x20 [ 91.312879][ T6184] _copy_from_iter+0xcf/0xea0 [ 91.312903][ T6184] ? __alloc_skb+0x4f6/0x690 [ 91.312924][ T6184] ? __alloc_skb+0x200/0x690 [ 91.312995][ T6184] netlink_sendmsg+0x4ae/0x6f0 [ 91.313116][ T6184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.313145][ T6184] ____sys_sendmsg+0x563/0x5b0 [ 91.313173][ T6184] ___sys_sendmsg+0x195/0x1e0 [ 91.313209][ T6184] __x64_sys_sendmsg+0xd4/0x160 [ 91.313279][ T6184] x64_sys_call+0x194c/0x3020 [ 91.313368][ T6184] do_syscall_64+0x12c/0x370 [ 91.313388][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.313417][ T6184] RIP: 0033:0x7fb4c530c799 [ 91.313429][ T6184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.313443][ T6184] RSP: 002b:00007fb4c3d67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.313459][ T6184] RAX: ffffffffffffffda RBX: 00007fb4c5585fa0 RCX: 00007fb4c530c799 [ 91.313469][ T6184] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 91.313479][ T6184] RBP: 00007fb4c3d67090 R08: 0000000000000000 R09: 0000000000000000 [ 91.313488][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.313497][ T6184] R13: 00007fb4c5586038 R14: 00007fb4c5585fa0 R15: 00007ffe720f6ba8 [ 91.313597][ T6184] [ 91.542167][ T28] audit: type=1400 audit(1774413747.568:1696): avc: denied { nlmsg_read } for pid=6185 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.598917][ T28] audit: type=1400 audit(1774413747.618:1697): avc: denied { bind } for pid=6191 comm="syz.4.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.600476][ T6192] netlink: 'syz.4.527': attribute type 10 has an invalid length. [ 91.619378][ T6193] netlink: 'syz.4.527': attribute type 10 has an invalid length. [ 91.633835][ T6192] dummy0: entered promiscuous mode [ 91.642780][ T6192] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 91.694840][ T6199] ip6gre1: entered promiscuous mode [ 91.700193][ T6199] ip6gre1: entered allmulticast mode [ 91.707199][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.715877][ T6199] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.726462][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.734118][ T3364] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.742123][ T28] audit: type=1400 audit(1774413747.768:1698): avc: denied { read } for pid=6198 comm="syz.4.530" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.766146][ T28] audit: type=1400 audit(1774413747.788:1699): avc: denied { open } for pid=6198 comm="syz.4.530" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 91.793912][ T28] audit: type=1400 audit(1774413747.788:1700): avc: denied { read write } for pid=6198 comm="syz.4.530" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 91.833448][ T28] audit: type=1400 audit(1774413747.788:1701): avc: denied { open } for pid=6198 comm="syz.4.530" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 91.859123][ T6205] loop4: detected capacity change from 0 to 512 [ 91.866142][ T6203] netlink: 'syz.3.532': attribute type 1 has an invalid length. [ 91.916943][ T6205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 91.918490][ T6203] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.938547][ T6205] ext4 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.953860][ T3394] IPVS: starting estimator thread 0... [ 91.981845][ T6215] bridge2: entered allmulticast mode [ 91.987978][ T6203] bond2: entered promiscuous mode [ 92.012103][ T6203] dummy0: left promiscuous mode [ 92.019552][ T6203] bond2: (slave dummy0): making interface the new active one [ 92.027014][ T6203] dummy0: entered promiscuous mode [ 92.033241][ T6203] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 92.055518][ T6203] bond2 (unregistering): left promiscuous mode [ 92.070952][ T6203] dummy0: left promiscuous mode [ 92.078733][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 92.088476][ T6203] bond2 (unregistering): (slave dummy0): Releasing active interface [ 92.099965][ T6203] bond2 (unregistering): Released all slaves [ 92.106249][ T6217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6217 comm=syz.3.532 [ 92.118701][ T6214] IPVS: using max 2736 ests per chain, 136800 per kthread [ 92.163358][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.538'. [ 92.177505][ T6225] loop4: detected capacity change from 0 to 128 [ 92.180441][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.538'. [ 92.194294][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.538'. [ 92.203708][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.538'. [ 92.224049][ T6225] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.238311][ T6225] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.309601][ T6227] loop1: detected capacity change from 0 to 128 [ 92.318677][ T6227] vfat: Unknown parameter '&޽-%H>*AU4{' [ 92.553009][ T6233] loop5: detected capacity change from 0 to 256 [ 92.569198][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.633276][ T6232] netlink: 72 bytes leftover after parsing attributes in process `syz.3.540'. [ 92.677979][ T6232] netlink: 72 bytes leftover after parsing attributes in process `syz.3.540'. [ 92.686954][ T3384] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.694595][ T3384] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.749335][ T6233] loop5: detected capacity change from 0 to 8192 [ 92.895638][ T6233] loop5: p1 < > p2 p4 < p5 > [ 92.900472][ T6233] loop5: partition table partially beyond EOD, truncated [ 93.066539][ T6248] program syz.5.541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.177187][ T6248] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 93.218624][ T6233] loop5: p1 start 134217728 is beyond EOD, truncated [ 93.271392][ T6233] loop5: p2 size 591360 extends beyond EOD, truncated [ 93.334201][ T6255] loop2: detected capacity change from 0 to 512 [ 93.388151][ T6253] loop1: detected capacity change from 0 to 4096 [ 93.452797][ T6255] ------------[ cut here ]------------ [ 93.458501][ T6255] EA inode 11 i_nlink=2 [ 93.458695][ T6255] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.2.549/6255 [ 93.476116][ T6255] Modules linked in: [ 93.481079][ T6255] CPU: 1 UID: 0 PID: 6255 Comm: syz.2.549 Tainted: G W syzkaller #0 PREEMPT(full) [ 93.493642][ T6255] Tainted: [W]=WARN [ 93.498452][ T6255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.510353][ T6255] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 93.518000][ T6255] Code: 34 4b 99 ff 4c 8d 2d 0d b4 5d 05 49 8d 7e 40 e8 84 df b5 ff 49 8b 6e 40 4c 89 e7 e8 b8 da b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 8f 9b dd 03 66 66 66 66 66 66 2e [ 93.538862][ T6255] RSP: 0018:ffffc90002587778 EFLAGS: 00010246 [ 93.545904][ T6255] RAX: ffff888115a84dc8 RBX: ffff88811b551328 RCX: ffffffff81c01408 [ 93.555230][ T6255] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dc800 [ 93.565361][ T6255] RBP: 000000000000000b R08: 000188811b5512db R09: 0000000000000000 [ 93.579362][ T6255] R10: ffffc900025876a8 R11: 0001c900025876a8 R12: ffff88811b5512d8 [ 93.589142][ T6255] R13: ffffffff871dc800 R14: ffff88811b551290 R15: 0000000000000001 [ 93.598412][ T6255] FS: 00007fe49b73f6c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 93.607872][ T6255] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.615412][ T6255] CR2: 0000000034747865 CR3: 000000011a238000 CR4: 00000000003506f0 [ 93.624892][ T6255] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.634183][ T6255] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 93.642493][ T6255] Call Trace: [ 93.646202][ T6255] [ 93.650335][ T6255] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 93.657922][ T6255] ? errseq_check+0x2c/0x50 [ 93.663391][ T6255] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 93.669832][ T6255] ? ext4_truncate+0x92b/0xb00 [ 93.674766][ T6255] ext4_evict_inode+0xa1f/0xd60 [ 93.680700][ T6255] ? __pfx_ext4_evict_inode+0x10/0x10 [ 93.686631][ T6255] evict+0x2af/0x510 [ 93.691341][ T6255] ? __dquot_initialize+0x146/0x7c0 [ 93.697481][ T6255] iput+0x41a/0x580 [ 93.701782][ T6255] ext4_process_orphan+0x1a9/0x1c0 [ 93.707672][ T6255] ext4_orphan_cleanup+0x6a8/0xa00 [ 93.713391][ T6255] ext4_fill_super+0x3408/0x37c0 [ 93.719021][ T6255] ? set_blocksize+0x14c/0x270 [ 93.726272][ T6255] ? setup_bdev_super+0x30e/0x370 [ 93.732633][ T6255] ? __pfx_ext4_fill_super+0x10/0x10 [ 93.738842][ T6255] get_tree_bdev_flags+0x291/0x300 [ 93.745565][ T6255] ? __pfx_ext4_fill_super+0x10/0x10 [ 93.751923][ T6255] get_tree_bdev+0x1f/0x30 [ 93.757013][ T6255] ext4_get_tree+0x1c/0x30 [ 93.762660][ T6255] vfs_get_tree+0x57/0x1d0 [ 93.768812][ T6255] do_new_mount+0x288/0x8d0 [ 93.774582][ T6255] path_mount+0x4d0/0xbc0 [ 93.779780][ T6255] __se_sys_mount+0x28c/0x2e0 [ 93.785552][ T6255] ? syscall_enter_audit+0x24/0xd0 [ 93.792051][ T6255] __x64_sys_mount+0x67/0x80 [ 93.797432][ T6255] x64_sys_call+0x2d61/0x3020 [ 93.803839][ T6255] do_syscall_64+0x12c/0x370 [ 93.808891][ T6255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.815513][ T6255] RIP: 0033:0x7fe49cceda0a [ 93.822253][ T6255] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.844762][ T6255] RSP: 002b:00007fe49b73ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.854030][ T6255] RAX: ffffffffffffffda RBX: 00007fe49b73eee0 RCX: 00007fe49cceda0a [ 93.862772][ T6255] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fe49b73eea0 [ 93.872436][ T6255] RBP: 00002000000009c0 R08: 00007fe49b73eee0 R09: 0000000000800718 [ 93.881170][ T6255] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 93.890712][ T6255] R13: 00007fe49b73eea0 R14: 000000000000048d R15: 0000200000000200 [ 93.899751][ T6255] [ 93.903712][ T6255] ---[ end trace 0000000000000000 ]--- [ 93.921892][ T6233] loop5: p5 size 591360 extends beyond EOD, truncated [ 93.949109][ T6258] loop4: detected capacity change from 0 to 512 [ 93.958401][ T6255] EXT4-fs (loop2): 1 orphan inode deleted [ 93.972323][ T6255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.064080][ T6253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.093663][ T6258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.112001][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.551'. [ 94.121039][ T6258] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.278798][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.039660][ T6269] serio: Serial port ttyS3 [ 95.212028][ T6277] syzkaller0: entered promiscuous mode [ 95.323580][ T6277] 0: reclassify loop, rule prio 0, protocol 800 [ 95.335305][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 95.350744][ T4089] udevd[4089]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 95.361998][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 95.407453][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'. [ 95.426856][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.543680][ T6275] bpf: Bad value for 'mode' [ 95.607855][ T6290] loop5: detected capacity change from 0 to 512 [ 95.621249][ T6290] EXT4-fs: Ignoring removed bh option [ 95.625440][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.644154][ T6290] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 95.727127][ T6290] EXT4-fs (loop5): 1 truncate cleaned up [ 95.738278][ T6297] loop1: detected capacity change from 0 to 512 [ 95.759970][ T6297] vfat: Unknown parameter '01777777777777777777777' [ 95.796156][ T6290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.809640][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 95.822030][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 96.369984][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.564'. [ 96.383328][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 96.383344][ T28] audit: type=1400 audit(1774413752.408:1737): avc: denied { create } for pid=6305 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.385893][ T6306] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 96.389553][ T28] audit: type=1400 audit(1774413752.408:1738): avc: denied { setopt } for pid=6305 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.490358][ T28] audit: type=1400 audit(1774413752.488:1739): avc: denied { bind } for pid=6303 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.567682][ T6308] EXT4-fs: dax option not supported [ 96.869917][ T28] audit: type=1400 audit(1774413752.878:1740): avc: denied { create } for pid=6313 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 97.301180][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.568'. [ 97.428317][ T6322] set_capacity_and_notify: 1 callbacks suppressed [ 97.428333][ T6322] loop2: detected capacity change from 0 to 256 [ 97.454891][ T6322] loop2: detected capacity change from 0 to 1024 [ 97.462789][ T6322] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 97.484613][ T6322] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 97.494911][ T6322] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: comm syz.2.569: inode #4294967295: comm syz.2.569: iget: illegal inode # [ 97.508927][ T6322] loop2: lost filesystem error report for type 5 error -117 [ 97.509024][ T6322] EXT4-fs (loop2): no journal found [ 97.516369][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 97.516385][ C0] EXT4-fs (loop2): initial error at time 1774413753: ext4_get_journal_inode:5863 [ 97.516419][ C0] EXT4-fs (loop2): last error at time 1774413753: ext4_get_journal_inode:5863 [ 97.546384][ T6322] EXT4-fs (loop2): can't get journal size [ 97.556606][ T6322] EXT4-fs (loop2): failed to initialize system zone (-22) [ 97.564222][ T6322] EXT4-fs (loop2): mount failed [ 97.574291][ T28] audit: type=1400 audit(1774413753.598:1741): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 97.817473][ T6341] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000 [ 97.901502][ T28] audit: type=1400 audit(1774413753.918:1742): avc: denied { write } for pid=6287 comm="syz.5.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.186092][ T6350] loop4: detected capacity change from 0 to 512 [ 98.211168][ T6350] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 98.381763][ T6350] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 98.534962][ T6350] loop4: detected capacity change from 0 to 1024 [ 98.569352][ T6350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.647408][ T28] audit: type=1404 audit(1774413754.668:1743): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 98.683538][ T4061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.695425][ T28] audit: type=1404 audit(1774413754.668:1744): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 98.711146][ T28] audit: type=1400 audit(1774413754.708:1745): avc: denied { unmount } for pid=4061 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 98.711240][ T6350] netlink: 220 bytes leftover after parsing attributes in process `syz.4.579'. [ 98.711268][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 98.731225][ T28] audit: type=1400 audit(1774413754.718:1746): avc: denied { read } for pid=6349 comm="syz.4.579" dev="nsfs" ino=4026532695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 98.855901][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.981389][ T6369] loop5: detected capacity change from 0 to 512 [ 99.008176][ T6371] loop4: detected capacity change from 0 to 512 [ 99.027367][ T6369] EXT4-fs: Ignoring removed bh option [ 99.045744][ T6371] EXT4-fs: Ignoring removed bh option [ 99.067120][ T6369] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 99.077487][ T6374] netlink: 'syz.1.584': attribute type 2 has an invalid length. [ 99.096057][ T6371] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 99.115253][ T6369] EXT4-fs (loop5): 1 truncate cleaned up [ 99.138438][ T6369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.155423][ T6371] EXT4-fs (loop4): 1 truncate cleaned up [ 99.166231][ T6371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.244115][ T6382] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 99.244115][ T6382] program syz.5.581 not setting count and/or reply_len properly [ 99.666643][ T6396] loop1: detected capacity change from 0 to 256 [ 99.938979][ T6397] loop1: detected capacity change from 0 to 1024 [ 99.951988][ T6397] EXT4-fs: Ignoring removed orlov option [ 99.959366][ T6397] ext4: Unknown parameter 'func' [ 100.647535][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.594'. [ 100.886364][ T6408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6408 comm=syz.1.595 [ 100.980317][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.034543][ T6410] loop1: detected capacity change from 0 to 512 [ 101.083310][ T6410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.139991][ T6410] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.182290][ T6410] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.071724][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 102.071740][ T28] audit: type=1400 audit(1774413758.088:1823): avc: denied { read write } for pid=6430 comm="syz.4.603" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 102.120804][ T4061] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.165060][ T28] audit: type=1400 audit(1774413758.088:1824): avc: denied { open } for pid=6430 comm="syz.4.603" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 102.454617][ T28] audit: type=1400 audit(1774413758.478:1825): avc: denied { name_bind } for pid=6443 comm="syz.4.608" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 102.514633][ T28] audit: type=1400 audit(1774413758.478:1826): avc: denied { node_bind } for pid=6443 comm="syz.4.608" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 102.584219][ T28] audit: type=1400 audit(1774413758.608:1827): avc: denied { ioctl } for pid=6449 comm="syz.4.612" path="net:[4026532695]" dev="nsfs" ino=4026532695 ioctlcmd=0x2408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 102.625437][ T28] audit: type=1400 audit(1774413758.648:1828): avc: denied { ioctl } for pid=6450 comm="syz.3.611" path="socket:[13781]" dev="sockfs" ino=13781 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.651646][ T28] audit: type=1400 audit(1774413758.648:1829): avc: denied { bind } for pid=6450 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.699260][ T28] audit: type=1400 audit(1774413758.648:1830): avc: denied { name_bind } for pid=6450 comm="syz.3.611" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 102.724322][ T28] audit: type=1400 audit(1774413758.648:1831): avc: denied { node_bind } for pid=6450 comm="syz.3.611" saddr=::ffff:10.1.1.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 102.747968][ T28] audit: type=1400 audit(1774413758.648:1832): avc: denied { accept } for pid=6450 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.855301][ T6456] SELinux: failed to load policy [ 103.083444][ T6479] netlink: 'syz.4.620': attribute type 13 has an invalid length. [ 103.091224][ T6479] netlink: 'syz.4.620': attribute type 17 has an invalid length. [ 103.094158][ T6470] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 103.111296][ T6481] loop1: detected capacity change from 0 to 512 [ 103.122792][ T6479] 0XD: left allmulticast mode [ 103.148325][ T6481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.172958][ T6481] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.273150][ T6479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.337521][ T6479] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.388870][ T6501] loop5: detected capacity change from 0 to 512 [ 103.417829][ T6502] serio: Serial port ttyS3 [ 103.433081][ T6501] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 103.507399][ T6479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.655590][ T6501] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 103.891749][ T6497] SELinux: failed to load policy [ 103.907870][ T6498] ================================================================== [ 103.915984][ T6498] BUG: KCSAN: data-race in hash_ip4_add / hash_ip4_head [ 103.922970][ T6498] [ 103.925328][ T6498] read-write to 0xffff88810e478c19 of 1 bytes by task 6489 on cpu 1: [ 103.933415][ T6498] hash_ip4_add+0x703/0xf60 [ 103.937969][ T6498] hash_ip4_uadt+0x452/0x500 [ 103.942667][ T6498] call_ad+0x231/0x640 [ 103.946750][ T6498] ip_set_ad+0x5c0/0x690 [ 103.951094][ T6498] ip_set_uadd+0x41/0x50 [ 103.955482][ T6498] nfnetlink_rcv_msg+0x509/0x5d0 [ 103.960442][ T6498] netlink_rcv_skb+0x123/0x220 [ 103.965233][ T6498] nfnetlink_rcv+0x167/0x1720 [ 103.969939][ T6498] netlink_unicast+0x5c0/0x690 [ 103.974729][ T6498] netlink_sendmsg+0x5c8/0x6f0 [ 103.979515][ T6498] ____sys_sendmsg+0x563/0x5b0 [ 103.984292][ T6498] ___sys_sendmsg+0x195/0x1e0 [ 103.988988][ T6498] __x64_sys_sendmsg+0xd4/0x160 [ 103.993861][ T6498] x64_sys_call+0x194c/0x3020 [ 103.998556][ T6498] do_syscall_64+0x12c/0x370 [ 104.003178][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.009109][ T6498] [ 104.011446][ T6498] read to 0xffff88810e478c19 of 1 bytes by task 6498 on cpu 0: [ 104.019002][ T6498] hash_ip4_head+0x283/0x950 [ 104.023624][ T6498] ip_set_dump_do+0xa34/0xb00 [ 104.028318][ T6498] netlink_dump+0x455/0x8a0 [ 104.032851][ T6498] netlink_recvmsg+0x420/0x550 [ 104.037678][ T6498] sock_recvmsg+0xf5/0x120 [ 104.042120][ T6498] ____sys_recvmsg+0xf5/0x280 [ 104.046827][ T6498] ___sys_recvmsg+0x11f/0x3b0 [ 104.051546][ T6498] __x64_sys_recvmsg+0xd1/0x160 [ 104.056432][ T6498] x64_sys_call+0x2b1a/0x3020 [ 104.061137][ T6498] do_syscall_64+0x12c/0x370 [ 104.065750][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.071660][ T6498] [ 104.074003][ T6498] value changed: 0x01 -> 0x02 [ 104.078685][ T6498] [ 104.081027][ T6498] Reported by Kernel Concurrency Sanitizer on: [ 104.087195][ T6498] CPU: 0 UID: 0 PID: 6498 Comm: syz.4.620 Tainted: G W syzkaller #0 PREEMPT(full) [ 104.098067][ T6498] Tainted: [W]=WARN [ 104.101917][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 104.111984][ T6498] ================================================================== [ 104.208231][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.300459][ T6489] Set syz1 is full, maxelem 65536 reached