last executing test programs: 3m16.304441614s ago: executing program 0 (id=371): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x800008, &(0x7f0000000ac0)={[{@dmode={'dmode', 0x3d, 0x8000}}, {@map_off}, {}, {@check_relaxed}, {@check_relaxed}, {@hide}]}, 0x5, 0x581, &(0x7f0000000380)="$eJzs3M9u3MYZAPCh/sSKWqgFgsaO4gPj5OAeonBXtQwhl24pSmKyu1yQVCCfiqCWA6NSWjQp0PhS+JK2QPsQQW99gp5y6PsEvfeigstd2ZYsRU1kKQ1+P8CeEfmR8w2xmIFW+BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBClG0nSiUI/H+7sxscthRDaXrpRFoOj44eHxyOn9/vnM80Z44YQNf/CwkK40R668cqT0z9p/rsVrrc/XQ8LTbMQHv3g1WvhlbmZ6fUnEv52fn403XP65LNHv/5wf3/vdxecyNV66dyRW9kwr4p80NvK4rwq4vW1teSd7c0q3sz7WXWvqrNBnJZZry7K+Hb607izvr4aZyv3ip3h1kavn00P3n27myRr8Xsro6xXVsXwnfdWqnQ77/fz4dY4pjndxNxtPojv53VcZ71BHD94uL+3Osll7rQkm6DOycOzk4/ak6Du1023m3S7nU6321m7s37nbpLMnTiQHBNORFz4h5b/Mxe4esO3czjZ/wEAAIDvr2j8HXvz+//8+Hv4KGzm/Sw5JfraJWcHAAAAXITxX/6vN818mA/hRoja3///eNWJAQAAABfmz09q7MYFUeMaux+/e1Rj93KoRteiL/8dynI+ejzafSs66DVxvYNJ/dTs8TvWm8vR0uQm42ZtbvJTmt2MXmuDXptGfzVpHjyv1u+pPKLoAhIIfw3Lbczy/ba9Pz3TjrK4mfezlbTov9sJvd7STJ3t1r//+OEfwnj6fxkOlqLw4OH+3sqvfrN/f7T78mTExweTAooTdRRn5PLpUd3jyRn/60ftqSxpx305tOMmT89/po2Z+R/G/Dy83sa8vti2i8/Of6GZf2fltNkvtll0RrtvLR08Pmvms2dncbONunn7zaZ58/Zzsugez+LasSy642cxyeIbPYtzZLF61rN4KYSwemoWPzxXFgBX5cEZu1BbY39i3z3XWjs9265yl7O7fx7eaGPeWB4vrHPLz1nRk6/b3ZKnV/RvsK//I9xqY25Ng0/bY5tx//bMrhodfNFc8MWp41b9btQ8wtlPD34bXv3ks0dvPzz48KO9j/Y+7nZX15KfJcmdbphvbhfaJrH3APAcWflVtFj/KSrLfPTLzvp6p1dvZ3FZpO/HZb6xlcX5sM7KdLs33MriUVnURVr0m84H+UZWxdXOaFSUdbxZlPGoqPLd8Ztf/nPYvvqlyga9YZ2n1aif9aosToth3UvreCOv0ni084t+Xm1n5fjiapSl+Wae9uq8GMZVsVOm2UocV1n2VGC+kQ3rfDNvusN4VOaDXnkv/qDo7wyyeCOr0jIf1UV7w+lY+XCzKAfj266MZ/zlVT9yALhyR2+we4Gdq54jAPAsuzQAAAAAAAAAAAAAAHz3nVa39/cXWhF4Vmea2dWM/kI6M5cynYXvwEy/B53pm6vOedXh7OUU0V565+rWJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4zX8DAAD//68kmbc=") socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@nouid32}, {@nodioread_nolock}, {@dax_inode}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f0000000b40)="$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") ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0x6, 0x2e}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x1, @perf_config_ext={0x2, 0x3}, 0x9000, 0xa88, 0x8409, 0x7, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x102c}}, 0x2404c002) 3m16.172114266s ago: executing program 0 (id=374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x84000000, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x4040082) 3m16.12891606s ago: executing program 0 (id=376): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, 0x0, 0x20000001) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020d000014000000000000000030000005000600000000000a00000000000000fc01000000000000000000000000000009000000000000000800120000000200bb6b6e000000000006003200000000000000000000000000fe880000000000000000000000000001fc01000000000000000000000000000005000500000000000a"], 0xa0}}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1) 3m16.071443115s ago: executing program 0 (id=379): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x101000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24040090}, 0x80) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x129) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0xfffffffd, 0x0, 0x3) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x1f0, 0x0, 0x148, 0x0, 0x148, 0x4b0, 0x240, 0x240, 0x4b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'vcan0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x50}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x3, 0x2}}}, {{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'vlan1\x00', 'pimreg1\x00', {}, {}, 0x84, 0x0, 0x60}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 0x0, 0xd, [0x19, 0x37, 0x11, 0x2, 0x3, 0x30, 0x30, 0x18, 0x1f, 0x27, 0x8, 0x4, 0xb, 0x11, 0x1c, 0x2b], 0x1, 0x200, 0x8ee}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x6, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r5, 0xf507, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2, 0xffffffff, r3}) 3m15.475815407s ago: executing program 0 (id=386): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c}) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = pidfd_getfd(r0, r0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x53, &(0x7f00000007c0), 0x4) setns(r1, 0x64000080) r3 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x300}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0xfffffffffffffe4d}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket(0x40000000015, 0x805, 0x0) r6 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) write$vga_arbiter(r1, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) sendmmsg$unix(r8, 0x0, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x5}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ptrace$ARCH_SHSTK_ENABLE(0x1e, r6, 0x0, 0x5001) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe) getsockopt(r5, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) 3m15.133322957s ago: executing program 0 (id=396): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r1, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4089, 0xff9}, {&(0x7f000000bcc0)=""/63, 0x3f}], 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002a40)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd04, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0x2}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r7 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x498, 0x0, 0x0, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/212, 0xd4}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m15.111999939s ago: executing program 32 (id=396): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r1, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4089, 0xff9}, {&(0x7f000000bcc0)=""/63, 0x3f}], 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002a40)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd04, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0x2}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r7 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x498, 0x0, 0x0, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/212, 0xd4}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m42.688191s ago: executing program 3 (id=875): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000039000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m42.623843955s ago: executing program 3 (id=877): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000100)='=', 0xfffffd4a, 0x4fed3) r1 = io_uring_setup(0x493b, &(0x7f0000000500)={0x0, 0x747b, 0x80, 0x1, 0x2b0}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000002c0), &(0x7f0000000480), 0x8, 0xf, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r3, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 2m41.605892035s ago: executing program 3 (id=889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) socket$kcm(0x10, 0x2, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x89, 0x4, 0x0, @private=0xa010100, @local}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900350200000000", @ANYRES32, @ANYBLOB="0000000000000000018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x4, 0x4, 0x1000, 0x0, r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a8, &(0x7f0000000500)="$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") r6 = creat(0x0, 0x2) write(r6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000180), &(0x7f00000002c0)=r4}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000480)={{0x0, 0x1, 0x4, 0x1, 0x8}}) 2m40.782182297s ago: executing program 3 (id=895): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") io_uring_enter(0xffffffffffffffff, 0x7120, 0xf527, 0x8, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) sched_setscheduler(r0, 0x3, &(0x7f00000000c0)=0x7) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x7fff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$char_usb(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCL_SETSEL(r3, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0xffff, 0x880}}) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setpriority(0x1, r0, 0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r4, 0xec776000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r5) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) ptrace$peeksig(0x4209, r5, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) 2m39.897105665s ago: executing program 3 (id=914): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x63ba000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000004}, 0x12125, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x8, 0x4000, 0xff) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0xbc, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x92, 0x7, 0x1, 0x0, "643abc65d9dd0dbb844690323a475e471f1fc0aa35517195033219ca629a367f328719a16627e3a9a96aa7ad23685565c3cd5839754ac13f0921ca80cd223fbfc093193850388fe6098bf0381a6fb79e69c756ede0451ecbbc27b5d2bf0fe9e8570b5a9cdab2c2ee3e016f597cd2abbaead46ccd98f7df8c02557ca5f5162825343827014d56fc87fe6dd150293c"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xe4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x3, 0x337}) 2m39.643755887s ago: executing program 3 (id=924): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="020b00060d00000003000000fdffffff02000a0004000000010001000000000002000100000004d20000000c02000060070019"], 0x68}, 0x1, 0x7}, 0x0) 2m39.638656508s ago: executing program 33 (id=924): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="020b00060d00000003000000fdffffff02000a0004000000010001000000000002000100000004d20000000c02000060070019"], 0x68}, 0x1, 0x7}, 0x0) 1m52.544345419s ago: executing program 1 (id=1486): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3, 0x300}}, 0x20) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) shutdown(r1, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x4, r2, 'id1\x00'}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000142, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000080)=0x80000000, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x6}, 0x1c) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x10, 0x803, 0x2) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1m52.252283394s ago: executing program 1 (id=1493): mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$tipc(0x20, 0x1, 0x0, &(0x7f0000000600)) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0xfff], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x20000000) r4 = socket(0x18, 0x80000, 0x80000001) r5 = socket$unix(0x1, 0x5, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x2, 0xffff}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[], 0x94, 0x2) 1m51.890198976s ago: executing program 1 (id=1500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0xffffffff, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x4040082) 1m51.833796981s ago: executing program 1 (id=1501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_pts(0xffffffffffffffff, 0x200403) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000d40)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0xc001) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020026bd7000fcdbdf250b00000040000280080006000703000006000f000f00000014000100ff020000000000000000f70000000001080008000600000008000300000000000800070007000000"], 0x54}, 0x1, 0x0, 0x0, 0xc040010}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000980)=ANY=[], 0x8c8}, 0x1, 0x0, 0x0, 0x40880}, 0x8840) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000005c0)) fcntl$lock(r0, 0x5, &(0x7f0000000340)={0x2, 0x3, 0x5f94, 0xc97}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0x10, &(0x7f0000000b40)=ANY=[@ANYBLOB="05620200000000001828000028092bf59a2c68058a3830df36be55d4d3151e641e0f36087e4b4792498293393d0d1f16dfc893de745e496b77e773c71892ceda5e57bd891193854b69891c27cf9b2e3f7362c6283ea3918a18a66e77ac33532b5e79663b85a3d356d99990977d7c37bdb7fb6d4aef55cf14b4ca8761fe571b20ca90bb2ff262bcbbb00f5e846241548e279e4131252f000bb5c8cf509b50cc7d7de3a5ae3d6db57ede59a357f5aecb847503", @ANYRES32=r2, @ANYBLOB="0000000002000000b7080000000000007b8af8ff00000000b7080000ff0700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000800)='GPL\x00', 0x9, 0x94, &(0x7f0000000880)=""/148, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x27, r5, 0x8, &(0x7f0000000940)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x8}, 0x10, 0x0, r2, 0x7, &(0x7f00000009c0)=[r2, r5, r2, r5, r2, 0xffffffffffffffff, r5, r2, r2], &(0x7f0000000a00)=[{0x3, 0x4, 0x6, 0xb}, {0x1, 0x4, 0x3, 0x3}, {0x0, 0x4, 0xd, 0xa}, {0x5, 0x5, 0xe}, {0x5, 0x4, 0xe, 0xa}, {0x0, 0x5, 0xc, 0x9}, {0x3, 0x3, 0x4, 0x4}], 0x10, 0x3}, 0x94) syz_clone(0xc2164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) 1m50.466480381s ago: executing program 1 (id=1508): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r0, 0x4000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004002c4e"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$FITRIM(r1, 0x40e8662e, &(0x7f0000000300)={0xffa1, 0xd000000}) 1m49.283470805s ago: executing program 1 (id=1520): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x2, 0x0, "a30b3b28af4d2f246a016542daa8456e6c47a34048ff2ece1e75f1fc0100f41e4de62a61093825abbc8a1dd888935ace522fa788000000000033035551502f00000000000000000000000500"}, 0xd8) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1m49.257191778s ago: executing program 34 (id=1520): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x2, 0x0, "a30b3b28af4d2f246a016542daa8456e6c47a34048ff2ece1e75f1fc0100f41e4de62a61093825abbc8a1dd888935ace522fa788000000000033035551502f00000000000000000000000500"}, 0xd8) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1m20.424433533s ago: executing program 4 (id=1889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe8000003a000000", @ANYRESDEC], 0xffdd) 1m19.707905306s ago: executing program 4 (id=1897): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x7, 0x0, 0xffffffff}, 0x0) 1m19.667013259s ago: executing program 4 (id=1899): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {0x2900}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) 1m19.442863919s ago: executing program 4 (id=1903): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x26, 0x6}, 0x1c) recvmmsg$unix(r1, &(0x7f0000004180)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001dc0)=""/69, 0x45}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$eJzs3MtvG8UfAPCv7Th9/+JfKY+WFkILouKRNOmDHrgUgcQBJCQ4FHEKSVqVug1qgkSrCloO5YgqcUcckfgLuFAuCDghcUICiSNCqlAvLZyM1t5NXcdO7MSxA/58JCcznlnNfHd37PGs1wEMrNHkTy5ie0T8EhEjtey9FUZr/+7cujz9163L07moVF7/M1etd/vW5emsarbdtlqmUlmm3WtvRUyVy7MX0vz4wrl3x+cvXnr2zLmp07OnZ89PHj9+5PC+4WOTR7sSZxLX7T0fzO3d/fKb11+dPnn97e+/TPq7PS2vj6NbRmt7t6knut1Yn+2oS+eG+tgROlKIiORwFavjfyQKsWWxbCRe+qivnQPWVaWSr2xqXXylAvyHJRN1YBBlb/TJ59/s0aOpx4Zw80QsrmPcSR+1kqHIp3WK6Wek9TAaESev/P1Z8oh1WocAAKh340REPNNs/pePB+rq/S+9hlKKiP9HxM6IuC8idkXE/RHVug9GxEMdtt94hWTp/KcysqrA2pTM/55Pr23dO//LZn9RKqS5HdX4i7lTZ8qzh9J9cjCKm5L8xDJtfPPiT5+0Kquf/yWPpP1sLpj244+hhgW6mamFqbXEXO/m1Yg9Q83izy3OeZP58e6I2LPKNs489cXeVmWlFeNfRhcm5ZXPI56sHf8r0RB/Jtfy+uTEc8cmj45vjvLsofHsrFjqhx+vvdaq/ZWP//q6eaMSWxvO/4bdWsptjpi/eOls9XrtfIcN/Bxx7dePW36mWe35P5x7o5oeTp97f2ph4cJExHDulaXPT97dNstn9ZPz/+CB5uN/Z7pNcvwfjojkJN4XEY9ExKNp3x+LiP0RcWCZXfDdC4+/03n8y6zKd1ES/0zT17/F87+UpO4e/84ThbPfftV5/Imt6fE/Us0dTLdp5/Wv3Q6udf8BAADAv0G++h34XH5sMZ3Pj43VvsO/K7bmy3PzC0+fmnvv/Eztu/KlKOazla6RuvXQiXQtL8tPNuQPp+vGnxa2VPNj03PlmX4HDwNuW4vxn/i9UPv/W197CKwr92vB4DL+YXAZ/zC4jH8YXMY/DK5m4//DPvQD6L0V3v+39KofQO+Z/8PgMv5hcK00/vf35l5koLda3hufX9Mt/xJ9Snw9vLbfamg/EfkNEvIGTRTaqHM1HYW1Z4rRtPJQ2z9mcU8ie1NfufKmpkV9fFECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoon8CAAD///T43is=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYBLOB], 0x50) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x390, 0x2e8, 0x218, 0xfeffffff, 0x2e8, 0xf0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x2e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x4, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000000000000018dd5bf294944ecea000000040000000700000000613000"], 0x0, 0x34, 0x0, 0x1, 0x1}, 0x28) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x150, 0x1170, 0x1170, 0x150, 0x1170, 0x218, 0x1398, 0x1398, 0x218, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0xef4, 0x0, 0x4, 0x4}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'macvlan1\x00', {0xff}}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000080)) mq_timedreceive(r7, &(0x7f00000000c0)=""/72, 0x48, 0xfd, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) getrlimit(0x5, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) 1m17.171995499s ago: executing program 4 (id=1928): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r0, 0x0) r1 = accept4$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffeaf, 0x80000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r1, &(0x7f0000000100)='\x00', 0x200000, &(0x7f0000000140)={@align, {0xffff, 0x6c, 0x5d, 0x2}}, 0x0, &(0x7f0000000180), &(0x7f0000000240)=0x90}) 1m17.140948221s ago: executing program 4 (id=1929): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0x6, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100180000009500000000000000b509000002000000639a04fe00000000b509000006000000c39a04fea0000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES16=r1, @ANYBLOB="0000000000000000b70000bf98000000fd5b17a35cb8037100000056080000000000008500000007000000b700000000220000950004000016d7284d4da3b4100f540000000000000000"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x28, 0x33, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0x7, 0x0, 0x0, 0x1, [@generic="00101e"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="88"]}]}, 0x28}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, 0x0, 0x50) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}, 0x1, 0x0, 0xffffffea}, 0x0) 1m2.114227303s ago: executing program 35 (id=1929): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0x6, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100180000009500000000000000b509000002000000639a04fe00000000b509000006000000c39a04fea0000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES16=r1, @ANYBLOB="0000000000000000b70000bf98000000fd5b17a35cb8037100000056080000000000008500000007000000b700000000220000950004000016d7284d4da3b4100f540000000000000000"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x28, 0x33, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0x7, 0x0, 0x0, 0x1, [@generic="00101e"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="88"]}]}, 0x28}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, 0x0, 0x50) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}, 0x1, 0x0, 0xffffffea}, 0x0) 6.793031922s ago: executing program 5 (id=2704): timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) 6.712361549s ago: executing program 5 (id=2706): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 6.712111559s ago: executing program 5 (id=2708): setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xfffffffffffffffc, 0x0, 0x8) tkill(0x0, 0x7) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r4}) 5.928423028s ago: executing program 2 (id=2731): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0xc258883f3d31cfb, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 5.928284358s ago: executing program 2 (id=2732): getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x569, &(0x7f0000001f80)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) 5.90075219s ago: executing program 2 (id=2733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffd5f, &(0x7f00000003c0)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x2, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 5.863752784s ago: executing program 5 (id=2734): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_hsr\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x4b, 0x37, "04000787b600eca6aa0870471829a00700e5cde91eb86df1497941f89ca551d1e71f00516683be000008005f19bf3852a3b32306f179db"}}) 5.776431671s ago: executing program 5 (id=2735): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) brk(0x600000000000) mlockall(0x3) semtimedop(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.224472539s ago: executing program 2 (id=2739): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$TCFLSH(r0, 0x4b63, 0x4) 4.76443458s ago: executing program 7 (id=2744): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 4.452325888s ago: executing program 5 (id=2746): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000)=0x6, 0x4) 4.08732901s ago: executing program 7 (id=2749): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) recvmmsg(r2, &(0x7f000000e280), 0x58a, 0x42, 0x0) r3 = timerfd_create(0x7, 0x800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, 0x0, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20008815}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) timerfd_settime(r3, 0x3, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1f82, 0x0, 0x0, 0x0, 0x0) 3.724437662s ago: executing program 2 (id=2752): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x40000002]}}) 3.489701363s ago: executing program 6 (id=2754): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 2.644363867s ago: executing program 6 (id=2755): r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.644142787s ago: executing program 6 (id=2756): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400010d2bbd70000200000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.61003121s ago: executing program 6 (id=2757): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 2.582553012s ago: executing program 2 (id=2758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x17, &(0x7f0000000400)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594e70fa55360", 0x14}], 0x1}, 0x0) 2.49626537s ago: executing program 6 (id=2759): io_setup(0x7, &(0x7f0000000280)=0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1b7b, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r5, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x2) connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r5, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x9, 0x100}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r6}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, 0x0, &(0x7f0000000880)=r6, 0x1000000}, 0x20) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffc98}]) socket$inet6_udp(0xa, 0x2, 0x0) 1.273255778s ago: executing program 6 (id=2764): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xfffffffb}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000002a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002800000000ff84"], 0x0) 1.273047628s ago: executing program 8 (id=2765): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5IHrjUg5I/IhADRIHoxlPUje1m6hJ7Gz8+UijeW/e1N/vazrvxS+NXwBD62pE7EbEWETcjojp7HouO+KT9pHc93Tv/tL+3v2lXLRan/0zl7Yn16LjzySuZK9ZjIgffS/ip7kX4za2d9YWq9XKZlafbdY2ZhvbOzdWa4srlZXKerm8ML8w99HND8tn1td3amNZ6atP/rj7rZ8naU1lVzr7cZbaXS8cxkmMRsQPziPYAIxk/RkbdCK8knxEvBkR76bP/3SMpF9NAOAya7WmozXdWQcALrt8ugaWy5eytYCpyOdLpfYa3lsxma/WG83rd+pb68vttbKZKOTvrFYrc9la4UwUckl9Pi0/q5eP1G9GxBsR8cvxibReWqpXlwf5jQ8ADLErR+b//4y3538A4JIrDjoBAKDvzP8AMHzM/wAwfMz/ADB82vP/xKDTAAD6yPt/ABg+5n8AGCo//PTT5GjtZ59/vXx3e2utfvfGcqWxVqptLZWW6psbpZV6fSX9zJ7aca9Xrdc35j+IrXsz395oNGcb2zu3avWt9eat9HO9b1UK6V27fegZANDLG+88epxLZuSPJ9IjOvZyKAw0M+C85QedADAwI4NOABgYu33B8DrFe3zLA3BJdNmi9znFbr8g1Gq1WueXEnDOrn3J+j8Mq471f/8LGIaM9X8YXtb/YXi1WrmT7vkfJ70RALjYrPEDPX7+/2Z2/l32w4GfLB+94+F5ZgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX28H+v6VsL/CpyOdLpYjXImImCrk7q9XKXES8HhF/Hi+MJ/X5AecMAJxW/m+5bP+va9PvTz3X9PaVw+JYRPzs15/96t5is7n5p4ix3L/GD643H2bXy/3PHgA43sE8nZ473sg/3bu/dHD0M5+/fzciiu34+3tjsX8YfzRG03MxChEx+e9cVm/LdaxdnMbug4j4Yrf+52IqXQNp73x6NH4S+7W+xs8/Fz+ftrXPyd/FF84gFxg2j5Lx55Nuz18+rqbn7s9/MR2hTi8b/5KXWtpPx8Bn8Q/Gv5Ee49/Vk8b44A/fb5cmXmx7EPHl0YiD2Psd489B/FyP+O+fMP5fvvL2u73aWr+JuBbd43fGmm3WNmYb2zs3VmuLK5WVynq5vDC/MPfRzQ/Ls+ka9Wzv2eAfH19/vVdb0v/JHvGLx/T/6yfs/2//d/vHX3tJ/G++1y1+Pt56SfxkTvzGCeMvTv6+2Kstib/co//Hff2vnzD+k7/uvLBtOAAwOI3tnbXFarWy+TkqPE6+pxl8Ggr9LyT/ZC9AGl0L3+lXrLHo3vSL99rP9JGmVuuVYvUaMc5i1Q24CA4f+oj476CTAQAAAAAAAAAAAAAAuurHbywNuo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcXv8PAAD//+a4zis=") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) creat(&(0x7f0000000580)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@multicast2, 0x4d2, 0x32}, @in6=@loopback, {0x0, 0x8000}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2, 0x3dce6aa0}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e25, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0x8, 0x81, 0x9, 0x40}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x0) 953.197756ms ago: executing program 8 (id=2766): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 828.487697ms ago: executing program 8 (id=2767): r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 825.952857ms ago: executing program 8 (id=2768): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x40000002]}}) 773.878382ms ago: executing program 8 (id=2769): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 725.114416ms ago: executing program 8 (id=2770): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r5}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000280)) 564.43879ms ago: executing program 7 (id=2771): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000340)={0x3c, 0x1d, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x58, {0x2, 0x14, 0xc, 0xfffe, [0x45, 0x6, 0xe, 0x9, 0x2, 0x0, 0x400000000000000, 0x2, 0x1, 0x67d]}}, @ra={0x5, 0x2, 0xfffd}, @pad1, @generic={0x81, 0x82, "3c40cb8b126a122837f96d2d6ea8443ef3440a030428253302cec6ca8239996795694159df4c8cbb5ba87d37a77e9636e58f97e704841571425378dd160e177be4f7c03348469ba540a5537ac59fde5715370fd57ae6593af927217890acca9c2ff2f37b5514402d46ee35d97ba5e7382b50a636352345f454ee1b80d22c97211e90"}]}, 0xf0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) 540.199302ms ago: executing program 7 (id=2772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() iopl(0x9) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) write$sndseq(r2, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick=0x4, {}, {}, @raw32={[0x0, 0x8]}}], 0x1c) 90.253732ms ago: executing program 7 (id=2773): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x71, {0x40, 0x4}, {}, @raw32={[0x0, 0x8]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00', 0xffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=2774): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) kernel console output (not intermixed with test programs): 00000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.397045][ T9976] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 193.418562][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.509705][ T9991] loop5: detected capacity change from 0 to 256 [ 193.516542][ T9991] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 193.536676][ T9989] loop6: detected capacity change from 0 to 128 [ 193.565297][ T9991] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.682542][ T9995] loop5: detected capacity change from 0 to 8192 [ 193.755219][ T30] bio_check_eod: 68 callbacks suppressed [ 193.755237][ T30] kworker/u8:1: attempt to access beyond end of device [ 193.755237][ T30] loop6: rw=1, sector=153, nr_sectors = 8 limit=128 [ 193.774842][ T30] kworker/u8:1: attempt to access beyond end of device [ 193.774842][ T30] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 193.818575][ T30] kworker/u8:1: attempt to access beyond end of device [ 193.818575][ T30] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 193.840159][ T30] kworker/u8:1: attempt to access beyond end of device [ 193.840159][ T30] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 193.854742][ T9998] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2042'. [ 193.855484][ T30] kworker/u8:1: attempt to access beyond end of device [ 193.855484][ T30] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 193.878702][ T30] kworker/u8:1: attempt to access beyond end of device [ 193.878702][ T30] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 193.892464][ T30] kworker/u8:1: attempt to access beyond end of device [ 193.892464][ T30] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 193.915573][ T30] kworker/u8:1: attempt to access beyond end of device [ 193.915573][ T30] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 193.929604][ T30] kworker/u8:1: attempt to access beyond end of device [ 193.929604][ T30] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 193.943586][ T30] kworker/u8:1: attempt to access beyond end of device [ 193.943586][ T30] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 195.003606][T10023] loop5: detected capacity change from 0 to 128 [ 195.011659][T10023] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.2044'. [ 195.020831][T10023] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.2044'. [ 195.082046][T10024] vhci_hcd vhci_hcd.4: invalid port number 254 [ 195.088239][T10024] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 195.572262][T10061] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.2053'. [ 195.583262][T10061] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2053'. [ 195.645128][T10065] loop5: detected capacity change from 0 to 1024 [ 195.667754][T10067] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2057'. [ 195.689755][T10065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.820703][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 195.830851][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 195.842047][T10071] netlink: 'syz.2.2057': attribute type 14 has an invalid length. [ 195.843356][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.980848][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2058'. [ 196.008838][T10076] veth1_macvtap: left promiscuous mode [ 196.039887][T10077] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.069586][T10077] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.099047][ T8312] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.143682][T10084] EXT4-fs: Ignoring removed nobh option [ 196.158348][T10084] EXT4-fs: inline encryption not supported [ 196.250104][T10084] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.273656][T10084] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz.7.2060: deleted inode referenced: 15 [ 196.285342][T10084] EXT4-fs (loop7): Remounting filesystem read-only [ 196.320915][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 196.320953][ T28] audit: type=1400 audit(1771868766.503:3001): avc: denied { read } for pid=10083 comm="syz.7.2060" dev="nsfs" ino=4026532376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 196.383080][T10092] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.2061'. [ 196.392335][T10092] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.2061'. [ 196.437283][T10094] vhci_hcd vhci_hcd.4: invalid port number 254 [ 196.443564][T10094] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 196.497893][ T28] audit: type=1400 audit(1771868766.533:3002): avc: denied { open } for pid=10083 comm="syz.7.2060" path="net:[4026532376]" dev="nsfs" ino=4026532376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 196.535850][ T8312] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.661352][ T28] audit: type=1400 audit(1771868766.533:3003): avc: denied { create } for pid=10083 comm="syz.7.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 196.798924][ T28] audit: type=1400 audit(1771868766.553:3004): avc: denied { ioctl } for pid=10083 comm="syz.7.2060" path="socket:[30144]" dev="sockfs" ino=30144 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 196.842377][ T28] audit: type=1400 audit(1771868766.563:3005): avc: denied { create } for pid=10085 comm="syz.2.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 196.886837][ T28] audit: type=1400 audit(1771868766.563:3006): avc: denied { write } for pid=10085 comm="syz.2.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 196.912740][ T28] audit: type=1400 audit(1771868766.823:3007): avc: denied { create } for pid=10095 comm="syz.6.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 196.934274][ T28] audit: type=1400 audit(1771868767.023:3008): avc: denied { read write } for pid=10093 comm="syz.5.2063" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 196.958347][T10104] set_capacity_and_notify: 2 callbacks suppressed [ 196.958362][T10104] loop5: detected capacity change from 0 to 128 [ 196.974621][ T28] audit: type=1400 audit(1771868767.023:3009): avc: denied { open } for pid=10093 comm="syz.5.2063" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 197.001810][ T28] audit: type=1400 audit(1771868767.023:3010): avc: denied { ioctl } for pid=10093 comm="syz.5.2063" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 197.130316][T10106] syzkaller0: entered promiscuous mode [ 197.151466][T10106] syzkaller0: entered allmulticast mode [ 197.290896][T10112] loop5: detected capacity change from 0 to 8192 [ 197.308941][T10117] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.327977][ T3309] loop5: p1 p3 p4[EZD] [ 197.332398][ T3309] loop5: p1 start 262144 is beyond EOD, truncated [ 197.340799][ T3309] loop5: p3 start 331781 is beyond EOD, truncated [ 197.347489][ T3309] loop5: p4 size 197376 extends beyond EOD, truncated [ 197.358518][T10112] loop5: p1 p3 p4[EZD] [ 197.363321][T10112] loop5: p1 start 262144 is beyond EOD, truncated [ 197.370013][T10112] loop5: p3 start 331781 is beyond EOD, truncated [ 197.376734][T10112] loop5: p4 size 197376 extends beyond EOD, truncated [ 197.384046][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2071'. [ 197.527363][T10123] FAULT_INJECTION: forcing a failure. [ 197.527363][T10123] name failslab, interval 1, probability 0, space 0, times 0 [ 197.562544][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 197.590721][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2075'. [ 197.611923][T10123] CPU: 1 UID: 0 PID: 10123 Comm: syz.2.2072 Tainted: G W syzkaller #0 PREEMPT(full) [ 197.611978][T10123] Tainted: [W]=WARN [ 197.611986][T10123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.611999][T10123] Call Trace: [ 197.612004][T10123] [ 197.612011][T10123] __dump_stack+0x1d/0x30 [ 197.612082][T10123] dump_stack_lvl+0x95/0xd0 [ 197.612110][T10123] dump_stack+0x15/0x1b [ 197.612169][T10123] should_fail_ex+0x263/0x280 [ 197.612267][T10123] should_failslab+0x8c/0xb0 [ 197.612293][T10123] __kvmalloc_node_noprof+0x155/0x650 [ 197.612382][T10123] ? seq_read_iter+0x143/0x940 [ 197.612419][T10123] seq_read_iter+0x143/0x940 [ 197.612448][T10123] ? __account_obj_stock+0x211/0x350 [ 197.612531][T10123] seq_read+0x279/0x2c0 [ 197.612566][T10123] ? __pfx_seq_read+0x10/0x10 [ 197.612594][T10123] proc_reg_read+0x128/0x1c0 [ 197.612671][T10123] loop_rw_iter+0x2c8/0x400 [ 197.612789][T10123] __io_read+0xbf6/0xc50 [ 197.612829][T10123] ? __import_iovec+0x428/0x530 [ 197.612864][T10123] io_read+0x4a/0x190 [ 197.612918][T10123] ? __fget_files+0x184/0x1c0 [ 197.612984][T10123] __io_issue_sqe+0xfd/0x2d0 [ 197.613012][T10123] io_issue_sqe+0x206/0xc00 [ 197.613044][T10123] ? io_prep_rwv+0xef/0x260 [ 197.613089][T10123] io_submit_sqes+0x7fb/0x1270 [ 197.613202][T10123] __se_sys_io_uring_enter+0x1c9/0xf50 [ 197.613297][T10123] ? __fget_files+0x184/0x1c0 [ 197.613362][T10123] ? mutex_unlock+0x4e/0x90 [ 197.613446][T10123] ? fput+0x8f/0xc0 [ 197.613467][T10123] __x64_sys_io_uring_enter+0x78/0x90 [ 197.613545][T10123] x64_sys_call+0x1e16/0x3020 [ 197.613568][T10123] do_syscall_64+0x12c/0x370 [ 197.613695][T10123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.613719][T10123] RIP: 0033:0x7fa442a5c629 [ 197.613792][T10123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.613891][T10123] RSP: 002b:00007fa4414b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 197.613914][T10123] RAX: ffffffffffffffda RBX: 00007fa442cd5fa0 RCX: 00007fa442a5c629 [ 197.613926][T10123] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 197.613937][T10123] RBP: 00007fa4414b7090 R08: 0000000000000000 R09: 0000000000000000 [ 197.614023][T10123] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 197.614036][T10123] R13: 00007fa442cd6038 R14: 00007fa442cd5fa0 R15: 00007ffec8c68058 [ 197.614056][T10123] [ 198.145560][T10154] loop7: detected capacity change from 0 to 128 [ 198.210479][T10155] vhci_hcd vhci_hcd.4: invalid port number 254 [ 198.216702][T10155] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 198.574088][T10134] lo speed is unknown, defaulting to 1000 [ 198.590503][T10134] ip6_vti0 speed is unknown, defaulting to 1000 [ 198.604894][T10159] lo speed is unknown, defaulting to 1000 [ 198.656580][T10159] ip6_vti0 speed is unknown, defaulting to 1000 [ 198.682744][T10172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.693018][T10172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.987257][T10182] loop7: detected capacity change from 0 to 128 [ 198.995470][T10185] loop6: detected capacity change from 0 to 256 [ 199.020850][T10185] FAT-fs (loop6): bogus number of FAT sectors [ 199.041293][T10185] FAT-fs (loop6): Can't find a valid FAT filesystem [ 199.051547][T10182] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.093169][T10134] chnl_net:caif_netlink_parms(): no params data found [ 199.102242][T10182] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.198941][T10182] tipc: Enabling of bearer rejected, failed to enable media [ 199.229174][T10134] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.248995][T10194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.260804][T10134] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.264648][T10194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.277971][T10134] bridge_slave_0: entered allmulticast mode [ 199.295203][T10134] bridge_slave_0: entered promiscuous mode [ 199.344085][T10182] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.359055][T10134] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.374733][T10134] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.382168][T10134] bridge_slave_1: entered allmulticast mode [ 199.389207][T10134] bridge_slave_1: entered promiscuous mode [ 199.412406][T10134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.427342][T10134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.453270][T10134] team0: Port device team_slave_0 added [ 199.464412][T10134] team0: Port device team_slave_1 added [ 199.482744][T10134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.489808][T10134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.515998][T10134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.531593][T10134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.540437][T10134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.568320][T10134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.579931][T10211] syzkaller0: entered promiscuous mode [ 199.585549][T10211] syzkaller0: entered allmulticast mode [ 199.600917][T10210] loop7: detected capacity change from 0 to 2048 [ 199.617799][T10210] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c128, mo2=0003] [ 199.624663][T10134] hsr_slave_0: entered promiscuous mode [ 199.625907][T10210] System zones: 0-7 [ 199.627769][T10210] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.649536][T10134] hsr_slave_1: entered promiscuous mode [ 199.655386][T10134] debugfs: 'hsr0' already exists in 'hsr' [ 199.661174][T10134] Cannot create hsr debugfs directory [ 199.707092][T10215] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.2098: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 199.723864][T10215] EXT4-fs (loop7): Remounting filesystem read-only [ 199.922961][ T8312] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.996868][T10225] syzkaller0: entered promiscuous mode [ 200.004826][T10225] syzkaller0: entered allmulticast mode [ 200.011140][T10227] loop7: detected capacity change from 0 to 2048 [ 200.018777][T10225] 0: reclassify loop, rule prio 0, protocol 800 [ 200.072107][T10231] siw: device registration error -23 [ 200.079724][T10231] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 200.279343][T10230] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 200.285911][T10230] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 200.502679][T10229] lo speed is unknown, defaulting to 1000 [ 200.520437][T10229] ip6_vti0 speed is unknown, defaulting to 1000 [ 200.537518][T10230] vhci_hcd vhci_hcd.0: Device attached [ 200.564270][T10246] bond_slave_0: entered promiscuous mode [ 200.569981][T10246] bond_slave_1: entered promiscuous mode [ 200.575855][T10246] macvtap1: entered promiscuous mode [ 200.581384][T10246] bond0: entered promiscuous mode [ 200.586974][T10246] macvtap1: entered allmulticast mode [ 200.592455][T10246] bond0: entered allmulticast mode [ 200.601209][T10246] bond_slave_0: entered allmulticast mode [ 200.607177][T10246] bond_slave_1: entered allmulticast mode [ 200.614259][T10246] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 200.623182][T10246] bond0: left allmulticast mode [ 200.628123][T10246] bond_slave_0: left allmulticast mode [ 200.633757][T10246] bond_slave_1: left allmulticast mode [ 200.639330][T10246] bond0: left promiscuous mode [ 200.644396][T10246] bond_slave_0: left promiscuous mode [ 200.649798][T10246] bond_slave_1: left promiscuous mode [ 200.660097][T10243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10243 comm=syz.6.2108 [ 200.677598][T10134] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 200.686864][T10243] netlink: 'syz.6.2108': attribute type 4 has an invalid length. [ 200.694989][T10134] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 200.726291][ T3398] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 200.734692][T10134] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 200.744122][T10134] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 200.758906][T10233] vhci_hcd: connection closed [ 200.762331][ T1889] vhci_hcd vhci_hcd.2: stop threads [ 200.773223][ T1889] vhci_hcd vhci_hcd.2: release socket [ 200.778752][ T1889] vhci_hcd vhci_hcd.2: disconnect device [ 200.786352][ T3398] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 200.802434][ T3398] usb 5-1: enqueue for inactive port 0 [ 200.829875][T10255] loop6: detected capacity change from 0 to 512 [ 200.839221][T10259] loop7: detected capacity change from 0 to 736 [ 200.845597][ T3398] usb 5-1: enqueue for inactive port 0 [ 200.855035][T10255] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 200.870641][T10255] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 200.880148][T10255] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2111: bad orphan inode 4 [ 200.887008][ T3398] usb 5-1: enqueue for inactive port 0 [ 200.902209][T10255] loop6: lost filesystem error report for type 5 error -117 [ 200.903438][T10255] EXT4-fs (loop6): 1 orphan inode deleted [ 200.905917][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 200.922991][ C0] EXT4-fs (loop6): initial error at time 1771868771: ext4_orphan_get:1417 [ 200.931565][ C0] EXT4-fs (loop6): last error at time 1771868771: ext4_orphan_get:1417 [ 200.956098][T10255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.968812][ T3398] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 200.980831][T10134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.992645][T10134] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.003550][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.010780][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.036987][ T1889] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.044126][ T1889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.066193][T10259] netlink: zone id is out of range [ 201.072070][T10259] netlink: zone id is out of range [ 201.078486][T10259] netlink: zone id is out of range [ 201.083734][T10259] netlink: zone id is out of range [ 201.089367][T10259] netlink: zone id is out of range [ 201.094674][T10259] netlink: zone id is out of range [ 201.100521][T10259] netlink: zone id is out of range [ 201.106352][T10259] netlink: zone id is out of range [ 201.209281][T10134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.220480][T10278] __nla_validate_parse: 5 callbacks suppressed [ 201.220511][T10278] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2117'. [ 201.745281][T10289] loop7: detected capacity change from 0 to 128 [ 201.804626][T10281] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.2118'. [ 201.835299][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 201.835319][ T28] audit: type=1400 audit(1771868772.006:3091): avc: denied { create } for pid=10290 comm="syz.5.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 201.888086][T10281] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.2118'. [ 202.009059][ T28] audit: type=1400 audit(1771868772.046:3092): avc: denied { connect } for pid=10290 comm="syz.5.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.274111][T10134] veth0_vlan: entered promiscuous mode [ 202.282602][T10134] veth1_vlan: entered promiscuous mode [ 202.297969][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.323151][T10134] veth0_macvtap: entered promiscuous mode [ 202.332532][T10134] veth1_macvtap: entered promiscuous mode [ 202.345235][T10134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.354107][T10134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.399063][ T2116] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.410751][ T2116] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.419904][ T2116] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.434639][ T28] audit: type=1400 audit(1771868772.606:3093): avc: denied { create } for pid=10311 comm="syz.7.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 202.436135][ T2116] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.475120][ T28] audit: type=1400 audit(1771868772.606:3094): avc: denied { setopt } for pid=10311 comm="syz.7.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 202.537222][ T28] audit: type=1400 audit(1771868772.696:3095): avc: denied { mounton } for pid=10134 comm="syz-executor" path="/root/syzkaller.xAIPZK/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 202.561732][T10317] loop7: detected capacity change from 0 to 8192 [ 202.570939][ T28] audit: type=1400 audit(1771868772.696:3096): avc: denied { mount } for pid=10134 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 202.607015][ T28] audit: type=1400 audit(1771868772.696:3097): avc: denied { mount } for pid=10134 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 202.639278][ T28] audit: type=1400 audit(1771868772.706:3098): avc: denied { mounton } for pid=10134 comm="syz-executor" path="/root/syzkaller.xAIPZK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 202.681265][T10317] loop7: p1 p3 p4[EZD] [ 202.695030][T10317] loop7: p1 start 262144 is beyond EOD, truncated [ 202.703017][T10317] loop7: p3 start 331781 is beyond EOD, truncated [ 202.718967][T10317] loop7: p4 size 197376 extends beyond EOD, truncated [ 202.755992][ T3002] loop7: p1 p3 p4[EZD] [ 202.760486][ T3002] loop7: p1 start 262144 is beyond EOD, truncated [ 202.770521][ T28] audit: type=1400 audit(1771868772.716:3099): avc: denied { mounton } for pid=10134 comm="syz-executor" path="/root/syzkaller.xAIPZK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=30949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 202.793246][T10329] loop8: detected capacity change from 0 to 1024 [ 202.805427][ T3002] loop7: p3 start 331781 is beyond EOD, truncated [ 202.818046][ T3002] loop7: p4 size 197376 extends beyond EOD, truncated [ 202.829516][T10332] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2127'. [ 202.856344][T10329] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 202.878537][ T8985] udevd[8985]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 202.892676][T10329] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.2126: Failed to acquire dquot type 0 [ 202.904134][T10329] loop8: lost filesystem error report for type 5 error -5 [ 202.904856][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 202.918465][ C0] EXT4-fs (loop8): initial error at time 1771868773: ext4_acquire_dquot:7001 [ 202.927267][ C0] EXT4-fs (loop8): last error at time 1771868773: ext4_acquire_dquot:7001 [ 202.943254][T10309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10309 comm=syz.2.2121 [ 202.944981][T10329] EXT4-fs (loop8): 1 truncate cleaned up [ 202.961871][T10329] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.975317][T10309] netlink: 'syz.2.2121': attribute type 4 has an invalid length. [ 202.998405][T10338] loop6: detected capacity change from 0 to 512 [ 203.020155][T10338] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.027472][T10134] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.041162][T10338] EXT4-fs (loop6): orphan cleanup on readonly fs [ 203.058106][T10338] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 203.073499][T10338] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2128: attempt to clear invalid blocks 2 len 1 [ 203.204073][T10338] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 203.204753][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 203.204771][ C1] EXT4-fs (loop6): initial error at time 1771868773: ext4_clear_blocks:876: inode 13 [ 203.204810][ C1] EXT4-fs (loop6): last error at time 1771868773: ext4_clear_blocks:876: inode 13 [ 203.228196][T10338] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 203.230898][T10338] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2128: invalid indirect mapped block 1819239214 (level 0) [ 203.231201][T10338] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 203.233477][T10338] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2128: invalid indirect mapped block 1819239214 (level 1) [ 203.233506][T10338] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 203.250133][T10338] EXT4-fs (loop6): 1 truncate cleaned up [ 203.262335][T10338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.296865][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2128'. [ 203.296892][T10338] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2128'. [ 203.621515][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.739738][T10357] loop5: detected capacity change from 0 to 512 [ 203.770341][T10362] vlan0: entered promiscuous mode [ 203.770435][T10362] vlan0: entered allmulticast mode [ 203.770452][T10362] hsr_slave_1: entered allmulticast mode [ 203.781659][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2137'. [ 203.921163][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2142'. [ 203.938639][T10369] bridge0: port 3(batadv1) entered blocking state [ 203.953069][T10369] bridge0: port 3(batadv1) entered disabled state [ 203.961938][T10369] batadv1: entered allmulticast mode [ 203.975060][T10369] batadv1: entered promiscuous mode [ 204.102036][T10382] loop7: detected capacity change from 0 to 128 [ 204.124797][T10382] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.166543][T10386] loop6: detected capacity change from 0 to 128 [ 204.179610][T10382] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 204.305225][T10390] delete_channel: no stack [ 204.346842][ T8312] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.434950][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 204.444230][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 204.506028][T10401] ip6gretap0: entered promiscuous mode [ 204.533647][T10401] macsec1: entered allmulticast mode [ 204.544214][T10401] ip6gretap0: entered allmulticast mode [ 204.916163][T10411] loop6: detected capacity change from 0 to 256 [ 205.027888][T10415] loop5: detected capacity change from 0 to 512 [ 205.063934][T10401] ip6gretap0: left allmulticast mode [ 205.076971][T10415] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 205.086942][T10401] ip6gretap0: left promiscuous mode [ 205.094972][T10415] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.107921][T10415] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 205.109688][T10410] syz_tun: entered allmulticast mode [ 205.132941][T10407] syz_tun: left allmulticast mode [ 205.367162][T10442] loop8: detected capacity change from 0 to 512 [ 205.404792][T10442] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 205.445924][T10442] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 205.454809][T10442] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2164: bad orphan inode 4 [ 205.498382][T10456] net_ratelimit: 166 callbacks suppressed [ 205.498398][T10456] netlink: get zone limit has 8 unknown bytes [ 205.513572][T10442] loop8: lost filesystem error report for type 5 error -117 [ 205.513776][T10442] EXT4-fs (loop8): 1 orphan inode deleted [ 205.527008][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 205.527028][ C1] EXT4-fs (loop8): initial error at time 1771868775: ext4_orphan_get:1417 [ 205.527055][ C1] EXT4-fs (loop8): last error at time 1771868775: ext4_orphan_get:1417 [ 205.581021][T10462] loop5: detected capacity change from 0 to 512 [ 205.588144][T10462] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 205.599659][T10462] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 205.609070][T10462] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2173: bad orphan inode 4 [ 205.619327][T10462] loop5: lost filesystem error report for type 5 error -117 [ 205.619534][T10462] EXT4-fs (loop5): 1 orphan inode deleted [ 205.626903][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 205.626922][ C0] EXT4-fs (loop5): initial error at time 1771868775: ext4_orphan_get:1417 [ 205.626949][ C0] EXT4-fs (loop5): last error at time 1771868775: ext4_orphan_get:1417 [ 205.656996][T10462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.694521][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.712423][T10466] netlink: 'syz.7.2175': attribute type 3 has an invalid length. [ 205.723155][T10442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.747220][T10466] netlink: 'syz.7.2175': attribute type 3 has an invalid length. [ 205.766745][T10472] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 205.785549][T10466] netlink: 'syz.7.2175': attribute type 3 has an invalid length. [ 205.822489][T10466] netlink: 'syz.7.2175': attribute type 3 has an invalid length. [ 205.839288][T10466] netlink: 'syz.7.2175': attribute type 3 has an invalid length. [ 205.848525][T10466] netlink: 'syz.7.2175': attribute type 3 has an invalid length. [ 205.856530][T10466] netlink: 'syz.7.2175': attribute type 3 has an invalid length. [ 205.864709][T10466] netlink: 'syz.7.2175': attribute type 3 has an invalid length. [ 205.873288][T10480] FAULT_INJECTION: forcing a failure. [ 205.873288][T10480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.886726][T10466] netlink: 'syz.7.2175': attribute type 3 has an invalid length. [ 205.895923][T10480] CPU: 1 UID: 0 PID: 10480 Comm: syz.6.2178 Tainted: G W syzkaller #0 PREEMPT(full) [ 205.895959][T10480] Tainted: [W]=WARN [ 205.895968][T10480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.896041][T10480] Call Trace: [ 205.896047][T10480] [ 205.896056][T10480] __dump_stack+0x1d/0x30 [ 205.896087][T10480] dump_stack_lvl+0x95/0xd0 [ 205.896115][T10480] dump_stack+0x15/0x1b [ 205.896190][T10480] should_fail_ex+0x263/0x280 [ 205.896220][T10480] should_fail+0xb/0x20 [ 205.896241][T10480] should_fail_usercopy+0x1a/0x20 [ 205.896335][T10480] _copy_to_user+0x20/0xa0 [ 205.896373][T10480] simple_read_from_buffer+0xb5/0x130 [ 205.896391][T10480] proc_fail_nth_read+0x10e/0x150 [ 205.896416][T10480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.896446][T10480] vfs_read+0x1ab/0x7f0 [ 205.896500][T10480] ? __rcu_read_unlock+0x4e/0x70 [ 205.896519][T10480] ? __fget_files+0x184/0x1c0 [ 205.896538][T10480] ? mutex_lock+0x57/0x90 [ 205.896635][T10480] ksys_read+0xdc/0x1a0 [ 205.896663][T10480] __x64_sys_read+0x40/0x50 [ 205.896694][T10480] x64_sys_call+0x2886/0x3020 [ 205.896801][T10480] do_syscall_64+0x12c/0x370 [ 205.896853][T10480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.896889][T10480] RIP: 0033:0x7f4bbdd6cece [ 205.896937][T10480] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 205.896953][T10480] RSP: 002b:00007f4bbc7ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.896976][T10480] RAX: ffffffffffffffda RBX: 00007f4bbc7de6c0 RCX: 00007f4bbdd6cece [ 205.897003][T10480] RDX: 000000000000000f RSI: 00007f4bbc7de0a0 RDI: 0000000000000003 [ 205.897018][T10480] RBP: 00007f4bbc7de090 R08: 0000000000000000 R09: 0000000000000000 [ 205.897068][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.897081][T10480] R13: 00007f4bbe026128 R14: 00007f4bbe026090 R15: 00007fff494e1318 [ 205.897110][T10480] [ 206.194713][T10482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.224410][T10482] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.319347][T10482] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2179: bg 0: block 112: padding at end of block bitmap is not set [ 206.357507][T10490] FAT-fs (loop7): invalid media value (0x00) [ 206.377178][T10492] EXT4-fs: inline encryption not supported [ 206.383282][T10490] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 206.394049][T10482] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.2179: lblock 0 mapped to illegal pblock 0 (length 1) [ 206.414613][T10490] FAT-fs (loop7): Can't find a valid FAT filesystem [ 206.433986][T10482] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 206.449465][T10482] EXT4-fs (loop5): This should not happen!! Data will be lost [ 206.449465][T10482] [ 206.459898][T10492] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 206.468828][T10493] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.2179: lblock 0 mapped to illegal pblock 0 (length 1) [ 206.510130][T10481] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.2179: lblock 0 mapped to illegal pblock 0 (length 1) [ 206.539175][T10481] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.2179: lblock 0 mapped to illegal pblock 0 (length 1) [ 206.574842][T10481] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.2179: lblock 0 mapped to illegal pblock 0 (length 1) [ 206.598594][T10481] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.2179: lblock 0 mapped to illegal pblock 0 (length 1) [ 206.625110][T10501] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.637984][T10503] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 206.657913][T10481] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.2179: lblock 0 mapped to illegal pblock 0 (length 1) [ 206.679378][T10501] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.690215][T10503] JBD2: no valid journal superblock found [ 206.703024][T10503] EXT4-fs (loop7): Could not load journal inode [ 206.733580][T10481] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.2179: lblock 0 mapped to illegal pblock 0 (length 1) [ 206.752759][T10501] delete_channel: no stack [ 206.785618][T10481] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.2179: lblock 0 mapped to illegal pblock 0 (length 1) [ 206.801608][T10503] lo speed is unknown, defaulting to 1000 [ 206.819871][T10503] ip6_vti0 speed is unknown, defaulting to 1000 [ 207.062953][T10503] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000 [ 207.167836][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 207.177913][T10134] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.196347][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 207.196362][ T28] audit: type=1400 audit(1771868777.378:3141): avc: denied { create } for pid=10507 comm="syz.2.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.252934][T10511] vfat: Unknown parameter 'unihxlate' [ 207.319610][ T6351] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.357481][ T28] audit: type=1400 audit(1771868777.538:3142): avc: denied { setopt } for pid=10522 comm="syz.6.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 207.406100][T10525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=10525 comm=syz.6.2189 [ 207.436387][ T28] audit: type=1400 audit(1771868777.569:3143): avc: denied { create } for pid=10522 comm="syz.6.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 207.474709][T10539] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2194'. [ 207.644406][T10553] set_capacity_and_notify: 8 callbacks suppressed [ 207.644510][T10553] loop8: detected capacity change from 0 to 512 [ 207.663761][T10551] loop7: detected capacity change from 0 to 164 [ 207.680917][T10553] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.682433][T10551] ISOFS: unable to read i-node block [ 207.705114][ T28] audit: type=1400 audit(1771868777.879:3144): avc: denied { write } for pid=10549 comm="syz.7.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.736774][T10553] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.754896][T10557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2200'. [ 207.786443][T10536] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #4: comm syz.8.2192: corrupted inode contents [ 207.786612][T10536] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #4: comm syz.8.2192: mark_inode_dirty error [ 207.786856][T10536] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #4: comm syz.8.2192: corrupted inode contents [ 207.789098][T10536] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #4: comm syz.8.2192: mark_inode_dirty error [ 207.789316][T10536] Quota error (device loop8): write_blk: dquota write failed [ 207.789371][T10536] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 207.789436][T10536] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 207.789460][T10536] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.2192: Failed to acquire dquot type 1 [ 207.845247][T10565] netlink: 500 bytes leftover after parsing attributes in process `syz.7.2199'. [ 207.944585][T10134] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.973465][T10577] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 207.979998][T10577] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 207.999857][ T28] audit: type=1400 audit(1771868778.179:3145): avc: denied { create } for pid=10578 comm="syz.8.2209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 208.019443][T10577] loop7: detected capacity change from 0 to 2048 [ 208.033312][ T3309] loop7: p1 p2 p3 [ 208.045884][ T3309] loop7: p2 size 16842752 extends beyond EOD, truncated [ 208.069111][T10591] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2212'. [ 208.078401][ T3309] loop7: p3 start 8388352 is beyond EOD, truncated [ 208.089117][T10577] loop7: p1 p2 p3 [ 208.102974][T10577] loop7: p2 size 16842752 extends beyond EOD, truncated [ 208.116355][T10593] loop8: detected capacity change from 0 to 512 [ 208.118154][T10577] loop7: p3 start 8388352 is beyond EOD, truncated [ 208.139526][ T28] audit: type=1400 audit(1771868778.319:3146): avc: denied { map } for pid=10588 comm="syz.6.2211" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 208.158168][T10593] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.197307][T10593] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.410726][ T28] audit: type=1400 audit(1771868778.589:3147): avc: denied { cpu } for pid=10603 comm="syz.5.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 208.414190][ T8985] udevd[8985]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 208.443658][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 208.740414][T10589] lo speed is unknown, defaulting to 1000 [ 208.798597][T10589] ip6_vti0 speed is unknown, defaulting to 1000 [ 208.963955][T10617] validate_nla: 43 callbacks suppressed [ 208.963987][T10617] netlink: 'syz.2.2220': attribute type 1 has an invalid length. [ 208.977558][T10617] netlink: 'syz.2.2220': attribute type 3 has an invalid length. [ 208.985471][T10617] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2220'. [ 209.004158][T10613] loop7: detected capacity change from 0 to 128 [ 209.015114][T10613] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.042308][T10613] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 209.043438][T10134] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.172444][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2223'. [ 209.181657][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2223'. [ 209.296043][T10633] loop8: detected capacity change from 0 to 1156 [ 209.383867][T10638] loop5: detected capacity change from 0 to 1024 [ 209.406458][T10638] EXT4-fs: Ignoring removed nobh option [ 209.419992][T10640] loop6: detected capacity change from 0 to 1024 [ 209.422659][T10638] EXT4-fs: inline encryption not supported [ 209.450283][T10640] EXT4-fs: Ignoring removed nobh option [ 209.475586][T10638] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.476694][T10640] EXT4-fs: inline encryption not supported [ 209.510259][T10638] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2227: deleted inode referenced: 15 [ 209.552928][T10638] EXT4-fs (loop5): Remounting filesystem read-only [ 209.566963][T10640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.590522][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.600085][T10640] FAULT_INJECTION: forcing a failure. [ 209.600085][T10640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.616589][T10640] CPU: 0 UID: 0 PID: 10640 Comm: syz.6.2228 Tainted: G W syzkaller #0 PREEMPT(full) [ 209.616640][T10640] Tainted: [W]=WARN [ 209.616648][T10640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.616662][T10640] Call Trace: [ 209.616669][T10640] [ 209.616676][T10640] __dump_stack+0x1d/0x30 [ 209.616705][T10640] dump_stack_lvl+0x95/0xd0 [ 209.616736][T10640] dump_stack+0x15/0x1b [ 209.616761][T10640] should_fail_ex+0x263/0x280 [ 209.616785][T10640] should_fail+0xb/0x20 [ 209.616806][T10640] should_fail_usercopy+0x1a/0x20 [ 209.616932][T10640] strncpy_from_user+0x27/0x250 [ 209.616977][T10640] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 209.617068][T10640] do_getname+0x59/0x1c0 [ 209.617092][T10640] getname_flags+0x1d/0x30 [ 209.617174][T10640] do_sys_openat2+0x60/0x130 [ 209.617266][T10640] __x64_sys_openat+0xf2/0x120 [ 209.617290][T10640] x64_sys_call+0x1e39/0x3020 [ 209.617317][T10640] do_syscall_64+0x12c/0x370 [ 209.617408][T10640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.617431][T10640] RIP: 0033:0x7f4bbddac629 [ 209.617444][T10640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.617473][T10640] RSP: 002b:00007f4bbc7ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 209.617489][T10640] RAX: ffffffffffffffda RBX: 00007f4bbe025fa0 RCX: 00007f4bbddac629 [ 209.617501][T10640] RDX: 0000000000000441 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 209.617514][T10640] RBP: 00007f4bbc7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 209.617528][T10640] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 209.617541][T10640] R13: 00007f4bbe026038 R14: 00007f4bbe025fa0 R15: 00007fff494e1318 [ 209.617610][T10640] [ 209.828807][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.922020][T10659] netlink: 4580 bytes leftover after parsing attributes in process `syz.5.2234'. [ 209.941433][T10659] netlink: 4580 bytes leftover after parsing attributes in process `syz.5.2234'. [ 210.056838][T10661] syzkaller0: entered promiscuous mode [ 210.062520][T10661] syzkaller0: entered allmulticast mode [ 210.069936][ T8312] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.097718][T10664] loop7: detected capacity change from 0 to 512 [ 210.164486][T10664] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.184777][T10664] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.199059][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2236'. [ 210.219340][ T8312] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.279272][T10674] IPv4: Oversized IP packet from 127.202.26.0 [ 210.314507][T10679] loop8: detected capacity change from 0 to 1024 [ 210.328671][T10679] EXT4-fs: Ignoring removed orlov option [ 210.342630][T10679] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.447834][T10676] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 210.469410][T10134] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.795201][T10704] vhci_hcd vhci_hcd.4: invalid port number 254 [ 210.801608][T10704] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 211.235358][T10708] FAULT_INJECTION: forcing a failure. [ 211.235358][T10708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.248790][T10708] CPU: 0 UID: 0 PID: 10708 Comm: syz.2.2249 Tainted: G W syzkaller #0 PREEMPT(full) [ 211.248824][T10708] Tainted: [W]=WARN [ 211.248832][T10708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.248863][T10708] Call Trace: [ 211.248868][T10708] [ 211.248874][T10708] __dump_stack+0x1d/0x30 [ 211.248969][T10708] dump_stack_lvl+0x95/0xd0 [ 211.248992][T10708] dump_stack+0x15/0x1b [ 211.249016][T10708] should_fail_ex+0x263/0x280 [ 211.249083][T10708] should_fail+0xb/0x20 [ 211.249118][T10708] should_fail_usercopy+0x1a/0x20 [ 211.249145][T10708] _copy_to_iter+0x251/0xea0 [ 211.249209][T10708] ? md_seq_show+0x2de/0x1290 [ 211.249247][T10708] ? _raw_spin_lock+0x52/0xa0 [ 211.249272][T10708] ? seq_list_next+0x32/0x50 [ 211.249367][T10708] seq_read_iter+0x776/0x940 [ 211.249398][T10708] seq_read+0x279/0x2c0 [ 211.249435][T10708] ? __pfx_seq_read+0x10/0x10 [ 211.249460][T10708] proc_reg_read+0x128/0x1c0 [ 211.249546][T10708] loop_rw_iter+0x2c8/0x400 [ 211.249579][T10708] __io_read+0xbf6/0xc50 [ 211.249694][T10708] ? __import_iovec+0x428/0x530 [ 211.249722][T10708] io_read+0x4a/0x190 [ 211.249787][T10708] ? __fget_files+0x184/0x1c0 [ 211.249816][T10708] __io_issue_sqe+0xfd/0x2d0 [ 211.249938][T10708] io_issue_sqe+0x206/0xc00 [ 211.250052][T10708] ? io_prep_rwv+0xef/0x260 [ 211.250092][T10708] io_submit_sqes+0x7fb/0x1270 [ 211.250186][T10708] __se_sys_io_uring_enter+0x1c9/0xf50 [ 211.250219][T10708] ? __fget_files+0x184/0x1c0 [ 211.250251][T10708] ? mutex_unlock+0x4e/0x90 [ 211.250285][T10708] ? fput+0x8f/0xc0 [ 211.250389][T10708] __x64_sys_io_uring_enter+0x78/0x90 [ 211.250431][T10708] x64_sys_call+0x1e16/0x3020 [ 211.250472][T10708] do_syscall_64+0x12c/0x370 [ 211.250519][T10708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.250545][T10708] RIP: 0033:0x7fa442a5c629 [ 211.250562][T10708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.250581][T10708] RSP: 002b:00007fa4414b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 211.250716][T10708] RAX: ffffffffffffffda RBX: 00007fa442cd5fa0 RCX: 00007fa442a5c629 [ 211.250734][T10708] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000005 [ 211.250753][T10708] RBP: 00007fa4414b7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.250770][T10708] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 211.250785][T10708] R13: 00007fa442cd6038 R14: 00007fa442cd5fa0 R15: 00007ffec8c68058 [ 211.250849][T10708] [ 211.641993][T10711] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.710044][T10711] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.749640][T10711] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2252: bg 0: block 112: padding at end of block bitmap is not set [ 211.832206][T10711] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.2252: lblock 0 mapped to illegal pblock 0 (length 1) [ 211.846008][T10722] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 211.878110][T10722] SELinux: failed to load policy [ 211.885075][T10711] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 211.905837][T10711] EXT4-fs (loop8): This should not happen!! Data will be lost [ 211.905837][T10711] [ 211.915849][T10724] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.2252: lblock 0 mapped to illegal pblock 0 (length 1) [ 211.932344][T10710] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.2252: lblock 0 mapped to illegal pblock 0 (length 1) [ 211.953888][T10710] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.2252: lblock 0 mapped to illegal pblock 0 (length 1) [ 211.986091][T10710] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.2252: lblock 0 mapped to illegal pblock 0 (length 1) [ 212.000678][T10710] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.2252: lblock 0 mapped to illegal pblock 0 (length 1) [ 212.014313][T10710] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.2252: lblock 0 mapped to illegal pblock 0 (length 1) [ 212.029023][T10710] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.2252: lblock 0 mapped to illegal pblock 0 (length 1) [ 212.042773][T10710] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.2252: lblock 0 mapped to illegal pblock 0 (length 1) [ 212.078482][T10134] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 212.177413][T10741] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 212.186775][T10732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.204442][T10741] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 212.219573][T10741] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2259: bad orphan inode 4 [ 212.230465][T10741] loop8: lost filesystem error report for type 5 error -117 [ 212.230683][T10741] EXT4-fs (loop8): 1 orphan inode deleted [ 212.243757][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 212.243778][ C0] EXT4-fs (loop8): initial error at time 1771868782: ext4_orphan_get:1417 [ 212.243815][ C0] EXT4-fs (loop8): last error at time 1771868782: ext4_orphan_get:1417 [ 212.261229][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 212.261269][ T28] audit: type=1400 audit(1771868782.441:3221): avc: denied { create } for pid=10731 comm="syz.5.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 212.270036][T10741] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.306430][ T28] audit: type=1400 audit(1771868782.481:3222): avc: denied { setopt } for pid=10745 comm="syz.7.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.346780][ T28] audit: type=1400 audit(1771868782.531:3223): avc: denied { write } for pid=10745 comm="syz.7.2261" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 212.405920][ T28] audit: type=1400 audit(1771868782.531:3224): avc: denied { open } for pid=10745 comm="syz.7.2261" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 212.457330][ T28] audit: type=1400 audit(1771868782.561:3225): avc: denied { ioctl } for pid=10745 comm="syz.7.2261" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 212.575581][T10753] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #2: block 4: comm syz.8.2259: lblock 0 mapped to illegal pblock 4 (length 1) [ 212.592346][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 212.601496][T10753] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #2: block 4: comm syz.8.2259: lblock 0 mapped to illegal pblock 4 (length 1) [ 213.039971][T10756] set_capacity_and_notify: 6 callbacks suppressed [ 213.039987][T10756] loop7: detected capacity change from 0 to 128 [ 213.055047][T10756] __nla_validate_parse: 6 callbacks suppressed [ 213.055101][T10756] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.2262'. [ 213.070533][T10756] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.2262'. [ 213.080664][ T28] audit: type=1400 audit(1771868782.781:3226): avc: denied { setopt } for pid=10740 comm="syz.8.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.102280][ T28] audit: type=1400 audit(1771868782.781:3227): avc: denied { ioctl } for pid=10740 comm="syz.8.2259" path="socket:[32328]" dev="sockfs" ino=32328 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.132376][T10757] vhci_hcd vhci_hcd.4: invalid port number 254 [ 213.138647][T10757] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 213.149809][ T28] audit: type=1400 audit(1771868782.781:3228): avc: denied { write } for pid=10740 comm="syz.8.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 213.301814][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.341330][T10134] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.464095][ T28] audit: type=1400 audit(1771868783.622:3229): avc: denied { ioctl } for pid=10760 comm="syz.8.2265" path="socket:[31742]" dev="sockfs" ino=31742 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.555683][ T28] audit: type=1400 audit(1771868783.622:3230): avc: denied { bind } for pid=10760 comm="syz.8.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.590028][T10765] loop6: detected capacity change from 0 to 512 [ 213.599730][T10765] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 213.608738][T10765] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 213.617102][T10765] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2266: bad orphan inode 4 [ 213.627153][T10765] loop6: lost filesystem error report for type 5 error -117 [ 213.629561][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 213.643295][ C1] EXT4-fs (loop6): initial error at time 1771868783: ext4_orphan_get:1417 [ 213.651829][ C1] EXT4-fs (loop6): last error at time 1771868783: ext4_orphan_get:1417 [ 213.679303][T10765] EXT4-fs (loop6): 1 orphan inode deleted [ 213.709901][T10765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.786631][T10759] syzkaller0: entered promiscuous mode [ 213.794044][T10759] syzkaller0: entered allmulticast mode [ 213.837448][T10774] loop7: detected capacity change from 0 to 1024 [ 213.846840][T10782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2269'. [ 213.916898][T10778] loop8: detected capacity change from 0 to 1024 [ 213.983027][T10774] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.018651][T10774] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.053877][T10774] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2267: bg 0: block 112: padding at end of block bitmap is not set [ 214.069007][T10778] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2268: bad orphan inode 134217728 [ 214.083622][T10778] loop8: lost filesystem error report for type 5 error -117 [ 214.097674][T10778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.122484][T10774] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.2267: lblock 0 mapped to illegal pblock 0 (length 1) [ 214.136377][T10774] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 214.193700][T10774] EXT4-fs (loop7): This should not happen!! Data will be lost [ 214.193700][T10774] [ 214.235000][T10779] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.2267: lblock 0 mapped to illegal pblock 0 (length 1) [ 214.322016][T10769] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.2267: lblock 0 mapped to illegal pblock 0 (length 1) [ 214.390019][T10769] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.2267: lblock 0 mapped to illegal pblock 0 (length 1) [ 214.403749][T10769] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.2267: lblock 0 mapped to illegal pblock 0 (length 1) [ 214.423398][T10769] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.2267: lblock 0 mapped to illegal pblock 0 (length 1) [ 214.441023][T10769] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.2267: lblock 0 mapped to illegal pblock 0 (length 1) [ 214.456431][T10769] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.2267: lblock 0 mapped to illegal pblock 0 (length 1) [ 214.470178][T10769] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: comm syz.7.2267: lblock 0 mapped to illegal pblock 0 (length 1) [ 214.512490][ T8312] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 214.535866][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.565878][T10795] syzkaller0: entered promiscuous mode [ 214.571453][T10795] syzkaller0: entered allmulticast mode [ 214.609149][T10134] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.725129][T10803] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.788516][T10798] netlink: 'syz.8.2272': attribute type 10 has an invalid length. [ 214.870788][T10809] macvtap1: entered promiscuous mode [ 214.876216][T10809] bond0: entered promiscuous mode [ 214.882036][T10809] bond_slave_0: entered promiscuous mode [ 214.887891][T10809] bond_slave_1: entered promiscuous mode [ 214.893941][T10809] macvtap1: entered allmulticast mode [ 214.899550][T10809] bond0: entered allmulticast mode [ 214.904967][T10809] bond_slave_0: entered allmulticast mode [ 214.914961][T10809] bond_slave_1: entered allmulticast mode [ 214.922188][T10809] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 214.933204][T10809] bond0: left allmulticast mode [ 214.938126][T10809] bond_slave_0: left allmulticast mode [ 214.944480][T10809] bond_slave_1: left allmulticast mode [ 214.950142][T10809] bond0: left promiscuous mode [ 214.955014][T10809] bond_slave_0: left promiscuous mode [ 214.960676][T10809] bond_slave_1: left promiscuous mode [ 215.149783][T10818] loop7: detected capacity change from 0 to 128 [ 215.163213][T10818] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.2279'. [ 215.172429][T10818] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.2279'. [ 215.217026][T10820] vhci_hcd vhci_hcd.4: invalid port number 254 [ 215.223265][T10820] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 215.653965][T10828] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2285'. [ 215.783049][T10831] syzkaller0: entered promiscuous mode [ 215.796094][T10831] syzkaller0: entered allmulticast mode [ 215.829982][T10828] lo speed is unknown, defaulting to 1000 [ 215.836444][T10836] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 215.846245][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2284'. [ 215.871059][T10839] netlink: 'syz.7.2288': attribute type 15 has an invalid length. [ 215.879016][T10828] ip6_vti0 speed is unknown, defaulting to 1000 [ 215.975313][T10846] loop5: detected capacity change from 0 to 1024 [ 215.982783][T10846] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 215.997219][T10849] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2293'. [ 216.004985][T10850] lo speed is unknown, defaulting to 1000 [ 216.012069][T10846] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 216.036937][T10850] ip6_vti0 speed is unknown, defaulting to 1000 [ 216.044192][T10846] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 216.076742][T10846] EXT4-fs error (device loop5): ext4_get_journal_inode:5863: inode #5: comm syz.5.2291: unexpected bad inode w/o EXT4_IGET_BAD [ 216.127151][T10846] loop5: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 216.127366][T10846] EXT4-fs (loop5): no journal found [ 216.130670][T10853] lo speed is unknown, defaulting to 1000 [ 216.136564][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 216.152853][T10854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.153873][ C0] EXT4-fs (loop5): initial error at time 1771868786: ext4_get_journal_inode:5863: inode 5 [ 216.168103][T10854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.172096][ C0] EXT4-fs (loop5): last error at time 1771868786: ext4_get_journal_inode:5863: inode 5 [ 216.210271][T10853] ip6_vti0 speed is unknown, defaulting to 1000 [ 216.226515][T10846] EXT4-fs (loop5): can't get journal size [ 216.243608][T10846] EXT4-fs (loop5): failed to initialize system zone (-117) [ 216.251386][T10846] EXT4-fs (loop5): mount failed [ 216.287903][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2295'. [ 216.349582][T10866] loop7: detected capacity change from 0 to 1024 [ 216.392136][T10866] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.426538][T10866] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2299'. [ 216.621751][T10886] netlink: 'syz.8.2304': attribute type 1 has an invalid length. [ 216.634966][T10886] netlink: 'syz.8.2304': attribute type 3 has an invalid length. [ 216.658916][T10881] FAULT_INJECTION: forcing a failure. [ 216.658916][T10881] name failslab, interval 1, probability 0, space 0, times 0 [ 216.672382][T10881] CPU: 0 UID: 0 PID: 10881 Comm: syz.5.2302 Tainted: G W syzkaller #0 PREEMPT(full) [ 216.672423][T10881] Tainted: [W]=WARN [ 216.672431][T10881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.672443][T10881] Call Trace: [ 216.672448][T10881] [ 216.672454][T10881] __dump_stack+0x1d/0x30 [ 216.672522][T10881] dump_stack_lvl+0x95/0xd0 [ 216.672542][T10881] dump_stack+0x15/0x1b [ 216.672629][T10881] should_fail_ex+0x263/0x280 [ 216.672698][T10881] should_failslab+0x8c/0xb0 [ 216.672717][T10881] __kvmalloc_node_noprof+0x155/0x650 [ 216.672770][T10881] ? ip_set_alloc+0x24/0x30 [ 216.672815][T10881] ip_set_alloc+0x24/0x30 [ 216.672835][T10881] hash_netiface_create+0x2c1/0x740 [ 216.672858][T10881] ? __pfx_hash_netiface_create+0x10/0x10 [ 216.672891][T10881] ip_set_create+0x3cf/0x970 [ 216.672952][T10881] ? __mutex_lock_slowpath+0xa/0x10 [ 216.672987][T10881] nfnetlink_rcv_msg+0x509/0x5d0 [ 216.673176][T10881] netlink_rcv_skb+0x123/0x220 [ 216.673205][T10881] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 216.673256][T10881] nfnetlink_rcv+0x167/0x1720 [ 216.673349][T10881] ? __kfree_skb+0x109/0x150 [ 216.673370][T10881] ? nlmon_xmit+0x4f/0x60 [ 216.673409][T10881] ? consume_skb+0x4b/0x160 [ 216.673436][T10881] ? nlmon_xmit+0x4f/0x60 [ 216.673531][T10881] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 216.673565][T10881] ? __dev_queue_xmit+0x1393/0x1f40 [ 216.673595][T10881] ? __dev_queue_xmit+0x148/0x1f40 [ 216.673627][T10881] ? ref_tracker_free+0x37d/0x3e0 [ 216.673702][T10881] ? __netlink_deliver_tap+0x4dc/0x500 [ 216.673751][T10881] netlink_unicast+0x5c0/0x690 [ 216.673776][T10881] netlink_sendmsg+0x5c8/0x6f0 [ 216.673812][T10881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.673844][T10881] ____sys_sendmsg+0x5af/0x600 [ 216.673901][T10881] ___sys_sendmsg+0x195/0x1e0 [ 216.673948][T10881] __x64_sys_sendmsg+0xd4/0x160 [ 216.673983][T10881] x64_sys_call+0x194c/0x3020 [ 216.674086][T10881] do_syscall_64+0x12c/0x370 [ 216.674127][T10881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.674215][T10881] RIP: 0033:0x7f06ea66c629 [ 216.674290][T10881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.674341][T10881] RSP: 002b:00007f06e90c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.674359][T10881] RAX: ffffffffffffffda RBX: 00007f06ea8e5fa0 RCX: 00007f06ea66c629 [ 216.674373][T10881] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 216.674386][T10881] RBP: 00007f06e90c7090 R08: 0000000000000000 R09: 0000000000000000 [ 216.674423][T10881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.674474][T10881] R13: 00007f06ea8e6038 R14: 00007f06ea8e5fa0 R15: 00007ffc23264588 [ 216.674494][T10881] [ 216.955532][T10889] vlan2: entered promiscuous mode [ 216.969773][T10889] vlan2: entered allmulticast mode [ 216.974906][T10889] hsr_slave_1: entered allmulticast mode [ 217.341844][T10899] bridge0: port 4(batadv2) entered blocking state [ 217.350400][T10901] loop5: detected capacity change from 0 to 736 [ 217.377384][T10899] bridge0: port 4(batadv2) entered disabled state [ 217.476261][T10899] batadv2: entered allmulticast mode [ 217.486782][T10899] batadv2: entered promiscuous mode [ 217.567445][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 217.567461][ T28] audit: type=1400 audit(1771868787.754:3264): avc: denied { read } for pid=10895 comm="syz.5.2307" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 217.607161][ T28] audit: type=1400 audit(1771868787.754:3265): avc: denied { open } for pid=10895 comm="syz.5.2307" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 217.633872][ T8312] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.694795][ T28] audit: type=1400 audit(1771868787.884:3266): avc: denied { write } for pid=10912 comm="syz.8.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 217.719575][T10911] bridge0: port 5(batadv3) entered blocking state [ 217.721377][ T28] audit: type=1400 audit(1771868787.884:3267): avc: denied { connect } for pid=10912 comm="syz.8.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 217.741095][T10911] bridge0: port 5(batadv3) entered disabled state [ 217.747840][ T28] audit: type=1400 audit(1771868787.884:3268): avc: denied { name_connect } for pid=10912 comm="syz.8.2313" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 217.767267][T10911] batadv3: entered allmulticast mode [ 217.784791][ T28] audit: type=1400 audit(1771868787.884:3269): avc: denied { read } for pid=10908 comm="syz.7.2311" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 217.801537][T10911] batadv3: entered promiscuous mode [ 217.837560][ T82] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 217.846949][ T82] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 217.873265][ T28] audit: type=1400 audit(1771868787.884:3270): avc: denied { open } for pid=10908 comm="syz.7.2311" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 217.922328][ T28] audit: type=1400 audit(1771868788.014:3271): avc: denied { setcurrent } for pid=10908 comm="syz.7.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 217.950610][ T28] audit: type=1401 audit(1771868788.014:3272): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 217.985323][ T28] audit: type=1400 audit(1771868788.024:3273): avc: denied { create } for pid=10908 comm="syz.7.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 218.018968][T10915] syzkaller0: entered promiscuous mode [ 218.024707][T10915] syzkaller0: entered allmulticast mode [ 218.057692][T10920] dvmrp6: entered allmulticast mode [ 218.065863][T10914] lo speed is unknown, defaulting to 1000 [ 218.073996][T10920] loop6: detected capacity change from 0 to 512 [ 218.080402][T10914] ip6_vti0 speed is unknown, defaulting to 1000 [ 218.109465][T10920] EXT4-fs warning (device loop6): ext4_multi_mount_protect:314: fsck is running on the filesystem [ 218.120688][T10920] EXT4-fs warning (device loop6): ext4_multi_mount_protect:314: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 218.142652][T10920] xt_socket: unknown flags 0x4c [ 218.187377][ T36] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 218.196661][ T36] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 218.238909][T10924] loop6: detected capacity change from 0 to 512 [ 218.279522][T10924] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 218.337325][T10924] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 218.345802][T10924] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2317: bad orphan inode 4 [ 218.358162][T10924] loop6: lost filesystem error report for type 5 error -117 [ 218.359018][T10924] EXT4-fs (loop6): 1 orphan inode deleted [ 218.372108][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 218.372121][ C1] EXT4-fs (loop6): initial error at time 1771868788: ext4_orphan_get:1417 [ 218.372137][ C1] EXT4-fs (loop6): last error at time 1771868788: ext4_orphan_get:1417 [ 218.396010][T10924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.559537][T10936] loop5: detected capacity change from 0 to 128 [ 218.678951][T10940] bio_check_eod: 171 callbacks suppressed [ 218.678967][T10940] syz.5.2320: attempt to access beyond end of device [ 218.678967][T10940] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 218.704246][T10941] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #2: block 4: comm syz.6.2317: lblock 0 mapped to illegal pblock 4 (length 1) [ 218.732408][T10941] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #2: block 4: comm syz.6.2317: lblock 0 mapped to illegal pblock 4 (length 1) [ 218.790325][T10940] syz.5.2320: attempt to access beyond end of device [ 218.790325][T10940] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 218.844030][T10940] syz.5.2320: attempt to access beyond end of device [ 218.844030][T10940] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 218.895011][T10940] syz.5.2320: attempt to access beyond end of device [ 218.895011][T10940] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 218.943078][T10940] syz.5.2320: attempt to access beyond end of device [ 218.943078][T10940] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 219.002493][T10940] syz.5.2320: attempt to access beyond end of device [ 219.002493][T10940] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 219.050413][T10940] syz.5.2320: attempt to access beyond end of device [ 219.050413][T10940] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 219.085432][T10940] syz.5.2320: attempt to access beyond end of device [ 219.085432][T10940] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 219.116887][T10940] syz.5.2320: attempt to access beyond end of device [ 219.116887][T10940] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 219.143129][T10940] syz.5.2320: attempt to access beyond end of device [ 219.143129][T10940] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 219.242615][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.275369][T10947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.291456][T10947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.337565][T10955] __nla_validate_parse: 7 callbacks suppressed [ 219.337583][T10955] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2325'. [ 219.371120][T10945] bond3: Removing last arp target with arp_interval on [ 219.387619][T10945] bond3: entered promiscuous mode [ 219.393455][T10956] siw: device registration error -23 [ 219.401090][T10945] bond3: entered allmulticast mode [ 219.413222][T10945] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.581207][T10963] lo speed is unknown, defaulting to 1000 [ 219.587228][T10963] lo speed is unknown, defaulting to 1000 [ 219.593304][T10963] lo speed is unknown, defaulting to 1000 [ 219.600631][T10963] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 219.630242][T10964] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 219.647297][T10965] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 219.667364][T10963] lo speed is unknown, defaulting to 1000 [ 219.673713][T10963] lo speed is unknown, defaulting to 1000 [ 219.680096][T10963] lo speed is unknown, defaulting to 1000 [ 219.686532][T10963] lo speed is unknown, defaulting to 1000 [ 219.692880][T10963] lo speed is unknown, defaulting to 1000 [ 219.699403][T10963] lo speed is unknown, defaulting to 1000 [ 219.705779][T10963] lo speed is unknown, defaulting to 1000 [ 219.712473][T10963] lo speed is unknown, defaulting to 1000 [ 220.099554][T10976] loop5: detected capacity change from 0 to 512 [ 220.113440][T10976] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 220.199742][T10977] ip6_vti0 speed is unknown, defaulting to 1000 [ 220.228539][T10976] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 220.247969][T10976] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2333: bad orphan inode 4 [ 220.293066][T10976] loop5: lost filesystem error report for type 5 error -117 [ 220.293580][T10976] EXT4-fs (loop5): 1 orphan inode deleted [ 220.300940][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 220.300955][ C1] EXT4-fs (loop5): initial error at time 1771868790: ext4_orphan_get:1417 [ 220.300984][ C1] EXT4-fs (loop5): last error at time 1771868790: ext4_orphan_get:1417 [ 220.350030][T10976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.437723][T10977] lo speed is unknown, defaulting to 1000 [ 220.557321][T10987] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 220.791146][T10993] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 4: comm syz.5.2333: lblock 0 mapped to illegal pblock 4 (length 1) [ 221.266289][T10991] loop6: detected capacity change from 0 to 128 [ 221.280657][T10991] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.2335'. [ 221.289963][T10991] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.2335'. [ 221.323487][T10994] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 4: comm syz.5.2333: lblock 0 mapped to illegal pblock 4 (length 1) [ 221.339367][T10996] vhci_hcd vhci_hcd.4: invalid port number 254 [ 221.345571][T10996] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 221.771643][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.812932][T11013] netlink: get zone limit has 8 unknown bytes [ 221.838282][T11015] netlink: 'syz.5.2340': attribute type 1 has an invalid length. [ 221.874042][T11015] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 221.887684][T11015] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 221.898357][T11015] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 221.997957][T11030] 9p: Bad value for 'wfdno' [ 222.125000][T11047] loop5: detected capacity change from 0 to 1764 [ 222.212843][T11047] netlink: 288 bytes leftover after parsing attributes in process `syz.5.2349'. [ 222.430810][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2356'. [ 222.508596][T11076] IPVS: length: 122 != 8 [ 222.543218][T11080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2359'. [ 222.552522][T11080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2359'. [ 222.666594][T11080] syzkaller0: entered promiscuous mode [ 222.672206][T11080] syzkaller0: entered allmulticast mode [ 222.784634][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 222.784657][ T28] audit: type=1400 audit(1771868792.966:3328): avc: denied { create } for pid=11085 comm="syz.6.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 222.841728][T11088] 9pnet_fd: Insufficient options for proto=fd [ 222.853553][ T28] audit: type=1326 audit(1771868793.006:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11046 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ea66c629 code=0x7ffc0000 [ 222.933104][T11091] netlink: 'syz.6.2362': attribute type 21 has an invalid length. [ 222.943558][ T28] audit: type=1326 audit(1771868793.006:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11046 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ea66c629 code=0x7ffc0000 [ 222.973243][T11092] 0: reclassify loop, rule prio 0, protocol 800 [ 222.999960][T11087] ip6_vti0 speed is unknown, defaulting to 1000 [ 223.087494][T11087] lo speed is unknown, defaulting to 1000 [ 223.158409][T11091] netlink: 'syz.6.2362': attribute type 1 has an invalid length. [ 223.166410][T11091] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2362'. [ 223.246461][T11095] loop6: detected capacity change from 0 to 512 [ 223.270230][T11095] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 223.292093][T11095] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 223.326815][T11095] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2363: bad orphan inode 4 [ 223.346986][T11095] loop6: lost filesystem error report for type 5 error -117 [ 223.347157][T11095] EXT4-fs (loop6): 1 orphan inode deleted [ 223.360292][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 223.360313][ C0] EXT4-fs (loop6): initial error at time 1771868793: ext4_orphan_get:1417 [ 223.360340][ C0] EXT4-fs (loop6): last error at time 1771868793: ext4_orphan_get:1417 [ 223.394745][T11095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.571893][ T28] audit: type=1400 audit(1771868793.757:3331): avc: denied { kexec_image_load } for pid=11096 comm="syz.5.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 223.718714][ T28] audit: type=1400 audit(1771868793.907:3332): avc: denied { setopt } for pid=11118 comm="syz.8.2369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 224.525562][T11131] loop5: detected capacity change from 0 to 128 [ 224.532290][T11131] vfat: Unknown parameter 'sFortname' [ 224.553503][ T28] audit: type=1400 audit(1771868794.737:3333): avc: denied { name_bind } for pid=11130 comm="syz.5.2376" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 224.597423][ T28] audit: type=1400 audit(1771868794.777:3334): avc: denied { read } for pid=11130 comm="syz.5.2376" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 224.645619][T11134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11134 comm=syz.8.2377 [ 224.668970][ T28] audit: type=1400 audit(1771868794.857:3335): avc: denied { map } for pid=11130 comm="syz.5.2376" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 224.710616][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.773416][T11138] loop6: detected capacity change from 0 to 512 [ 224.792057][ T28] audit: type=1400 audit(1771868794.977:3336): avc: denied { map } for pid=11141 comm="syz.8.2380" path="socket:[34007]" dev="sockfs" ino=34007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 224.854160][ T28] audit: type=1400 audit(1771868795.007:3337): avc: denied { read accept } for pid=11141 comm="syz.8.2380" path="socket:[34007]" dev="sockfs" ino=34007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 224.856437][T11138] EXT4-fs (loop6): 1 orphan inode deleted [ 224.884058][ T69] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 1 [ 224.884598][T11138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.909240][T11138] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.933601][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.936341][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2373'. [ 224.951345][T11132] ip6_vti0 speed is unknown, defaulting to 1000 [ 225.036840][T11156] 9pnet_fd: Insufficient options for proto=fd [ 225.047144][T11156] loop6: detected capacity change from 0 to 512 [ 225.071859][T11156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.302516][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.365218][T11174] loop6: detected capacity change from 0 to 128 [ 225.386008][T11132] lo speed is unknown, defaulting to 1000 [ 225.388682][T11175] wg1: entered promiscuous mode [ 225.403732][T11175] wg1: entered allmulticast mode [ 225.574380][T11183] bio_check_eod: 10 callbacks suppressed [ 225.574396][T11183] syz.6.2389: attempt to access beyond end of device [ 225.574396][T11183] loop6: rw=0, sector=121, nr_sectors = 120 limit=128 [ 225.647324][T11190] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.875469][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2399'. [ 225.941741][T11200] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2402'. [ 225.955226][ T69] kworker/u8:4: attempt to access beyond end of device [ 225.955226][ T69] loop6: rw=1, sector=241, nr_sectors = 800 limit=128 [ 226.151461][T11211] syzkaller0: entered promiscuous mode [ 226.157069][T11211] syzkaller0: entered allmulticast mode [ 226.363015][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2408'. [ 226.579237][T11224] tc_dump_action: action bad kind [ 226.617762][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2407'. [ 226.626667][T11226] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2407'. [ 226.638444][T11226] geneve2: entered promiscuous mode [ 226.643721][T11226] geneve2: entered allmulticast mode [ 226.895891][T11239] bond0: (slave bridge_slave_1): Releasing backup interface [ 227.127017][T11245] netlink: 'syz.8.2416': attribute type 10 has an invalid length. [ 227.192470][T11247] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2417'. [ 227.207172][T11245] geneve1: entered promiscuous mode [ 227.226911][T11245] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 227.478566][T11256] loop6: detected capacity change from 0 to 512 [ 227.496035][T11256] msdos: Bad value for 'dmask' [ 227.904789][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 227.904802][ T28] audit: type=1326 audit(1771868798.099:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.8.2426" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d3398c629 code=0x0 [ 227.963004][ T28] audit: type=1400 audit(1771868798.129:3353): avc: denied { bind } for pid=11269 comm="syz.6.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.001851][ T28] audit: type=1400 audit(1771868798.129:3354): avc: denied { name_bind } for pid=11269 comm="syz.6.2425" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 228.048672][T11275] loop6: detected capacity change from 0 to 128 [ 228.058697][ T28] audit: type=1400 audit(1771868798.129:3355): avc: denied { node_bind } for pid=11269 comm="syz.6.2425" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 228.198688][T11279] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2427'. [ 228.511704][ T28] audit: type=1400 audit(1771868798.689:3356): avc: denied { ioctl } for pid=11280 comm="syz.7.2428" path="socket:[34119]" dev="sockfs" ino=34119 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 228.587338][T11292] netlink: 'syz.7.2432': attribute type 1 has an invalid length. [ 228.602112][T11292] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.620989][T11292] macvlan2: entered promiscuous mode [ 228.627142][ T28] audit: type=1400 audit(1771868798.819:3357): avc: denied { name_bind } for pid=11294 comm="syz.5.2433" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 228.631714][T11292] bond4: entered promiscuous mode [ 228.653871][T11292] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 228.663004][ T28] audit: type=1400 audit(1771868798.819:3358): avc: denied { sqpoll } for pid=11294 comm="syz.5.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 228.664558][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2433'. [ 228.701994][T11292] bond4: left promiscuous mode [ 228.879116][T11308] FAULT_INJECTION: forcing a failure. [ 228.879116][T11308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.909322][T11308] CPU: 1 UID: 0 PID: 11308 Comm: syz.6.2437 Tainted: G W syzkaller #0 PREEMPT(full) [ 228.909364][T11308] Tainted: [W]=WARN [ 228.909426][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.909439][T11308] Call Trace: [ 228.909446][T11308] [ 228.909453][T11308] __dump_stack+0x1d/0x30 [ 228.909547][T11308] dump_stack_lvl+0x95/0xd0 [ 228.909588][T11308] dump_stack+0x15/0x1b [ 228.909614][T11308] should_fail_ex+0x263/0x280 [ 228.909642][T11308] should_fail+0xb/0x20 [ 228.909689][T11308] should_fail_usercopy+0x1a/0x20 [ 228.909720][T11308] _copy_from_iter+0xcf/0xea0 [ 228.909817][T11308] ? should_fail_ex+0xd9/0x280 [ 228.909847][T11308] ? should_failslab+0x8c/0xb0 [ 228.909875][T11308] ? __kmalloc_noprof+0x1e3/0x4e0 [ 228.909917][T11308] ? kernfs_fop_write_iter+0xe2/0x300 [ 228.909962][T11308] kernfs_fop_write_iter+0x125/0x300 [ 228.910021][T11308] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 228.910059][T11308] vfs_write+0x5a6/0x9f0 [ 228.910136][T11308] ksys_write+0xdc/0x1a0 [ 228.910181][T11308] __x64_sys_write+0x40/0x50 [ 228.910335][T11308] x64_sys_call+0x27e1/0x3020 [ 228.910370][T11308] do_syscall_64+0x12c/0x370 [ 228.910416][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.910482][T11308] RIP: 0033:0x7f4bbddac629 [ 228.910503][T11308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.910524][T11308] RSP: 002b:00007f4bbc7ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.910567][T11308] RAX: ffffffffffffffda RBX: 00007f4bbe025fa0 RCX: 00007f4bbddac629 [ 228.910587][T11308] RDX: 0000000000000008 RSI: 0000200000000400 RDI: 0000000000000004 [ 228.910604][T11308] RBP: 00007f4bbc7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 228.910668][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.910684][T11308] R13: 00007f4bbe026038 R14: 00007f4bbe025fa0 R15: 00007fff494e1318 [ 228.910711][T11308] [ 229.150970][T11314] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2438'. [ 229.154541][T11313] netlink: 'syz.8.2438': attribute type 7 has an invalid length. [ 229.168157][T11313] netlink: 'syz.8.2438': attribute type 8 has an invalid length. [ 229.170147][T11314] netlink: 'syz.8.2438': attribute type 7 has an invalid length. [ 229.193877][T11314] netlink: 'syz.8.2438': attribute type 8 has an invalid length. [ 229.448027][T11324] loop6: detected capacity change from 0 to 128 [ 229.517291][T11325] vhci_hcd vhci_hcd.4: invalid port number 254 [ 229.523659][T11325] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 230.023799][ T28] audit: type=1400 audit(1771868800.220:3359): avc: denied { create } for pid=11326 comm="syz.5.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.044961][ T28] audit: type=1400 audit(1771868800.240:3360): avc: denied { bind } for pid=11326 comm="syz.5.2442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.065238][ T28] audit: type=1400 audit(1771868800.240:3361): avc: denied { write } for pid=11326 comm="syz.5.2442" path="socket:[33698]" dev="sockfs" ino=33698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.183454][T11333] __nla_validate_parse: 5 callbacks suppressed [ 230.183535][T11333] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2444'. [ 230.199235][T11333] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2444'. [ 230.214084][T11333] syzkaller0: entered promiscuous mode [ 230.219791][T11333] syzkaller0: entered allmulticast mode [ 230.227672][T11333] 0: reclassify loop, rule prio 0, protocol 800 [ 230.311666][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2453'. [ 230.511373][T11349] ipvlan0: entered promiscuous mode [ 230.516624][T11349] ipvlan0: entered allmulticast mode [ 230.538646][T11349] veth0_vlan: entered allmulticast mode [ 230.547537][T11349] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 230.964212][T11366] loop6: detected capacity change from 0 to 128 [ 230.972766][T11366] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.2455'. [ 230.981988][T11366] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.2455'. [ 230.997803][T11366] vhci_hcd vhci_hcd.4: invalid port number 254 [ 231.004051][T11366] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 231.690559][T11368] siw: device registration error -23 [ 232.143137][T11370] loop6: detected capacity change from 0 to 512 [ 232.173204][T11370] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 232.188494][T11370] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 232.206187][T11370] EXT4-fs (loop6): 1 truncate cleaned up [ 232.212580][T11370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.329224][T11386] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2459'. [ 232.422163][T11392] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2463'. [ 232.434377][T11395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=11395 comm=syz.5.2460 [ 232.447643][T11394] netlink: 'syz.8.2464': attribute type 21 has an invalid length. [ 232.469181][T11394] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2464'. [ 232.500152][T11399] bridge_slave_1: left allmulticast mode [ 232.505838][T11399] bridge_slave_1: left promiscuous mode [ 232.524431][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.526283][T11399] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.544232][T11399] bridge_slave_0: left allmulticast mode [ 232.550510][T11399] bridge_slave_0: left promiscuous mode [ 232.556309][T11399] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.556320][T11403] loop5: detected capacity change from 0 to 512 [ 232.610295][T11403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.720336][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.793350][T11413] netlink: 4280 bytes leftover after parsing attributes in process `syz.8.2466'. [ 232.802603][T11413] netlink: 4280 bytes leftover after parsing attributes in process `syz.8.2466'. [ 232.814646][T11412] loop6: detected capacity change from 0 to 512 [ 232.873018][T11412] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.915395][T11412] EXT4-fs (loop6): orphan cleanup on readonly fs [ 232.937613][T11408] ip6_vti0 speed is unknown, defaulting to 1000 [ 232.947913][T11412] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 233.004413][T11412] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 233.034372][T11412] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #13: comm syz.6.2468: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 233.056617][T11408] lo speed is unknown, defaulting to 1000 [ 233.094758][T11412] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 233.097430][T11412] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2468: couldn't read orphan inode 13 (err -117) [ 233.107296][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 233.107400][ C1] EXT4-fs (loop6): last error at time 1771868803: ext4_ext_check_inode:521: inode 13 [ 233.146775][T11412] loop6: lost filesystem error report for type 5 error -117 [ 233.157334][T11412] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.251132][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.265860][T11409] ip6_vti0 speed is unknown, defaulting to 1000 [ 233.305205][T11422] netlink: 'syz.5.2473': attribute type 1 has an invalid length. [ 233.313489][T11422] netlink: 'syz.5.2473': attribute type 3 has an invalid length. [ 233.427561][T11409] lo speed is unknown, defaulting to 1000 [ 233.440974][T11430] FAULT_INJECTION: forcing a failure. [ 233.440974][T11430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.481260][T11430] CPU: 0 UID: 0 PID: 11430 Comm: syz.5.2474 Tainted: G W syzkaller #0 PREEMPT(full) [ 233.481296][T11430] Tainted: [W]=WARN [ 233.481346][T11430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.481358][T11430] Call Trace: [ 233.481363][T11430] [ 233.481370][T11430] __dump_stack+0x1d/0x30 [ 233.481393][T11430] dump_stack_lvl+0x95/0xd0 [ 233.481418][T11430] dump_stack+0x15/0x1b [ 233.481478][T11430] should_fail_ex+0x263/0x280 [ 233.481508][T11430] should_fail+0xb/0x20 [ 233.481529][T11430] should_fail_usercopy+0x1a/0x20 [ 233.481557][T11430] _copy_to_user+0x20/0xa0 [ 233.481592][T11430] simple_read_from_buffer+0xb5/0x130 [ 233.481613][T11430] proc_fail_nth_read+0x10e/0x150 [ 233.481793][T11430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.481828][T11430] vfs_read+0x1ab/0x7f0 [ 233.481939][T11430] ? __rcu_read_unlock+0x4e/0x70 [ 233.481966][T11430] ? __fget_files+0x184/0x1c0 [ 233.481995][T11430] ? mutex_lock+0x57/0x90 [ 233.482030][T11430] ksys_read+0xdc/0x1a0 [ 233.482074][T11430] __x64_sys_read+0x40/0x50 [ 233.482103][T11430] x64_sys_call+0x2886/0x3020 [ 233.482202][T11430] do_syscall_64+0x12c/0x370 [ 233.482235][T11430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.482263][T11430] RIP: 0033:0x7f06ea62cece [ 233.482387][T11430] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 233.482475][T11430] RSP: 002b:00007f06e90c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.482495][T11430] RAX: ffffffffffffffda RBX: 00007f06e90c76c0 RCX: 00007f06ea62cece [ 233.482510][T11430] RDX: 000000000000000f RSI: 00007f06e90c70a0 RDI: 0000000000000006 [ 233.482521][T11430] RBP: 00007f06e90c7090 R08: 0000000000000000 R09: 0000000000000000 [ 233.482532][T11430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.482544][T11430] R13: 00007f06ea8e6038 R14: 00007f06ea8e5fa0 R15: 00007ffc23264588 [ 233.482642][T11430] [ 233.726211][T11440] bridge0: port 3(batadv1) entered blocking state [ 233.732883][T11440] bridge0: port 3(batadv1) entered disabled state [ 233.739575][T11440] batadv1: entered allmulticast mode [ 233.745890][T11440] batadv1: entered promiscuous mode [ 233.806764][T11444] loop6: detected capacity change from 0 to 4096 [ 233.854446][T11444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.894628][T11444] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.2481: corrupted in-inode xattr: bad e_name length [ 234.219318][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 234.219333][ T28] audit: type=1400 audit(1771868804.406:3366): avc: denied { read } for pid=11443 comm="syz.6.2481" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 234.249397][ T69] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 234.258756][ T69] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 234.270000][T11444] sd 0:0:1:0: device reset [ 234.317561][ T28] audit: type=1400 audit(1771868804.476:3367): avc: denied { mounton } for pid=11443 comm="syz.6.2481" path="/284/file1/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.353396][T11452] 9p: Bad value for 'wfdno' [ 234.361622][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.435298][T11456] loop6: detected capacity change from 0 to 1024 [ 234.470485][T11456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.505015][ T28] audit: type=1400 audit(1771868804.696:3368): avc: denied { lock } for pid=11455 comm="syz.6.2484" path="/285/file1/freezer.state" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 234.717543][T11467] bridge0: port 3(macsec0) entered blocking state [ 234.724941][T11467] bridge0: port 3(macsec0) entered disabled state [ 234.731626][T11467] macsec0: entered allmulticast mode [ 234.737029][T11467] bridge0: entered allmulticast mode [ 235.312191][T11467] macsec0: left allmulticast mode [ 235.318709][T11467] bridge0: left allmulticast mode [ 235.366316][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.378714][T11471] __nla_validate_parse: 6 callbacks suppressed [ 235.378729][T11471] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2488'. [ 235.395219][ T28] audit: type=1400 audit(1771868805.597:3369): avc: denied { mount } for pid=11470 comm="syz.7.2488" name="/" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 235.432637][T11473] ip6_vti0 speed is unknown, defaulting to 1000 [ 235.443618][ T28] audit: type=1400 audit(1771868805.597:3370): avc: denied { search } for pid=11470 comm="syz.7.2488" name="/" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 235.467496][ T28] audit: type=1400 audit(1771868805.597:3371): avc: denied { search } for pid=11470 comm="syz.7.2488" name="/" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 235.494098][ T28] audit: type=1400 audit(1771868805.687:3372): avc: denied { create } for pid=11472 comm="syz.8.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 235.496309][T11473] lo speed is unknown, defaulting to 1000 [ 235.578553][ T28] audit: type=1400 audit(1771868805.767:3373): avc: denied { create } for pid=11478 comm="syz.2.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 235.599536][ T28] audit: type=1400 audit(1771868805.767:3374): avc: denied { read } for pid=11478 comm="syz.2.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 236.048340][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2498'. [ 236.205337][ T28] audit: type=1400 audit(1771868806.397:3375): avc: denied { create } for pid=11510 comm="syz.7.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 236.319954][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2509'. [ 236.348665][T11519] netlink: 'syz.6.2509': attribute type 63 has an invalid length. [ 236.366788][T11519] lo: entered promiscuous mode [ 236.371958][T11519] lo: entered allmulticast mode [ 236.398534][ T8173] lo speed is unknown, defaulting to 1000 [ 236.404308][ T8173] syz0: Port: 1 Link ACTIVE [ 236.422528][T11519] ip6tnl0: Caught tx_queue_len zero misconfig [ 236.501022][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2512'. [ 236.554208][T11539] loop6: detected capacity change from 0 to 1024 [ 236.582795][T11539] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.639408][T11545] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 236.653840][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.708858][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2517'. [ 236.823006][T11570] loop6: detected capacity change from 0 to 128 [ 236.835022][T11572] bond_slave_0: entered promiscuous mode [ 236.840835][T11572] bond_slave_1: entered promiscuous mode [ 236.846880][T11572] macvtap1: entered promiscuous mode [ 236.862694][T11572] bond0: entered promiscuous mode [ 236.876710][T11572] macvtap1: entered allmulticast mode [ 236.882445][T11572] bond0: entered allmulticast mode [ 236.887651][T11572] bond_slave_0: entered allmulticast mode [ 236.893755][T11572] bond_slave_1: entered allmulticast mode [ 236.899975][T11572] geneve1: entered allmulticast mode [ 236.917663][T11572] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 236.939225][T11572] bond0: left allmulticast mode [ 236.946353][T11572] bond_slave_0: left allmulticast mode [ 236.951992][T11572] bond_slave_1: left allmulticast mode [ 236.957808][T11572] geneve1: left allmulticast mode [ 236.963173][T11572] bond0: left promiscuous mode [ 236.971125][T11581] syz.6.2523: attempt to access beyond end of device [ 236.971125][T11581] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 236.983526][T11572] bond_slave_0: left promiscuous mode [ 236.986697][T11581] syz.6.2523: attempt to access beyond end of device [ 236.986697][T11581] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 236.990093][T11572] bond_slave_1: left promiscuous mode [ 237.009083][T11581] syz.6.2523: attempt to access beyond end of device [ 237.009083][T11581] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 237.024174][T11581] syz.6.2523: attempt to access beyond end of device [ 237.024174][T11581] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 237.048147][T11581] syz.6.2523: attempt to access beyond end of device [ 237.048147][T11581] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 237.048251][T11582] netlink: 'syz.7.2519': attribute type 3 has an invalid length. [ 237.065008][T11581] syz.6.2523: attempt to access beyond end of device [ 237.065008][T11581] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 237.083178][T11581] syz.6.2523: attempt to access beyond end of device [ 237.083178][T11581] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 237.096719][T11581] syz.6.2523: attempt to access beyond end of device [ 237.096719][T11581] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 237.110282][T11581] syz.6.2523: attempt to access beyond end of device [ 237.110282][T11581] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 237.123759][T11581] syz.6.2523: attempt to access beyond end of device [ 237.123759][T11581] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 237.137478][T11582] netlink: 'syz.7.2519': attribute type 3 has an invalid length. [ 237.156088][T11582] netlink: 'syz.7.2519': attribute type 3 has an invalid length. [ 237.164082][T11582] netlink: 'syz.7.2519': attribute type 3 has an invalid length. [ 237.171364][T11586] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2527'. [ 237.172143][T11582] netlink: 'syz.7.2519': attribute type 3 has an invalid length. [ 237.188775][T11582] netlink: 'syz.7.2519': attribute type 3 has an invalid length. [ 237.227060][T11589] netlink: 596 bytes leftover after parsing attributes in process `syz.7.2530'. [ 237.419082][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2533'. [ 237.563205][T11614] ip6_vti0 speed is unknown, defaulting to 1000 [ 237.655700][T11614] lo speed is unknown, defaulting to 1000 [ 238.029445][T11618] loop6: detected capacity change from 0 to 2048 [ 238.057992][T11618] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 238.075523][T11618] EXT4-fs (loop6): group descriptors corrupted! [ 238.225946][T11622] ip6_vti0 speed is unknown, defaulting to 1000 [ 238.355333][T11634] program syz.2.2539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.454519][T11622] lo speed is unknown, defaulting to 1000 [ 238.735411][T11643] loop6: detected capacity change from 0 to 1024 [ 238.812170][T11643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.877863][T11643] validate_nla: 41 callbacks suppressed [ 238.877881][T11643] netlink: 'syz.6.2549': attribute type 21 has an invalid length. [ 239.026000][T11655] SELinux: policydb magic number 0xe909a000 does not match expected magic number 0xf97cff8c [ 239.058916][T11655] SELinux: failed to load policy [ 239.079358][T11648] loop5: detected capacity change from 0 to 512 [ 239.121708][T11648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.169123][T11648] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.187836][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.333808][T11664] veth0_to_team: entered promiscuous mode [ 239.342855][T11664] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 239.389344][T11667] syz_tun: entered allmulticast mode [ 239.444911][T11669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2552'. [ 239.671629][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 239.671643][ T28] audit: type=1400 audit(1771868809.869:3385): avc: denied { read } for pid=11660 comm="syz.2.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.011855][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.097069][T11697] loop6: detected capacity change from 0 to 512 [ 240.158096][T11697] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.170996][T11697] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.184104][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2566'. [ 240.204064][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.217568][ T28] audit: type=1400 audit(1771868810.349:3386): avc: denied { ioctl } for pid=11700 comm="syz.5.2564" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 240.303571][T11707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1816 sclass=netlink_route_socket pid=11707 comm=syz.8.2567 [ 240.485689][T11723] ip6_vti0 speed is unknown, defaulting to 1000 [ 240.522842][T11724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.551805][T11724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.594340][T11723] lo speed is unknown, defaulting to 1000 [ 240.723320][T11726] __nla_validate_parse: 1 callbacks suppressed [ 240.723337][T11726] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2574'. [ 241.515010][T11741] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.553925][T11743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.601028][T11728] Set syz1 is full, maxelem 65536 reached [ 241.611898][T11743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.674493][T11743] netlink: 'syz.5.2581': attribute type 4 has an invalid length. [ 241.739417][T11741] lo speed is unknown, defaulting to 1000 [ 242.237604][T11765] tipc: Can't bind to reserved service type 0 [ 242.543298][T11782] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 242.590579][T11782] loop6: detected capacity change from 0 to 512 [ 242.601053][ T28] audit: type=1400 audit(1771868812.760:3387): avc: denied { write } for pid=11781 comm="syz.7.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.447337][ T28] audit: type=1400 audit(1771868813.651:3388): avc: denied { wake_alarm } for pid=11789 comm="syz.2.2579" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.572541][ T28] audit: type=1400 audit(1771868813.771:3389): avc: denied { write } for pid=11793 comm="syz.6.2600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 244.596948][ T28] audit: type=1400 audit(1771868814.781:3390): avc: denied { accept } for pid=11815 comm="syz.6.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 244.857389][T11824] loop6: detected capacity change from 0 to 1024 [ 244.916193][T11824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 244.936838][T11824] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.048156][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 246.624497][ T28] audit: type=1400 audit(1771868816.832:3391): avc: denied { read } for pid=11852 comm="syz.6.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.753999][T11864] loop5: detected capacity change from 0 to 1024 [ 246.762299][T11864] EXT4-fs: Ignoring removed orlov option [ 246.775761][T11864] EXT4-fs: Ignoring removed nobh option [ 246.786720][T11864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.833865][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.883767][T11878] program syz.5.2628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.945610][ T28] audit: type=1400 audit(1771868817.153:3392): avc: denied { create } for pid=11882 comm="syz.5.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 247.000124][ T28] audit: type=1400 audit(1771868817.203:3393): avc: denied { getopt } for pid=11888 comm="syz.7.2631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 247.021984][ T3398] IPVS: starting estimator thread 0... [ 247.824710][T11890] IPVS: using max 2688 ests per chain, 134400 per kthread [ 247.880952][T11907] tmpfs: Unknown parameter 'usrquota' [ 247.896841][ T28] audit: type=1400 audit(1771868818.103:3394): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 247.942603][ T28] audit: type=1400 audit(1771868818.103:3395): avc: denied { search } for pid=3041 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.982707][ T28] audit: type=1400 audit(1771868818.103:3396): avc: denied { search } for pid=3041 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.043247][ T28] audit: type=1400 audit(1771868818.103:3397): avc: denied { search } for pid=3041 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.092558][ T28] audit: type=1400 audit(1771868818.103:3398): avc: denied { read } for pid=3041 comm="dhcpcd" name="n34" dev="tmpfs" ino=17615 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 248.133749][ T28] audit: type=1400 audit(1771868818.103:3399): avc: denied { open } for pid=3041 comm="dhcpcd" path="/run/udev/data/n34" dev="tmpfs" ino=17615 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 248.182437][ T28] audit: type=1400 audit(1771868818.103:3400): avc: denied { getattr } for pid=3041 comm="dhcpcd" path="/run/udev/data/n34" dev="tmpfs" ino=17615 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 248.489558][T11927] siw: device registration error -23 [ 248.496366][T11927] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 249.945526][T11883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.053352][T11975] loop5: detected capacity change from 0 to 128 [ 250.075975][T11975] vfat: Unknown parameter 'uni_x' [ 250.103638][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2661'. [ 250.443285][T11992] batman_adv: batadv0: Adding interface: dummy0 [ 250.459701][T11992] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.629307][T11992] batman_adv: batadv0: Interface activated: dummy0 [ 250.643119][T11996] batadv0: mtu less than device minimum [ 250.653171][T11996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.664155][T11996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.675006][T11996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.685884][T11996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.696926][T11996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.708085][T11996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.718932][T11996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.730044][T11996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 251.306065][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2671'. [ 251.671476][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 251.671498][ T28] audit: type=1400 audit(1771868821.875:3414): avc: denied { read } for pid=12040 comm="syz.5.2678" path="socket:[36924]" dev="sockfs" ino=36924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 253.535072][ T28] audit: type=1400 audit(1771868823.736:3415): avc: denied { setopt } for pid=12131 comm="syz.2.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 253.568977][ T28] audit: type=1400 audit(1771868823.766:3416): avc: denied { bind } for pid=12131 comm="syz.2.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 253.764102][T12152] tipc: Enabling of bearer rejected, media not registered [ 254.174258][ T28] audit: type=1400 audit(1771868824.376:3417): avc: denied { setopt } for pid=12172 comm="syz.2.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.288177][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2733'. [ 254.677515][T12194] syzkaller1: entered promiscuous mode [ 254.683347][T12194] syzkaller1: entered allmulticast mode [ 254.827877][T12196] loop6: detected capacity change from 0 to 4096 [ 254.834764][T12196] EXT4-fs: Ignoring removed bh option [ 254.874561][T12196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.897561][ T28] audit: type=1400 audit(1771868825.097:3418): avc: denied { rename } for pid=12195 comm="syz.6.2740" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.950081][ T6351] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.699977][T12226] tipc: Enabling of bearer rejected, failed to enable media [ 256.510253][ T28] audit: type=1400 audit(1771868826.707:3419): avc: denied { write } for pid=12244 comm="syz.6.2754" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 256.682712][ T28] audit: type=1400 audit(1771868826.707:3420): avc: denied { open } for pid=12244 comm="syz.6.2754" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 257.080535][ T28] audit: type=1400 audit(1771868827.288:3421): avc: denied { ioctl } for pid=12244 comm="syz.6.2754" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 258.654924][ T28] audit: type=1326 audit(1771868828.859:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.8.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3398c629 code=0x7ffc0000 [ 258.791435][T12274] netlink: 164 bytes leftover after parsing attributes in process `syz.8.2765'. [ 258.947048][ T28] audit: type=1326 audit(1771868828.889:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.8.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3398c629 code=0x7ffc0000 [ 258.970782][ T28] audit: type=1326 audit(1771868828.889:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.8.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f0d3398c629 code=0x7ffc0000 [ 258.994345][ T28] audit: type=1326 audit(1771868828.889:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.8.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3398c629 code=0x7ffc0000 [ 259.017917][ T28] audit: type=1326 audit(1771868828.889:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12270 comm="syz.8.2763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3398c629 code=0x7ffc0000 [ 259.046984][ T28] audit: type=1400 audit(1771868828.949:3427): avc: denied { mount } for pid=12272 comm="syz.8.2765" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 259.830849][ T28] audit: type=1400 audit(1771868830.039:3428): avc: denied { write } for pid=12284 comm="syz.8.2770" name="file0" dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 259.932166][ T28] audit: type=1400 audit(1771868830.039:3429): avc: denied { open } for pid=12284 comm="syz.8.2770" path="/139/file0" dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 260.296971][ T8312] ================================================================== [ 260.305113][ T8312] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 260.312616][ T8312] [ 260.314964][ T8312] read-write to 0xffff88812e59c010 of 8 bytes by task 12299 on cpu 1: [ 260.323142][ T8312] shmem_recalc_inode+0x3f/0x1f0 [ 260.328117][ T8312] shmem_get_folio_gfp+0x7a8/0xd60 [ 260.333250][ T8312] shmem_write_begin+0xfc/0x1f0 [ 260.338142][ T8312] generic_perform_write+0x183/0x490 [ 260.343468][ T8312] shmem_file_write_iter+0xc5/0xf0 [ 260.348632][ T8312] __kernel_write_iter+0x319/0x590 [ 260.353781][ T8312] dump_user_range+0xa7d/0xdb0 [ 260.358578][ T8312] elf_core_dump+0x21a2/0x2330 [ 260.363385][ T8312] coredump_write+0xacc/0xdd0 [ 260.368092][ T8312] vfs_coredump+0x26c7/0x3130 [ 260.372785][ T8312] get_signal+0xd80/0xf60 [ 260.377143][ T8312] arch_do_signal_or_restart+0x96/0x450 [ 260.382713][ T8312] irqentry_exit+0xf7/0x520 [ 260.387601][ T8312] asm_exc_page_fault+0x26/0x30 [ 260.392532][ T8312] [ 260.394874][ T8312] read to 0xffff88812e59c010 of 8 bytes by task 8312 on cpu 0: [ 260.402532][ T8312] shmem_getattr+0x41/0x200 [ 260.407067][ T8312] vfs_getattr_nosec+0x146/0x1e0 [ 260.412023][ T8312] vfs_getattr+0x48/0x60 [ 260.416280][ T8312] vfs_statx_path+0x28/0x140 [ 260.420911][ T8312] vfs_statx+0xc4/0x170 [ 260.425098][ T8312] vfs_fstatat+0x118/0x170 [ 260.429540][ T8312] __se_sys_newfstatat+0x55/0x3e0 [ 260.434590][ T8312] __x64_sys_newfstatat+0x55/0x70 [ 260.439634][ T8312] x64_sys_call+0x2c64/0x3020 [ 260.444409][ T8312] do_syscall_64+0x12c/0x370 [ 260.449019][ T8312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.454935][ T8312] [ 260.457269][ T8312] value changed: 0x0000000000000ced -> 0x0000000000000cee [ 260.464387][ T8312] [ 260.466732][ T8312] Reported by Kernel Concurrency Sanitizer on: [ 260.472912][ T8312] CPU: 0 UID: 0 PID: 8312 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 260.483952][ T8312] Tainted: [W]=WARN [ 260.487764][ T8312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.497841][ T8312] ================================================================== [ 269.687207][ T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.724568][ T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.764924][ T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.814462][ T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.944309][ T30] bond0 (unregistering): Released all slaves [ 269.994044][ T30] tipc: Disabling bearer [ 269.999313][ T30] tipc: Left network mode [ 270.004900][ T30] IPVS: stopping master sync thread 7395 ... [ 270.039339][ T30] hsr_slave_0: left promiscuous mode [ 270.048794][ T30] veth1_macvtap: left promiscuous mode [ 270.055639][ T30] veth0_macvtap: left promiscuous mode [ 270.061266][ T30] veth1_vlan: left promiscuous mode [ 270.066756][ T30] veth0_vlan: left promiscuous mode