last executing test programs: 2.659934675s ago: executing program 2 (id=845): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x2, &(0x7f0000000280)=[{0x6, 0x8, 0xad, 0x86}, {0x2d, 0x2, 0x7, 0x101}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x19, "921f7a82cb3696effe0162af0cdcf6161b0340aee46173d1c9"}, &(0x7f0000000080)=0x21) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e2d3093681fe4906ab30e6d0664598a8ba4300010028bd70000000000007000000db927d5544f738a7314fb93b935d90618da4ddfaef6f644d720ee297", @ANYRES32=0x0, @ANYBLOB="000000000600050000000000"], 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r2, @in={{0x2, 0x4e21, @private=0xa010102}}}, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmat(0x0, &(0x7f00001bc000/0x1000)=nil, 0x2000) 1.706261789s ago: executing program 2 (id=855): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) write$binfmt_aout(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x13, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x3b, &(0x7f0000000200)=""/59, 0x41000, 0x18, '\x00', 0x0, @lirc_mode2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000280)=[r0, r0, r0, r0], &(0x7f00000002c0)=[{0x2, 0x2, 0xf, 0x2}, {0x3, 0x1, 0xe, 0xb}, {0x1, 0x5, 0x1, 0x6}, {0x0, 0x1, 0x3, 0x1}, {0x2, 0x2, 0x7, 0x8}, {0x1, 0x3, 0x7, 0xa}, {0x3, 0x2, 0x6, 0x8}, {0x3, 0x3, 0x6, 0xc}, {0x0, 0x4, 0x7}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) (async) write$binfmt_aout(r1, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x13, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x3b, &(0x7f0000000200)=""/59, 0x41000, 0x18, '\x00', 0x0, @lirc_mode2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000280)=[r0, r0, r0, r0], &(0x7f00000002c0)=[{0x2, 0x2, 0xf, 0x2}, {0x3, 0x1, 0xe, 0xb}, {0x1, 0x5, 0x1, 0x6}, {0x0, 0x1, 0x3, 0x1}, {0x2, 0x2, 0x7, 0x8}, {0x1, 0x3, 0x7, 0xa}, {0x3, 0x2, 0x6, 0x8}, {0x3, 0x3, 0x6, 0xc}, {0x0, 0x4, 0x7}], 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 1.674865112s ago: executing program 0 (id=857): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 1.667962712s ago: executing program 2 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@i_version}, {@oldalloc}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x14fc42, 0xa3) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) pwritev2(r1, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 1.450127842s ago: executing program 0 (id=862): r0 = syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0xbc48, 0x1000, 0x2, 0x29e}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @private=0xa010102, 0x4}}) io_uring_enter(r0, 0x3516, 0x0, 0x200000000000000, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x6, 0x8, 0xea, 0x9, 0x0, 0xfffffffffffffff7, 0x8804, 0xd, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xc, 0x1, @perf_bp={0x0, 0xb}, 0x101cc0, 0x3, 0x7, 0x0, 0x3, 0x9, 0x8001, 0x0, 0x3, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x3) 1.345943301s ago: executing program 0 (id=865): openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x400040, 0x48) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000800)=ANY=[@ANYBLOB="756e686964652c646d6f64653d3078303030303030303030303030303030372c7362736563746f72ff0f00003030303030303030303030303030362c756e686964652c7362736563746f723df38528b6cd6c0878303030303030303038312c6d61703d6f66662c6d61703d61636f726e2c73686f776173736f632c63727566742c0039ce144419beb0b47163d9ec26342b4c7a1af0f74793abd42975cb3dd29277e8037e0ad928ccf51d57a41585a3ef3c20faec7062d652bb650da12b1c18e02fe1571415c05a33392337bb6036f2b945ab9540ccf8afb3679d805b4a9361135945df33f2bda8e9192317b0c1c733d241243cb0809db30e2579f58544f191d302c378a260bda3402c3a992809ef231dc2b6"], 0x1, 0xa5a, &(0x7f0000001d00)="$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") (async) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0xa5a, &(0x7f0000001d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x6, 0x1, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000003f40)={0x9, 0xffff, 0x8a3, 0x807, 0xf, "5cac1e1af00ed0fb"}) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) (async) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) socket$kcm(0x29, 0x2, 0x0) (async) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x800) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008004) 1.344130181s ago: executing program 1 (id=867): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1715, 0xa1ff}, [@IFLA_TXQLEN={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f00000000c0), 0x1003) 1.192880284s ago: executing program 0 (id=870): syz_io_uring_setup(0x86f, &(0x7f0000000400)={0x0, 0x79af, 0x400, 0xfffffffe, 0x214}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x118) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x6, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="440000001000390440bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="019800000000000014001434f63819dbaf0064766d97852b880000000000000000000800290002150700080028008ee600002f17a38684e853ef4cdb1fe0bd73775dad57b4c99390d1f83981a1a0c6021318b13a39a3b11e93a3b3697f789261c11388ac37c298fa5af96f8dda3a6abd89e696ff531eefae942cd78e7f75cf422190624101ce154d2f87f7a9e381854afa24d997f8bbd26b2d01eae71dd1995b415a90807388290c6a3fa3bef41baf7e7dc83a19c8a290c22ede38ba19524f8d2134e07618"], 0x44}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) inotify_init1(0x800) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbffffffffffbffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'team_slave_0\x00', {0x803}, 0x2b}) 1.119012081s ago: executing program 1 (id=872): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0xffffffff, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x200000000000000) 1.007428401s ago: executing program 2 (id=874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000010000000000000ff030000850000002800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x0, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}, @common=@unspec=@connmark={{0x30}, {0x0, 0x2, 0xfe}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x60b, 0xe03, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ftruncate(r1, 0x800000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) 962.885375ms ago: executing program 1 (id=877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0xf5}, 0x0) 941.838997ms ago: executing program 0 (id=878): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000000c0)=0x9, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 890.236502ms ago: executing program 4 (id=879): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3775}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000010000000000000ff030000850000002800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x0, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}, @common=@unspec=@connmark={{0x30}, {0x0, 0x2, 0xfe}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x60b, 0xe03, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 889.355482ms ago: executing program 1 (id=881): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000000)='0\x00', 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipmr_newroute={0xd0, 0x18, 0x100, 0x70bd27, 0x25dfdbfe, {0x80, 0x0, 0x14, 0xfe, 0xfc, 0x0, 0xfe, 0x6, 0x1000}, [@RTA_SPORT={0x6, 0x1c, 0x4e21}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_PREFSRC={0x8, 0x7, @empty}, @RTA_PREFSRC={0x8, 0x7, @loopback}, @RTA_METRICS={0x81, 0x8, 0x0, 0x1, "7a9f5faab536a1118345db75db28a68731c185e694a0637264a67182e8723cf369b74f1366af6b3eedf9790cd0485864ddb8f47c8bf367c8206c63190acdcb35e3b4ffd92dd27a37f01a501ef8fd7023fe4b7e51142703e28c5713732798e5f107954c0d8af0c1f1a1875ac3fb509330df7e381ad832b790672a116d60"}, @RTA_UID={0x8, 0x19, r2}, @RTA_MARK={0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x804}, 0x4040040) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x3, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000e3000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004030000010400"/180], 0xfc}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @remote, 0x7}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x4048084) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0d022b00000000dbdf2501000000050005000400000008000400ffff00000800030006000000050006"], 0x34}}, 0x4000) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r8, 0x800, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x24}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xb999, 0x8, 0x7, 0x1, 0xd]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c808}, 0x4000000) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000600)=[0x1, 0x1]) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, @perf_config_ext={0x7, 0x3}, 0x600a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r0) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r11, 0x0) 848.456975ms ago: executing program 1 (id=882): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x6, 0xf60, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='!pu<20\t&&') (fail_nth: 6) 820.893877ms ago: executing program 2 (id=883): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20004000) io_uring_enter(0xffffffffffffffff, 0x2762, 0x0, 0x43, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101002, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x420, 0x3f3, 0x708, 0x70bd2b, 0x25dfdbfb, {0x0, 0x1, 0xb, [0x2, 0xd, 0x6, 0xff, 0x6, 0x8, 0x1, 0x8, 0x7fffffff, 0x4bb4, 0x7f, 0xffffffff, 0x1758, 0xfffffffb, 0x3, 0x400, 0x0, 0x1, 0xc, 0x100, 0x40, 0x4, 0x5, 0xfffffffe, 0xd, 0x0, 0xfffffffb, 0x1ff, 0x3, 0x80000000, 0x1ff, 0x2, 0x3, 0x4, 0x1, 0x7, 0x2, 0x2, 0x3, 0x433, 0x7, 0x6, 0x4, 0x4, 0xae63, 0x101, 0x4, 0xfffffe00, 0x8, 0x80, 0xffffffff, 0xaabd, 0x7, 0x8, 0x3, 0xf, 0xffff, 0x91, 0x4, 0x1, 0x5, 0x8, 0x9837f670, 0x8000], [0x9, 0xfffffa6f, 0x3, 0x44, 0x8, 0xff, 0x7, 0x2, 0x40, 0x7, 0x35ed, 0x29, 0x7, 0x0, 0x4, 0x369d, 0x4, 0xe, 0x7, 0x1ff, 0x7, 0x0, 0x4, 0x6b, 0x1ff, 0x1, 0x8, 0x4, 0x0, 0x0, 0xb, 0x100, 0x4, 0x5ff6, 0x80, 0x1, 0x1, 0xd3c0, 0x3, 0x8, 0x3ff, 0x5, 0x8, 0xc, 0x1, 0x445, 0x3c, 0x9, 0x2, 0xf, 0x4, 0xb924, 0x3, 0x80000000, 0x81, 0xd, 0x7, 0x2, 0x96df, 0x7f, 0x5, 0x80000000, 0x2, 0x4], [0x8, 0xfffffffe, 0x100, 0x3, 0x1000, 0x2, 0xb601, 0x6, 0x3, 0x200000, 0xfffffff7, 0xe, 0x1, 0x6, 0x6, 0x40, 0x8, 0x7, 0xff, 0x3, 0x6, 0xfff, 0x0, 0x22a4, 0xfffffff4, 0xbe0f, 0x4, 0x6, 0xb30, 0x1, 0x6, 0x0, 0x20a3, 0x61, 0x5, 0x6, 0x5, 0xac5, 0x5, 0x1ff, 0x8, 0xffffffff, 0x2, 0x8, 0x0, 0x8, 0x40, 0x50, 0x7, 0x7, 0x10001, 0x6, 0x7, 0x5, 0x408, 0x7, 0x4, 0x100, 0x8, 0x35, 0x3, 0x2, 0x6, 0xa], [0x1000, 0x2, 0x9, 0xa, 0xf, 0x9, 0x7, 0xc05, 0x0, 0x8, 0xf6, 0x0, 0x6, 0xffffff81, 0xfffffff9, 0x10, 0x635, 0x4, 0x1, 0x9, 0x7, 0xf, 0x72a, 0x7, 0xa53, 0x81, 0x1ff, 0x3, 0x7, 0x6, 0x200, 0x0, 0x2, 0x7fff, 0x2, 0x7, 0x6, 0x6, 0x6fe5, 0x6, 0x95, 0x7, 0x3, 0x800, 0x30, 0x40, 0x2, 0x0, 0x6, 0x5, 0x4, 0x7, 0xd, 0x10, 0x3, 0x3, 0x7860, 0x2, 0x17e5, 0x4, 0x3, 0x0, 0x1, 0xc667], 0xa00}}, 0x420}, 0x1, 0x0, 0x0, 0x48811}, 0x0) 816.729258ms ago: executing program 3 (id=884): r0 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) rt_sigprocmask(0x2, &(0x7f00000004c0)={[0xffffff7ffffffff9]}, 0x0, 0x8) (async) r1 = socket$inet6(0xa, 0x80001, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000001740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x34, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24040080) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4004851}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001600)=@bpf_tracing={0x1a, 0xf, &(0x7f0000001780)=ANY=[@ANYBLOB="180000002df100000000000008000000180000001200000000000000cd40a27418110000", @ANYRES32=r0, @ANYBLOB="00000000000000047e43f800b70200000000000085000000860000001837000001000000000000000000000018430000fdffffff00000000000000008500e30018380000020000000000000000000000000000000000000000000000000000bebeeb6780b2d5753a961787e4e6d8951e992ae79b99e79fb7c77c56ecbd56864133166bafd6070673e5e52cd05f7920a48609b5d5da816bab0e677dddfb"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000500)=""/4096, 0x41000, 0x28, '\x00', r4, 0x1a, r0, 0x8, &(0x7f0000000200)={0x3, 0x1d8c}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xc, 0xe, 0x401}, 0x10, 0x22f2f, 0xffffffffffffffff, 0x9, &(0x7f0000001500)=[r0, r0], &(0x7f0000001540)=[{0x0, 0x4, 0x9, 0x35525af3b545e7f3}, {0x2, 0x3, 0x5, 0x1}, {0x2, 0x5, 0x2, 0xe}, {0x2, 0x1, 0x5, 0x6}, {0x5, 0x3, 0x10, 0x783628965b831d02}, {0x2, 0x3, 0x1, 0x7}, {0x0, 0x5, 0x2, 0x9}, {0x1, 0x5, 0x2, 0x2}, {0x2, 0x3, 0x8, 0xc}], 0x10, 0x39a4}, 0x94) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001900)={0x0, {{0x2, 0x4e23, @local}}}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) (async, rerun: 32) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) (async, rerun: 32) r7 = getpgrp(0x0) r8 = syz_pidfd_open(r7, 0x0) fsetxattr$trusted_overlay_nlink(r8, &(0x7f00000018c0), 0x0, 0x0, 0x3) (async) request_key(0x0, 0x0, 0x0, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 32) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kexec_load(0x0, 0x0, 0x0, 0x1) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r10, 0x29, 0x195dffd9d08b0fe1, 0x0, 0x0) bind$phonet(r9, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) (async, rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x190) (rerun: 32) 758.278743ms ago: executing program 4 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 758.068213ms ago: executing program 1 (id=886): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, 0x0, &(0x7f0000000000)) socket$pppl2tp(0x18, 0x1, 0x1) setrlimit(0x1, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000000001ff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0xffb4, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 728.065116ms ago: executing program 3 (id=887): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c", 0x13, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, &(0x7f0000000440)}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x282, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) shutdown(0xffffffffffffffff, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) 727.742926ms ago: executing program 4 (id=888): syz_io_uring_setup(0x86f, &(0x7f0000000400)={0x0, 0x79af, 0x400, 0xfffffffe, 0x214}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x118) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x6, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="440000001000390440bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="019800000000000014001434f63819dbaf0064766d97852b880000000000000000000800290002150700080028008ee600002f17a38684e853ef4cdb1fe0bd73775dad57b4c99390d1f83981a1a0c6021318b13a39a3b11e93a3b3697f789261c11388ac37c298fa5af96f8dda3a6abd89e696ff531eefae942cd78e7f75cf422190624101ce154d2f87f7a9e381854afa24d997f8bbd26b2d01eae71dd1995b415a90807388290c6a3fa3bef41baf7e7dc83a19c8a290c22ede38ba19524f8d2134e07618"], 0x44}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) inotify_init1(0x800) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbffffffffffbffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'team_slave_0\x00', {0x803}, 0x2b}) 680.92789ms ago: executing program 2 (id=889): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000280)={[{@grpquota}, {@delalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@grpid}, {@dioread_nolock}, {}, {@debug}, {@noauto_da_alloc}]}, 0x1, 0x5f2, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@max_batch_time={'max_batch_time', 0x3d, 0x800000000479}}, {@noinit_itable}, {@nomblk_io_submit}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@grpjquota}, {@resgid}, {@auto_da_alloc}, {@grpid}, {@delalloc}]}, 0xfc, 0x59a, &(0x7f0000000580)="$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") madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) mlockall(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x9a55]}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') preadv(r3, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80e8662d, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc1}}) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) syz_open_procfs(r4, &(0x7f0000000100)='net/ip6_tables_names\x00') 606.144616ms ago: executing program 3 (id=890): uname(0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) openat(0xffffffffffffff9c, 0x0, 0x0, 0xd912dbfad8e30d4c) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000001280)=[{0x0}], 0x1, 0xe) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed6, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) poll(0x0, 0x0, 0xfffffff7) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed008e, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@block_validity}, {@orlov}, {@lazytime}, {@acl}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000680)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0xffff, 0x80, 0x6}, @mpls={[], @ipv6=@generic={0x5, 0x6, "50c0e8", 0x251, 0x88, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[@hopopts={0x88, 0x19, '\x00', [@pad1, @hao={0xc9, 0x10, @remote}, @generic={0x3, 0xa4, "fd72c764a0532877b4c342713bcdf24d7f958eeb7f237ebd00c8b1bd82b150c32cec44b0563ed317eaf9df2ba90ee88ccdb0b36198cb2fd4bc93cd0882262a2c3a7a4ff1ff65411bda36edf16dc723e8de2ac4132b80d546880a75b9b61864ae8b2ee7b61a4c9bfddfe779f1c4ca6e84634ba7d0d9d3d6c57ee421f354c7169598fc117d40ff1b78a15550bd957ccf5139dc04ed1dd45d64fa45668cb315f13e00000000"}, @generic={0x0, 0xc, "9655846b8c353c8e00767721"}]}, @srh={0x16, 0x4, 0x4, 0x2, 0x4, 0x60, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1]}, @routing={0x3b, 0x6, 0x0, 0x3, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2]}, @hopopts={0x84, 0xa, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x10, 0x4, [0x1, 0x3, 0x18fb]}}, @ra={0x5, 0x2, 0x8000}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x2d8}, @calipso={0x7, 0xfffffffffffffc5b, {0x0, 0x2, 0xad, 0x7b1, [0x5178]}}]}], "fa0eb5f769b29d78423afe9c0fdee3f964ad64307b2a819b555d7e18aa8560bac77edb44a812552ac39cbff23cf04b4692027adee8dd75f74bcf4cb64d4772a27e47da90a4b77d9893bfafc56c4d7355cfc42f05b1403b872ccf1b17a883cd0631fa92336db5fbfd915c2b247d37a78663ce25c164dac8c1e11edcf6790175e69ccc888f99565cb6215a30337ba587698f82c30d918175b4d31bf6fd8a5b46520ba38ca21b5858231c56eeed548a3575fd3c8893e2989a91d9"}}}}, 0x287) 415.353273ms ago: executing program 4 (id=891): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000140), 0x4) sendmsg$nl_route(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e008d2a0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00X'], 0x24}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf10f748e670460c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1411, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x20000001) 315.584652ms ago: executing program 4 (id=892): socketpair(0x2c, 0x1, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f0000000300)="90b733b775", &(0x7f00000003c0)=""/176}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x1a2d, 0x0, 0x7fc, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r2) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e32}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r3, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 113.37169ms ago: executing program 3 (id=893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000010000000000000ff030000850000002800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x0, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}, @common=@unspec=@connmark={{0x30}, {0x0, 0x2, 0xfe}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x60b, 0xe03, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ftruncate(r1, 0x800000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) 113.03249ms ago: executing program 3 (id=894): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x3, 0x7}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) write$P9_RFSYNC(r4, &(0x7f0000000240)={0x7, 0x33, 0x1}, 0x7) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000080), 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$sg(&(0x7f0000000380), 0x6f5e, 0xa8001) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffd, 0x6, 0x10, @buffer={0x20, 0x0, 0x0}, &(0x7f00000005c0)="40791d19604f", 0x0, 0x100004, 0x0, 0x2, 0x0}) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES8=r5], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4040080) fcntl$getownex(r6, 0x10, &(0x7f0000000280)={0x0, 0x0}) capget(&(0x7f00000002c0)={0x20071026, r8}, &(0x7f00000003c0)={0x849, 0x55f3000, 0x6, 0x104c, 0x6, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100a06000408010014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) 87.074982ms ago: executing program 0 (id=895): quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x300000000000000, 0x0) syz_pidfd_open(0x0, 0x0) sched_getscheduler(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") socketpair$unix(0x1, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40800) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x141ac2) r2 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) 86.346802ms ago: executing program 4 (id=896): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000030900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f4000000006201200000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000f4110380f01100800800034000000002090009"], 0x12b4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) remap_file_pages(&(0x7f000059c000/0x3000)=nil, 0x3000, 0x100000c, 0xffffffff, 0x40000) sendto$inet6(r1, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x9) 0s ago: executing program 3 (id=897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000380)='./file1\x00', 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x2c8e02, 0x4) fsetxattr$system_posix_acl(r2, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="0200000001000000000000004804000100000500000000037653fb059283b946c9028c9f6dd614632bab3cf47a9b9b8737258bf31bf5d55f9fce4d88a698659519c11bde38b712bb4b57091342a4471f11e2a3c544625f20f663407015d4dd8c4f5e686c4ed9261541dc84c097b2b6c37ca7458283ad394665b9ad3b51a2a3886cd737407f036b8d32e3", @ANYRES32=0x0, @ANYBLOB="10000300000000002000060000000000"], 0x2c, 0x1) setreuid(0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x2208046, &(0x7f0000000b80)=ANY=[], 0x1, 0x2bd, &(0x7f0000000a00)="$eJzs3UFrI2UYAOB3kjTNKpgiXhTBAT14KluvXhplBbEnJYJ60OB2QZKw0IWAFczuaX+BR/+HP8GLF/+B4FXwtnuojMxMJpPYpNa2acE+z+nd75v3+96Zb0lzmTdfvT4e3n+YxJNnv0Wnk0RjP/bjeRI70YjK42gFAPD/8TzL4s+s+tdL/yHzTmMzFQEAm1b+/S8tjm/dXEkAwIZ98tnnH/UODu59nKadeLX7dNJPImL8dNIv53sP4psYxWHcjW6cRGRzZVx8T2iluZ14azyd9PPM8Ze/zNbv/RFR5O9FN3ZO53/w4cG9vbQ0z3+hqi6N3oP5N5FuvLI6/51/5sd4Gv12vP3mQv270Y1fv46HMYr7kefW+d/vpen72Q/Pvvsi3ybPTxrR3y6uq2XN6zkRAAAAAAAAAAAAAAAAAAAAAABug900Tcr2PUX/nnyo6J8z6TdPivndtLLY32da9QdKqoXK/kBZzFr0TLP4seqvczdN02x2YZ3fitdaflgAAAAAAAAAAAAAAAAAAAAAco++PR4ORqPD6j3+w6Nq5CJBtUr1Wv9F19lfGHkjjoeD5voFt8+/V+txfeN5rWdeHK3WJZ/GcnDnjKm8nqvcqwi254d79GmUQXUwV7rXy++Vix4PB+lsqnrIw0Hyb3t1qoP7aXGqHZctLCv+S5xky2famZe6nNW+oqfRfnHl1F9Zlp1vnXd/L89oNpIULTbOt/vWLFh5g3nQOX0WP69fcO1HRvPynzoAAAAAAAAAAAAAAAAAAMAq9Uu/KyafrEkqxxsbLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArlH9+/9V0ImI5ZHlYKtOXntNHbTj6NFN3h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3w98BAAD//yuLSKY=") openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x88880, 0x0) r3 = syz_io_uring_setup(0x11db, &(0x7f0000000100)={0x0, 0x3c76, 0x400, 0xfffffffe, 0x17b, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000e00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000001340)=ANY=[@ANYBLOB="f8ee0000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="060006004e230000060006004e230000cc0b08805c00008008000a000100000024000100000000000000000000000000000000000000000000000000000000000000000006000500ff030000240002002fafe57e6206b0f7aece1513210fdacac03eb6ab08438cb5526ef7ab87f76f4e040100804400098040000080060001000a00000014000200fc0100000000000000000000000000010500030002000000060001000200000008000200ffffffff050003000300000008000a0001000000200004000a004e2100000000fe8000000000000000000000000000aa7206000024000200b02a09bd641f85feb3e7c86bb2473f5c859ab57f68d510904b2249bdcffbb940200004000a004e21000020000000000000000000000000000000000008000000500009804c000080060001000200000008000200ac1e010105000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200ac1e010105000300000000000c00008008000a000100000024000080200004000a004e240000007f00000000000000000000000000000001070000001400008008000a000100000008000300050000002800008024000200762ae0c0608a6ed049b6d7d5e579f621547da1909eae5415eef0aecb70cc1fec200000801400040002004e24ac1414aa000000000000000006000500800000008c0400800600050000000000d80209801c000080060001000200000008000200ac1e00010500030003000000040000800400008040000080060001000a0000001400020000000000000000000000ffff0a0101010500030003000000060001000200000008000200ffffffff050003000100000088000080060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000200000008000200640101000500030001000000060001000a00000014000200000000000000000000000000000000000500030003000000a0000080060001000200000008000200ac1414200500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000a00000014000200fc0000000000000000000000000000010500030001000000060001000200000008000200ac1e000105000300000000001c0000800600010002000000080002000a0101000500030001000000b8000080060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a00000014000200200100000000000000000000000000000500030003000000060001000200000008000200ac1414bb0500030002000000060001000200000008000200e00000020500030002000000060001000200000008000200ffffffff0500030001000000060001000a00000014000200fc010000000000000000000000000000050003000000000058000080060001000a00000014000200fe8000000000000000000000000000100500030003000000060001000200000008000200ffffffff05000300030000000600010002000000080002000a01010105000300030000001c000080060001000200000008000200ac1e01010500030000000000a80109804c0000800600010002000000080002000a0101020500030001000000060001000200000008000200ac1414aa0500030002000000060001000200000008000200ac1e0001050003000200000030010080060001000200000008000200000007000500030002000000060001000200000008000200e00000010500030020000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200200100000000000000000000000000020500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030002000000060001000a0000001400020000000000000000000000000000000000050003000100000028000080060001000a00000014000200ff0200000000000000000000000000010500030003000000fc04008024000200c9fa2b8538e9c6999a3bba3fe2e613614b4f5dc1259a722b5dda74462d8720bf200004000a004e2200000009fc0200000000000000000000000000010f0000000600050006000000200004000a004e23000003fffe8000000000000000000000000000aa0000000008000300020000007004098064000080060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000200000008000200e00000020500030003000000060001000a0000001400020000000000000000000000000000000001050003000200000040000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff01000000000000000000000000000105000300010000007c000080060001000a00000014000200200100000000000000000000000000000500030003000000060001000a00000014000200fe8000000000000000000000000000270500030002000000060001000200000008000200640101020500030000000000060001000200000008000200000000000500030001000000000100800600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200fe8000000000000000000000000000220500030002000000060001000200000008000200000000000500030003000000060001000200000008000200ac1414bb0500030003000000060001000200000008000200e000000205000300000000001c000080060001000200000008000200ffffffff050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000a00000014000200ff02000000000000000000000000000105000300010000007c000080060001000200000008000200ffffffff0500030000000000060001000a00000014000200fc0100000000000000000000000000000500030003000000060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200ac1e0001050003000300000040000080060001000a000000140002002001000000000000000000000000000005000300010000000600010002000000080002007f000001050003000000000094000080060001000200000008000200ac14143b0500030001000000060001000a00000014000200fe8800000000000000000000000008010500030003000000060001000200000008000200ac14141d0500030001000000060001000200000008000200ac1e01010500030003000000060001000a00000014000200fe8000000000000000000000000000aa050003000000000070000080060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a00000014000200fe88000000000000000000000000000105000300020000001400040002004e21640101020000000000000000540000801400040002004e220a010102000000000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000008000a00010000000800030001000000"], 0xbf8}, 0x1, 0x0, 0x0, 0x44001}, 0x40010) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) mq_open(&(0x7f0000000340)='\x00', 0x40, 0x149, &(0x7f00000003c0)={0x3, 0x3, 0x4, 0x8c6}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x1fb6}, 0x2800, 0x1, 0x0, 0x2, 0x0, 0x6, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000e40)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c0000000000019078ac1e0001ffffffff0800907800ff0000232a3585181a6a1891496390a9f39a6fb7ad54ddc5f0b88efb4a08599509172b095c666d9f3edfc2e7e8410c35b72a74712208028ebb1e9fab516c78347d507c427d001683febe8cc1e9fddc9337db424232342ba6d80fe41500ed96fc04851381b4869e19f2d07eed7b904f8c21d80893a8934a8e34e7d1904502058da37bc314ad59b83bc39df5439e51c69c35c82058c3bc058b0b612add23ef506f3d4539d24138a3bd91c9bff3399b81598e4b955295fb0e"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x310040, &(0x7f0000000540)={[{@dax}, {}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x3}}]}, 0x81, 0x514, &(0x7f00000006c0)="$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") sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='LKG'], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 38.826905][ T3580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.878199][ T3580] Zero length message leads to an empty skb [ 38.935199][ T3585] capability: warning: `syz.3.22' uses 32-bit capabilities (legacy support in use) [ 39.006653][ T3575] syz.1.21 (3575) used greatest stack depth: 10440 bytes left [ 39.151553][ T3594] msdos: Unknown parameter 'mountinfo' [ 39.228027][ T3600] netlink: 'syz.1.27': attribute type 1 has an invalid length. [ 39.266457][ T3607] EXT4-fs: Ignoring removed bh option [ 39.277967][ T3607] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.287072][ T3607] ext2: Invalid gid '0x00000000ffffffff' [ 39.329731][ T3607] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.347254][ T3609] FAT-fs (loop2): bogus number of FAT sectors [ 39.368089][ T3609] FAT-fs (loop2): Can't find a valid FAT filesystem [ 39.396761][ T3607] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.465697][ T3607] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.28: invalid indirect mapped block 1023410176 (level 0) [ 39.527583][ T3607] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.535565][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 39.549833][ T3607] EXT4-fs (loop4): Remounting filesystem read-only [ 39.551243][ C0] EXT4-fs (loop4): initial error at time 1771785694: ext4_free_branches:1023: inode 11 [ 39.567439][ C0] EXT4-fs (loop4): last error at time 1771785694: ext4_free_branches:1023: inode 11 [ 39.590168][ T3607] EXT4-fs (loop4): 1 truncate cleaned up [ 39.619924][ T3607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.649026][ T3607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3607 comm=syz.4.28 [ 39.666428][ T3607] netlink: 'syz.4.28': attribute type 1 has an invalid length. [ 39.684311][ T3607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28'. [ 39.716169][ T28] kauditd_printk_skb: 153 callbacks suppressed [ 39.716189][ T28] audit: type=1400 audit(1771785694.463:265): avc: denied { create } for pid=3606 comm="syz.4.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 39.778937][ T28] audit: type=1400 audit(1771785694.463:266): avc: denied { bpf } for pid=3606 comm="syz.4.28" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.897012][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.935514][ T28] audit: type=1400 audit(1771785694.683:267): avc: denied { perfmon } for pid=3634 comm="syz.4.29" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.074333][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.148303][ T28] audit: type=1400 audit(1771785694.893:268): avc: denied { setopt } for pid=3638 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.195736][ T28] audit: type=1400 audit(1771785694.953:269): avc: denied { read } for pid=3638 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.285539][ T28] audit: type=1400 audit(1771785695.003:270): avc: denied { name_bind } for pid=3638 comm="syz.3.30" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 40.416047][ T3646] netlink: 52 bytes leftover after parsing attributes in process `syz.0.32'. [ 40.435513][ T28] audit: type=1400 audit(1771785695.173:271): avc: denied { ioctl } for pid=3642 comm="syz.0.32" path="socket:[5080]" dev="sockfs" ino=5080 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.722631][ T3651] set_capacity_and_notify: 4 callbacks suppressed [ 40.732225][ T3651] loop3: detected capacity change from 0 to 512 [ 40.803455][ T3657] loop0: detected capacity change from 0 to 512 [ 40.826809][ T28] audit: type=1400 audit(1771785695.573:272): avc: denied { setopt } for pid=3648 comm="syz.0.34" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.340852][ T3651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.361274][ T3651] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.364164][ T28] audit: type=1326 audit(1771785952.113:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a243c629 code=0x7ffc0000 [ 41.416391][ T28] audit: type=1326 audit(1771785952.113:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3670 comm="syz.1.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a243c629 code=0x7ffc0000 [ 41.515197][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.647888][ T3690] mmap: syz.0.41 (3690) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.176648][ T3702] loop3: detected capacity change from 0 to 1024 [ 42.387479][ T3702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.470034][ T3717] netlink: 'syz.4.47': attribute type 2 has an invalid length. [ 42.504870][ T3701] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 42.520064][ T3717] netlink: 'syz.4.47': attribute type 2 has an invalid length. [ 42.550312][ T3725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3725 comm=syz.0.44 [ 42.571157][ T3725] netlink: 'syz.0.44': attribute type 13 has an invalid length. [ 42.690784][ T3725] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.698165][ T3725] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.816351][ T3725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.828988][ T3725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.402714][ T3745] hub 8-0:1.0: USB hub found [ 43.407463][ T3745] hub 8-0:1.0: 8 ports detected [ 43.616840][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.653438][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.680915][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.700110][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.790991][ T3764] loop1: detected capacity change from 0 to 512 [ 43.807057][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.856241][ T3764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.966534][ T3764] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.056264][ T3771] loop2: detected capacity change from 0 to 8192 [ 44.062969][ T3764] Driver unsupported XDP return value 0 on prog (id 28) dev N/A, expect packet loss! [ 44.067669][ T3774] EXT4-fs error (device loop1): ext4_get_first_dir_block:3527: inode #12: comm syz.1.52: Directory block failed checksum [ 44.117476][ T3774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.52'. [ 44.218681][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.182749][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 45.182766][ T28] audit: type=1400 audit(1771785955.962:350): avc: denied { setopt } for pid=3797 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.246916][ T28] audit: type=1400 audit(1771785955.982:351): avc: denied { module_request } for pid=3795 comm="syz.4.61" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.364455][ T3810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3810 comm=syz.4.61 [ 45.378067][ T28] audit: type=1400 audit(1771785956.123:352): avc: denied { ioctl } for pid=3797 comm="syz.0.62" path="socket:[6331]" dev="sockfs" ino=6331 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.435056][ T3812] netlink: 'syz.4.61': attribute type 13 has an invalid length. [ 45.447155][ T28] audit: type=1400 audit(1771785956.123:353): avc: denied { create } for pid=3797 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 45.526640][ T3816] loop0: detected capacity change from 0 to 512 [ 45.542921][ T28] audit: type=1326 audit(1771785956.274:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 45.563775][ T3816] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.577781][ T28] audit: type=1326 audit(1771785956.274:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 45.598881][ T3816] EXT4-fs: inline encryption not supported [ 45.622259][ T28] audit: type=1326 audit(1771785956.274:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 45.650861][ T3819] loop1: detected capacity change from 0 to 512 [ 45.657509][ T3819] EXT4-fs: Ignoring removed orlov option [ 45.678427][ T28] audit: type=1326 audit(1771785956.274:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 45.706643][ T3822] loop3: detected capacity change from 0 to 512 [ 45.732658][ T3819] EXT4-fs (loop1): 1 truncate cleaned up [ 45.738770][ T3819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.758408][ T3816] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.804318][ T3816] EXT4-fs error (device loop0): ext4_quota_enable:7188: comm syz.0.64: Bad quota inum: 2, type: 2 [ 45.859287][ T3816] loop0: lost filesystem error report for type 5 error -117 [ 45.862890][ T3816] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 45.870374][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 45.870406][ C0] EXT4-fs (loop0): last error at time 1771785956: ext4_quota_enable:7188 [ 45.902921][ T3831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.911466][ T3831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.919990][ T28] audit: type=1326 audit(1771785956.274:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 45.964052][ T3816] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 45.980148][ T3816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.990029][ T28] audit: type=1326 audit(1771785956.274:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 46.049584][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.064982][ T3830] loop3: detected capacity change from 0 to 8192 [ 46.256071][ T3843] netlink: 'syz.0.70': attribute type 10 has an invalid length. [ 46.263897][ T3843] macvlan1: entered allmulticast mode [ 46.270102][ T3843] veth1_vlan: entered allmulticast mode [ 46.278576][ T3843] team0: Port device macvlan1 added [ 46.904848][ T3863] loop4: detected capacity change from 0 to 512 [ 46.937886][ T3863] EXT4-fs (loop4): invalid inodes per group: 1 [ 46.937886][ T3863] [ 46.951159][ T3843] syz.0.70 (3843) used greatest stack depth: 9400 bytes left [ 47.271988][ T3892] loop3: detected capacity change from 0 to 8192 [ 47.603307][ T3915] loop4: detected capacity change from 0 to 256 [ 47.626659][ T3915] FAT-fs (loop4): codepage cp949 not found [ 47.681081][ T3894] cgroup: fork rejected by pids controller in /syz2 [ 47.767947][ T3940] netlink: 104 bytes leftover after parsing attributes in process `syz.4.88'. [ 47.882729][ T3975] batman_adv: batadv0: Adding interface: macvlan2 [ 47.889433][ T3975] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.915566][ T3975] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 48.213753][ T4091] loop3: detected capacity change from 0 to 8192 [ 48.232196][ T4092] loop0: detected capacity change from 0 to 256 [ 48.274296][ T4092] FAT-fs (loop0): Directory bread(block 64) failed [ 48.280949][ T4092] FAT-fs (loop0): Directory bread(block 65) failed [ 48.287727][ T4092] FAT-fs (loop0): Directory bread(block 66) failed [ 48.294478][ T4092] FAT-fs (loop0): Directory bread(block 67) failed [ 48.301367][ T4092] FAT-fs (loop0): Directory bread(block 68) failed [ 48.308088][ T4092] FAT-fs (loop0): Directory bread(block 69) failed [ 48.314862][ T4092] FAT-fs (loop0): Directory bread(block 70) failed [ 48.321606][ T4092] FAT-fs (loop0): Directory bread(block 71) failed [ 48.328497][ T4092] FAT-fs (loop0): Directory bread(block 72) failed [ 48.335749][ T4092] FAT-fs (loop0): Directory bread(block 73) failed [ 48.509528][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.542213][ T4094] loop2: detected capacity change from 0 to 512 [ 49.058136][ T4106] loop4: detected capacity change from 0 to 1764 [ 49.070980][ T4102] bridge0: port 3(batadv1) entered blocking state [ 49.099512][ T4102] bridge0: port 3(batadv1) entered disabled state [ 49.153793][ T4106] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 49.196381][ T4102] batadv1: entered allmulticast mode [ 49.252128][ T4102] batadv1: entered promiscuous mode [ 49.414776][ T4112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 49.438672][ T4113] loop4: detected capacity change from 0 to 1024 [ 49.467239][ T4112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 49.481861][ T4113] EXT4-fs: Ignoring removed orlov option [ 49.502922][ T4113] EXT4-fs: Ignoring removed nobh option [ 49.554225][ T82] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 49.563508][ T82] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 49.583440][ T4113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.230576][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.470297][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 50.470316][ T28] audit: type=1400 audit(1771785961.280:387): avc: denied { ioctl } for pid=4131 comm="syz.2.111" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 50.620880][ T4139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.736154][ T28] audit: type=1400 audit(1771785961.551:388): avc: denied { setattr } for pid=4138 comm="syz.2.113" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.816221][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.865723][ T28] audit: type=1326 audit(1771785961.682:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56776c629 code=0x7ffc0000 [ 50.892586][ T28] audit: type=1326 audit(1771785961.692:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56776c629 code=0x7ffc0000 [ 51.052813][ T4166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.120'. [ 51.365930][ T4156] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 51.372553][ T4156] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 51.380376][ T4166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 51.392613][ T4156] vhci_hcd vhci_hcd.0: Device attached [ 51.408185][ T4157] vhci_hcd: connection closed [ 51.408542][ T36] vhci_hcd vhci_hcd.1: stop threads [ 51.428161][ T36] vhci_hcd vhci_hcd.1: release socket [ 51.460296][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 51.509247][ T4169] set_capacity_and_notify: 2 callbacks suppressed [ 51.509264][ T4169] loop4: detected capacity change from 0 to 512 [ 51.557704][ T4169] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 51.580254][ T4169] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.595371][ T4169] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 51.626908][ T4169] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 51.643316][ T4169] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.115: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 51.679995][ T4169] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 51.680326][ T4169] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.115: couldn't read orphan inode 13 (err -117) [ 51.701568][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 51.701593][ C0] EXT4-fs (loop4): last error at time 1771785962: ext4_ext_check_inode:521: inode 13 [ 51.758013][ T4169] loop4: lost filesystem error report for type 5 error -117 [ 51.758741][ T4169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.805670][ T4169] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.115: deleted inode referenced: 12 [ 51.834244][ T4169] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.115: deleted inode referenced: 12 [ 51.859344][ T4169] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.115: deleted inode referenced: 12 [ 51.922347][ T4177] audit: audit_backlog=65 > audit_backlog_limit=64 [ 51.929160][ T4177] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 51.937029][ T4177] audit: backlog limit exceeded [ 51.977651][ T4177] audit: audit_backlog=65 > audit_backlog_limit=64 [ 51.993343][ T4177] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 52.009020][ T4177] audit: backlog limit exceeded [ 52.108710][ T4181] loop1: detected capacity change from 0 to 8192 [ 52.116151][ T4183] syz.2.126 uses obsolete (PF_INET,SOCK_PACKET) [ 52.190282][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.268675][ T4189] netlink: 104 bytes leftover after parsing attributes in process `syz.0.129'. [ 52.346193][ T4194] netlink: 104 bytes leftover after parsing attributes in process `syz.4.127'. [ 52.457464][ T4199] batman_adv: batadv0: Adding interface: macvlan3 [ 52.464034][ T4199] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.500933][ T4199] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active [ 52.566893][ T4200] batman_adv: batadv0: Adding interface: macvlan3 [ 52.573378][ T4200] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.603722][ T4200] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active [ 52.669815][ T4210] netlink: 264 bytes leftover after parsing attributes in process `syz.3.135'. [ 52.903783][ T4229] loop3: detected capacity change from 0 to 8192 [ 53.001273][ T4233] loop2: detected capacity change from 0 to 128 [ 53.541781][ T4240] loop0: detected capacity change from 0 to 512 [ 53.561408][ T4240] EXT4-fs: Ignoring removed nobh option [ 53.626882][ T4240] ------------[ cut here ]------------ [ 53.632884][ T4240] EA inode 11 i_nlink=1026 [ 53.633192][ T4240] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.0.145/4240 [ 53.649536][ T4240] Modules linked in: [ 53.654742][ T4240] CPU: 1 UID: 0 PID: 4240 Comm: syz.0.145 Not tainted syzkaller #0 PREEMPT(full) [ 53.665543][ T4240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.676559][ T4240] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 53.684043][ T4240] Code: 14 61 99 ff 4c 8d 2d 1d f0 5d 05 49 8d 7e 40 e8 94 f2 b5 ff 49 8b 6e 40 4c 89 e7 e8 c8 ed b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 7f 3b dd 03 66 66 66 66 66 66 2e [ 53.705207][ T4240] RSP: 0018:ffffc90001fef5a8 EFLAGS: 00010246 [ 53.711416][ T4240] RAX: ffff888102266d78 RBX: ffff888107eee048 RCX: ffffffff81bff418 [ 53.720369][ T4240] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871de420 [ 53.729391][ T4240] RBP: 000000000000000b R08: 0001888107eedffb R09: 0000000000000000 [ 53.738291][ T4240] R10: ffffc90001fef4d8 R11: 0001c90001fef4d8 R12: ffff888107eedff8 [ 53.746956][ T4240] R13: ffffffff871de420 R14: ffff888107eedfb0 R15: 0000000000000001 [ 53.756071][ T4240] FS: 00007fdf5c0056c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 53.765832][ T4240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.773364][ T4240] CR2: 0000000034747865 CR3: 000000011b4be000 CR4: 00000000003506f0 [ 53.782784][ T4240] Call Trace: [ 53.787245][ T4240] [ 53.791527][ T4240] ext4_xattr_set_entry+0x77c/0x1010 [ 53.798084][ T4240] ext4_xattr_ibody_set+0x184/0x3c0 [ 53.804008][ T4240] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 53.810871][ T4240] __ext4_expand_extra_isize+0x246/0x280 [ 53.818196][ T4240] __ext4_mark_inode_dirty+0x29b/0x400 [ 53.824294][ T4240] ext4_evict_inode+0x7c3/0xd60 [ 53.829810][ T4240] ? __pfx_ext4_evict_inode+0x10/0x10 [ 53.836127][ T4240] evict+0x2af/0x510 [ 53.840610][ T4240] ? __dquot_initialize+0x146/0x7c0 [ 53.846513][ T4240] iput+0x41a/0x580 [ 53.850898][ T4240] ext4_process_orphan+0x1a9/0x1c0 [ 53.857012][ T4240] ext4_orphan_cleanup+0x6a8/0xa00 [ 53.863114][ T4240] ext4_fill_super+0x3408/0x37c0 [ 53.868877][ T4240] ? set_blocksize+0x14c/0x270 [ 53.874391][ T4240] ? setup_bdev_super+0x30e/0x370 [ 53.880739][ T4240] ? __pfx_ext4_fill_super+0x10/0x10 [ 53.886384][ T4240] get_tree_bdev_flags+0x291/0x300 [ 53.892277][ T4240] ? __pfx_ext4_fill_super+0x10/0x10 [ 53.898861][ T4240] get_tree_bdev+0x1f/0x30 [ 53.903721][ T4240] ext4_get_tree+0x1c/0x30 [ 53.909277][ T4240] vfs_get_tree+0x57/0x1d0 [ 53.914403][ T4240] do_new_mount+0x288/0x8d0 [ 53.919837][ T4240] path_mount+0x4d0/0xbc0 [ 53.924993][ T4240] __se_sys_mount+0x28c/0x2e0 [ 53.930637][ T4240] __x64_sys_mount+0x67/0x80 [ 53.936214][ T4240] x64_sys_call+0x2d61/0x3020 [ 53.941088][ T4240] do_syscall_64+0x12c/0x370 [ 53.946725][ T4240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.953368][ T4240] RIP: 0033:0x7fdf5d5ed8ca [ 53.958502][ T4240] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.979172][ T4240] RSP: 002b:00007fdf5c004e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.988560][ T4240] RAX: ffffffffffffffda RBX: 00007fdf5c004ee0 RCX: 00007fdf5d5ed8ca [ 53.997517][ T4240] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fdf5c004ea0 [ 54.005676][ T4240] RBP: 0000200000000180 R08: 00007fdf5c004ee0 R09: 0000000000800718 [ 54.013980][ T4240] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 54.023585][ T4240] R13: 00007fdf5c004ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 54.032539][ T4240] [ 54.036832][ T4240] ---[ end trace 0000000000000000 ]--- [ 54.052033][ T4240] EXT4-fs (loop0): 1 orphan inode deleted [ 54.068579][ T4240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.178000][ T4240] can0: slcan on ttyS3. [ 54.293480][ T4240] can0 (unregistered): slcan off ttyS3. [ 54.399908][ T4236] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.145: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 54.494527][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.567210][ T4234] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 54.593414][ T4234] FAT-fs (loop3): Filesystem has been set read-only [ 54.885531][ T4263] loop1: detected capacity change from 0 to 128 [ 54.968650][ T4263] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.121625][ T4263] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.213391][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.485454][ T4282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42768 sclass=netlink_route_socket pid=4282 comm=syz.1.158 [ 55.526325][ T4287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4287 comm=syz.4.161 [ 55.539853][ T4287] netlink: 'syz.4.161': attribute type 13 has an invalid length. [ 55.550719][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 55.550736][ T28] audit: type=1326 audit(1771785966.403:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 55.581107][ T28] audit: type=1326 audit(1771785966.433:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 55.604702][ T28] audit: type=1326 audit(1771785966.433:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 55.794443][ T28] audit: type=1326 audit(1771785966.433:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 55.818618][ T28] audit: type=1326 audit(1771785966.433:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 55.845615][ T4299] netlink: 104 bytes leftover after parsing attributes in process `syz.2.163'. [ 55.854182][ T28] audit: type=1326 audit(1771785966.433:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 55.878353][ T28] audit: type=1326 audit(1771785966.433:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 55.909408][ T28] audit: type=1326 audit(1771785966.433:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 55.932997][ T28] audit: type=1400 audit(1771785966.544:493): avc: denied { unmount } for pid=4295 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.010134][ T4299] batman_adv: batadv0: Adding interface: macvlan2 [ 56.017666][ T4299] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.051259][ T4299] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 56.178696][ T4319] loop4: detected capacity change from 0 to 512 [ 56.213493][ T4319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.292398][ T4319] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.350680][ T4323] loop0: detected capacity change from 0 to 8192 [ 56.408183][ T4323] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.429722][ T4340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4340 comm=syz.2.175 [ 56.455666][ T4340] netlink: 'syz.2.175': attribute type 13 has an invalid length. [ 56.469583][ T4323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'. [ 56.599880][ T28] audit: type=1326 audit(1771785967.449:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4333 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56776c629 code=0x7ffc0000 [ 57.286353][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.293909][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.593082][ T4358] netlink: 104 bytes leftover after parsing attributes in process `syz.1.178'. [ 57.632291][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.644106][ T4340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.714611][ T4339] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 57.724005][ T4339] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 57.782079][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.784833][ T4359] batman_adv: batadv0: Adding interface: macvlan2 [ 57.797544][ T4359] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.823828][ T4359] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 57.834798][ T59] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.843805][ T59] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.860539][ T59] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.869515][ T59] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.951825][ T4367] loop2: detected capacity change from 0 to 256 [ 57.974612][ T4367] FAT-fs (loop2): bogus number of FAT sectors [ 57.996188][ T4367] FAT-fs (loop2): Can't find a valid FAT filesystem [ 58.049434][ T4382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=4382 comm=syz.3.184 [ 58.317491][ T4389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.189'. [ 58.374320][ T4387] loop2: detected capacity change from 0 to 8192 [ 58.472919][ T4392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4392 comm=syz.4.190 [ 58.491761][ T4392] netlink: 'syz.4.190': attribute type 13 has an invalid length. [ 58.504123][ T4400] batadv_slave_1: entered promiscuous mode [ 58.527782][ T4403] netlink: 766 bytes leftover after parsing attributes in process `syz.3.192'. [ 58.609115][ T4401] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 58.617424][ T4401] FAT-fs (loop2): Filesystem has been set read-only [ 58.840918][ T4380] batadv_slave_1: left promiscuous mode [ 59.150194][ T4417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.195'. [ 59.454261][ T4425] netlink: 104 bytes leftover after parsing attributes in process `syz.2.196'. [ 59.488373][ T4426] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.199'. [ 59.497932][ T3389] IPVS: starting estimator thread 0... [ 59.601017][ T4427] IPVS: using max 2256 ests per chain, 112800 per kthread [ 59.767570][ T4449] wg1: entered promiscuous mode [ 59.776246][ T4449] wg1: entered allmulticast mode [ 59.851588][ T4456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4456 comm=syz.4.204 [ 59.864999][ T4456] netlink: 'syz.4.204': attribute type 13 has an invalid length. [ 59.912251][ T4459] loop0: detected capacity change from 0 to 128 [ 59.957340][ T4459] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.970547][ T4459] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.985551][ T4463] netlink: 52 bytes leftover after parsing attributes in process `syz.3.211'. [ 60.000116][ T3321] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.269866][ T4469] loop2: detected capacity change from 0 to 128 [ 60.295615][ T4469] vfat: Unknown parameter './file0' [ 61.050311][ T4475] bond1: entered allmulticast mode [ 61.180265][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 61.180280][ T28] audit: type=1400 audit(1771785972.067:560): avc: denied { bind } for pid=4472 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.231842][ T4483] loop2: detected capacity change from 0 to 512 [ 61.343955][ T4486] hub 8-0:1.0: USB hub found [ 61.348718][ T4486] hub 8-0:1.0: 8 ports detected [ 61.828964][ T4503] loop0: detected capacity change from 0 to 512 [ 61.836727][ T4504] netlink: 104 bytes leftover after parsing attributes in process `syz.4.223'. [ 61.858915][ T4503] EXT4-fs: inline encryption not supported [ 61.866582][ T4503] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 61.912332][ T4503] EXT4-fs (loop0): 1 truncate cleaned up [ 61.928565][ T4503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.971134][ T28] audit: type=1400 audit(1771786228.863:561): avc: denied { append } for pid=4502 comm="syz.0.224" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.040434][ T28] audit: type=1400 audit(1771786228.883:562): avc: denied { ioctl } for pid=4502 comm="syz.0.224" path="/39/file0/file1" dev="loop0" ino=15 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.085923][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.128875][ T28] audit: type=1400 audit(1771786229.013:563): avc: denied { bind } for pid=4510 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.177572][ T4511] loop2: detected capacity change from 0 to 1024 [ 62.190668][ T4511] EXT4-fs: Ignoring removed orlov option [ 62.237444][ T4511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.251852][ T28] audit: type=1400 audit(1771786229.144:564): avc: denied { read } for pid=4510 comm="syz.2.227" path="/41/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.275111][ T28] audit: type=1400 audit(1771786229.164:565): avc: denied { mounton } for pid=4510 comm="syz.2.227" path="/41/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.349031][ T28] audit: type=1400 audit(1771786229.245:566): avc: denied { append } for pid=4510 comm="syz.2.227" name="001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.372089][ T4511] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 62.395573][ T4511] vhci_hcd vhci_hcd.1: invalid port number 9 [ 62.401677][ T4511] vhci_hcd vhci_hcd.1: invalid port number 9 [ 62.412937][ T4511] Trying to write to read-only block-device loop2 [ 62.420733][ T28] audit: type=1400 audit(1771786229.305:567): avc: denied { append } for pid=4510 comm="syz.2.227" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.475002][ T4520] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 62.556976][ T28] audit: type=1400 audit(1771786229.447:568): avc: denied { remove_name } for pid=3318 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.603132][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.617639][ T4536] loop3: detected capacity change from 0 to 1024 [ 62.643572][ T28] audit: type=1400 audit(1771786229.457:569): avc: denied { rmdir } for pid=3318 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.673571][ T4536] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.741024][ T4536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.772482][ T4536] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.791771][ T4558] loop2: detected capacity change from 0 to 256 [ 62.825060][ T4536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.880248][ T4558] wireguard0: entered promiscuous mode [ 62.887238][ T4558] wireguard0: entered allmulticast mode [ 62.930723][ T4560] netlink: 44 bytes leftover after parsing attributes in process `syz.3.230'. [ 63.674156][ T4565] usb usb8: usbfs: process 4565 (syz.4.237) did not claim interface 14 before use [ 64.006751][ T4565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.237'. [ 64.289584][ T4583] netlink: 104 bytes leftover after parsing attributes in process `syz.0.242'. [ 65.005973][ T4605] loop3: detected capacity change from 0 to 2048 [ 65.061412][ T4605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.465195][ T4614] netlink: 84 bytes leftover after parsing attributes in process `syz.0.250'. [ 65.484240][ T4614] openvswitch: netlink: Port -3 exceeds max allowable 65535 [ 65.543431][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.556570][ T4615] loop0: detected capacity change from 0 to 512 [ 65.564511][ T4622] netlink: 76 bytes leftover after parsing attributes in process `syz.1.252'. [ 65.599737][ T4615] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.633250][ T4615] EXT4-fs (loop0): 1 truncate cleaned up [ 65.646949][ T4615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.662945][ T4615] SELinux: Context : is not valid (left unmapped). [ 65.751113][ T4634] loop3: detected capacity change from 0 to 1024 [ 65.763634][ T4634] EXT4-fs: Ignoring removed orlov option [ 65.769626][ T4634] EXT4-fs: Ignoring removed nobh option [ 65.799758][ T4634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.827022][ T4646] loop2: detected capacity change from 0 to 512 [ 65.847291][ T4646] EXT4-fs: Ignoring removed i_version option [ 65.865396][ T4646] EXT4-fs: Ignoring removed bh option [ 65.955674][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.001246][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.082157][ T4660] loop3: detected capacity change from 0 to 1024 [ 66.098086][ T4662] Cannot find add_set index 0 as target [ 66.135751][ T4660] EXT4-fs: Ignoring removed orlov option [ 66.175644][ T4660] EXT4-fs: Ignoring removed oldalloc option [ 66.211459][ T4665] netlink: 'syz.0.258': attribute type 10 has an invalid length. [ 66.220101][ T4665] veth1_vlan: left allmulticast mode [ 66.282989][ T4660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.426985][ T4660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28193 sclass=netlink_route_socket pid=4660 comm=syz.3.260 [ 66.531389][ T4670] loop4: detected capacity change from 0 to 256 [ 66.802034][ T4673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4673 comm=syz.4.263 [ 66.815215][ T4673] netlink: 'syz.4.263': attribute type 13 has an invalid length. [ 66.825525][ T28] kauditd_printk_skb: 115 callbacks suppressed [ 66.825540][ T28] audit: type=1326 audit(1771786233.761:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 66.895817][ T28] audit: type=1326 audit(1771786233.761:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 66.919669][ T28] audit: type=1326 audit(1771786233.761:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 66.990766][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.001330][ T28] audit: type=1326 audit(1771786233.761:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 67.025751][ T28] audit: type=1326 audit(1771786233.761:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 67.050127][ T28] audit: type=1326 audit(1771786233.761:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 67.111840][ T28] audit: type=1400 audit(1771786234.043:691): avc: denied { cpu } for pid=4691 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 67.139975][ T4690] netlink: 76 bytes leftover after parsing attributes in process `syz.3.265'. [ 67.220775][ T4696] netlink: 'syz.3.270': attribute type 32 has an invalid length. [ 67.236630][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 67.275202][ T4696] bond1: option coupled_control: invalid value (77) [ 67.293888][ T4696] bond1 (unregistering): Released all slaves [ 67.305648][ T28] audit: type=1400 audit(1771786234.235:692): avc: denied { read } for pid=4695 comm="syz.3.270" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 67.351156][ T28] audit: type=1400 audit(1771786234.235:693): avc: denied { open } for pid=4695 comm="syz.3.270" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 67.395404][ T28] audit: type=1400 audit(1771786234.235:694): avc: denied { ioctl } for pid=4695 comm="syz.3.270" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 67.533656][ T4688] ip6_vti0 speed is unknown, defaulting to 1000 [ 67.541117][ T4688] ip6_vti0 speed is unknown, defaulting to 1000 [ 67.564305][ T4688] ip6_vti0 speed is unknown, defaulting to 1000 [ 67.673939][ T4688] infiniband syz2: set down [ 67.678550][ T4688] infiniband syz2: added ip6_vti0 [ 67.692997][ T4688] RDS/IB: syz2: added [ 67.697075][ T4688] smc: adding ib device syz2 with port count 1 [ 67.703527][ T4688] smc: ib device syz2 port 1 has no pnetid [ 67.710190][ T4688] ip6_vti0 speed is unknown, defaulting to 1000 [ 67.787014][ T4712] loop2: detected capacity change from 0 to 512 [ 67.816241][ T4688] ip6_vti0 speed is unknown, defaulting to 1000 [ 67.842614][ T3422] ip6_vti0 speed is unknown, defaulting to 1000 [ 67.848954][ T3422] ip6_vti0 speed is unknown, defaulting to 1000 [ 67.975718][ T4688] ip6_vti0 speed is unknown, defaulting to 1000 [ 68.043605][ T4688] ip6_vti0 speed is unknown, defaulting to 1000 [ 68.059077][ T4720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4720 comm=syz.0.277 [ 68.072387][ T4720] netlink: 'syz.0.277': attribute type 13 has an invalid length. [ 68.102636][ T4716] netlink: 'syz.3.275': attribute type 10 has an invalid length. [ 68.110844][ T4716] hsr0: entered promiscuous mode [ 68.118571][ T4716] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 68.162523][ T4716] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 68.175488][ T4716] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 68.182431][ T4731] loop0: detected capacity change from 0 to 1764 [ 68.193015][ T4688] ip6_vti0 speed is unknown, defaulting to 1000 [ 68.228287][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 68.279605][ T4737] loop7: detected capacity change from 0 to 16384 [ 68.375420][ T4741] loop3: detected capacity change from 0 to 1024 [ 68.400036][ T4741] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.423407][ T4741] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 68.436957][ T4741] EXT4-fs (loop3): orphan cleanup on readonly fs [ 68.465132][ T4741] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.283: Invalid inode table block 0 in block_group 0 [ 68.487011][ T4741] loop3: lost filesystem error report for type 5 error -117 [ 68.487418][ T4741] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 68.504308][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 68.504326][ C1] EXT4-fs (loop3): initial error at time 1771786235: __ext4_get_inode_loc:4782 [ 68.504345][ C1] EXT4-fs (loop3): last error at time 1771786235: __ext4_get_inode_loc:4782 [ 68.567687][ T4741] loop3: lost filesystem error report for type 5 error -117 [ 68.569040][ T4741] EXT4-fs error (device loop3): ext4_quota_write:7390: inode #3: comm syz.3.283: mark_inode_dirty error [ 68.587967][ T4741] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 68.588618][ T4741] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.283: Failed to acquire dquot type 0 [ 68.609733][ T4741] loop3: lost filesystem error report for type 5 error -117 [ 68.609997][ T4741] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.283: Invalid inode table block 0 in block_group 0 [ 68.631160][ T4741] loop3: lost filesystem error report for type 5 error -117 [ 68.638126][ T4741] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 68.655106][ T4741] loop3: lost filesystem error report for type 5 error -117 [ 68.688764][ T4741] EXT4-fs error (device loop3): ext4_ext_truncate:4528: inode #15: comm syz.3.283: mark_inode_dirty error [ 68.743436][ T4741] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.743607][ T4741] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.283: Invalid inode table block 0 in block_group 0 [ 68.772037][ T4741] loop3: lost filesystem error report for type 5 error -117 [ 68.772152][ T4741] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 68.811543][ T4741] loop3: lost filesystem error report for type 5 error -117 [ 68.811760][ T4741] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 68.828063][ T4741] loop3: lost filesystem error report for type 5 error -117 [ 68.828212][ T4741] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.283: Invalid inode table block 0 in block_group 0 [ 68.849141][ T4741] loop3: lost filesystem error report for type 5 error -117 [ 68.849299][ T4741] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 68.876646][ T4741] loop3: lost filesystem error report for type 5 error -117 [ 68.876825][ T4741] EXT4-fs error (device loop3): ext4_truncate:4587: inode #15: comm syz.3.283: mark_inode_dirty error [ 68.917021][ T4762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4762 comm=syz.4.289 [ 68.949571][ T4741] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.950424][ T4762] netlink: 'syz.4.289': attribute type 13 has an invalid length. [ 68.967838][ T4741] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 68.980295][ T4741] EXT4-fs (loop3): 1 truncate cleaned up [ 68.986787][ T4741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.105751][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 69.172241][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.232020][ T4779] kexec: Could not allocate control_code_buffer [ 69.872921][ T4804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4804 comm=syz.3.301 [ 69.886128][ T4804] netlink: 'syz.3.301': attribute type 13 has an invalid length. [ 70.100431][ T4804] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.107684][ T4804] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.348445][ T4816] netlink: 84 bytes leftover after parsing attributes in process `syz.1.303'. [ 70.358017][ T4816] openvswitch: netlink: Port -3 exceeds max allowable 65535 [ 70.625438][ T4824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 70.658371][ T4804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.672129][ T4804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.837726][ T4816] team0: Port device team_slave_0 removed [ 70.844769][ T4831] set_capacity_and_notify: 1 callbacks suppressed [ 70.844789][ T4831] loop4: detected capacity change from 0 to 2048 [ 70.852579][ T4816] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 70.888997][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.910275][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.919545][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.934994][ T4835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 70.956203][ T4831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.968816][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.001143][ T4831] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 71.041614][ T4846] netlink: 72 bytes leftover after parsing attributes in process `syz.1.315'. [ 71.053554][ T4831] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 71.091329][ T4831] EXT4-fs (loop4): This should not happen!! Data will be lost [ 71.091329][ T4831] [ 71.110853][ T4855] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 71.146787][ T4831] EXT4-fs (loop4): Total free blocks count 0 [ 71.166978][ T4831] EXT4-fs (loop4): Free/Dirty block details [ 71.174035][ T4831] EXT4-fs (loop4): free_blocks=2415919504 [ 71.177428][ T4855] EXT4-fs (loop4): This should not happen!! Data will be lost [ 71.177428][ T4855] [ 71.180865][ T4831] EXT4-fs (loop4): dirty_blocks=48 [ 71.215741][ T4831] EXT4-fs (loop4): Block reservation details [ 71.259942][ T4865] netlink: 104 bytes leftover after parsing attributes in process `syz.3.319'. [ 71.348853][ T4863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4863 comm=syz.1.321 [ 71.363648][ T4863] netlink: 'syz.1.321': attribute type 13 has an invalid length. [ 71.447469][ T4863] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.454819][ T4863] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.565907][ T4863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.597083][ T4863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.741785][ T82] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.750951][ T82] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.771855][ T82] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.792746][ T82] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.972457][ T28] kauditd_printk_skb: 470 callbacks suppressed [ 71.972489][ T28] audit: type=1400 audit(1771786238.940:1163): avc: denied { read } for pid=4906 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 72.015274][ T4907] Cannot find add_set index 0 as target [ 72.070917][ T4914] loop3: detected capacity change from 0 to 256 [ 72.196743][ T4929] loop4: detected capacity change from 0 to 256 [ 72.218696][ T4929] netlink: 168 bytes leftover after parsing attributes in process `syz.4.338'. [ 72.314246][ T4932] netlink: 52 bytes leftover after parsing attributes in process `syz.3.340'. [ 72.489077][ T4941] loop3: detected capacity change from 0 to 512 [ 72.504954][ T4941] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 72.548854][ T4945] loop4: detected capacity change from 0 to 512 [ 72.555989][ T4945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.566297][ T4945] EXT4-fs (loop4): orphan cleanup on readonly fs [ 72.572938][ T4945] EXT4-fs error (device loop4): ext4_quota_enable:7188: comm syz.4.345: Bad quota inum: 2, type: 2 [ 72.583918][ T4945] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 72.598624][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 72.598647][ C1] EXT4-fs (loop4): last error at time 1771786239: ext4_quota_enable:7188 [ 72.614067][ T4947] netlink: 104 bytes leftover after parsing attributes in process `syz.1.344'. [ 72.627903][ T4945] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 72.635207][ T4945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.692687][ T28] audit: type=1400 audit(1771786239.665:1164): avc: denied { unlink } for pid=3316 comm="syz-executor" name="file1" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.747495][ T28] audit: type=1400 audit(1771786239.725:1165): avc: denied { create } for pid=4944 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.767412][ T28] audit: type=1400 audit(1771786239.725:1166): avc: denied { setopt } for pid=4944 comm="syz.4.345" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.817339][ T4953] loop0: detected capacity change from 0 to 1024 [ 72.824316][ T4953] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.832846][ T4953] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.844492][ T4953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.862789][ T28] audit: type=1400 audit(1771786239.836:1167): avc: denied { create } for pid=4952 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 72.902793][ T4958] ip6_vti0 speed is unknown, defaulting to 1000 [ 72.943415][ T4953] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.993801][ T28] audit: type=1400 audit(1771786239.957:1168): avc: denied { execute } for pid=4957 comm="syz.3.349" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 73.047518][ T4953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.054824][ T4953] IPv6: NLM_F_CREATE should be set when creating new route [ 73.095056][ T28] audit: type=1400 audit(1771786240.078:1169): avc: denied { read } for pid=4952 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.142374][ T28] audit: type=1400 audit(1771786240.098:1170): avc: denied { write } for pid=4952 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.194959][ T4953] syz.0.347 (4953) used greatest stack depth: 9144 bytes left [ 73.229755][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.395699][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.635856][ T4982] team0 (unregistering): Port device team_slave_1 removed [ 73.645350][ T4983] loop3: detected capacity change from 0 to 512 [ 73.684078][ T4983] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.698826][ T28] audit: type=1400 audit(1771786240.642:1171): avc: denied { write } for pid=4975 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.744035][ T4983] EXT4-fs (loop3): 1 truncate cleaned up [ 73.750654][ T4983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.787543][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.915084][ T28] audit: type=1400 audit(1771786240.894:1172): avc: denied { ioctl } for pid=4990 comm="syz.4.360" path="socket:[8648]" dev="sockfs" ino=8648 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.090474][ T4998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4998 comm=syz.1.362 [ 74.103566][ T4998] netlink: 'syz.1.362': attribute type 13 has an invalid length. [ 74.106686][ T5010] netlink: 104 bytes leftover after parsing attributes in process `syz.4.363'. [ 74.139325][ T5011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.384941][ T5004] loop3: detected capacity change from 0 to 1024 [ 74.682292][ T5004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.878854][ T5025] netlink: 40 bytes leftover after parsing attributes in process `syz.2.367'. [ 75.168833][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.189635][ T5036] netlink: 'syz.2.369': attribute type 16 has an invalid length. [ 75.237662][ T5036] netlink: 'syz.2.369': attribute type 17 has an invalid length. [ 75.346030][ T5042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.368'. [ 75.370733][ T5043] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.373'. [ 75.430293][ T5036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.466601][ T5043] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.373'. [ 75.509397][ T5036] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.620419][ T5036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.784382][ T5052] sctp: [Deprecated]: syz.3.372 (pid 5052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.784382][ T5052] Use struct sctp_sack_info instead [ 75.967758][ T5056] loop0: detected capacity change from 0 to 2048 [ 76.047169][ T5056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.440792][ T5078] netlink: 104 bytes leftover after parsing attributes in process `syz.1.378'. [ 76.790780][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.858042][ T5091] FAULT_INJECTION: forcing a failure. [ 76.858042][ T5091] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.882402][ T5091] CPU: 0 UID: 0 PID: 5091 Comm: syz.0.386 Tainted: G W syzkaller #0 PREEMPT(full) [ 76.882509][ T5091] Tainted: [W]=WARN [ 76.882516][ T5091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.882536][ T5091] Call Trace: [ 76.882544][ T5091] [ 76.882553][ T5091] __dump_stack+0x1d/0x30 [ 76.882592][ T5091] dump_stack_lvl+0x95/0xd0 [ 76.882618][ T5091] dump_stack+0x15/0x1b [ 76.882639][ T5091] should_fail_ex+0x263/0x280 [ 76.882661][ T5091] should_fail+0xb/0x20 [ 76.882703][ T5091] should_fail_usercopy+0x1a/0x20 [ 76.882738][ T5091] _copy_to_user+0x20/0xa0 [ 76.882773][ T5091] simple_read_from_buffer+0xb5/0x130 [ 76.882847][ T5091] proc_fail_nth_read+0x10e/0x150 [ 76.882878][ T5091] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.882905][ T5091] vfs_read+0x1ab/0x7f0 [ 76.883020][ T5091] ? __rcu_read_unlock+0x4e/0x70 [ 76.883042][ T5091] ? __fget_files+0x184/0x1c0 [ 76.883084][ T5091] ? mutex_lock+0x57/0x90 [ 76.883120][ T5091] ksys_read+0xdc/0x1a0 [ 76.883221][ T5091] __x64_sys_read+0x40/0x50 [ 76.883260][ T5091] x64_sys_call+0x2886/0x3020 [ 76.883329][ T5091] do_syscall_64+0x12c/0x370 [ 76.883374][ T5091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.883398][ T5091] RIP: 0033:0x7fdf5d5acece [ 76.883415][ T5091] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.883438][ T5091] RSP: 002b:00007fdf5c046fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.883513][ T5091] RAX: ffffffffffffffda RBX: 00007fdf5c0476c0 RCX: 00007fdf5d5acece [ 76.883527][ T5091] RDX: 000000000000000f RSI: 00007fdf5c0470a0 RDI: 0000000000000004 [ 76.883541][ T5091] RBP: 00007fdf5c047090 R08: 0000000000000000 R09: 0000000000000000 [ 76.883558][ T5091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.883574][ T5091] R13: 00007fdf5d866038 R14: 00007fdf5d865fa0 R15: 00007ffdfa20d7f8 [ 76.883599][ T5091] [ 77.093296][ T5093] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 77.101482][ T5093] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.115464][ T5093] vhci_hcd vhci_hcd.4: default hub control req: 230f v0004 i0000 l3 [ 77.231328][ T5101] loop3: detected capacity change from 0 to 512 [ 77.236469][ T5104] loop2: detected capacity change from 0 to 1024 [ 77.247474][ T5104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5104 comm=syz.2.391 [ 77.289279][ T5101] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.330800][ T5101] EXT4-fs (loop3): 1 truncate cleaned up [ 77.344251][ T5101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.386600][ T5115] syzkaller0: entered promiscuous mode [ 77.402395][ T5115] syzkaller0: entered allmulticast mode [ 77.409554][ T5115] tipc: Started in network mode [ 77.414668][ T5115] tipc: Node identity da2478773608, cluster identity 4711 [ 77.421978][ T5115] tipc: Enabled bearer , priority 0 [ 77.432022][ T5114] tipc: Resetting bearer [ 77.444353][ T5114] tipc: Disabling bearer [ 77.476261][ T5117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.396'. [ 77.501884][ T5117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5117 comm=syz.1.396 [ 77.537991][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 77.538011][ T28] audit: type=1400 audit(1771786244.548:1224): avc: denied { setattr } for pid=5100 comm="syz.3.390" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.629703][ T5133] netlink: 104 bytes leftover after parsing attributes in process `syz.4.399'. [ 77.713222][ T28] audit: type=1400 audit(1771786244.720:1225): avc: denied { write } for pid=5134 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 77.757150][ T28] audit: type=1400 audit(1771786244.720:1226): avc: denied { read } for pid=5134 comm="syz.1.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 77.967834][ T5145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5145 comm=syz.1.404 [ 78.001065][ T5145] netlink: 'syz.1.404': attribute type 13 has an invalid length. [ 78.017136][ T28] audit: type=1326 audit(1771786245.022:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a243c629 code=0x7ffc0000 [ 78.066311][ T28] audit: type=1326 audit(1771786245.052:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36a243c629 code=0x7ffc0000 [ 78.114482][ T28] audit: type=1326 audit(1771786245.052:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a243c629 code=0x7ffc0000 [ 78.172760][ T28] audit: type=1326 audit(1771786245.062:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7f36a243c629 code=0x7ffc0000 [ 78.203844][ T28] audit: type=1326 audit(1771786245.062:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a243c629 code=0x7ffc0000 [ 78.231176][ T28] audit: type=1326 audit(1771786245.062:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5144 comm="syz.1.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a243c629 code=0x7ffc0000 [ 78.607855][ T5101] syz.3.390 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 78.626318][ T5101] CPU: 1 UID: 0 PID: 5101 Comm: syz.3.390 Tainted: G W syzkaller #0 PREEMPT(full) [ 78.626363][ T5101] Tainted: [W]=WARN [ 78.626372][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 78.626388][ T5101] Call Trace: [ 78.626476][ T5101] [ 78.626486][ T5101] __dump_stack+0x1d/0x30 [ 78.626516][ T5101] dump_stack_lvl+0x95/0xd0 [ 78.626549][ T5101] dump_stack+0x15/0x1b [ 78.626651][ T5101] dump_header+0x80/0x240 [ 78.626674][ T5101] oom_kill_process+0x295/0x350 [ 78.626707][ T5101] out_of_memory+0x97d/0xb80 [ 78.626808][ T5101] try_charge_memcg+0x62e/0xa10 [ 78.626862][ T5101] obj_cgroup_charge_pages+0x23/0xc0 [ 78.626899][ T5101] __memcg_kmem_charge_page+0x9e/0x170 [ 78.626935][ T5101] __alloc_frozen_pages_noprof+0x18a/0x360 [ 78.627101][ T5101] alloc_pages_mpol+0xb3/0x260 [ 78.627133][ T5101] alloc_pages_noprof+0x8f/0x130 [ 78.627162][ T5101] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 78.627209][ T5101] __kvmalloc_node_noprof+0x3d4/0x650 [ 78.627294][ T5101] ? ip_set_alloc+0x24/0x30 [ 78.627321][ T5101] ? ip_set_alloc+0x24/0x30 [ 78.627344][ T5101] ? __kmalloc_cache_noprof+0x18a/0x410 [ 78.627376][ T5101] ip_set_alloc+0x24/0x30 [ 78.627473][ T5101] hash_netiface_create+0x282/0x740 [ 78.627501][ T5101] ? __pfx_hash_netiface_create+0x10/0x10 [ 78.627580][ T5101] ip_set_create+0x3cf/0x970 [ 78.627764][ T5101] ? __nla_parse+0x40/0x60 [ 78.627799][ T5101] nfnetlink_rcv_msg+0x509/0x5d0 [ 78.627924][ T5101] netlink_rcv_skb+0x123/0x220 [ 78.627953][ T5101] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 78.628060][ T5101] nfnetlink_rcv+0x167/0x1720 [ 78.628096][ T5101] ? __list_add_valid_or_report+0x38/0xe0 [ 78.628138][ T5101] ? merge_sched_in+0x5d4/0xc70 [ 78.628165][ T5101] ? rb_next+0x5c/0x80 [ 78.628285][ T5101] ? visit_groups_merge+0xf7e/0xfd0 [ 78.628315][ T5101] ? perf_cgroup_set_timestamp+0xfe/0x120 [ 78.628341][ T5101] ? _raw_spin_lock_bh+0x56/0xb0 [ 78.628368][ T5101] ? _raw_spin_unlock_bh+0x18/0x20 [ 78.628428][ T5101] ? selinux_nlmsg_lookup+0x99/0x890 [ 78.628465][ T5101] ? __rcu_read_unlock+0x33/0x70 [ 78.628486][ T5101] ? __netlink_lookup+0x276/0x2b0 [ 78.628517][ T5101] netlink_unicast+0x5c0/0x690 [ 78.628625][ T5101] netlink_sendmsg+0x5c8/0x6f0 [ 78.628663][ T5101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.628722][ T5101] ____sys_sendmsg+0x5af/0x600 [ 78.628762][ T5101] ___sys_sendmsg+0x195/0x1e0 [ 78.628803][ T5101] __x64_sys_sendmsg+0xd4/0x160 [ 78.628870][ T5101] x64_sys_call+0x194c/0x3020 [ 78.628928][ T5101] do_syscall_64+0x12c/0x370 [ 78.628965][ T5101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.628997][ T5101] RIP: 0033:0x7fcb4819c629 [ 78.629018][ T5101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.629111][ T5101] RSP: 002b:00007fcb46bef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.629138][ T5101] RAX: ffffffffffffffda RBX: 00007fcb48415fa0 RCX: 00007fcb4819c629 [ 78.629158][ T5101] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 78.629209][ T5101] RBP: 00007fcb48232b39 R08: 0000000000000000 R09: 0000000000000000 [ 78.629222][ T5101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.629234][ T5101] R13: 00007fcb48416038 R14: 00007fcb48415fa0 R15: 00007ffdb11360f8 [ 78.629254][ T5101] [ 78.629392][ T5101] memory: usage 307200kB, limit 307200kB, failcnt 411 [ 78.645710][ T28] audit: type=1326 audit(1771786245.646:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.4.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5e04c629 code=0x7ffc0000 [ 78.669090][ T5101] memory+swap: usage 307656kB, limit 9007199254740988kB, failcnt 0 [ 78.839710][ T5155] loop0: detected capacity change from 0 to 128 [ 78.842849][ T5101] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 79.016062][ T5101] Memory cgroup stats for /syz3: [ 79.016299][ T5101] cache 4096 [ 79.024585][ T5101] rss 0 [ 79.027456][ T5101] shmem 0 [ 79.030449][ T5101] mapped_file 0 [ 79.033991][ T5101] dirty 0 [ 79.036956][ T5101] writeback 0 [ 79.040348][ T5101] workingset_refault_anon 341 [ 79.045148][ T5101] workingset_refault_file 640 [ 79.049918][ T5101] swap 466944 [ 79.064028][ T5101] swapcached 466944 [ 79.067990][ T5101] pgpgin 95807 [ 79.071546][ T5101] pgpgout 95806 [ 79.075099][ T5101] pgfault 51540 [ 79.078710][ T5101] pgmajfault 52 [ 79.082334][ T5101] inactive_anon 0 [ 79.086191][ T5101] active_anon 0 [ 79.089901][ T5101] inactive_file 4096 [ 79.093935][ T5101] active_file 0 [ 79.097834][ T5101] unevictable 0 [ 79.101773][ T5101] hierarchical_memory_limit 314572800 [ 79.107290][ T5101] hierarchical_memsw_limit 9223372036854771712 [ 79.113656][ T5101] total_cache 4096 [ 79.117395][ T5101] total_rss 0 [ 79.130543][ T5101] total_shmem 0 [ 79.134244][ T5101] total_mapped_file 0 [ 79.138276][ T5101] total_dirty 0 [ 79.145105][ T5101] total_writeback 0 [ 79.148957][ T5101] total_workingset_refault_anon 341 [ 79.154524][ T5101] total_workingset_refault_file 640 [ 79.159837][ T5101] total_swap 466944 [ 79.164051][ T5101] total_swapcached 466944 [ 79.168475][ T5101] total_pgpgin 95807 [ 79.172629][ T5101] total_pgpgout 95806 [ 79.176643][ T5101] total_pgfault 51540 [ 79.189179][ T5101] total_pgmajfault 52 [ 79.201341][ T5173] ipvlan1: entered promiscuous mode [ 79.201597][ T5101] total_inactive_anon 0 [ 79.209887][ T5173] ipvlan1: entered allmulticast mode [ 79.211649][ T5101] total_active_anon 0 [ 79.220259][ T5101] total_inactive_file 4096 [ 79.224984][ T5101] total_active_file 0 [ 79.227080][ T5173] veth0_vlan: entered allmulticast mode [ 79.229218][ T5101] total_unevictable 0 [ 79.238936][ T5101] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.390,pid=5100,uid=0 [ 79.256085][ T5101] Memory cgroup out of memory: Killed process 5100 (syz.3.390) total-vm:94292kB, anon-rss:1220kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 79.266892][ T5173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=5173 comm=syz.2.412 [ 79.342316][ T5101] syz.3.390 (5101) used greatest stack depth: 6456 bytes left [ 79.374858][ T5183] netlink: 104 bytes leftover after parsing attributes in process `syz.4.415'. [ 79.504068][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.798706][ T5193] ip6_vti0 speed is unknown, defaulting to 1000 [ 79.921575][ T5194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'. [ 80.395013][ T5217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 80.464945][ T5221] netlink: 104 bytes leftover after parsing attributes in process `syz.2.429'. [ 80.480925][ T5218] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 80.513242][ T5218] bond2: entered promiscuous mode [ 80.518514][ T5218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.537145][ T5218] bond2: (slave bridge1): making interface the new active one [ 80.544851][ T5218] bridge1: entered promiscuous mode [ 80.553068][ T5218] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 80.565025][ T5226] raw_sendmsg: syz.2.430 forgot to set AF_INET. Fix it! [ 80.574755][ T5226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 80.588571][ T5226] loop2: detected capacity change from 0 to 512 [ 80.700450][ T5236] netlink: 104 bytes leftover after parsing attributes in process `syz.4.432'. [ 80.708242][ T5234] loop2: detected capacity change from 0 to 256 [ 80.789260][ T5238] ip6_vti0 speed is unknown, defaulting to 1000 [ 80.824121][ T5247] netlink: 'syz.1.439': attribute type 29 has an invalid length. [ 80.845345][ T5253] loop3: detected capacity change from 0 to 512 [ 80.855551][ T5247] netlink: 'syz.1.439': attribute type 29 has an invalid length. [ 80.864044][ T5253] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 80.887187][ T5255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 80.900653][ T5247] netlink: 'syz.1.439': attribute type 29 has an invalid length. [ 80.947292][ T5260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.442'. [ 80.964923][ T5260] bond0: entered promiscuous mode [ 80.974799][ T5260] bond_slave_0: entered promiscuous mode [ 80.981095][ T5260] bond_slave_1: entered promiscuous mode [ 80.988093][ T5260] bond0: left promiscuous mode [ 80.994435][ T5260] bond_slave_0: left promiscuous mode [ 81.000359][ T5260] bond_slave_1: left promiscuous mode [ 81.045251][ T5257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5257 comm=syz.2.441 [ 81.059301][ T5257] netlink: 'syz.2.441': attribute type 13 has an invalid length. [ 81.279417][ T5283] netlink: 'syz.1.446': attribute type 10 has an invalid length. [ 81.287229][ T5283] macvlan1: entered allmulticast mode [ 81.356269][ T5284] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 81.734002][ T5285] loop2: detected capacity change from 0 to 2048 [ 81.735471][ T5270] Set syz1 is full, maxelem 65536 reached [ 81.778723][ T5290] loop4: detected capacity change from 0 to 512 [ 81.785837][ T5290] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 81.870338][ T5292] loop0: detected capacity change from 0 to 1024 [ 81.891165][ T5292] EXT4-fs: Ignoring removed orlov option [ 81.906420][ T5292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.922377][ T5292] EXT4-fs error (device loop0): __ext4_new_inode:1279: comm syz.0.453: failed to insert inode 12: doubly allocated? [ 81.936652][ T5292] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 81.946114][ T5292] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 81.985321][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.161311][ T5319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.239610][ T5317] pimreg3: entered allmulticast mode [ 82.264133][ T5319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.342272][ T5328] delete_channel: no stack [ 83.249501][ T5334] __nla_validate_parse: 2 callbacks suppressed [ 83.249535][ T5334] netlink: 104 bytes leftover after parsing attributes in process `syz.1.462'. [ 83.490395][ T5336] loop0: detected capacity change from 0 to 512 [ 83.499194][ T5336] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 83.705989][ T5340] loop4: detected capacity change from 0 to 512 [ 83.712849][ T5340] EXT4-fs: Ignoring removed i_version option [ 83.749292][ T5340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.762211][ T5340] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.812405][ T5340] sit0: entered promiscuous mode [ 83.817683][ T5340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 83.934927][ T5359] loop2: detected capacity change from 0 to 1024 [ 83.969634][ T5359] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.007478][ T5348] ip6_vti0 speed is unknown, defaulting to 1000 [ 84.098867][ T5370] loop2: detected capacity change from 0 to 512 [ 84.107953][ T5370] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 84.241796][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 84.241814][ T28] audit: type=1326 audit(1771786251.291:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 84.272153][ T5380] netlink: 104 bytes leftover after parsing attributes in process `syz.3.481'. [ 84.281621][ T28] audit: type=1326 audit(1771786251.291:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 84.305367][ T28] audit: type=1326 audit(1771786251.291:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 84.329005][ T28] audit: type=1326 audit(1771786251.291:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 84.353830][ T28] audit: type=1326 audit(1771786251.291:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 84.377652][ T28] audit: type=1326 audit(1771786251.331:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 84.401625][ T28] audit: type=1326 audit(1771786251.331:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 84.425524][ T28] audit: type=1326 audit(1771786251.351:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 84.449252][ T28] audit: type=1326 audit(1771786251.351:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 84.473041][ T28] audit: type=1326 audit(1771786251.351:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5378 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 84.509276][ T5384] geneve2: entered promiscuous mode [ 84.515375][ T1630] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.524394][ T1630] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.534436][ T1630] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.543977][ T1630] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.565520][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.596782][ T5389] FAULT_INJECTION: forcing a failure. [ 84.596782][ T5389] name failslab, interval 1, probability 0, space 0, times 0 [ 84.613266][ T5389] CPU: 1 UID: 0 PID: 5389 Comm: syz.4.484 Tainted: G W syzkaller #0 PREEMPT(full) [ 84.613304][ T5389] Tainted: [W]=WARN [ 84.613312][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.613328][ T5389] Call Trace: [ 84.613359][ T5389] [ 84.613369][ T5389] __dump_stack+0x1d/0x30 [ 84.613404][ T5389] dump_stack_lvl+0x95/0xd0 [ 84.613437][ T5389] dump_stack+0x15/0x1b [ 84.613490][ T5389] should_fail_ex+0x263/0x280 [ 84.613515][ T5389] ? ftrace_profile_set_filter+0xc2/0x1b0 [ 84.613550][ T5389] should_failslab+0x8c/0xb0 [ 84.613623][ T5389] __kmalloc_cache_noprof+0x5f/0x410 [ 84.613659][ T5389] ftrace_profile_set_filter+0xc2/0x1b0 [ 84.613703][ T5389] perf_ioctl+0x9ed/0x15d0 [ 84.613773][ T5389] ? do_vfs_ioctl+0x84f/0xe70 [ 84.613811][ T5389] ? selinux_file_ioctl+0x5f7/0xcb0 [ 84.613834][ T5389] ? __rcu_read_unlock+0x4e/0x70 [ 84.613861][ T5389] ? __rcu_read_unlock+0x4e/0x70 [ 84.613958][ T5389] ? __fget_files+0x184/0x1c0 [ 84.613991][ T5389] ? mutex_lock+0x57/0x90 [ 84.614028][ T5389] ? __pfx_perf_ioctl+0x10/0x10 [ 84.614096][ T5389] __se_sys_ioctl+0xce/0x140 [ 84.614250][ T5389] __x64_sys_ioctl+0x43/0x50 [ 84.614286][ T5389] x64_sys_call+0x1563/0x3020 [ 84.614320][ T5389] do_syscall_64+0x12c/0x370 [ 84.614362][ T5389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.614439][ T5389] RIP: 0033:0x7fce5e04c629 [ 84.614456][ T5389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.614535][ T5389] RSP: 002b:00007fce5caa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.614560][ T5389] RAX: ffffffffffffffda RBX: 00007fce5e2c5fa0 RCX: 00007fce5e04c629 [ 84.614574][ T5389] RDX: 00002000000001c0 RSI: 0000000040082406 RDI: 0000000000000004 [ 84.614588][ T5389] RBP: 00007fce5caa7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.614619][ T5389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.614640][ T5389] R13: 00007fce5e2c6038 R14: 00007fce5e2c5fa0 R15: 00007fff2b82f2f8 [ 84.614675][ T5389] [ 84.830641][ T5391] loop0: detected capacity change from 0 to 512 [ 84.850962][ T5391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.870588][ T5391] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.887990][ T5397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.488'. [ 84.897845][ T5391] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.486: bg 0: block 217: padding at end of block bitmap is not set [ 84.913572][ T5391] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6686: Corrupt filesystem [ 85.094357][ T5415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 85.155446][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.235034][ T5417] loop3: detected capacity change from 0 to 8192 [ 85.252267][ T5424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.499'. [ 85.331003][ T5429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.498'. [ 85.428040][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 85.549695][ T5433] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 85.557657][ T5433] FAT-fs (loop3): Filesystem has been set read-only [ 85.674921][ T5447] netlink: 104 bytes leftover after parsing attributes in process `syz.3.504'. [ 86.125889][ T5453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.508'. [ 86.324170][ T5463] loop0: detected capacity change from 0 to 1024 [ 86.338325][ T5463] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.432382][ T5464] ip6_vti0 speed is unknown, defaulting to 1000 [ 86.640504][ T5463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 86.718839][ T5463] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.829123][ T5473] loop3: detected capacity change from 0 to 256 [ 86.857912][ T5463] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 86.887772][ T5473] FAT-fs (loop3): unable to read block(17179869180) for building NFS inode [ 86.956692][ T5475] geneve2: entered promiscuous mode [ 86.972879][ T82] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.997133][ T82] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.012322][ T1865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.051968][ T5479] loop3: detected capacity change from 0 to 8192 [ 87.087512][ T1865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.318578][ T5491] loop0: detected capacity change from 0 to 512 [ 87.358054][ T5491] EXT4-fs (loop0): inodes count not valid: 32 vs 7 [ 87.390646][ T5489] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 87.398922][ T5489] FAT-fs (loop3): Filesystem has been set read-only [ 87.500283][ T5509] loop3: detected capacity change from 0 to 128 [ 87.534516][ T5512] ip6_vti0 speed is unknown, defaulting to 1000 [ 87.762819][ T5509] FAT-fs (loop3): bogus logical sector size 2134 [ 87.769895][ T5509] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 87.856045][ T5509] FAT-fs (loop3): Can't find a valid FAT filesystem [ 88.470494][ T5545] __nla_validate_parse: 3 callbacks suppressed [ 88.470515][ T5545] netlink: 92 bytes leftover after parsing attributes in process `syz.1.529'. [ 88.616689][ T5545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'. [ 88.635959][ T5545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.529'. [ 89.186217][ T5550] ip6_vti0 speed is unknown, defaulting to 1000 [ 89.260343][ T5550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'. [ 89.742132][ T5566] loop4: detected capacity change from 0 to 8192 [ 89.830919][ T5570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5570 comm=syz.0.537 [ 89.867950][ T5570] netlink: 'syz.0.537': attribute type 13 has an invalid length. [ 89.889702][ T82] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.908031][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 89.908052][ T28] audit: type=1326 audit(1771786256.984:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 89.915947][ T82] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.941765][ T28] audit: type=1326 audit(1771786257.024:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 90.004284][ T82] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.008250][ T28] audit: type=1326 audit(1771786257.024:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 90.037444][ T28] audit: type=1326 audit(1771786257.024:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 90.074208][ T82] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.086569][ T28] audit: type=1326 audit(1771786257.024:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 90.103895][ T5578] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 90.144083][ T5578] FAT-fs (loop4): Filesystem has been set read-only [ 90.153338][ T28] audit: type=1326 audit(1771786257.024:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5569 comm="syz.0.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 90.205501][ T5585] loop3: detected capacity change from 0 to 512 [ 90.221148][ T5585] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 90.240598][ T5585] EXT4-fs (loop3): orphan cleanup on readonly fs [ 90.248021][ T5585] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 90.270237][ T5585] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 90.280292][ T5585] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.540: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 90.327862][ T5585] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.328493][ T5585] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.540: couldn't read orphan inode 13 (err -117) [ 90.337718][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 90.337740][ C1] EXT4-fs (loop3): last error at time 1771786257: ext4_ext_check_inode:521: inode 13 [ 90.394258][ T5585] fserror_report: 2 callbacks suppressed [ 90.394290][ T5585] loop3: lost filesystem error report for type 5 error -117 [ 90.403858][ T5585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.480959][ T5592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.542'. [ 90.497084][ T5585] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.540: deleted inode referenced: 12 [ 90.531964][ T5585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5585 comm=syz.3.540 [ 90.845588][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.975885][ T5606] netlink: 44 bytes leftover after parsing attributes in process `syz.4.544'. [ 91.399585][ T28] audit: type=1400 audit(1771786258.492:1387): avc: denied { ioctl } for pid=5618 comm="syz.1.552" path="socket:[10124]" dev="sockfs" ino=10124 ioctlcmd=0x5870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.433357][ T5621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.553'. [ 91.459978][ T5621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.553'. [ 91.544040][ T28] audit: type=1400 audit(1771786258.633:1388): avc: denied { create } for pid=5612 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 91.568947][ T28] audit: type=1400 audit(1771786258.653:1389): avc: denied { read } for pid=5612 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 91.609350][ T28] audit: type=1400 audit(1771786258.673:1390): avc: denied { write } for pid=5624 comm="syz.4.555" lport=40976 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 91.641010][ T5630] netlink: 296 bytes leftover after parsing attributes in process `syz.4.557'. [ 91.726426][ T5636] xt_l2tp: unknown flags: 10 [ 91.925286][ T5643] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.942752][ T5643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.950218][ T5643] IPv6: NLM_F_CREATE should be set when creating new route [ 92.216302][ T5666] bridge_slave_1: left allmulticast mode [ 92.256910][ T5666] bridge_slave_1: left promiscuous mode [ 92.281207][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.367146][ T5666] bridge_slave_0: left allmulticast mode [ 92.384416][ T5666] bridge_slave_0: left promiscuous mode [ 92.390201][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.427196][ T5654] loop0: detected capacity change from 0 to 1024 [ 92.539168][ T5654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.884643][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.915491][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.939107][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.950166][ T5684] loop4: detected capacity change from 0 to 1024 [ 92.961307][ T5684] EXT4-fs: Ignoring removed orlov option [ 92.968520][ T1865] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.993580][ T5684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.999826][ T1865] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.104987][ T5684] ip6_vti0 speed is unknown, defaulting to 1000 [ 93.221303][ T5705] SET target dimension over the limit! [ 93.531327][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.035204][ T5721] ip6_vti0 speed is unknown, defaulting to 1000 [ 94.374492][ T5724] netlink: 92 bytes leftover after parsing attributes in process `syz.0.588'. [ 94.402090][ T5724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 94.441326][ T5724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.588'. [ 94.702052][ T5736] tipc: Enabling of bearer rejected, failed to enable media [ 94.767656][ T5752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 94.779560][ T5749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5749 comm=syz.3.595 [ 94.793002][ T5752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 94.803136][ T5744] netlink: 'syz.3.595': attribute type 13 has an invalid length. [ 94.882638][ T5756] wg1: entered promiscuous mode [ 94.888599][ T5756] wg1: entered allmulticast mode [ 95.513261][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 95.513276][ T28] audit: type=1400 audit(1771786262.624:1404): avc: denied { relabelfrom } for pid=5775 comm="syz.1.605" name="" dev="pipefs" ino=11412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 95.513291][ T5776] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 95.627426][ T28] audit: type=1400 audit(1771786262.624:1405): avc: denied { relabelto } for pid=5775 comm="syz.1.605" name="" dev="pipefs" ino=11412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:audisp_exec_t:s0" [ 95.769921][ T5806] netlink: 104 bytes leftover after parsing attributes in process `syz.2.614'. [ 95.823102][ T28] audit: type=1400 audit(1771786262.935:1406): avc: denied { nlmsg_write } for pid=5809 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 95.873355][ T28] audit: type=1400 audit(1771786262.976:1407): avc: denied { setattr } for pid=5809 comm="syz.0.616" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.944764][ T28] audit: type=1400 audit(1771786262.976:1408): avc: denied { lock } for pid=5809 comm="syz.0.616" path="socket:[10858]" dev="sockfs" ino=10858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.014520][ T28] audit: type=1400 audit(1771786263.046:1409): avc: denied { bind } for pid=5807 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.306711][ T5837] loop0: detected capacity change from 0 to 512 [ 96.326768][ T5837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.353917][ T28] audit: type=1400 audit(1771786263.478:1410): avc: denied { rmdir } for pid=5836 comm="syz.0.624" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 96.435033][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.536051][ T28] audit: type=1400 audit(1771786263.649:1411): avc: denied { read } for pid=5851 comm="syz.0.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.711772][ T5861] netlink: 'syz.0.633': attribute type 1 has an invalid length. [ 96.726721][ T5861] bond1: entered promiscuous mode [ 96.732635][ T5861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.750532][ T5861] bond1: (slave bridge1): making interface the new active one [ 96.758201][ T5861] bridge1: entered promiscuous mode [ 96.765164][ T5861] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 96.774330][ T5883] netlink: 104 bytes leftover after parsing attributes in process `syz.4.640'. [ 97.066937][ T28] audit: type=1400 audit(1771786264.182:1412): avc: denied { connect } for pid=5906 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.269437][ T5912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5912 comm=syz.2.651 [ 97.282726][ T5912] netlink: 'syz.2.651': attribute type 13 has an invalid length. [ 97.293892][ T28] audit: type=1326 audit(1771786264.413:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.2.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56776c629 code=0x7ffc0000 [ 97.460418][ T5923] netlink: 830 bytes leftover after parsing attributes in process `syz.2.654'. [ 97.618781][ T5927] loop3: detected capacity change from 0 to 8192 [ 97.778227][ T5939] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 97.813074][ T5939] FAT-fs (loop3): Filesystem has been set read-only [ 97.848003][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 97.874085][ T4896] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.888718][ T4896] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.969919][ T5943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5943 comm=syz.1.662 [ 98.020280][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 98.043032][ T5943] netlink: 'syz.1.662': attribute type 13 has an invalid length. [ 98.051575][ T5952] bridge_slave_0 (unregistering): left allmulticast mode [ 98.080015][ T5952] bridge_slave_0 (unregistering): left promiscuous mode [ 98.106999][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.143435][ T82] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.161082][ T82] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.170780][ T82] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.225703][ T82] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.600458][ T5972] ip6_vti0 speed is unknown, defaulting to 1000 [ 98.965604][ T5985] geneve2: entered promiscuous mode [ 98.989871][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.008873][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.025142][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.046577][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.387137][ T6003] __nla_validate_parse: 1 callbacks suppressed [ 99.387221][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 99.405476][ T6003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.488342][ T6003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.524434][ T6010] loop3: detected capacity change from 0 to 1024 [ 99.538286][ T6003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.551150][ T6010] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.588663][ T6010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.617842][ T6003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.629721][ T6010] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.643209][ T6010] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 99.677566][ T1630] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.689493][ T6010] netlink: 44 bytes leftover after parsing attributes in process `syz.3.679'. [ 99.692167][ T1630] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.715082][ T1630] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.729212][ T1630] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.786402][ T6017] netlink: 'syz.1.683': attribute type 4 has an invalid length. [ 99.849651][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 100.899983][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 100.920840][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 100.920858][ T28] audit: type=1400 audit(1771786268.061:1426): avc: denied { create } for pid=6032 comm="syz.1.689" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.970030][ T28] audit: type=1400 audit(1771786268.061:1427): avc: denied { write } for pid=6032 comm="syz.1.689" name="file0" dev="tmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.024465][ T28] audit: type=1400 audit(1771786268.061:1428): avc: denied { open } for pid=6032 comm="syz.1.689" path="/145/file0" dev="tmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.053112][ T6048] bridge0: port 3(macsec1) entered blocking state [ 101.060010][ T6048] bridge0: port 3(macsec1) entered disabled state [ 101.081682][ T6048] macsec1: entered allmulticast mode [ 101.107868][ T6048] bridge0: entered allmulticast mode [ 101.133820][ T6057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6057 comm=syz.2.692 [ 101.146777][ T6048] macsec1: left allmulticast mode [ 101.152221][ T28] audit: type=1400 audit(1771786268.282:1429): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="tmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 101.160023][ T6057] netlink: 'syz.2.692': attribute type 13 has an invalid length. [ 101.182874][ T6048] bridge0: left allmulticast mode [ 101.216051][ T28] audit: type=1326 audit(1771786268.352:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56776c629 code=0x7ffc0000 [ 101.240232][ T28] audit: type=1326 audit(1771786268.352:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa56776c629 code=0x7ffc0000 [ 101.265649][ T28] audit: type=1326 audit(1771786268.352:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56776c629 code=0x7ffc0000 [ 101.297182][ T28] audit: type=1326 audit(1771786268.352:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7fa56776c629 code=0x7ffc0000 [ 101.343364][ T28] audit: type=1326 audit(1771786268.352:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56776c629 code=0x7ffc0000 [ 101.370286][ T28] audit: type=1326 audit(1771786268.352:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56776c629 code=0x7ffc0000 [ 101.434129][ T6075] macvlan4: entered allmulticast mode [ 101.611173][ T6085] sctp: [Deprecated]: syz.4.708 (pid 6085) Use of int in max_burst socket option. [ 101.611173][ T6085] Use struct sctp_assoc_value instead [ 101.701813][ T6091] loop4: detected capacity change from 0 to 512 [ 101.932421][ T6104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6104 comm=syz.1.713 [ 101.946111][ T6101] netlink: 'syz.1.713': attribute type 13 has an invalid length. [ 101.964113][ T59] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.978460][ T59] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.996966][ T59] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.013836][ T59] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.326621][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 102.374980][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 102.396646][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 102.405612][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 102.470114][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 102.484019][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 103.413376][ T6162] loop0: detected capacity change from 0 to 764 [ 103.472546][ T6162] iso9660: Unknown parameter 'overriderockperí' [ 103.565223][ T6162] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.583059][ T6168] loop4: detected capacity change from 0 to 512 [ 103.638496][ T6168] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 103.676852][ T6168] System zones: 1-20 [ 103.714569][ T6168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.835094][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.553422][ T6196] __nla_validate_parse: 4 callbacks suppressed [ 104.553444][ T6196] netlink: 16 bytes leftover after parsing attributes in process `syz.3.742'. [ 104.963218][ T6214] Cannot find add_set index 0 as target [ 105.136504][ T6220] loop4: detected capacity change from 0 to 8192 [ 105.165514][ T6222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.751'. [ 105.324311][ T6234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.756'. [ 105.413589][ T6228] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 105.421305][ T6228] FAT-fs (loop4): Filesystem has been set read-only [ 105.835166][ T6269] sctp: [Deprecated]: syz.3.768 (pid 6269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.835166][ T6269] Use struct sctp_sack_info instead [ 105.863806][ T6272] loop0: detected capacity change from 0 to 128 [ 105.905717][ T6274] netlink: 64 bytes leftover after parsing attributes in process `syz.2.764'. [ 106.050401][ T6275] netlink: 'syz.1.769': attribute type 10 has an invalid length. [ 106.096918][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 106.096944][ T28] audit: type=1326 audit(1771786273.264:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6270 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 106.148640][ T6272] loop0: detected capacity change from 0 to 512 [ 106.162349][ T6272] journal_path: Non-blockdev passed as './file2' [ 106.196236][ T6272] EXT4-fs: error: could not find journal device path [ 106.295579][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 106.346808][ T28] audit: type=1326 audit(1771786273.294:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6270 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 106.375260][ T28] audit: type=1326 audit(1771786273.294:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6270 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf5d5acece code=0x7ffc0000 [ 106.398684][ T28] audit: type=1326 audit(1771786273.294:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6270 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf5d5ec2bb code=0x7ffc0000 [ 106.422121][ T28] audit: type=1326 audit(1771786273.294:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6270 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 106.445611][ T28] audit: type=1326 audit(1771786273.294:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6270 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 106.450110][ T6272] netlink: 48 bytes leftover after parsing attributes in process `syz.0.770'. [ 106.469980][ T28] audit: type=1326 audit(1771786273.294:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6270 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 106.593155][ T28] audit: type=1326 audit(1771786273.294:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6270 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 106.616819][ T28] audit: type=1326 audit(1771786273.294:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6270 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 106.640618][ T28] audit: type=1326 audit(1771786273.294:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6270 comm="syz.0.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf5d5ec629 code=0x7ffc0000 [ 106.958457][ T6303] xt_l2tp: unknown flags: 10 [ 107.124765][ T6324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6324 comm=syz.3.783 [ 107.142528][ T6324] netlink: 'syz.3.783': attribute type 13 has an invalid length. [ 107.143875][ T6323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.178218][ T6329] loop4: detected capacity change from 0 to 128 [ 107.206642][ T6329] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.229405][ T6329] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.268666][ T1630] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.269654][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.279808][ T1630] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.296405][ T1630] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.305747][ T1630] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.397390][ T6353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.794'. [ 107.512195][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'. [ 107.582789][ T6367] Cannot find add_set index 0 as target [ 107.762000][ T6376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6376 comm=syz.4.801 [ 107.775167][ T6376] netlink: 'syz.4.801': attribute type 13 has an invalid length. [ 107.793050][ T82] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.807895][ T82] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.827474][ T82] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.864633][ T82] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.075802][ T6392] netlink: 'syz.1.807': attribute type 3 has an invalid length. [ 108.129506][ T6396] loop4: detected capacity change from 0 to 1024 [ 108.146536][ T6396] EXT4-fs: Ignoring removed orlov option [ 108.163539][ T6396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.199075][ T6400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.804'. [ 108.263030][ T6396] ip6_vti0 speed is unknown, defaulting to 1000 [ 108.282987][ T6404] netlink: 80 bytes leftover after parsing attributes in process `syz.3.810'. [ 109.423661][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.570954][ T6441] ip6_vti0 speed is unknown, defaulting to 1000 [ 110.042102][ T6458] ip6_vti0 speed is unknown, defaulting to 1000 [ 110.190195][ T6457] __nla_validate_parse: 1 callbacks suppressed [ 110.190256][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.828'. [ 110.827049][ T6473] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.952210][ T6473] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.974715][ T6480] loop0: detected capacity change from 0 to 512 [ 110.992988][ T6480] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #12: comm syz.0.835: corrupted in-inode xattr: bad e_name length [ 111.025598][ T6480] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 111.025955][ T6480] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.835: couldn't read orphan inode 12 (err -117) [ 111.046939][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 111.046963][ C1] EXT4-fs (loop0): initial error at time 1771786278: ext4_iget_extra_inode:5025: inode 12 [ 111.046996][ C1] EXT4-fs (loop0): last error at time 1771786278: ext4_iget_extra_inode:5025: inode 12 [ 111.073932][ T6480] loop0: lost filesystem error report for type 5 error -117 [ 111.074661][ T6480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.102998][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 111.112662][ T6473] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.123442][ T6480] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.835: Directory hole found for htree leaf block 0 [ 111.175971][ T6495] loop4: detected capacity change from 0 to 1764 [ 111.229250][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 111.229267][ T28] audit: type=1400 audit(1771786278.416:1577): avc: denied { ioctl } for pid=6494 comm="syz.4.840" path="socket:[13041]" dev="sockfs" ino=13041 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 111.275323][ T6473] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.298814][ T28] audit: type=1400 audit(1771786278.476:1578): avc: denied { map } for pid=6494 comm="syz.4.840" path="socket:[13041]" dev="sockfs" ino=13041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 111.325564][ T28] audit: type=1400 audit(1771786278.476:1579): avc: denied { read } for pid=6494 comm="syz.4.840" path="socket:[13041]" dev="sockfs" ino=13041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 111.402810][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.510881][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'. [ 111.606498][ T6504] netlink: 'syz.3.841': attribute type 1 has an invalid length. [ 111.677211][ T6499] syzkaller0: entered promiscuous mode [ 111.697186][ T6499] syzkaller0: entered allmulticast mode [ 111.772868][ T6505] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.895666][ T6504] bond1: entered promiscuous mode [ 111.900992][ T6504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.909101][ T59] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.926132][ T59] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.955058][ T6501] bond1: (slave bridge1): making interface the new active one [ 111.985946][ T6518] loop4: detected capacity change from 0 to 512 [ 112.023906][ T6501] bridge1: entered promiscuous mode [ 112.047143][ T6518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.069655][ T6501] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 112.081593][ T6518] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.129433][ T59] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.160866][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.260166][ T6537] loop0: detected capacity change from 0 to 128 [ 112.876878][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.946748][ T6555] loop4: detected capacity change from 0 to 1024 [ 112.961859][ T6555] EXT4-fs: inline encryption not supported [ 113.000931][ T6555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.104178][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.193086][ T28] audit: type=1400 audit(1771786280.384:1580): avc: denied { read write } for pid=6576 comm="syz.4.861" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 113.242712][ T28] audit: type=1400 audit(1771786280.384:1581): avc: denied { open } for pid=6576 comm="syz.4.861" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 113.314172][ T6584] loop0: detected capacity change from 0 to 1764 [ 113.328669][ T6587] bond3: entered allmulticast mode [ 113.334395][ T6584] iso9660: Unknown parameter 'sbsector˙' [ 113.368163][ T6594] loop4: detected capacity change from 0 to 1024 [ 113.373415][ T28] audit: type=1400 audit(1771786280.565:1582): avc: denied { accept } for pid=6582 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 113.394497][ T6594] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.404388][ T6597] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 113.434849][ T6597] macvtap1: entered promiscuous mode [ 113.441741][ T6594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 113.453846][ T6597] bridge0: entered promiscuous mode [ 113.475623][ T6594] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.520292][ T6594] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 113.620093][ T28] audit: type=1400 audit(1771786280.816:1583): avc: denied { ioctl } for pid=6610 comm="syz.3.875" path="socket:[13811]" dev="sockfs" ino=13811 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.648394][ T6611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=6611 comm=syz.3.875 [ 113.766079][ T28] audit: type=1400 audit(1771786280.956:1584): avc: denied { setopt } for pid=6624 comm="syz.1.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.276870][ T28] audit: type=1400 audit(1771786281.478:1585): avc: denied { create } for pid=6656 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.368629][ T28] audit: type=1400 audit(1771786281.499:1586): avc: denied { setopt } for pid=6656 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.595471][ T6668] netlink: 4568 bytes leftover after parsing attributes in process `syz.4.896'. [ 114.626551][ T6669] loop0: detected capacity change from 0 to 512 [ 114.641297][ T6669] EXT4-fs: Ignoring removed i_version option [ 114.656576][ T6669] EXT4-fs: Ignoring removed bh option [ 114.662342][ T4898] ================================================================== [ 114.670487][ T4898] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 114.677158][ T6668] netlink: 4568 bytes leftover after parsing attributes in process `syz.4.896'. [ 114.678434][ T4898] [ 114.678444][ T4898] read-write to 0xffff8881005f1838 of 8 bytes by task 3308 on cpu 0: [ 114.697879][ T4898] __filemap_add_folio+0x671/0x8b0 [ 114.703122][ T4898] filemap_add_folio+0x1d3/0x350 [ 114.708122][ T4898] page_cache_ra_unbounded+0x20e/0x450 [ 114.713604][ T4898] force_page_cache_ra+0x18d/0x1d0 [ 114.718729][ T4898] page_cache_sync_ra+0x110/0x560 [ 114.723769][ T4898] filemap_get_pages+0x30a/0x1280 [ 114.728925][ T4898] filemap_read+0x231/0xa10 [ 114.733632][ T4898] blkdev_read_iter+0x22d/0x2e0 [ 114.738523][ T4898] vfs_read+0x6c0/0x7f0 [ 114.742735][ T4898] ksys_read+0xdc/0x1a0 [ 114.746939][ T4898] __x64_sys_read+0x40/0x50 [ 114.751509][ T4898] x64_sys_call+0x2886/0x3020 [ 114.756223][ T4898] do_syscall_64+0x12c/0x370 [ 114.760851][ T4898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.766762][ T4898] [ 114.769104][ T4898] read to 0xffff8881005f1838 of 8 bytes by task 4898 on cpu 1: [ 114.776844][ T4898] nr_blockdev_pages+0x7e/0xd0 [ 114.781725][ T4898] si_meminfo+0x87/0xd0 [ 114.786015][ T4898] update_defense_level+0x47/0x5d0 [ 114.791164][ T4898] defense_work_handler+0x1f/0x80 [ 114.796265][ T4898] process_scheduled_works+0x4de/0x9e0 [ 114.801756][ T4898] worker_thread+0x581/0x770 [ 114.806381][ T4898] kthread+0x22a/0x280 [ 114.810479][ T4898] ret_from_fork+0x150/0x360 [ 114.815107][ T4898] ret_from_fork_asm+0x1a/0x30 [ 114.819908][ T4898] [ 114.822248][ T4898] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 114.829537][ T4898] [ 114.831872][ T4898] Reported by Kernel Concurrency Sanitizer on: [ 114.838038][ T4898] CPU: 1 UID: 0 PID: 4898 Comm: kworker/1:6 Tainted: G W syzkaller #0 PREEMPT(full) [ 114.849084][ T4898] Tainted: [W]=WARN [ 114.852904][ T4898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.863165][ T4898] Workqueue: events_long defense_work_handler [ 114.869307][ T4898] ================================================================== [ 114.950783][ T6669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.963565][ T6669] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.019464][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.