last executing test programs: 44.250715969s ago: executing program 0 (id=679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000200)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@debug={'debug', 0x3d, 0x8}}, {@ignoreqv}, {@loose}, {@access_uid={'access', 0x3d, r3}}, {@version_L}, {@cache_loose}, {@access_client}, {@cache_readahead}], [{@dont_measure}, {@appraise_type}]}}) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x6, @none, 0xd7, 0x2}, 0xe) unshare(0x7c020900) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x27, 0x6, 0x3, 0xfffffe01, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x8, 0x69e, 0xffff}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x210c009}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa0, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8800}, 0x48) r7 = getpgrp(0xffffffffffffffff) ptrace$getregs(0xe, r7, 0x3, &(0x7f00000005c0)=""/208) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000006c0)={{0x5, 0x40}, 0x100, './file0\x00'}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000800)=""/29, &(0x7f0000000840)=0x1d) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r4) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r8, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r9 = syz_open_dev$evdev(&(0x7f00000009c0), 0x1, 0x341200) ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, &(0x7f0000000a00)=""/135) r10 = syz_open_dev$loop(&(0x7f0000000ac0), 0x4, 0xc0000) ioctl$IOC_PR_CLEAR(r10, 0x401070cd, &(0x7f0000000b00)={0xaa}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000b40)={0xb, 0x29, 0x1, {0xfff}}, 0xb) r11 = open$dir(&(0x7f0000000b80)='./file0\x00', 0x10000, 0x100) r12 = openat(r11, &(0x7f0000000bc0)='./file0\x00', 0x80800, 0x80) ioctl$KDDELIO(r12, 0x4b35, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c00)={'veth1_to_bridge\x00'}) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2210000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5, 0xd, 0x25}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r12}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x48040}, 0x40800) pivot_root(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='./file0\x00') sendto$packet(r12, &(0x7f0000000e00)="a9dcab1ec5714d8cf33a519ca7bf494c4765463b65e9525efa3dc2a744d62d195b4055069ce2ceab2672dcf3a4a544435c5b48fc502dc48167a9f34c758c34c599c2abec4e0368bc9f", 0x49, 0x6000, &(0x7f0000000e80)={0x11, 0x1b, r6, 0x1, 0xe, 0x6, @local}, 0x14) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r12, 0x18, &(0x7f0000000ec0)={0x6, r12, 0x4, {0x8000, 0x6}, 0x8}, 0x1) 44.175155901s ago: executing program 0 (id=680): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={0x14, r2, 0x1, 0x123, 0x234}, 0x14}}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000280)) bind$tipc(r4, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x44) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8054}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x90000000, 0x2, 0x3, 0x3, 0x1, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$unix(0x1, 0x5, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300), &(0x7f0000000440)=0x4) dup(r10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000040)={0x38, r8, 0x1, 0x70bd27, 0x200000, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004801}, 0x24000004) 44.133251682s ago: executing program 0 (id=681): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r1, 0x25, 0xffffffff, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x20040000) 44.051880324s ago: executing program 0 (id=682): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x4200441, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbb3, &(0x7f0000000e40)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mmycwcU38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAE+5xP0/AAAAPOUa3wO4d/fyfKPl+42E/rpzJiKmavU3nm+uzRRis7odicGIGPs9iebHWpPar+3ZdBbp6+9LWYsePYfcyeaViPj/duc/qdY/VX2Ku7X+NCJmuhB/+pHxfqr/dBfiP1n9w12ICAARN87ULmSt1790a/0T21z/Cttcu3Yj7+t/Y/13v2X997D+gTbrv7d2GOPwg5dutptrXv+9+8nPC1n8bLunop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA/pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtJgNRvLODAAAAOiqqbwTAAAAAHrO/T8AAAA8/Vru/wt/GXkUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL06+OyNW0lEbJ4arbbMUH1uMNfMgF5Ld3bYWK/zAPpvIO8EgNwUmvqVSqXScsBIX9MB+sg9PpA8Zr79MmC467kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Pf1wqEbt5KI2Dw1Wm2ZofrcYK6ZAb2W5p0AkJuBTpPJY3cA+1gh7wSA3LjHB2or+weVmtb5kba/ObznqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsHxPVlqTFiEir/TQtFiP+FRFTMZgsLpVLMxFxICJ+mhwczsbH8k4aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArltd31ieK5dLKzo6Ol3sjEbfYo3W38xtjhluP9Whk/MHEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuVhd31ieK5dLK6t5ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkbXV9Y3muXC6t9LCTd40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOTnzwAAAP//s+AJyQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c01000011002300"/20, @ANYRES32, @ANYRES32, @ANYRES32], 0x14c}, 0x1, 0x0, 0x0, 0x40080c5}, 0x4000000) socket(0x2a, 0x3, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000180)=""/205) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) 43.090806028s ago: executing program 0 (id=691): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x48080, 0x0) r1 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x1) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) recvfrom$l2tp(r1, 0x0, 0x0, 0x12002, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x8004, 0xffff0000, 0x0, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x873, 0x8}, 0x8) r3 = syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x5393, &(0x7f00000001c0)=ANY=[]) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000100)={'\x00', 0x8, 0x2}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) sendmmsg$inet(r6, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b3764d9d", 0x8}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000380)) close(r6) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000200)={'nicvf0\x00'}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000180)=""/56, &(0x7f00000001c0)=0x38) 42.921831233s ago: executing program 0 (id=692): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x2) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_interrupt={0x1, {0x1}, 0x2, 0x1e7, &(0x7f00000000c0)="6ba38498552b638c481712124a4129d61eb260d8f575a8e2b69262ed5810164d5fdd54f7ba0cb5a522f8e5e885cdc8a352965e93062eb7d4b29bec63d6d46149941562740930312db051ccac6282d7b6324b7b671e2713fa0f7fedb30596cd3cf17206200b149221e4fb460286173e3ce034c60ace4417031227c46cd28d99236cdbbd69be6da5aefc383969520dbef6f518076364378cb95b07a445501317d27bb1419d0230d8b3deb7", 0xaa, 0x0, 0x3ff, 0x0, 0x0, 0x8, &(0x7f00000001c0)="6384b8371abbc1170ba14cb4e3f96ce449459ccecd83659111edc6567a76eba99255f307e8b3fb9371a619aa5a0f96df1c3fe032124baa6c8f20b8f196419ae2b1e8045f958e0d7dac153b826b7fef5c9a8f"}) close(r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) creat(&(0x7f0000000180)='./file0\x00', 0x2) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r1) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_interrupt={0x1, {0x1}, 0x2, 0x1e7, &(0x7f00000000c0)="6ba38498552b638c481712124a4129d61eb260d8f575a8e2b69262ed5810164d5fdd54f7ba0cb5a522f8e5e885cdc8a352965e93062eb7d4b29bec63d6d46149941562740930312db051ccac6282d7b6324b7b671e2713fa0f7fedb30596cd3cf17206200b149221e4fb460286173e3ce034c60ace4417031227c46cd28d99236cdbbd69be6da5aefc383969520dbef6f518076364378cb95b07a445501317d27bb1419d0230d8b3deb7", 0xaa, 0x0, 0x3ff, 0x0, 0x0, 0x8, &(0x7f00000001c0)="6384b8371abbc1170ba14cb4e3f96ce449459ccecd83659111edc6567a76eba99255f307e8b3fb9371a619aa5a0f96df1c3fe032124baa6c8f20b8f196419ae2b1e8045f958e0d7dac153b826b7fef5c9a8f"}) (async) close(r0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async) 27.8679144s ago: executing program 32 (id=692): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x2) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_interrupt={0x1, {0x1}, 0x2, 0x1e7, &(0x7f00000000c0)="6ba38498552b638c481712124a4129d61eb260d8f575a8e2b69262ed5810164d5fdd54f7ba0cb5a522f8e5e885cdc8a352965e93062eb7d4b29bec63d6d46149941562740930312db051ccac6282d7b6324b7b671e2713fa0f7fedb30596cd3cf17206200b149221e4fb460286173e3ce034c60ace4417031227c46cd28d99236cdbbd69be6da5aefc383969520dbef6f518076364378cb95b07a445501317d27bb1419d0230d8b3deb7", 0xaa, 0x0, 0x3ff, 0x0, 0x0, 0x8, &(0x7f00000001c0)="6384b8371abbc1170ba14cb4e3f96ce449459ccecd83659111edc6567a76eba99255f307e8b3fb9371a619aa5a0f96df1c3fe032124baa6c8f20b8f196419ae2b1e8045f958e0d7dac153b826b7fef5c9a8f"}) close(r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) creat(&(0x7f0000000180)='./file0\x00', 0x2) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) close(r1) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_interrupt={0x1, {0x1}, 0x2, 0x1e7, &(0x7f00000000c0)="6ba38498552b638c481712124a4129d61eb260d8f575a8e2b69262ed5810164d5fdd54f7ba0cb5a522f8e5e885cdc8a352965e93062eb7d4b29bec63d6d46149941562740930312db051ccac6282d7b6324b7b671e2713fa0f7fedb30596cd3cf17206200b149221e4fb460286173e3ce034c60ace4417031227c46cd28d99236cdbbd69be6da5aefc383969520dbef6f518076364378cb95b07a445501317d27bb1419d0230d8b3deb7", 0xaa, 0x0, 0x3ff, 0x0, 0x0, 0x8, &(0x7f00000001c0)="6384b8371abbc1170ba14cb4e3f96ce449459ccecd83659111edc6567a76eba99255f307e8b3fb9371a619aa5a0f96df1c3fe032124baa6c8f20b8f196419ae2b1e8045f958e0d7dac153b826b7fef5c9a8f"}) (async) close(r0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async) 6.011342939s ago: executing program 4 (id=944): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40004) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001600)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="21042a00000007002100626200"/22], 0x1c}, 0x1, 0x0, 0x0, 0x2080098}, 0x54) r3 = syz_clone(0x80080000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a00010072616e67650000003c0002801c0004800a000100099f51a8226577b50a76b09a0d4f02bce80000000c000380050001005d000000080001400000000108000240000000010900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x484, 0x0, 0x1}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000010000000000000800040001000000", 0x24) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f00000002c0)=0xf, 0x4) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001000390400000000fbdf2500000000d516ce25c49892eef11e164b156c63e89ca559231f5351b4032598764f245646c6dc486beae6863ac6cdc8de8157e8e808c64ca19d0ebba44443c94f02687eac1b089d1ca236be84c4f3b99fb21bde9e0ebefe5085afd73892559770b2c1bf7a69f1b46d07203455ed9e62c58d50129f0f761af9503a7c352d0d1b28a161e37c14c148af604ce138b5c66b94ce0315bb43b8794a4db28675f498295c11a1d87e8df7acf9de57a40a7c46927d", @ANYRES32=r5, @ANYBLOB="119804004198040010001280080001007369740004000280"], 0x30}}, 0x0) io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006feffffb702000008000000b70300000000000085000000ce00000095"], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 4.870235718s ago: executing program 4 (id=949): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r2, &(0x7f0000000040)=""/53, 0x28) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x40, 0x0, 0x0, 0x2000, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8bbe9f126540a0f4bd00a90014000800000000000000007f00"}}) 4.80210653s ago: executing program 4 (id=950): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xba6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x3, 0x2, 0x3, 0x20}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.80160499s ago: executing program 4 (id=951): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$eJzs3ctrW9kZAPDvyvKjTlK7UGjSlaHQGoLlOnWTFrpI6aIUGgi06yZCVkxq2QqWHGJjSEMpdFNoQxeFdpN12qa7btuZ7cy/MLMZhiEhM+OESZjF4OHqEcu25MgZWZqJfz+49jn3oXO++zj3yPdwHcCxNZX+yESciYg/JxETjflJRAzXUtmIi/X1nm1tFtIpie3tX32U1NZ5urVZiJZtYnw8TjQypyPijT9EnM3sL7eyvrGUL5WKq438bHX5xmxlfWPm+nJ+sbhYXDk/Nz9/7sIPL4z2LtZP3t44+egvP//evy9++vtvPfjTm0lcjJONZa1x9MpUTNX3SQynu3CXn/W6sAFLBl0BXkl6aQ7Vr/I4ExPZGOl+2+xRVgwAODK3I2IbADhmEvd/ADhmmn8HeLq1WUin7duD/XtEvz3+aUSM1eNvPt+sL8k2ntmN1Z6Djj9Ndj3vSCJisgflT0XEP/77m3+mUxzRc0iAdn53JyKuTk412/+d9ifZN2ahrvsBGd9vJg4YHDC1J6/9g/75X9r/+dFO/2/n+su86P9Em/7PaJtr91VMxe4RJ/uv/8zDHhTTUdr/+8nwzti2Zy3xN0wONXKnan2+4eTa9VIxbdu+HhHTMTya5ufaf3xteNn0k8+e7JrbEnFr/+/ju7+9n5af/t5ZI/Mwu6fJXchX872IPfX4TsS3s+3iT14c/6RD//dyl2X84sd//HunZWn8abzNaXf8Rz+qbPtexHejffxNyUHjE8/P1k6H2eZJ0cZ/3vvbeKfyW49/OqXl178LnOp9sG2kx3/84Pgnk9bxmpXDl/HWvYn/d1rWOf6m9uf/SPLrWrp5Kd3KV6urcxEjyS/3zz+3s20z31w/jX/6O+2v/4PO//Q74dUu488++vBfL42/OWNf/A1jXRZ2SGn8C4c6/m0T6VfhDovypQfPloY6ld/d8Z9PE0PTjTndtH8da5ovlUZa1nnlHQcAAAAAAAAAAAAAAAAAAAAAAAAAh5CpvaQ0yeRepDOZXC5q/8P7mzGeKZUr1bPXymsrC/WXmU7G8GhE1F51OdHyPtS5xvvwm/lze/I/iIhvRMRfR79Wy+cK5dLCoIMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIYTHf7/f+qD0frv5wOtIQBwJMZeusaTYl8qAgD0zcvv/xExevT1AAD6p6v7PwDwWnH/B4DjZywz6BoAAP02FpEddB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4rV2+dCmdtp9vbRbS/MLN9bWl8s2ZhWJlKbe8VsgVyqs3covl8mKpmCuUl1s2fafd55XK5RvzsbJ2a7ZarFRnK+sbV5bLayvVK9eX84vFK8XhvkUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN2rrG8s5Uul4mojcX88YvecPiWGGhXq5SfPnOx3FP1IbE/U99SXpT49T4ztnfP+zLunD9rq7r7TWOILJwbZKgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8dXweAAD//9GqGUs=") open(&(0x7f0000000140)='./file1\x00', 0x0, 0x21) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r1 = open(&(0x7f0000000200)='./file1\x00', 0xc07d, 0x11c) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000000c0)={0x0, 0x5, 0x2, 0x4de}) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) exit(0x7ffd) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x3c, 0x4, @thr={&(0x7f0000000c80), 0x0}}, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000600)={{r4, r5+10000000}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) sched_setscheduler(r2, 0x0, &(0x7f0000000640)=0x8000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 3.746244006s ago: executing program 5 (id=962): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280100"], 0x128}}, 0x40000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000200000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) 3.713280106s ago: executing program 1 (id=963): socket(0x10, 0x2, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x3ffe, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x20, 0x0, 0x0, 0x80000000}, {0x20}, {0x3, 0xfd}, {0x20, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40044) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30691, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000140)=0xd, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r2, 0x0, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x408003) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 3.647981719s ago: executing program 5 (id=964): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 32) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00050000000000000200000000", 0x58}], 0x1) (async) lsetxattr$security_evm(&(0x7f00000003c0)='\x00', &(0x7f0000000400), &(0x7f0000000440)=@ng={0x4, 0x6}, 0x2, 0x2) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 64) r7 = socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030212590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r15, r14, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) (async) syz_emit_ethernet(0xffe, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) 3.647584528s ago: executing program 4 (id=965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x27, 0x6a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3.518581342s ago: executing program 3 (id=966): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000006800010000000000000000000a0000000000000014000600ac1e0001000000000000000000000000040009"], 0x30}}, 0x40010) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x5411, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4, 0x0, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000002d80)={'ip_vti0\x00', &(0x7f0000002c80)=@ethtool_rxnfc={0x2d, 0x11, 0xe8, {0x4, @hdata="4ccbebb4add1395ee325a350b1e8d5aa4bc8f864be3e8b34fc5684fd0ad87b3e9ebdb22bfff77549fba411b6983ce1727dffae91", {0x0, @random="f860c2d67e46", 0xa3b7, 0x3, [0x100, 0x3ff]}, @udp_ip4_spec={@multicast1, @remote, 0x4e21, 0x4e22}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, 0xfff9, 0x7ff, [0x1000, 0x203f]}, 0xe, 0x3ff}}}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="100000410c14000126bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES16=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1, 0xd}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x84, 0x477, 0x8, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x80, 0xf723, 0x7}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000d80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="80010000", @ANYRES16=0x0, @ANYBLOB="020526bd7000fbdbdf25090000001c000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="1400020073797a6b616c6c65723100000000000008000100", @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="0800030002000000140002006e723000000000000000000000000000340001801400020076657468305f6d616376746170000000140002006e65747063693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="5c00018008000100", @ANYRES32=0x0, @ANYBLOB="140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020d0000080003000000000008000100aa45cc1fda8a86da73d266c8222957a1d8d6d44d8a2f6412ed4385eef8aee6194b261d5465a0d25a15ebf5465074b81926c8bb05b4826301b6dc36", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e0000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="68000180140002007663616e3000000000000000000000001400020070696d7265670000000000000000000008000100", @ANYRES32=r6, @ANYRES64=r5], 0x180}, 0x1, 0x0, 0x0, 0x4008040}, 0x40) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000000, 0x6, 0x3fe}, 0x4}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x133}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000005c0)='\r', 0x5dc}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 2.971970005s ago: executing program 5 (id=968): perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0xad04, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ec68, 0x7, 0x2, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000047c0)={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x2, 0x1, {0x0, 0x0, 0xffffffffffffffff, 0x1}}, 0x1) clock_gettime(0x5, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {r1, r2+60000000}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") io_uring_setup(0x6e21, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x2bb}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') listen(0xffffffffffffffff, 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) 2.950516166s ago: executing program 4 (id=969): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x2, 0x0, 0x0, 0x0, 0x8000000bf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket(0x10, 0x3, 0x0) 2.934534436s ago: executing program 3 (id=970): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x5, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000034000b43d300fff5e700000001d25a80", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r1, 0x4095, 0x7721, 0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0xa000000, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) 2.906592287s ago: executing program 33 (id=969): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x2, 0x0, 0x0, 0x0, 0x8000000bf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket(0x10, 0x3, 0x0) 2.900392338s ago: executing program 2 (id=972): r0 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r3, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6gre0\x00', r6, 0x4, 0x3, 0x3, 0x2, 0x1, @empty, @mcast1, 0x700, 0x7807, 0x1, 0x4}}) 2.80016592s ago: executing program 3 (id=973): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000), 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x89b, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x4, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) 2.731313531s ago: executing program 1 (id=974): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x90, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 2.684471952s ago: executing program 1 (id=975): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80080, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@grpjquota}, {@discard}, {@resuid}, {@noload}, {@i_version}, {@data_err_ignore}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$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") getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x80014) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x89f2, &(0x7f0000000080)=0x59b) 2.628027814s ago: executing program 5 (id=976): perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0xad04, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ec68, 0x7, 0x2, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r1, 0x2) accept4(r1, 0x0, 0x0, 0x80800) 2.591241885s ago: executing program 2 (id=977): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/failslab/times\x00', 0x1, 0x0) writev(r0, &(0x7f0000005a00)=[{&(0x7f00000000c0)="ce", 0x1}], 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x2, 0x0, 0x3, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c}, 0x94) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x8000}, &(0x7f0000000080)=0x8) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000c, 0x1, 0x4020) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_type(r0, &(0x7f00000001c0), 0x9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x8, 0xf5, 0x0, 0x5, 0x0, 0xe, 0x11, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x14201, 0x7, 0x200, 0x6, 0x400000, 0xfffffff9, 0x1, 0x0, 0x6, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$l2tp6(0xa, 0x2, 0x73) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x46, 0x3, 0x9, 0x21b}]}) sendmsg$inet6(r4, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2000000000000000290000000400000037012c0005002c0004"], 0x20}, 0x800) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040016004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.346831611s ago: executing program 2 (id=978): perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0xad04, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ec68, 0x7, 0x2, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000047c0)={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x2, 0x1, {0x0, 0x0, 0xffffffffffffffff, 0x1}}, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r1, 0x2) accept4(r1, 0x0, 0x0, 0x80800) 2.293285302s ago: executing program 2 (id=979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x27, 0x6a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.216945205s ago: executing program 1 (id=980): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000006800010000000000000000000a0000000000000014000600ac1e0001000000000000000000000000040009"], 0x30}}, 0x40010) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x5411, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4, 0x0, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000002d80)={'ip_vti0\x00', &(0x7f0000002c80)=@ethtool_rxnfc={0x2d, 0x11, 0xe8, {0x4, @hdata="4ccbebb4add1395ee325a350b1e8d5aa4bc8f864be3e8b34fc5684fd0ad87b3e9ebdb22bfff77549fba411b6983ce1727dffae91", {0x0, @random="f860c2d67e46", 0xa3b7, 0x3, [0x100, 0x3ff]}, @udp_ip4_spec={@multicast1, @remote, 0x4e21, 0x4e22}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, 0xfff9, 0x7ff, [0x1000, 0x203f]}, 0xe, 0x3ff}}}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="100000410c14000126bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES16=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1, 0xd}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b80)={'syztnl0\x00', &(0x7f0000000b00)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x84, 0x477, 0x8, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x80, 0xf723, 0x7}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000d80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="80010000", @ANYRES16=0x0, @ANYBLOB="020526bd7000fbdbdf25090000001c000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="1400020073797a6b616c6c65723100000000000008000100", @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="0800030002000000140002006e723000000000000000000000000000340001801400020076657468305f6d616376746170000000140002006e65747063693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="5c00018008000100", @ANYRES32=0x0, @ANYBLOB="140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020d0000080003000000000008000100aa45cc1fda8a86da73d266c8222957a1d8d6d44d8a2f6412ed4385eef8aee6194b261d5465a0d25a15ebf5465074b81926c8bb05b4826301b6dc36", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e0000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="68000180140002007663616e3000000000000000000000001400020070696d7265670000000000000000000008000100", @ANYRES32=r6, @ANYRES64=r5], 0x180}, 0x1, 0x0, 0x0, 0x4008040}, 0x40) close(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000000, 0x6, 0x3fe}, 0x4}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x133}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000005c0)='\r', 0x5dc}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 2.172058336s ago: executing program 3 (id=981): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000580)="48000000120081fb7059ae08060c040002ff0f03900000000000000200006fabca3b4e7d06a6bd7c00060000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}, {&(0x7f0000000040)="eec2da48adfd56d309ba0f5626cef4dbbb0f7f0da76303f662e1302d4f828f7a672771961e8914a5512d6ab1f89ca90638b3ee6e4438f2c06d43f9588d022e673365c7221b2d644e618739771cd38a45f8548e0a057cab740f3958cf3f09e25f179cc58900b278d8896015683aaf93160f8365762024b747f77493ad9f272a4d349e6176396adc182f90175c30a150c927b197285980c289a5f942ef6d7ed98c323733ddd0dec83d4ac54862b4b7fc71c3359cba308293fcf010790cf30c41a15344c592f44112bc2f6c2373e697e2e1b5d605272a1064f830", 0xd9}, {&(0x7f0000000140)="97fdcf3c1889f2c5a9e2b9bf72ac21c322a5585a99432e8ce3d80d216dd2bae69eb3ca3afa8481c1d500a9dab7ee42f029909d", 0x33}, {&(0x7f0000000180)="1eabab4ea8220a8de3afd610508e855dbc88df9a95393613801bfbff4036587b6ea35c23662e291d66a173528d79880157145631b7bc64d065536dec9fc97794d296e6b5501120cf90941db7ca859ad66fdca6ca666b91c129a720b76c9724c2a03719764230382ec6b243f644fc20ea7692eab1606112106c8e6f11a2c106204bf05e8b5f4038ee65c3044b2f05ebf6abcaa70b12756e22eb6b2b16925e83eeecc5e1a843bb7eeae275fb35e430dc0fce702b7f8850879055e0702310dc", 0xbe}, {&(0x7f0000000300)="35ff9e1dda1ff55f3d7b8cf0908fbcae37f87d022de556b775b8c5117418bbad1a2274f28f063a4b1c0bc3377905cfb485ed89d8907b317d35d73cb886316ab7e69ce2e5ba09a321425867e763bf0da20dc1cada30aa96752b12b61b79e58bab65ad1ed0be61b770378383e8156ab0868a78dc6ba02cca981bf3363055ea25350e01519c64022602dd", 0x89}, {&(0x7f0000001680)="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"/4104, 0x1008}], 0x6}, 0x8410) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) 2.155938456s ago: executing program 3 (id=982): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{}, 0x0, &(0x7f0000000b00)}, 0x20) r0 = bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x25, 0x1e, @void}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040803}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/237, 0xed) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e27, 0xfffffffc, @remote, 0x7}}, [0x7, 0x0, 0x7fffffffffffffff, 0x7, 0x666, 0x1, 0x27, 0xffffffff, 0x7, 0x8, 0xa300, 0x5, 0x1000, 0x6, 0x3]}, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 2.105783037s ago: executing program 2 (id=983): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0xfffffffc, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x1052, 0x80000000, 0x0, 0x0, 0x80800000, 0x43, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000040)=0xfffffffffffffdde) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(r7, 0x43, 0x5, 0xfff) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000080)={0x8, 0x3ff, 0x1, 0x2, 0x40000000, 0x0, 0x9, 0x8}, 0x20) setns(0xc9, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1a33d6355871a5dd}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x10f) ioctl$TUNSETLINK(r8, 0x400454cd, 0x30a) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028001001294", 0x2e}], 0x1}, 0x0) 1.401014215s ago: executing program 5 (id=984): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x90, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 1.276008338s ago: executing program 5 (id=985): perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x100000000, 0xad04, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ec68, 0x7, 0x2, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000047c0)={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8, 0x2, 0x1, {0x0, 0x0, 0xffffffffffffffff, 0x1}}, 0x1) clock_gettime(0x5, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {r1, r2+60000000}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") io_uring_setup(0x6e21, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x2bb}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') listen(0xffffffffffffffff, 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) 594.422805ms ago: executing program 1 (id=986): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010000000000000001002c0000000c000000ff0f00000000000008001c00c9000000140031"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 428.234199ms ago: executing program 1 (id=987): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = epoll_create1(0x80000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x800001, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRESOCT=r0, @ANYBLOB="2c7766646e6f01", @ANYRESHEX, @ANYBLOB]) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x6, 0xb0, 0x3, 0x8}, {0xcff1, 0x3, 0x3, 0x1}]}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='0123:abcd:a,', 0xc) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") write$tun(r1, &(0x7f0000000bc0)={@val={0x0, 0x190bb}, @val={0x1, 0x4, 0x6c, 0x5, 0x100}, @eth={@empty, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "311db2", 0x179, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@fragment={0x67, 0x0, 0xb9, 0x0, 0x0, 0x1d, 0x64}], @time_exceed={0x3, 0x0, 0x0, 0xf5, '\x00', {0xe, 0x6, "a99146", 0x674, 0x5c, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, @private2, [@srh={0x62, 0xe, 0x4, 0x7, 0x5, 0x78, 0x0, [@loopback, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x2}]}, @dstopts={0x89, 0x3, '\x00', [@ra={0x5, 0x2, 0x100}, @pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x85}}, @jumbo={0xc2, 0x4, 0x4}]}, @fragment={0x84, 0x0, 0x3, 0x0, 0x0, 0xc, 0x65}, @srh={0x33, 0x6, 0x4, 0x3, 0x6, 0x18, 0x8001, [@empty, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @fragment={0x32, 0x0, 0x7, 0x0, 0x0, 0x3, 0x68}, @dstopts={0x6, 0x0, '\x00', [@ra={0x5, 0x2, 0x60}]}, @fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x66}, @dstopts={0x4, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}]}], "e714a1e160907a9661cbbf784d644b5ce41b45d9867d1e42b226b51924cc6338e9"}}}}}}}}, 0x1bd) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) syz_emit_ethernet(0x7b, &(0x7f0000001200)={@broadcast, @broadcast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0x41, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [{0x5, 0x5, "90403141a715409c94e5051da447d85c25eb02dfc0aa2db33b885e5ba18441b710dcab06cfb797"}]}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket(0x2b, 0x1, 0x1) listen(r6, 0x5) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x40000039}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000340)=0xc291) 120.728027ms ago: executing program 2 (id=988): r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010003b0c80008000000000", @ANYRES32=r3, @ANYBLOB="0000f83c026b0000300012800b00010065727370616e00002000ce21000006000f0097000000060011004e2400"/56], 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0xd, 0x2104, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f0000000640)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',session=0x000000000000005f,map=acorn,hide,check=relaxed,nocompress,mode=0x0000000000010001,session=0x0000000000000035,nojoliet,gid=', @ANYRESHEX=0x0, @ANYBLOB="70497fe92c005604e59b074751768f5413607859105cc70161541a"], 0x0, 0x691, &(0x7f0000000f00)="$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") setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000000c0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b8020000180070001006374000006000294080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48) 0s ago: executing program 3 (id=989): r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$eJzs3d1vHOW5APBnNrZjGwQBcoATAZkEBQzkOGv7kCji4pDYm2Q5/qhsRyJSK4KIU0WxSkVaCaJKBKnqVVFRVVVqK1UVl71CohflpspV28te9aJSy39QoV6Fqu1UM7tr7zr7EZu1HdLfL1rvfDzvvM87MztvvN6dN/gyy7KseGxx/vwvdzJZ7j6nZz798KP388d7N2Io9sSLya8jhiMijRj4Z3GuDE7PLC7M9djQ1YiLEXEzIomIvVF77mCkZe5iJD+I+9fnb0bys3i8TbHhTTaOnjL+o+32+QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHel6ZlyeSKJ2er8+VfTzoohwLusb2zuk2LU7+STXtUmEUn+iOHhxlDfj+9fX/1o/uNwPFGbe6I28vdwXL/v0X0vPTJQapTvktCOuPbO9auvr66uvFWf35umgz0L7d32tDZvaGvFzlbmq0sL1blTZytpdWkhPXn8ePnYuTNL6ZlqVJYuLC1X5tLpxcqp5YXFdGz6uXTi5MmptDJ+YeH8/NmZ8dlKY+GJ/5ksl4+nr4x/pXJqcWlh/tgr40vT56qzs9X5s0VMvjqPOZGfiP9fXU6XK6fm0vTyldWVqV5J5kETbdckrUGTvbY0WZ6cnJiYHInjL5588US5PFBfMDnRWFDeIG6L2P2Tln77+R1H/qrv12/4Akr1/j9moxrzcT5ejbTtv+mYicVYiLk265L17TX6/yPHKl3rbe7/G7384+urD0TR/z9Vm3uqU//fIdfe/7KstuWtlm/8uxbvxPW4Gq/HaqzGSrz1hbeYxm9b5z/fuP4fWZZtYbtp3tqDzfugD7mejUrMRzWWYiGqMReniiVpfUkaJ+N4HI9yvBbnbmVZXuOZqMZsVGIpLsRSLEelOKOmYzEqacRyLMRipDEW0/FcpDERJ2MkpiKNSozHhViI8zEfZ2MmThVbuRxXiv0+1SXHtaCJOwma7BJ0W2f+xfr/7G78nyDbrc9XcNi6rN7/D3UMyBpTY9M7lhUAAADQT//9+3hg/8O/+3PEYDxZvC9/pjpbKe92WgAAAEAfFR/XeyJ/Gswi4slI2vz+X9ql5AAAAIC+SIrv2CURMRoHa1O1b0LtCR8CAAAAgHtE8ff/p/Kn0XzqYCRrd0K5uNu5AQAAAP3R+x77PSOS4ajf0zK9VHu+VI+o3+d39Ex1tjI+vTD70kQ8U9xloPimwW1b2xORDBZfP3g+DtWiDo3WnkdbtzicR02MvzQRz8fhekPGns6fnh5rEzlZi3y2Fvlsl8ipPBIA7nWHb++PP8822f8/H0drEUcPDAxFxMCBNj1reb1nHdiNhgIAa3qPsdMa8W69XHP//7/rv/8P1le39P8Px+V/5QtXYjzeiDdjNS7F0eLbBsUnDlrq/eoH9fcM1j6GUI6jPd4NaMT+4UQpjvZ4P2C0aaCXoz3eEajFxtciprb3IADADjvcoR/u1P8XEdH44GCt/z/a9Pt/3P77/9rQQiu+UggAd4W1Eez7OpHtaV6y220EAFrdaS89uFMJAQAAAAAAAAAAAAAAAAAAAAAAAAAAwD2gr7f9H95i8b/Ux/WrLcn6Px5B+4mR+j5oLHl3U3vjvWvvXP9hRDSvKuWN2J6ci0z7u+VSH7aTRcROHa+dm4h9EVveq9Fu1VBEbHvyI/2o4vP6RO21Uep28TjfdS0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfAknEnnbLSxF7I6IcEcd2Pqvtc2O3E9h5/9c8k9yKW/F2PLB76QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Jvq9/8vRe35vtqiGChFHImIixGR7XaO/XRrtxPok5Etlmu6/39+zCNLYqB22CMZnJ5ZXJjLD38x9kPp0w8/ev+x1uJ777SeIrC0YXCJeg0bY39xf2PqoaLU6MzKtavfevOb6czpKMVQnF4+Mzszd3bx5fUijyYfR6RRezTk+eaP7xz5zQdtWv5x3tL2NtZ7ptg5M7fX+1i70t3r7ebK6spkXtNy5dXlb3/jyttNqx6OQxFPj0WMtdb09fzRoaZDMdittuSz5HvJA/HjuFgc/3xvJFmSH6IHi/aPXL6yujL+xpurlzrktC8ORsSliOGeOa3t6oPF9aSt4qwrDea1loug/Mf+Hm1sr3mMi9oWJzq04aHilBmtt2GopQ2lDnWmndtQ7PCm/V5qTCTJxoym6hkNRWtGj8QzbY50tjei8154pvuRbi/5LPlTci7+GN9tGv+jlB//I9H51dm6iSKy6UzpGFmqRRYtn2xe8drGyL/+5I6ybztMDZv1/ZYXb6np+l8/Vn26HmVJ1+tRU41THWps/7rYUOPGs6LUseFFj7R/Q4n61adjoVqe+2tRHfL8r3ghYuBAt6vibb31C52vKK3lX26/equv/58mY/G3uGH8HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O6XROxpt7wUcSQi9jXm04hsE5vd22lFaTTZbIp9dWPtx5fc/uJnqWXZe72LJbfiVvbudiUFAAAAAAAAwE47PfPphx+9nz+Kv8fvuZVl9b/vpxEDEbEv+dFIzCwuzPXY0GDExYi4mU8Pdwr6e1bTujQvF/evz9+MyB7cepMAgB7+HQAA//8L2HXs") syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010003b0c80008000000000", @ANYRES32=r3, @ANYBLOB="0000f83c026b0000300012800b00010065727370616e00002000ce21000006000f0097000000060011004e2400"/56], 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0xd, 0x2104, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f0000000640)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',session=0x000000000000005f,map=acorn,hide,check=relaxed,nocompress,mode=0x0000000000010001,session=0x0000000000000035,nojoliet,gid=', @ANYRESHEX=0x0, @ANYBLOB="70497fe92c005604e59b074751768f5413607859105cc70161541a"], 0x0, 0x691, &(0x7f0000000f00)="$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") setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000000c0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b8020000180070001006374000006000294080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48) kernel console output (not intermixed with test programs): ] loop1: detected capacity change from 0 to 1764 [ 127.634843][ T5321] netlink: 'syz.2.489': attribute type 2 has an invalid length. [ 127.656244][ T5320] loop0: detected capacity change from 0 to 1764 [ 127.870781][ T5324] loop1: detected capacity change from 0 to 764 [ 127.879327][ T5324] iso9660: Bad value for 'gid' [ 127.884760][ T5324] iso9660: Bad value for 'gid' [ 127.907397][ T5324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.486'. [ 127.917312][ T5324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 127.952335][ T5325] loop0: detected capacity change from 0 to 764 [ 127.961436][ T5325] iso9660: Bad value for 'gid' [ 127.966626][ T5325] iso9660: Bad value for 'gid' [ 128.075119][ T5325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.488'. [ 128.084757][ T5325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.488'. [ 128.500129][ T5332] loop3: detected capacity change from 0 to 512 [ 128.692067][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 128.692134][ T28] audit: type=1400 audit(1785541355.851:514): avc: denied { read } for pid=5335 comm="syz.4.491" laddr=fe80::b lport=58320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.746540][ T5332] EXT4-fs mount: 10 callbacks suppressed [ 128.746558][ T5332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.773893][ T5332] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.787390][ T28] audit: type=1400 audit(1785541355.981:515): avc: denied { write } for pid=5331 comm="syz.3.494" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.798173][ T5343] loop4: detected capacity change from 0 to 128 [ 128.827842][ T5345] loop1: detected capacity change from 0 to 512 [ 128.830994][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.864100][ T5343] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.887532][ T5345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.889674][ T5343] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.900099][ T5345] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.957016][ T28] audit: type=1400 audit(1785541356.091:516): avc: denied { write } for pid=5335 comm="syz.4.491" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.981311][ T5349] loop3: detected capacity change from 0 to 1764 [ 129.069510][ T5345] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.325423][ T5357] loop3: detected capacity change from 0 to 764 [ 129.332682][ T5357] iso9660: Bad value for 'gid' [ 129.337512][ T5357] iso9660: Bad value for 'gid' [ 129.353414][ T5357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.497'. [ 129.593732][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.624837][ T28] audit: type=1326 audit(1785541356.821:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.0.500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49ec1be019 code=0x0 [ 130.032250][ T5364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.267513][ T5373] netlink: 'syz.3.503': attribute type 2 has an invalid length. [ 130.425069][ T5377] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.504: inode has both inline data and extents flags [ 130.438158][ T5377] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 130.438339][ T5377] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.504: couldn't read orphan inode 15 (err -117) [ 130.459229][ T5377] loop0: lost filesystem error report for type 5 error -117 [ 130.460322][ T5377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.296050][ T28] audit: type=1400 audit(1785541358.061:518): avc: denied { write } for pid=5363 comm="syz.2.511" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.855800][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.941847][ T5384] set_capacity_and_notify: 3 callbacks suppressed [ 131.941874][ T5384] loop3: detected capacity change from 0 to 764 [ 131.954946][ T5384] iso9660: Bad value for 'gid' [ 131.959738][ T5384] iso9660: Bad value for 'gid' [ 131.966708][ T5384] __nla_validate_parse: 1 callbacks suppressed [ 131.966721][ T5384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.506'. [ 131.981806][ T5384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.506'. [ 132.112905][ T28] audit: type=1400 audit(1785541359.281:519): avc: denied { write } for pid=5376 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.258921][ T5389] loop1: detected capacity change from 0 to 4096 [ 132.299609][ T5389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.360401][ T5389] netlink: 292 bytes leftover after parsing attributes in process `syz.1.505'. [ 132.579814][ T5392] loop4: detected capacity change from 0 to 512 [ 132.703267][ T5392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.715772][ T5392] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.727137][ T5392] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.855765][ T5402] loop2: detected capacity change from 0 to 1764 [ 132.891413][ T5402] netlink: 48 bytes leftover after parsing attributes in process `syz.2.510'. [ 132.949341][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.069315][ T28] audit: type=1400 audit(1785541360.271:520): avc: denied { create } for pid=5403 comm="syz.1.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 133.126065][ T28] audit: type=1400 audit(1785541360.281:521): avc: denied { bind } for pid=5403 comm="syz.1.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 133.210006][ T28] audit: type=1400 audit(1785541360.281:522): avc: denied { read } for pid=5403 comm="syz.1.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 133.305194][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 133.319683][ T5410] loop2: detected capacity change from 0 to 764 [ 133.326423][ T5410] iso9660: Bad value for 'gid' [ 133.331221][ T5410] iso9660: Bad value for 'gid' [ 133.338230][ T5410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.510'. [ 133.347119][ T5410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 133.588705][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.826174][ T28] audit: type=1326 audit(1785541361.031:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.0.515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49ec1be019 code=0x0 [ 133.827167][ T5424] netlink: 'syz.2.518': attribute type 4 has an invalid length. [ 133.870201][ T5407] loop1: detected capacity change from 0 to 512 [ 133.924653][ T5407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.937523][ T5407] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.951492][ T5407] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.982180][ T28] audit: type=1400 audit(1785541361.191:524): avc: denied { name_connect } for pid=5425 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 134.025338][ T5424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.518'. [ 134.034898][ T28] audit: type=1400 audit(1785541361.191:525): avc: denied { allowed } for pid=5434 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 134.081122][ T5439] geneve0: entered promiscuous mode [ 134.088522][ T5439] geneve0: left promiscuous mode [ 134.103589][ T5426] loop4: detected capacity change from 0 to 1024 [ 134.123694][ T5426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.143741][ T28] audit: type=1400 audit(1785541361.341:526): avc: denied { write } for pid=5425 comm="syz.4.519" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.192465][ T28] audit: type=1400 audit(1785541361.341:527): avc: denied { create } for pid=5425 comm="syz.4.519" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.200831][ T5437] loop1: detected capacity change from 0 to 8192 [ 134.234117][ T28] audit: type=1400 audit(1785541361.341:528): avc: denied { read write } for pid=5425 comm="syz.4.519" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.234243][ T28] audit: type=1400 audit(1785541361.341:529): avc: denied { open } for pid=5425 comm="syz.4.519" path="/94/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.234365][ T28] audit: type=1400 audit(1785541361.341:530): avc: denied { write } for pid=5425 comm="syz.4.519" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.234392][ T28] audit: type=1400 audit(1785541361.341:531): avc: denied { unlink } for pid=5425 comm="syz.4.519" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.308131][ T5446] loop3: detected capacity change from 0 to 1764 [ 134.451377][ T5448] loop2: detected capacity change from 0 to 128 [ 134.512190][ T5448] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.528354][ T5448] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.592341][ T28] audit: type=1400 audit(1785541361.801:532): avc: denied { write } for pid=5447 comm="syz.2.524" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.628576][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.651811][ T5455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.526'. [ 134.794542][ T5464] iso9660: Bad value for 'gid' [ 134.799415][ T5464] iso9660: Bad value for 'gid' [ 134.806556][ T5464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.523'. [ 136.042784][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.522945][ T5481] __nla_validate_parse: 2 callbacks suppressed [ 137.522962][ T5481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.533'. [ 137.706706][ T5492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 137.723103][ T5492] set_capacity_and_notify: 2 callbacks suppressed [ 137.723136][ T5492] loop1: detected capacity change from 0 to 764 [ 137.737311][ T5492] iso9660: Bad value for 'gid' [ 137.742467][ T5492] iso9660: Bad value for 'gid' [ 137.750824][ T5492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.530'. [ 137.760167][ T5492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'. [ 137.790375][ T5494] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 138.096547][ T5482] loop4: detected capacity change from 0 to 8192 [ 138.148743][ T5497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.540'. [ 138.402733][ T5521] ip6gre1: entered allmulticast mode [ 138.415339][ T3783] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.444177][ T5524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.613570][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 138.680685][ T5529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5529 comm=syz.0.551 [ 138.782264][ T5536] loop4: detected capacity change from 0 to 1764 [ 138.818962][ T5536] netlink: 48 bytes leftover after parsing attributes in process `syz.4.553'. [ 138.846072][ T5532] syzkaller0: entered promiscuous mode [ 138.862965][ T5532] syzkaller0: entered allmulticast mode [ 139.174439][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 139.230107][ T5544] loop4: detected capacity change from 0 to 764 [ 139.236763][ T5544] iso9660: Bad value for 'gid' [ 139.241638][ T5544] iso9660: Bad value for 'gid' [ 139.248508][ T5544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.553'. [ 139.257472][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.553'. [ 139.450380][ T5549] loop1: detected capacity change from 0 to 512 [ 139.495787][ T5549] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.546650][ T5549] EXT4-fs (loop1): orphan cleanup on readonly fs [ 139.574144][ T5549] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 139.631127][ T5549] EXT4-fs (loop1): 1 truncate cleaned up [ 139.649876][ T5549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 139.696024][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 139.696041][ T28] audit: type=1400 audit(1785541366.901:543): avc: denied { setopt } for pid=5548 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.723351][ T28] audit: type=1400 audit(1785541366.901:544): avc: denied { create } for pid=5548 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 139.780538][ T5549] 9p: Bad value for 'rfdno' [ 139.780827][ T28] audit: type=1400 audit(1785541366.981:545): avc: denied { mounton } for pid=5548 comm="syz.1.556" path="/113/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.828588][ T5547] loop2: detected capacity change from 0 to 8192 [ 139.919691][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.019961][ T28] audit: type=1400 audit(1785541367.221:546): avc: denied { bind } for pid=5564 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.074461][ T5567] loop1: detected capacity change from 0 to 4096 [ 140.077460][ T5568] loop0: detected capacity change from 0 to 512 [ 140.100619][ T28] audit: type=1400 audit(1785541367.251:547): avc: denied { getopt } for pid=5564 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.126618][ T28] audit: type=1400 audit(1785541367.251:548): avc: denied { create } for pid=5564 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 140.146819][ T28] audit: type=1400 audit(1785541367.261:549): avc: denied { bind } for pid=5564 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 140.175989][ T5567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.202627][ T5577] loop4: detected capacity change from 0 to 512 [ 140.209498][ T28] audit: type=1400 audit(1785541367.271:550): avc: denied { recv } for pid=5475 comm="syz.3.533" saddr=10.128.0.163 src=30036 daddr=10.128.1.28 dest=33904 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 140.220067][ T5578] loop2: detected capacity change from 0 to 1764 [ 140.404538][ T5577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.420938][ T28] audit: type=1326 audit(1785541367.621:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5580 comm="syz.3.566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0cd59de019 code=0x0 [ 140.432698][ T5568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.462501][ T5568] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.473794][ T5568] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.483701][ T5577] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.535191][ T5577] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.555461][ T5585] iso9660: Bad value for 'gid' [ 140.560253][ T5585] iso9660: Bad value for 'gid' [ 140.809361][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.174099][ T5595] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.232889][ T5595] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 141.254797][ T5595] EXT4-fs (loop2): 1 truncate cleaned up [ 141.305277][ T5595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.369795][ T28] audit: type=1400 audit(1785541368.531:552): avc: denied { write } for pid=5594 comm="syz.2.569" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.479080][ T5607] tipc: Started in network mode [ 141.488925][ T5607] tipc: Node identity 4, cluster identity 4711 [ 141.499390][ T5607] tipc: Node number set to 4 [ 141.538278][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.749218][ T5620] iso9660: Bad value for 'gid' [ 141.754329][ T5620] iso9660: Bad value for 'gid' [ 142.098865][ T5615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.111385][ T5615] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.222816][ T5629] 9p: Bad value for 'rfdno' [ 142.260842][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.287209][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.377411][ T5634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.444078][ T5632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.456586][ T5632] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.509230][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.262843][ T5649] set_capacity_and_notify: 7 callbacks suppressed [ 143.262899][ T5649] loop2: detected capacity change from 0 to 4096 [ 143.292092][ T5651] __nla_validate_parse: 11 callbacks suppressed [ 143.292109][ T5651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.583'. [ 143.317265][ T5649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.392259][ T5649] netlink: 300 bytes leftover after parsing attributes in process `syz.2.582'. [ 143.831619][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.507820][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.595672][ T5672] loop0: detected capacity change from 0 to 512 [ 144.603354][ T5672] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 144.624572][ T5672] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 144.632728][ T5672] EXT4-fs (loop0): orphan cleanup on readonly fs [ 144.703197][ T5675] loop3: detected capacity change from 0 to 512 [ 144.714519][ T5672] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #13: comm syz.0.593: iget: bad i_size value: 12154761577498 [ 144.727144][ T5672] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 144.730761][ T5672] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.593: couldn't read orphan inode 13 (err -117) [ 144.772199][ T5672] loop0: lost filesystem error report for type 5 error -117 [ 144.772819][ T5672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 144.897538][ T5672] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.593: dx entry: limit 65535 != root limit 120 [ 144.914783][ T5675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.927330][ T5675] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.021300][ T5672] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.593: Corrupt directory, running e2fsck is recommended [ 145.039133][ T5675] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.097639][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 145.097713][ T28] audit: type=1400 audit(1785541372.301:562): avc: denied { create } for pid=5685 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.144427][ T28] audit: type=1400 audit(1785541372.301:563): avc: denied { bind } for pid=5685 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.163760][ T28] audit: type=1400 audit(1785541372.301:564): avc: denied { connect } for pid=5685 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.164109][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.183363][ T28] audit: type=1400 audit(1785541372.301:565): avc: denied { write } for pid=5685 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.211650][ T28] audit: type=1400 audit(1785541372.301:566): avc: denied { setopt } for pid=5685 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 145.367210][ T5682] loop4: detected capacity change from 0 to 512 [ 145.400132][ T5692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.596'. [ 145.544390][ T5698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.599'. [ 145.603008][ T5682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.622790][ T5682] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.973625][ T5708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.610'. [ 145.982831][ T5707] loop1: detected capacity change from 0 to 512 [ 146.095280][ T5707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.198418][ T5682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.221261][ T5707] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.318006][ T5712] loop3: detected capacity change from 0 to 1764 [ 146.335467][ T5707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.634706][ T28] audit: type=1400 audit(1785541374.211:567): avc: denied { egress } for pid=5694 comm="syz.2.598" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 147.659871][ T28] audit: type=1400 audit(1785541374.211:568): avc: denied { sendto } for pid=5694 comm="syz.2.598" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 148.000039][ T5719] loop3: detected capacity change from 0 to 764 [ 148.007454][ T5719] iso9660: Bad value for 'gid' [ 148.012551][ T5719] iso9660: Bad value for 'gid' [ 148.023887][ T5719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.601'. [ 148.033670][ T5719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.601'. [ 148.192198][ T5721] loop1: detected capacity change from 0 to 512 [ 148.333351][ T5721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.355808][ T5727] netlink: 'syz.4.605': attribute type 5 has an invalid length. [ 148.357824][ T5721] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.374773][ T5721] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.382229][ T5727] netlink: 45 bytes leftover after parsing attributes in process `syz.4.605'. [ 148.458484][ T5729] loop0: detected capacity change from 0 to 512 [ 148.480226][ T5729] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 148.500217][ T5729] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 148.546956][ T5729] EXT4-fs (loop0): 1 truncate cleaned up [ 148.567934][ T5729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.581880][ T5740] loop3: detected capacity change from 0 to 8192 [ 148.636639][ T5743] loop4: detected capacity change from 0 to 1764 [ 148.938269][ T5749] loop4: detected capacity change from 0 to 764 [ 148.945226][ T5749] iso9660: Bad value for 'gid' [ 148.950030][ T5749] iso9660: Bad value for 'gid' [ 148.960212][ T5749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.613'. [ 148.969201][ T5749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.613'. [ 149.589852][ T5752] loop3: detected capacity change from 0 to 512 [ 149.699293][ T5752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.711822][ T5752] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.839755][ T5752] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.848953][ T5757] loop1: detected capacity change from 0 to 512 [ 149.860432][ T28] audit: type=1400 audit(1785541377.041:569): avc: denied { create } for pid=5760 comm="syz.4.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 150.026074][ T28] audit: type=1400 audit(1785541377.041:570): avc: denied { mount } for pid=5767 comm="syz.2.618" name="/" dev="rpc_pipefs" ino=12924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 150.050872][ T5757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.052644][ T28] audit: type=1400 audit(1785541377.041:571): avc: denied { create } for pid=5760 comm="syz.4.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 150.063432][ T5757] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.123321][ T28] audit: type=1400 audit(1785541377.311:572): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 150.154277][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.188420][ T5773] tun0: tun_chr_ioctl cmd 2147767506 [ 150.195402][ T28] audit: type=1400 audit(1785541377.391:573): avc: denied { execute } for pid=5774 comm="syz.2.620" path="/139/memory.events" dev="tmpfs" ino=779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.232832][ T28] audit: type=1400 audit(1785541377.391:574): avc: denied { ioctl } for pid=5774 comm="syz.2.620" path="socket:[13717]" dev="sockfs" ino=13717 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.286814][ T28] audit: type=1400 audit(1785541377.391:575): avc: denied { getopt } for pid=5774 comm="syz.2.620" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.288854][ T5757] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.329531][ T5773] netlink: 'syz.3.619': attribute type 4 has an invalid length. [ 150.341137][ T5777] tmpfs: Bad value for 'mpol' [ 150.381662][ T28] audit: type=1400 audit(1785541377.491:576): avc: denied { create } for pid=5776 comm="syz.2.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 150.457176][ T28] audit: type=1400 audit(1785541377.561:577): avc: denied { write } for pid=5776 comm="syz.2.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 150.544926][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.557925][ T5782] netlink: 52 bytes leftover after parsing attributes in process `syz.2.623'. [ 150.566928][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 150.575760][ T5782] netlink: 52 bytes leftover after parsing attributes in process `syz.2.623'. [ 150.584645][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 150.593713][ T5782] netlink: 52 bytes leftover after parsing attributes in process `syz.2.623'. [ 150.677682][ T5791] loop4: detected capacity change from 0 to 1764 [ 150.795590][ T28] audit: type=1400 audit(1785541377.991:578): avc: denied { read } for pid=5799 comm="syz.2.630" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.818604][ T28] audit: type=1400 audit(1785541377.991:579): avc: denied { open } for pid=5799 comm="syz.2.630" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.868362][ T5802] loop0: detected capacity change from 0 to 4096 [ 150.886941][ T5802] netlink: 300 bytes leftover after parsing attributes in process `syz.0.624'. [ 150.980005][ T5805] loop4: detected capacity change from 0 to 764 [ 150.987477][ T5805] iso9660: Bad value for 'gid' [ 150.992450][ T5805] iso9660: Bad value for 'gid' [ 151.002785][ T5805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.627'. [ 151.099381][ T5801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.168213][ T5801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.569742][ T5815] loop3: detected capacity change from 0 to 256 [ 151.586447][ T5815] vfat: Unknown parameter '' [ 151.631248][ T28] audit: type=1400 audit(1785541378.831:580): avc: denied { mount } for pid=5814 comm="syz.3.635" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 151.673147][ T5816] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 151.732741][ T28] audit: type=1400 audit(1785541378.941:581): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 152.012971][ T5819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.341958][ T5828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.357703][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.361173][ T5828] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.453357][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.923889][ T5855] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.947378][ T5855] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.648: invalid indirect mapped block 32768 (level 2) [ 152.977067][ T5855] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 152.977268][ T5855] EXT4-fs (loop3): Remounting filesystem read-only [ 152.986517][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 152.986539][ C0] EXT4-fs (loop3): initial error at time 1785541380: ext4_free_branches:1023: inode 16 [ 152.986575][ C0] EXT4-fs (loop3): last error at time 1785541380: ext4_free_branches:1023: inode 16 [ 153.087457][ T5865] iso9660: Bad value for 'gid' [ 153.092336][ T5865] iso9660: Bad value for 'gid' [ 153.701365][ T5874] set_capacity_and_notify: 6 callbacks suppressed [ 153.701381][ T5874] loop1: detected capacity change from 0 to 2048 [ 153.758007][ T5855] EXT4-fs (loop3): 1 orphan inode deleted [ 153.783997][ T5855] EXT4-fs (loop3): 1 truncate cleaned up [ 153.807374][ T5855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.902424][ T5872] loop4: detected capacity change from 0 to 8192 [ 154.091955][ T2980] Alternate GPT is invalid, using primary GPT. [ 154.105897][ T2980] loop1: p2 p3 p7 [ 154.156883][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.185526][ T5891] loop1: detected capacity change from 0 to 128 [ 154.198293][ T4051] udevd[4051]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 154.209837][ T4315] udevd[4315]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 154.216836][ T5891] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.220881][ T3838] udevd[3838]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 154.254331][ T5894] loop3: detected capacity change from 0 to 1764 [ 154.277433][ T5891] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.573237][ T5890] loop0: detected capacity change from 0 to 512 [ 154.648232][ T5890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.661135][ T5890] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.708361][ T5901] __nla_validate_parse: 7 callbacks suppressed [ 154.708379][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 154.734649][ T5901] loop3: detected capacity change from 0 to 764 [ 154.735254][ T5890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.754311][ T5901] iso9660: Bad value for 'gid' [ 154.759119][ T5901] iso9660: Bad value for 'gid' [ 154.782114][ T5901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.659'. [ 154.806035][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 154.875408][ T5904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.663'. [ 154.894890][ T5904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.663'. [ 154.917775][ T5904] netlink: 508 bytes leftover after parsing attributes in process `syz.0.663'. [ 154.948052][ T5904] tap0: tun_chr_ioctl cmd 2148553947 [ 155.386283][ T5909] loop2: detected capacity change from 0 to 512 [ 155.449154][ T5909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.510117][ T5927] loop4: detected capacity change from 0 to 256 [ 155.539695][ T5929] vhci_hcd vhci_hcd.3: default hub control req: 0000 v0000 i0000 l0 [ 155.559498][ T5909] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.583126][ T5932] loop3: detected capacity change from 0 to 4096 [ 155.620645][ T5932] netlink: 300 bytes leftover after parsing attributes in process `syz.3.667'. [ 155.634195][ T5930] loop1: detected capacity change from 0 to 512 [ 155.719264][ T5940] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.768701][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 155.768718][ T28] audit: type=1400 audit(1785541382.951:632): avc: denied { create } for pid=5942 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 155.830050][ T5930] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 155.838187][ T5930] EXT4-fs (loop1): too many log groups per flexible block group [ 155.845870][ T5930] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 155.852805][ T5930] EXT4-fs (loop1): mount failed [ 155.872202][ T28] audit: type=1400 audit(1785541383.071:633): avc: denied { sqpoll } for pid=5947 comm="syz.4.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 155.951814][ T5957] macvlan0: entered promiscuous mode [ 156.119328][ T5963] vti0: entered allmulticast mode [ 156.273627][ T28] audit: type=1400 audit(1785541383.451:634): avc: denied { getopt } for pid=5967 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.361813][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 156.390285][ T5975] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 156.422260][ T5973] iso9660: Bad value for 'gid' [ 156.449021][ T5973] iso9660: Bad value for 'gid' [ 156.477849][ T5973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.678'. [ 156.527653][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'. [ 156.991334][ T28] audit: type=1400 audit(1785541384.191:635): avc: denied { write } for pid=5988 comm="syz.1.685" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.022106][ T28] audit: type=1400 audit(1785541384.221:636): avc: denied { write } for pid=5988 comm="syz.1.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 157.167780][ T28] audit: type=1400 audit(1785541384.371:637): avc: denied { ioctl } for pid=6001 comm="syz.3.688" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 157.429182][ T5999] msdos: Unknown parameter '[Ç<ŒUz]iscard' [ 157.429231][ T28] audit: type=1400 audit(1785541384.631:638): avc: denied { mounton } for pid=5998 comm="syz.4.689" path="/132/file0" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 157.532047][ T28] audit: type=1400 audit(1785541384.731:639): avc: denied { ioctl } for pid=6008 comm="syz.0.691" path="socket:[14402]" dev="sockfs" ino=14402 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.589657][ T28] audit: type=1400 audit(1785541384.741:640): avc: denied { write } for pid=6008 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 158.506006][ T6044] netlink: 'syz.2.697': attribute type 2 has an invalid length. [ 158.685007][ T6048] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.700607][ T28] audit: type=1400 audit(1785541385.861:641): avc: denied { write } for pid=6047 comm="syz.4.701" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.903126][ T6052] set_capacity_and_notify: 8 callbacks suppressed [ 158.903140][ T6052] loop2: detected capacity change from 0 to 8192 [ 158.982382][ T6057] loop1: detected capacity change from 0 to 1764 [ 159.074284][ T6060] loop2: detected capacity change from 0 to 512 [ 159.117205][ T6060] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 159.253009][ T6062] loop1: detected capacity change from 0 to 764 [ 159.260417][ T6062] iso9660: Bad value for 'gid' [ 159.265498][ T6062] iso9660: Bad value for 'gid' [ 159.342836][ T3417] IPVS: starting estimator thread 0... [ 159.349148][ T6060] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 159.434056][ T6065] IPVS: using max 2640 ests per chain, 132000 per kthread [ 159.841279][ T6071] __nla_validate_parse: 5 callbacks suppressed [ 159.841356][ T6071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.707'. [ 159.984555][ T6075] loop4: detected capacity change from 0 to 1764 [ 160.093268][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.199818][ T6064] syz.2.705 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 160.251172][ T6078] loop1: detected capacity change from 0 to 4096 [ 160.269158][ T6064] CPU: 0 UID: 0 PID: 6064 Comm: syz.2.705 Not tainted syzkaller #0 PREEMPT(lazy) [ 160.269192][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.269206][ T6064] Call Trace: [ 160.269215][ T6064] [ 160.269225][ T6064] __dump_stack+0x1d/0x30 [ 160.269300][ T6064] dump_stack_lvl+0x95/0xd0 [ 160.269409][ T6064] dump_stack+0x15/0x1b [ 160.269430][ T6064] dump_header+0x80/0x240 [ 160.269451][ T6064] oom_kill_process+0x295/0x350 [ 160.269488][ T6064] out_of_memory+0x981/0xbc0 [ 160.269519][ T6064] try_charge_memcg+0x621/0xa00 [ 160.269572][ T6064] __memcg_kmem_charge_page+0x199/0x3a0 [ 160.269673][ T6064] __alloc_frozen_pages_noprof+0x18a/0x350 [ 160.269739][ T6064] alloc_pages_mpol+0xa9/0x1d0 [ 160.269774][ T6064] alloc_pages_noprof+0x8f/0x140 [ 160.269914][ T6064] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 160.269957][ T6064] __kvmalloc_node_noprof+0x3a0/0x590 [ 160.269985][ T6064] ? futex_hash_allocate+0x192/0x920 [ 160.270082][ T6064] ? futex_hash_allocate+0x192/0x920 [ 160.270183][ T6064] ? futex_hash_allocate+0x192/0x920 [ 160.270210][ T6064] futex_hash_allocate+0x192/0x920 [ 160.270235][ T6064] ? cap_task_prctl+0x13f/0x6b0 [ 160.270295][ T6064] futex_hash_prctl+0xd8/0xf0 [ 160.270317][ T6064] __se_sys_prctl+0x4f4/0x13b0 [ 160.270417][ T6064] __x64_sys_prctl+0x67/0x80 [ 160.270445][ T6064] x64_sys_call+0x2533/0x3020 [ 160.270472][ T6064] do_syscall_64+0x136/0x3c0 [ 160.270583][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.270680][ T6064] RIP: 0033:0x7f85f944e019 [ 160.270701][ T6064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.270723][ T6064] RSP: 002b:00007f85f7e86028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 160.270748][ T6064] RAX: ffffffffffffffda RBX: 00007f85f96d6090 RCX: 00007f85f944e019 [ 160.270765][ T6064] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 160.270781][ T6064] RBP: 00007f85f94e500c R08: 0000000000000000 R09: 0000000000000000 [ 160.270855][ T6064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.270868][ T6064] R13: 00007f85f96d6128 R14: 00007f85f96d6090 R15: 00007ffcfba4e5b8 [ 160.270905][ T6064] [ 160.502717][ T6064] memory: usage 260392kB, limit 307200kB, failcnt 254 [ 160.518647][ T6064] memory+swap: usage 261328kB, limit 9007199254740988kB, failcnt 0 [ 160.587002][ T6085] loop4: detected capacity change from 0 to 764 [ 160.593744][ T6085] iso9660: Bad value for 'gid' [ 160.598574][ T6085] iso9660: Bad value for 'gid' [ 160.606616][ T6085] netlink: 20 bytes leftover after parsing attributes in process `syz.4.711'. [ 160.615602][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.711'. [ 160.712606][ T6078] EXT4-fs mount: 12 callbacks suppressed [ 160.712719][ T6078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.785478][ T6064] kmem: usage 61428kB, limit 9007199254740988kB, failcnt 0 [ 160.792876][ T6064] Memory cgroup stats for /syz2: [ 160.793175][ T6064] cache 4096 [ 160.871131][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.890991][ T6064] rss 32768 [ 160.914798][ T6064] shmem 0 [ 160.917790][ T6064] mapped_file 4096 [ 160.941356][ T6064] dirty 0 [ 160.959255][ T6064] writeback 0 [ 160.966577][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.977007][ T6064] workingset_refault_anon 92 [ 161.002039][ T6064] workingset_refault_file 1469 [ 161.013819][ T6064] swap 958464 [ 161.037307][ T6064] swapcached 15261696 [ 161.041708][ T6064] pgpgin 197487 [ 161.045478][ T6064] pgpgout 197477 [ 161.049339][ T6064] pgfault 153171 [ 161.053293][ T6064] pgmajfault 75 [ 161.057068][ T6064] inactive_anon 0 [ 161.061166][ T6064] active_anon 36864 [ 161.065305][ T6064] inactive_file 0 [ 161.069430][ T6064] active_file 4096 [ 161.073525][ T6064] unevictable 0 [ 161.077414][ T6064] hierarchical_memory_limit 314572800 [ 161.083582][ T6064] hierarchical_memsw_limit 9223372036854771712 [ 161.090240][ T6064] total_cache 4096 [ 161.094270][ T6064] total_rss 32768 [ 161.098286][ T6064] total_shmem 0 [ 161.102038][ T6064] total_mapped_file 4096 [ 161.102632][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.106592][ T6064] total_dirty 0 [ 161.121291][ T6064] total_writeback 0 [ 161.125492][ T6064] total_workingset_refault_anon 92 [ 161.130961][ T6064] total_workingset_refault_file 1469 [ 161.136543][ T6064] total_swap 958464 [ 161.138585][ T6073] netlink: 300 bytes leftover after parsing attributes in process `syz.1.710'. [ 161.140594][ T6064] total_swapcached 15261696 [ 161.155314][ T6064] total_pgpgin 197487 [ 161.159541][ T6064] total_pgpgout 197477 [ 161.163892][ T6064] total_pgfault 153171 [ 161.168252][ T6064] total_pgmajfault 75 [ 161.172516][ T6064] total_inactive_anon 0 [ 161.176939][ T6064] total_active_anon 36864 [ 161.181570][ T6064] total_inactive_file 0 [ 161.185987][ T6064] total_active_file 4096 [ 161.190597][ T6064] total_unevictable 0 [ 161.195036][ T6064] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.705,pid=6059,uid=0 [ 161.210495][ T6064] Memory cgroup out of memory: Killed process 6064 (syz.2.705) total-vm:94320kB, anon-rss:1264kB, file-rss:22540kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 161.295451][ T68] bridge_slave_1: left allmulticast mode [ 161.304486][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 161.304503][ T28] audit: type=1400 audit(1785541388.511:645): avc: denied { read } for pid=3019 comm="dhcpcd" name="n27" dev="tmpfs" ino=7773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.334356][ T68] bridge_slave_1: left promiscuous mode [ 161.356716][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.390384][ T68] bridge_slave_0: left allmulticast mode [ 161.400774][ T68] bridge_slave_0: left promiscuous mode [ 161.406880][ T28] audit: type=1400 audit(1785541388.511:646): avc: denied { open } for pid=3019 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=7773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.429892][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.437275][ T28] audit: type=1400 audit(1785541388.511:647): avc: denied { getattr } for pid=3019 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=7773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.590146][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.601097][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.630213][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.656573][ T68] bond0 (unregistering): Released all slaves [ 161.705704][ T68] IPVS: stopping backup sync thread 5816 ... [ 161.789833][ T6114] netlink: 'syz.4.714': attribute type 2 has an invalid length. [ 161.840349][ T28] audit: type=1400 audit(1785541389.031:648): avc: denied { write } for pid=6107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.877848][ T6120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.715'. [ 161.916600][ T28] audit: type=1400 audit(1785541389.031:649): avc: denied { create } for pid=6107 comm="dhcpcd-run-hook" name="resolv.conf.eth3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.990819][ T68] hsr_slave_0: left promiscuous mode [ 162.014925][ T68] hsr_slave_1: left promiscuous mode [ 162.021176][ T28] audit: type=1400 audit(1785541389.031:650): avc: denied { write } for pid=6107 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth3.link" dev="tmpfs" ino=7798 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.037286][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.049471][ T28] audit: type=1400 audit(1785541389.031:651): avc: denied { append } for pid=6107 comm="dhcpcd-run-hook" name="resolv.conf.eth3.link" dev="tmpfs" ino=7798 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.079500][ T28] audit: type=1400 audit(1785541389.151:652): avc: denied { write } for pid=6122 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.101302][ T28] audit: type=1400 audit(1785541389.151:653): avc: denied { unlink } for pid=6122 comm="rm" name="resolv.conf.eth3.link" dev="tmpfs" ino=7798 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.107536][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.164243][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.172429][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.191130][ T68] veth1_macvtap: left promiscuous mode [ 162.203091][ T68] veth0_macvtap: left promiscuous mode [ 162.215336][ T68] veth1_vlan: left promiscuous mode [ 162.226933][ T68] veth0_vlan: left promiscuous mode [ 162.443994][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'. [ 162.571418][ T6132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6132 comm=syz.4.717 [ 162.738776][ T68] team0 (unregistering): Port device team_slave_1 removed [ 162.754049][ T68] team0 (unregistering): Port device team_slave_0 removed [ 162.796799][ T28] audit: type=1400 audit(1785541389.961:654): avc: denied { getopt } for pid=6133 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.919295][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 162.959872][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.982085][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.000830][ T6079] bridge_slave_0: entered allmulticast mode [ 163.007840][ T6079] bridge_slave_0: entered promiscuous mode [ 163.047179][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.070629][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.083640][ T6079] bridge_slave_1: entered allmulticast mode [ 163.101077][ T6079] bridge_slave_1: entered promiscuous mode [ 163.130675][ T6079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.184446][ T6079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.196788][ T6161] netlink: 27 bytes leftover after parsing attributes in process `syz.2.718'. [ 163.239336][ T6079] team0: Port device team_slave_0 added [ 163.253581][ T6079] team0: Port device team_slave_1 added [ 163.291588][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.298700][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.343001][ T6079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.375751][ T6079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.402924][ T6079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.429077][ T6079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.468596][ T6079] hsr_slave_0: entered promiscuous mode [ 163.484519][ T6079] hsr_slave_1: entered promiscuous mode [ 163.497660][ T6079] debugfs: 'hsr0' already exists in 'hsr' [ 163.505102][ T6079] Cannot create hsr debugfs directory [ 163.514695][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 163.670619][ T6181] loop1: detected capacity change from 0 to 2048 [ 163.701387][ T6181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.728297][ T6181] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #12: comm syz.1.721: corrupted in-inode xattr: e_name out of bounds [ 163.743661][ T9] Process accounting resumed [ 163.748873][ T68] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 163.755311][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 163.765212][ T68] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 163.809259][ T68] EXT4-fs (loop1): This should not happen!! Data will be lost [ 163.809259][ T68] [ 163.819690][ T68] EXT4-fs (loop1): Total free blocks count 0 [ 163.826383][ T68] EXT4-fs (loop1): Free/Dirty block details [ 163.878736][ T68] EXT4-fs (loop1): free_blocks=2415919104 [ 163.902041][ T68] EXT4-fs (loop1): dirty_blocks=32 [ 163.909153][ T6201] loop4: detected capacity change from 0 to 1764 [ 163.919992][ T68] EXT4-fs (loop1): Block reservation details [ 163.932298][ T68] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 163.946953][ T68] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 510 with max blocks 1 with error 28 [ 163.985807][ T6205] loop2: detected capacity change from 0 to 1764 [ 164.020297][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 164.142429][ T6079] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.224882][ T6213] loop4: detected capacity change from 0 to 764 [ 164.232188][ T6213] iso9660: Bad value for 'gid' [ 164.237261][ T6213] iso9660: Bad value for 'gid' [ 164.248942][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.723'. [ 164.258527][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.723'. [ 165.087136][ T6079] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.671334][ T6079] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 166.100806][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.667407][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 166.667425][ T28] audit: type=1400 audit(1785541393.871:666): avc: denied { write } for pid=6218 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.862694][ T6220] loop2: detected capacity change from 0 to 764 [ 166.869282][ T6220] iso9660: Bad value for 'gid' [ 166.874089][ T6220] iso9660: Bad value for 'gid' [ 166.880974][ T6220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.724'. [ 166.889857][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 167.125680][ T6079] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.136071][ T6079] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 167.163834][ T6079] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.175884][ T6079] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 167.187030][ T6079] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.220783][ T3295] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 167.324070][ T6079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.350198][ T6079] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.388429][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.395632][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.425436][ T2037] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.425918][ T28] audit: type=1400 audit(1785541394.621:667): avc: denied { write } for pid=6221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.432561][ T2037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.483544][ T6235] loop1: detected capacity change from 0 to 8192 [ 167.567854][ T6242] netlink: 'syz.2.727': attribute type 2 has an invalid length. [ 167.639087][ T28] audit: type=1400 audit(1785541394.841:668): avc: denied { write } for pid=6252 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.711613][ T6079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.829630][ T6079] veth0_vlan: entered promiscuous mode [ 167.845590][ T28] audit: type=1400 audit(1785541395.031:669): avc: denied { write } for pid=6263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.846540][ T6079] veth1_vlan: entered promiscuous mode [ 167.888978][ T28] audit: type=1400 audit(1785541395.091:670): avc: denied { write } for pid=6282 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.918018][ T6079] veth0_macvtap: entered promiscuous mode [ 167.953832][ T6079] veth1_macvtap: entered promiscuous mode [ 167.964969][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.982097][ T6079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.997222][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.041776][ T2037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.059809][ T28] audit: type=1400 audit(1785541395.201:671): avc: denied { mounton } for pid=6079 comm="syz-executor" path="/root/syzkaller.ZbBTVg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 168.103038][ T28] audit: type=1400 audit(1785541395.281:672): avc: denied { mounton } for pid=6079 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 168.160467][ T2037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.165151][ T28] audit: type=1400 audit(1785541395.281:673): avc: denied { mount } for pid=6079 comm="syz-executor" name="/" dev="gadgetfs" ino=4668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 168.203211][ T28] audit: type=1400 audit(1785541395.381:674): avc: denied { write } for pid=6284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.276476][ T6299] loop4: detected capacity change from 0 to 512 [ 168.282767][ T28] audit: type=1400 audit(1785541395.451:675): avc: denied { write } for pid=6297 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.305287][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.409040][ T6299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.422281][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 168.431561][ T6299] ext4 filesystem being mounted at /145/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.536967][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.584047][ T6303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6303 comm=syz.1.730 [ 168.617130][ T6303] syzkaller0: entered promiscuous mode [ 168.622879][ T6303] syzkaller0: entered allmulticast mode [ 168.917362][ T6356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.737'. [ 168.926556][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 169.099037][ T6364] loop2: detected capacity change from 0 to 1764 [ 169.150072][ T6364] netlink: 48 bytes leftover after parsing attributes in process `syz.2.740'. [ 169.390664][ T6354] loop3: detected capacity change from 0 to 512 [ 169.404710][ T6354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.417290][ T6354] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.465613][ T6354] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.576137][ T6370] loop2: detected capacity change from 0 to 764 [ 169.582805][ T6370] iso9660: Bad value for 'gid' [ 169.587669][ T6370] iso9660: Bad value for 'gid' [ 169.595970][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.740'. [ 169.604881][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.740'. [ 169.966890][ T6376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.742'. [ 170.405153][ T6387] loop1: detected capacity change from 0 to 1764 [ 170.456098][ T6387] netlink: 48 bytes leftover after parsing attributes in process `syz.1.746'. [ 170.463771][ T6389] loop4: detected capacity change from 0 to 512 [ 170.497002][ T6389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.562963][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.862733][ T6395] loop1: detected capacity change from 0 to 764 [ 170.870006][ T6395] iso9660: Bad value for 'gid' [ 170.874934][ T6395] iso9660: Bad value for 'gid' [ 170.975391][ T6397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6397 comm=syz.4.748 [ 171.169864][ T6397] syzkaller0: entered promiscuous mode [ 171.175531][ T6397] syzkaller0: entered allmulticast mode [ 171.493790][ T6408] loop4: detected capacity change from 0 to 512 [ 171.507016][ T6410] loop1: detected capacity change from 0 to 512 [ 171.657018][ T6408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.669541][ T6408] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.711130][ T6412] loop2: detected capacity change from 0 to 8192 [ 171.781983][ T6408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.890326][ T6410] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.753: inode has both inline data and extents flags [ 171.926641][ T6410] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.942324][ T6410] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.753: couldn't read orphan inode 15 (err -117) [ 171.967545][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 171.968166][ C0] EXT4-fs (loop1): initial error at time 1785541399: ext4_orphan_get:1399: inode 15 [ 171.969546][ C0] EXT4-fs (loop1): last error at time 1785541399: ext4_orphan_get:1399: inode 15 [ 171.971825][ T6417] netlink: 'syz.4.755': attribute type 11 has an invalid length. [ 171.977647][ T6410] loop1: lost filesystem error report for type 5 error -117 [ 172.060631][ T6419] loop4: detected capacity change from 0 to 512 [ 172.075996][ T6410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.163515][ T6419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.176802][ T6419] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.189385][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 172.189402][ T28] audit: type=1400 audit(1785541399.371:693): avc: denied { write } for pid=6418 comm="syz.4.756" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.220275][ T28] audit: type=1400 audit(1785541399.371:694): avc: denied { read write } for pid=6418 comm="syz.4.756" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 172.326823][ T28] audit: type=1400 audit(1785541399.531:695): avc: denied { open } for pid=6425 comm="syz.3.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 172.356394][ T28] audit: type=1400 audit(1785541399.531:696): avc: denied { kernel } for pid=6425 comm="syz.3.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 172.363930][ T6429] sctp: [Deprecated]: syz.3.759 (pid 6429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.363930][ T6429] Use struct sctp_sack_info instead [ 172.420309][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.490413][ T6436] __nla_validate_parse: 3 callbacks suppressed [ 172.490431][ T6436] netlink: 48 bytes leftover after parsing attributes in process `syz.3.761'. [ 172.612738][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.690486][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 172.780752][ T6440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6440 comm=syz.2.762 [ 172.813708][ T6450] iso9660: Bad value for 'gid' [ 172.818530][ T6450] iso9660: Bad value for 'gid' [ 172.829349][ T6450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.761'. [ 172.838722][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.761'. [ 172.894974][ T6448] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.984339][ T6453] syzkaller0: entered promiscuous mode [ 172.989915][ T6453] syzkaller0: entered allmulticast mode [ 173.044658][ T6448] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 173.068989][ T6448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 173.078143][ T6448] System zones: 1-12 [ 173.082546][ T6448] EXT4-fs (loop4): orphan cleanup on readonly fs [ 173.090101][ T6448] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.764: bg 0: block 361: padding at end of block bitmap is not set [ 173.104387][ T6448] loop4: lost filesystem error report for type 5 error -117 [ 173.106259][ T6448] EXT4-fs (loop4): Remounting filesystem read-only [ 173.119244][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 173.119265][ C1] EXT4-fs (loop4): initial error at time 1785541400: ext4_validate_block_bitmap:441 [ 173.119291][ C1] EXT4-fs (loop4): last error at time 1785541400: ext4_validate_block_bitmap:441 [ 173.178406][ T6448] EXT4-fs (loop4): 1 truncate cleaned up [ 173.184692][ T6448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 173.203085][ T6448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.764'. [ 173.203143][ T28] audit: type=1400 audit(1785541400.381:697): avc: denied { map } for pid=6447 comm="syz.4.764" path="pipe:[1449]" dev="pipefs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 173.295796][ T6452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6452 comm=syz.4.764 [ 173.302117][ T28] audit: type=1400 audit(1785541400.381:698): avc: denied { execute } for pid=6447 comm="syz.4.764" path="pipe:[1449]" dev="pipefs" ino=1449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 173.346623][ T28] audit: type=1400 audit(1785541400.381:699): avc: denied { ioctl } for pid=6447 comm="syz.4.764" path="socket:[17511]" dev="sockfs" ino=17511 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 173.405075][ T6448] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.764: error -EUCLEAN reading directory block [ 173.421877][ T28] audit: type=1400 audit(1785541400.581:700): avc: denied { create } for pid=6462 comm="syz.2.766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 173.425137][ T6448] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.764: error -EUCLEAN reading directory block [ 173.462071][ T28] audit: type=1400 audit(1785541400.581:701): avc: denied { write } for pid=6462 comm="syz.2.766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 173.559420][ T28] audit: type=1400 audit(1785541400.581:702): avc: denied { read } for pid=6462 comm="syz.2.766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 173.782535][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.796308][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.821972][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz.1.768'. [ 173.831066][ T6455] bridge_slave_0: entered allmulticast mode [ 173.837641][ T6455] bridge_slave_0: entered promiscuous mode [ 173.867815][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.875082][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.885620][ T6455] bridge_slave_1: entered allmulticast mode [ 173.892510][ T6455] bridge_slave_1: entered promiscuous mode [ 174.033364][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 174.071379][ T6482] iso9660: Bad value for 'gid' [ 174.076214][ T6482] iso9660: Bad value for 'gid' [ 174.085123][ T6482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.767'. [ 174.094063][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.767'. [ 174.109600][ T6455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.119833][ T6455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.140587][ T6455] team0: Port device team_slave_0 added [ 174.274283][ T6485] set_capacity_and_notify: 6 callbacks suppressed [ 174.274302][ T6485] loop2: detected capacity change from 0 to 764 [ 174.287564][ T6485] iso9660: Bad value for 'gid' [ 174.292365][ T6485] iso9660: Bad value for 'gid' [ 174.299364][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.769'. [ 174.410914][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 174.638108][ T6455] team0: Port device team_slave_1 added [ 174.825556][ T6455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.856368][ T6455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.900746][ T6455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.914122][ T6455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.921621][ T6455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.952978][ T6455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.983793][ T6495] loop3: detected capacity change from 0 to 128 [ 175.004616][ T6455] hsr_slave_0: entered promiscuous mode [ 175.010895][ T6455] hsr_slave_1: entered promiscuous mode [ 175.016782][ T6455] debugfs: 'hsr0' already exists in 'hsr' [ 175.022518][ T6455] Cannot create hsr debugfs directory [ 175.032923][ T6500] loop2: detected capacity change from 0 to 128 [ 175.043736][ T6495] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.064650][ T6495] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.088612][ T6500] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.101327][ T6500] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.168382][ T6455] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 175.189752][ T6455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.199249][ T6455] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 175.223085][ T6455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.233616][ T6455] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 175.242923][ T6455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.250994][ T6506] netlink: 'syz.4.770': attribute type 2 has an invalid length. [ 175.261462][ T6455] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 175.270243][ T6455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.340057][ T6455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.379469][ T6455] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.408643][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.416404][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.435415][ T3783] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.443373][ T3783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.454078][ T6516] loop1: detected capacity change from 0 to 512 [ 175.466959][ T6079] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.504193][ T6518] loop3: detected capacity change from 0 to 1764 [ 175.577152][ T6516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.592780][ T6516] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.701597][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.818292][ T6533] loop3: detected capacity change from 0 to 764 [ 175.826840][ T6533] iso9660: Bad value for 'gid' [ 175.832026][ T6533] iso9660: Bad value for 'gid' [ 176.056788][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.164744][ T6455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.254970][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.452555][ T6455] veth0_vlan: entered promiscuous mode [ 176.460417][ T6455] veth1_vlan: entered promiscuous mode [ 176.486146][ T6455] veth0_macvtap: entered promiscuous mode [ 176.505004][ T6455] veth1_macvtap: entered promiscuous mode [ 176.511904][ T6557] loop3: detected capacity change from 0 to 1764 [ 176.538481][ T6455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.553675][ T6455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.691945][ T6562] loop1: detected capacity change from 0 to 1764 [ 176.747122][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.871215][ T6566] loop3: detected capacity change from 0 to 764 [ 176.878785][ T6566] iso9660: Bad value for 'gid' [ 176.883693][ T6566] iso9660: Bad value for 'gid' [ 177.684467][ T6568] loop1: detected capacity change from 0 to 764 [ 177.691332][ T6568] iso9660: Bad value for 'gid' [ 177.696303][ T6568] iso9660: Bad value for 'gid' [ 177.717776][ T6568] __nla_validate_parse: 7 callbacks suppressed [ 177.717794][ T6568] netlink: 20 bytes leftover after parsing attributes in process `syz.1.781'. [ 177.733939][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'. [ 178.030522][ T6567] netlink: 'syz.4.783': attribute type 2 has an invalid length. [ 178.040858][ T325] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.052888][ T325] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.105878][ T325] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.152356][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 178.329893][ T6576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.785'. [ 178.606395][ T6575] --map-set only usable from mangle table [ 178.637247][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 178.650756][ T6590] iso9660: Bad value for 'gid' [ 178.656254][ T6590] iso9660: Bad value for 'gid' [ 178.664497][ T6590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.786'. [ 178.673574][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.786'. [ 178.803162][ T6584] ext4: Unknown parameter 'noacl' [ 179.307662][ T6596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.791'. [ 179.325438][ T6603] set_capacity_and_notify: 5 callbacks suppressed [ 179.325457][ T6603] loop2: detected capacity change from 0 to 1764 [ 179.396322][ T6599] loop3: detected capacity change from 0 to 8192 [ 179.997801][ T6609] loop2: detected capacity change from 0 to 764 [ 180.005043][ T6609] iso9660: Bad value for 'gid' [ 180.010124][ T6609] iso9660: Bad value for 'gid' [ 180.025198][ T6607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.794'. [ 180.034710][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.794'. [ 180.078655][ T6616] netlink: 'syz.4.796': attribute type 2 has an invalid length. [ 180.135745][ T6620] loop5: detected capacity change from 0 to 1764 [ 180.353386][ T6622] loop1: detected capacity change from 0 to 512 [ 180.473609][ T6622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.494767][ T6622] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.552733][ T6631] loop5: detected capacity change from 0 to 764 [ 180.560130][ T6631] iso9660: Bad value for 'gid' [ 180.564969][ T6631] iso9660: Bad value for 'gid' [ 180.601908][ T6626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.670666][ T6626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.840549][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 180.840595][ T28] audit: type=1400 audit(1785541408.041:709): avc: denied { tracepoint } for pid=6633 comm="syz.4.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 181.041247][ T6622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.283915][ T28] audit: type=1400 audit(1785541408.481:710): avc: denied { append } for pid=6642 comm="syz.5.805" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 181.308032][ T6641] loop4: detected capacity change from 0 to 512 [ 181.383543][ T28] audit: type=1400 audit(1785541408.541:711): avc: denied { shutdown } for pid=6644 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.430518][ T28] audit: type=1400 audit(1785541408.541:712): avc: denied { read } for pid=6644 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.490813][ T28] audit: type=1400 audit(1785541408.611:713): avc: denied { listen } for pid=6644 comm="syz.2.806" lport=36102 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.527240][ T28] audit: type=1400 audit(1785541408.611:714): avc: denied { accept } for pid=6644 comm="syz.2.806" lport=36102 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.551202][ T28] audit: type=1400 audit(1785541408.611:715): avc: denied { write } for pid=6644 comm="syz.2.806" path="socket:[18754]" dev="sockfs" ino=18754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 181.583080][ T28] audit: type=1400 audit(1785541408.611:716): avc: denied { setopt } for pid=6644 comm="syz.2.806" lport=36102 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 181.610891][ T28] audit: type=1400 audit(1785541408.661:717): avc: denied { write } for pid=6651 comm="syz.2.808" name="kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 181.637033][ T28] audit: type=1400 audit(1785541408.661:718): avc: denied { open } for pid=6651 comm="syz.2.808" path="/182/dev/kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 181.668331][ T6641] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.804: ea_inode file size=458758 entry size=16777216 [ 181.683617][ T6641] ------------[ cut here ]------------ [ 181.689178][ T6641] EA inode 11 i_nlink=2 [ 181.689196][ T6641] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.4.804/6641 [ 181.704126][ T6641] Modules linked in: [ 181.708071][ T6641] CPU: 1 UID: 0 PID: 6641 Comm: syz.4.804 Not tainted syzkaller #0 PREEMPT(lazy) [ 181.717540][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.727805][ T6641] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 181.734439][ T6641] Code: 96 ba 96 ff 49 8d 7e 40 4c 8d 2d 9b 9a 5a 05 e8 26 a0 b5 ff 49 8b 6e 40 4c 89 e7 e8 5a 9b b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 a1 41 da 03 90 90 90 90 90 90 90 [ 181.754177][ T6641] RSP: 0018:ffffc900038f37f8 EFLAGS: 00010246 [ 181.760284][ T6641] RAX: ffff8881003c0b30 RBX: ffff8881005e9220 RCX: ffffffff81c29da6 [ 181.774283][ T6641] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3830 [ 181.782296][ T6641] RBP: 000000000000000b R08: 00018881005e91d3 R09: 0000000000000000 [ 181.789070][ T6661] loop3: detected capacity change from 0 to 512 [ 181.790298][ T6641] R10: ffffc900038f3728 R11: 0001c900038f3728 R12: ffff8881005e91d0 [ 181.790319][ T6641] R13: ffffffff871d3830 R14: ffff8881005e9188 R15: 0000000000000001 [ 181.812846][ T6641] FS: 00007f40415f76c0(0000) GS:ffff8882ae9cb000(0000) knlGS:0000000000000000 [ 181.821807][ T6641] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.828412][ T6641] CR2: 00007fefb4e6d158 CR3: 000000011ef7e000 CR4: 00000000003506f0 [ 181.836517][ T6641] DR0: 00000000000000d4 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.844549][ T6641] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 181.852553][ T6641] Call Trace: [ 181.855847][ T6641] [ 181.858803][ T6641] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 181.864850][ T6641] ext4_xattr_delete_inode+0x6b5/0x790 [ 181.870643][ T6641] ext4_evict_inode+0xb18/0xdf0 [ 181.880984][ T6641] ? __pfx_ext4_evict_inode+0x10/0x10 [ 181.886429][ T6641] evict+0x2a5/0x510 [ 181.890368][ T6641] iput+0x430/0x5a0 [ 181.894229][ T6641] ext4_process_orphan+0x1a4/0x1c0 [ 181.899476][ T6641] ext4_orphan_cleanup+0x6a6/0xa10 [ 181.904638][ T6641] ? ext4_register_li_request+0x14c/0x440 [ 181.910417][ T6641] ext4_fill_super+0x33ab/0x3760 [ 181.915436][ T6641] ? set_blocksize+0x14c/0x270 [ 181.920346][ T6641] ? __pfx_ext4_fill_super+0x10/0x10 [ 181.925753][ T6641] get_tree_bdev_flags+0x291/0x300 [ 181.930898][ T6641] ? __pfx_ext4_fill_super+0x10/0x10 [ 181.936263][ T6641] get_tree_bdev+0x1f/0x30 [ 181.940706][ T6641] ext4_get_tree+0x1c/0x30 [ 181.945238][ T6641] vfs_get_tree+0x57/0x1d0 [ 181.949752][ T6641] do_new_mount+0x288/0x8d0 [ 181.954294][ T6641] path_mount+0x4ad/0xb90 [ 181.959027][ T6641] __se_sys_mount+0x28c/0x2e0 [ 181.963796][ T6641] __x64_sys_mount+0x67/0x80 [ 181.968580][ T6641] x64_sys_call+0x2d61/0x3020 [ 181.973309][ T6641] do_syscall_64+0x136/0x3c0 [ 181.977996][ T6641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.989613][ T6641] RIP: 0033:0x7f4042b9f28a [ 181.994071][ T6641] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.014367][ T6641] RSP: 002b:00007f40415f6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 182.023364][ T6641] RAX: ffffffffffffffda RBX: 00007f40415f6ee0 RCX: 00007f4042b9f28a [ 182.031541][ T6641] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f40415f6ea0 [ 182.039618][ T6641] RBP: 00002000000009c0 R08: 00007f40415f6ee0 R09: 0000000000800718 [ 182.047614][ T6641] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 182.055778][ T6641] R13: 00007f40415f6ea0 R14: 000000000000048d R15: 0000200000000200 [ 182.056465][ T6661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.063872][ T6641] [ 182.079385][ T6641] ---[ end trace 0000000000000000 ]--- [ 182.118635][ T6641] EXT4-fs (loop4): 1 orphan inode deleted [ 182.189284][ T6661] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.303986][ T6641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.380691][ T6668] netlink: 'syz.2.813': attribute type 2 has an invalid length. [ 182.491751][ T6678] loop5: detected capacity change from 0 to 1764 [ 182.506684][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.553332][ T6079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.752735][ T6684] loop5: detected capacity change from 0 to 764 [ 182.762370][ T6684] iso9660: Bad value for 'gid' [ 182.768350][ T6684] iso9660: Bad value for 'gid' [ 182.787894][ T6684] __nla_validate_parse: 7 callbacks suppressed [ 182.787956][ T6684] netlink: 20 bytes leftover after parsing attributes in process `syz.5.815'. [ 182.804896][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.815'. [ 183.113883][ T6683] netlink: 128 bytes leftover after parsing attributes in process `syz.4.816'. [ 183.162430][ T6686] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 183.453577][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.824'. [ 183.836438][ T6714] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.851893][ T6714] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.873798][ T6720] SELinux: policydb magic number 0x72666c65 does not match expected magic number 0xf97cff8c [ 183.894759][ T6720] SELinux: failed to load policy [ 183.914292][ T6720] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 183.926966][ T6720] SELinux: invalid class [ 183.931536][ T6720] SELinux: failed to load policy [ 184.060319][ T6734] netlink: 48 bytes leftover after parsing attributes in process `syz.1.835'. [ 184.222346][ T6079] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.248571][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 184.260229][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 184.278280][ T6741] iso9660: Bad value for 'gid' [ 184.283342][ T6741] iso9660: Bad value for 'gid' [ 184.292051][ T6741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.835'. [ 184.301524][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.835'. [ 184.503059][ T6743] netlink: 40 bytes leftover after parsing attributes in process `syz.4.838'. [ 184.604508][ T6751] set_capacity_and_notify: 4 callbacks suppressed [ 184.604528][ T6751] loop4: detected capacity change from 0 to 512 [ 184.638054][ T6751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.652410][ T6751] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.982521][ T6764] loop4: detected capacity change from 0 to 2048 [ 185.016339][ T6764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.052683][ T6764] FAULT_INJECTION: forcing a failure. [ 185.052683][ T6764] name failslab, interval 1, probability 0, space 0, times 0 [ 185.103811][ T6764] CPU: 1 UID: 0 PID: 6764 Comm: syz.4.843 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 185.103853][ T6764] Tainted: [W]=WARN [ 185.103861][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.103945][ T6764] Call Trace: [ 185.103952][ T6764] [ 185.103961][ T6764] __dump_stack+0x1d/0x30 [ 185.104035][ T6764] dump_stack_lvl+0x95/0xd0 [ 185.104063][ T6764] dump_stack+0x15/0x1b [ 185.104086][ T6764] should_fail_ex+0x25e/0x270 [ 185.104113][ T6764] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 185.104169][ T6764] should_failslab+0x8c/0xb0 [ 185.104269][ T6764] __kmalloc_cache_noprof+0x7b/0x3d0 [ 185.104291][ T6764] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 185.104320][ T6764] inode_doinit_use_xattr+0x3c/0x2d0 [ 185.104351][ T6764] inode_doinit_with_dentry+0x59e/0x7b0 [ 185.104435][ T6764] selinux_d_instantiate+0x27/0x40 [ 185.104457][ T6764] security_d_instantiate+0x76/0x90 [ 185.104479][ T6764] d_splice_alias_ops+0x54/0x370 [ 185.104562][ T6764] ? d_splice_alias+0x12/0x30 [ 185.104595][ T6764] d_splice_alias+0x1f/0x30 [ 185.104688][ T6764] ext4_lookup+0x1a6/0x3a0 [ 185.104719][ T6764] __lookup_slow+0x155/0x200 [ 185.104752][ T6764] lookup_slow+0x3c/0x60 [ 185.104824][ T6764] path_lookupat+0x2b2/0x4c0 [ 185.104856][ T6764] filename_lookup+0x18f/0x390 [ 185.104975][ T6764] vfs_statx+0x96/0x170 [ 185.105005][ T6764] __se_sys_statx+0x137/0x1b0 [ 185.105072][ T6764] __x64_sys_statx+0x67/0x80 [ 185.105102][ T6764] x64_sys_call+0x1ab/0x3020 [ 185.105139][ T6764] do_syscall_64+0x136/0x3c0 [ 185.105240][ T6764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.105265][ T6764] RIP: 0033:0x7f4042b9e019 [ 185.105285][ T6764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.105306][ T6764] RSP: 002b:00007f40415f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 185.105331][ T6764] RAX: ffffffffffffffda RBX: 00007f4042e25fa0 RCX: 00007f4042b9e019 [ 185.105378][ T6764] RDX: 0000000000002000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 185.105391][ T6764] RBP: 00007f40415f7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.105403][ T6764] R10: 2dd8806920477201 R11: 0000000000000246 R12: 0000000000000001 [ 185.105416][ T6764] R13: 00007f4042e26038 R14: 00007f4042e25fa0 R15: 00007fff2b265288 [ 185.105440][ T6764] [ 185.391204][ T6758] loop5: detected capacity change from 0 to 8192 [ 185.401705][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.411458][ T6774] x_tables: duplicate underflow at hook 2 [ 185.718834][ T6787] loop1: detected capacity change from 0 to 512 [ 185.762676][ T6787] EXT4-fs: Ignoring removed i_version option [ 185.782104][ T6787] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.826363][ T6787] EXT4-fs (loop1): 1 truncate cleaned up [ 185.833249][ T6787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.860968][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 185.860995][ T28] audit: type=1400 audit(1785541413.071:732): avc: denied { write } for pid=6785 comm="syz.1.850" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.877284][ T6792] loop5: detected capacity change from 0 to 512 [ 185.904329][ T6792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.916830][ T6792] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.013824][ T6792] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.026964][ T6798] loop2: detected capacity change from 0 to 1764 [ 186.232729][ T6807] loop5: detected capacity change from 0 to 256 [ 186.259536][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.381586][ T6810] loop2: detected capacity change from 0 to 764 [ 186.388471][ T6810] iso9660: Bad value for 'gid' [ 186.393475][ T6810] iso9660: Bad value for 'gid' [ 186.731050][ T28] audit: type=1326 audit(1785541413.911:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.5.857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58050de019 code=0x7ffc0000 [ 187.067153][ T28] audit: type=1326 audit(1785541413.921:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.5.857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58050de019 code=0x7ffc0000 [ 187.093573][ T28] audit: type=1326 audit(1785541413.921:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.5.857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58050de019 code=0x7ffc0000 [ 187.119095][ T28] audit: type=1326 audit(1785541413.921:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.5.857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f58050de019 code=0x7ffc0000 [ 187.146492][ T28] audit: type=1326 audit(1785541413.921:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.5.857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58050de019 code=0x7ffc0000 [ 187.173980][ T28] audit: type=1326 audit(1785541413.921:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.5.857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58050de019 code=0x7ffc0000 [ 187.202558][ T28] audit: type=1326 audit(1785541413.921:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.5.857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58050de019 code=0x7ffc0000 [ 187.229473][ T28] audit: type=1326 audit(1785541413.921:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.5.857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58050de019 code=0x7ffc0000 [ 187.235350][ T6814] size and base must be multiples of 4 kiB [ 187.260886][ T28] audit: type=1326 audit(1785541413.931:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.5.857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f58050de019 code=0x7ffc0000 [ 187.270898][ T6815] loop4: detected capacity change from 0 to 512 [ 187.299227][ T6814] CPU: 0 UID: 0 PID: 6814 Comm: syz.1.859 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 187.299270][ T6814] Tainted: [W]=WARN [ 187.299278][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.299325][ T6814] Call Trace: [ 187.299333][ T6814] [ 187.299342][ T6814] __dump_stack+0x1d/0x30 [ 187.299369][ T6814] dump_stack_lvl+0x95/0xd0 [ 187.299471][ T6814] dump_stack+0x15/0x1b [ 187.299490][ T6814] mtrr_del+0xbf/0xd0 [ 187.299512][ T6814] mtrr_ioctl+0xb62/0xfb0 [ 187.299539][ T6814] ? __pfx_mtrr_ioctl+0x10/0x10 [ 187.299643][ T6814] ? proc_reg_poll+0x111/0x1a0 [ 187.299685][ T6814] proc_reg_unlocked_ioctl+0x123/0x1b0 [ 187.299709][ T6814] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 187.299785][ T6814] __se_sys_ioctl+0xce/0x140 [ 187.299809][ T6814] __x64_sys_ioctl+0x43/0x50 [ 187.299829][ T6814] x64_sys_call+0x1563/0x3020 [ 187.299858][ T6814] do_syscall_64+0x136/0x3c0 [ 187.299913][ T6814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.299937][ T6814] RIP: 0033:0x7f7a572fe019 [ 187.299956][ T6814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.299976][ T6814] RSP: 002b:00007f7a55d57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.300067][ T6814] RAX: ffffffffffffffda RBX: 00007f7a57585fa0 RCX: 00007f7a572fe019 [ 187.300083][ T6814] RDX: 0000200000000040 RSI: 0000000040104d04 RDI: 0000000000000004 [ 187.300099][ T6814] RBP: 00007f7a5739500c R08: 0000000000000000 R09: 0000000000000000 [ 187.300113][ T6814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.300170][ T6814] R13: 00007f7a57586038 R14: 00007f7a57585fa0 R15: 00007fff1d8f06d8 [ 187.300194][ T6814] [ 187.315312][ T6815] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.860: inode has both inline data and extents flags [ 187.495258][ T6815] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.495645][ T6815] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.860: couldn't read orphan inode 15 (err -117) [ 187.517727][ T6815] loop4: lost filesystem error report for type 5 error -117 [ 187.518630][ T6815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.610446][ T3383] IPVS: starting estimator thread 0... [ 187.634743][ T6837] loop5: detected capacity change from 0 to 512 [ 187.650217][ T6837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.663063][ T6837] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.692014][ T6837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.702006][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.832021][ T6845] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.868: inode has both inline data and extents flags [ 187.845150][ T6845] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.852611][ T6845] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.868: couldn't read orphan inode 15 (err -117) [ 187.878936][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 187.878958][ C1] EXT4-fs (loop5): initial error at time 1785541415: ext4_orphan_get:1399: inode 15 [ 187.879002][ C1] EXT4-fs (loop5): last error at time 1785541415: ext4_orphan_get:1399: inode 15 [ 187.909864][ T6834] IPVS: using max 2448 ests per chain, 122400 per kthread [ 187.925226][ T6853] __nla_validate_parse: 8 callbacks suppressed [ 187.925244][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 187.945134][ T6845] loop5: lost filesystem error report for type 5 error -117 [ 187.975253][ T6845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.029256][ T6852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6852 comm=syz.4.870 [ 188.059436][ T6455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.060110][ T6852] syzkaller0: entered promiscuous mode [ 188.074211][ T6852] syzkaller0: entered allmulticast mode [ 188.542378][ T6882] EXT4-fs: quotafile must be on filesystem root [ 188.675099][ T6882] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.878'. [ 188.798784][ T6891] sctp: [Deprecated]: syz.1.882 (pid 6891) Use of int in max_burst socket option. [ 188.798784][ T6891] Use struct sctp_assoc_value instead [ 188.869083][ T6896] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.881482][ T6896] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.898172][ T6885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.923090][ T6885] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.009638][ T6885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.042467][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'. [ 189.146662][ T6912] netlink: 28 bytes leftover after parsing attributes in process `syz.5.889'. [ 189.290042][ T6915] EXT4-fs: Ignoring removed orlov option [ 189.343582][ T6915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.456294][ T6079] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.548267][ T6934] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 189.569435][ T9] IPVS: starting estimator thread 0... [ 189.691068][ T6936] IPVS: using max 2496 ests per chain, 124800 per kthread [ 189.739367][ T6944] set_capacity_and_notify: 5 callbacks suppressed [ 189.739400][ T6944] loop3: detected capacity change from 0 to 1764 [ 189.784088][ T6945] syz.5.900 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 189.812667][ T6945] loop5: detected capacity change from 0 to 4096 [ 189.824510][ T6944] netlink: 48 bytes leftover after parsing attributes in process `syz.3.898'. [ 189.992559][ T6945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.139281][ T6949] loop3: detected capacity change from 0 to 764 [ 190.146007][ T6949] iso9660: Bad value for 'gid' [ 190.150859][ T6949] iso9660: Bad value for 'gid' [ 190.157760][ T6949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.898'. [ 190.166754][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'. [ 190.387330][ T6915] Set syz1 is full, maxelem 65536 reached [ 190.494935][ T6953] FAULT_INJECTION: forcing a failure. [ 190.494935][ T6953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.535307][ T6953] CPU: 0 UID: 0 PID: 6953 Comm: syz.1.903 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 190.535345][ T6953] Tainted: [W]=WARN [ 190.535351][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 190.535392][ T6953] Call Trace: [ 190.535400][ T6953] [ 190.535409][ T6953] __dump_stack+0x1d/0x30 [ 190.535435][ T6953] dump_stack_lvl+0x95/0xd0 [ 190.535536][ T6953] dump_stack+0x15/0x1b [ 190.535557][ T6953] should_fail_ex+0x25e/0x270 [ 190.535589][ T6953] should_fail+0xb/0x20 [ 190.535612][ T6953] should_fail_usercopy+0x1a/0x20 [ 190.535736][ T6953] _copy_from_user+0x1c/0xb0 [ 190.535759][ T6953] __se_sys_migrate_pages+0x495/0x820 [ 190.535792][ T6953] __x64_sys_migrate_pages+0x55/0x70 [ 190.535818][ T6953] x64_sys_call+0x2983/0x3020 [ 190.535886][ T6953] do_syscall_64+0x136/0x3c0 [ 190.535914][ T6953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.535937][ T6953] RIP: 0033:0x7f7a572fe019 [ 190.535954][ T6953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.536056][ T6953] RSP: 002b:00007f7a55d57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 190.536080][ T6953] RAX: ffffffffffffffda RBX: 00007f7a57585fa0 RCX: 00007f7a572fe019 [ 190.536095][ T6953] RDX: 0000200000000080 RSI: 0000000000000041 RDI: 0000000000000000 [ 190.536108][ T6953] RBP: 00007f7a55d57090 R08: 0000000000000000 R09: 0000000000000000 [ 190.536120][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.536132][ T6953] R13: 00007f7a57586038 R14: 00007f7a57585fa0 R15: 00007fff1d8f06d8 [ 190.536176][ T6953] [ 190.712666][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.731230][ T6455] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.799711][ T6957] netlink: 272 bytes leftover after parsing attributes in process `syz.1.905'. [ 190.809596][ T6957] netlink: 72 bytes leftover after parsing attributes in process `syz.1.905'. [ 190.974694][ T28] kauditd_printk_skb: 147 callbacks suppressed [ 190.974713][ T28] audit: type=1400 audit(1785541418.181:889): avc: denied { create } for pid=6954 comm="syz.1.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 191.032240][ T28] audit: type=1400 audit(1785541418.201:890): avc: denied { getopt } for pid=6954 comm="syz.1.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 191.059028][ T6939] loop2: detected capacity change from 0 to 512 [ 191.123195][ T6972] loop1: detected capacity change from 0 to 512 [ 191.135003][ T6973] syzkaller0: entered promiscuous mode [ 191.135025][ T6973] syzkaller0: entered allmulticast mode [ 191.197177][ T6972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.197311][ T6972] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.197928][ T6972] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.327524][ T6939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.340144][ T6939] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.351206][ T6939] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.397192][ T6980] loop1: detected capacity change from 0 to 8192 [ 191.448503][ T28] audit: type=1400 audit(1785541418.631:891): avc: denied { name_bind } for pid=6983 comm="syz.3.915" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 191.604726][ T6995] loop2: detected capacity change from 0 to 512 [ 191.620775][ T6995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.633271][ T6995] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.650322][ T6995] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.670704][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.918'. [ 191.756585][ T6992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6992 comm=syz.5.918 [ 191.773819][ T6992] syzkaller0: entered promiscuous mode [ 191.779514][ T6992] syzkaller0: entered allmulticast mode [ 192.207312][ T28] audit: type=1400 audit(1785541419.411:892): avc: denied { write } for pid=7001 comm="syz.5.920" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 192.337109][ T7012] loop2: detected capacity change from 0 to 8192 [ 192.429332][ T7020] loop1: detected capacity change from 0 to 128 [ 192.500176][ T7024] syzkaller0: entered promiscuous mode [ 192.505697][ T7024] syzkaller0: entered allmulticast mode [ 192.546841][ T7018] netlink: 'syz.2.926': attribute type 2 has an invalid length. [ 192.557773][ T28] audit: type=1400 audit(1785541419.731:893): avc: denied { connect } for pid=7017 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.577127][ T28] audit: type=1400 audit(1785541419.731:894): avc: denied { read } for pid=7017 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.611025][ T28] audit: type=1400 audit(1785541419.801:895): avc: denied { write } for pid=7017 comm="syz.2.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.736347][ T7037] netlink: 'syz.5.932': attribute type 5 has an invalid length. [ 192.753530][ T28] audit: type=1400 audit(1785541419.951:896): avc: denied { read } for pid=7036 comm="syz.5.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.792099][ T7039] xt_l2tp: v2 doesn't support IP mode [ 194.018709][ T7049] loop5: detected capacity change from 0 to 8192 [ 194.082093][ T7060] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 194.088664][ T7060] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 194.128193][ T7060] vhci_hcd vhci_hcd.0: Device attached [ 194.156407][ T7063] vhci_hcd: connection closed [ 194.156716][ T3792] vhci_hcd vhci_hcd.3: stop threads [ 194.178805][ T3792] vhci_hcd vhci_hcd.3: release socket [ 194.194500][ T3792] vhci_hcd vhci_hcd.3: disconnect device [ 194.284807][ T7069] erspan0: entered promiscuous mode [ 194.326509][ T7071] __nla_validate_parse: 2 callbacks suppressed [ 194.326525][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.5.942'. [ 194.603596][ T7076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.944'. [ 195.232651][ T7086] loop1: detected capacity change from 0 to 512 [ 195.269781][ T7086] ext4: Unknown parameter 'debu' [ 195.293841][ T7091] loop5: detected capacity change from 0 to 128 [ 195.341993][ T7091] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.410681][ T7091] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.571839][ T7098] loop1: detected capacity change from 0 to 512 [ 195.678486][ T7098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.713026][ T7098] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.739330][ T28] audit: type=1400 audit(1785541422.941:897): avc: denied { shutdown } for pid=7108 comm="syz.3.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 195.775222][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.781282][ T7107] loop4: detected capacity change from 0 to 2048 [ 195.852291][ T7107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.918342][ T28] audit: type=1400 audit(1785541423.121:898): avc: denied { write } for pid=7106 comm="syz.4.951" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.003003][ T7115] loop3: detected capacity change from 0 to 8192 [ 196.064684][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 196.064701][ T28] audit: type=1326 audit(1785541423.231:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.3.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefb4c1e019 code=0x0 [ 196.064776][ T7120] loop1: detected capacity change from 0 to 8192 [ 196.097374][ T7107] loop4: detected capacity change from 2048 to 0 [ 196.115219][ T6455] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.124249][ T7124] EXT4-fs error (device loop4): ext4_get_inode_loc:5024: inode #15: block 5: comm syz.4.951: unable to read itable block [ 196.124732][ T7127] loop2: detected capacity change from 0 to 512 [ 196.136937][ T7124] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 196.143382][ C0] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 196.151559][ T7124] EXT4-fs (loop4): I/O error while writing superblock [ 196.212917][ T7127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.218220][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.228791][ T7127] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.282229][ T28] audit: type=1400 audit(1785541423.461:902): avc: denied { write } for pid=7122 comm="syz.2.956" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.318077][ T7137] netlink: 'syz.5.958': attribute type 1 has an invalid length. [ 196.354596][ T7137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.386161][ T7139] EXT4-fs error (device loop4): ext4_get_inode_loc:5024: inode #15: block 5: comm syz.4.951: unable to read itable block [ 196.402941][ T7139] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 196.412678][ T7139] EXT4-fs (loop4): I/O error while writing superblock [ 196.429755][ T7139] EXT4-fs error (device loop4): ext4_get_inode_loc:5024: inode #15: block 5: comm syz.4.951: unable to read itable block [ 196.442839][ T7139] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 196.451184][ T7139] EXT4-fs (loop4): I/O error while writing superblock [ 196.458051][ T7139] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: IO failure [ 196.467026][ T7139] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 196.475412][ T7139] EXT4-fs (loop4): I/O error while writing superblock [ 196.482360][ T7139] EXT4-fs error (device loop4): ext4_setattr:6121: inode #15: comm syz.4.951: mark_inode_dirty error [ 196.493448][ T7139] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 196.501934][ T7139] EXT4-fs (loop4): I/O error while writing superblock [ 196.508804][ T7139] EXT4-fs error (device loop4) in ext4_setattr:6172: IO failure [ 196.518928][ T7139] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 196.529264][ T7107] EXT4-fs error (device loop4): ext4_get_inode_loc:5024: inode #15: block 5: comm syz.4.951: unable to read itable block [ 196.542000][ T7139] EXT4-fs (loop4): I/O error while writing superblock [ 196.548842][ T7107] EXT4-fs (loop4): previous I/O error to superblock detected [ 196.556635][ T7107] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 196.566823][ T7137] bond1: (slave geneve2): making interface the new active one [ 196.569070][ T7107] EXT4-fs (loop4): I/O error while writing superblock [ 196.581431][ T7137] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 196.582186][ T7107] EXT4-fs error (device loop4): ext4_get_inode_loc:5024: inode #15: block 5: comm syz.4.951: unable to read itable block [ 196.608956][ T7107] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 196.617809][ T7107] EXT4-fs (loop4): I/O error while writing superblock [ 196.631987][ T7107] EXT4-fs error (device loop4) in ext4_setattr:6172: IO failure [ 196.639870][ T7107] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 196.651493][ T7144] loop5: detected capacity change from 0 to 128 [ 196.700230][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.836150][ T3297] EXT4-fs error (device loop4): ext4_get_inode_loc:5024: inode #2: block 4: comm syz-executor: unable to read itable block [ 196.934296][ T3297] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 197.114003][ T7156] syzkaller0: entered promiscuous mode [ 197.119514][ T7156] syzkaller0: entered allmulticast mode [ 197.134433][ T7148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.960'. [ 197.171910][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'. [ 197.234776][ T7164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7164 comm=syz.3.966 [ 197.638237][ T7173] loop5: detected capacity change from 0 to 8192 [ 197.849956][ T7195] EXT4-fs: Ignoring removed i_version option [ 197.879711][ T7195] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.897739][ T7195] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.975: invalid indirect mapped block 4294967295 (level 1) [ 197.957935][ T7195] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 197.958289][ T7195] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.975: invalid indirect mapped block 4294967295 (level 1) [ 197.968054][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 197.968092][ C1] EXT4-fs (loop1): initial error at time 1785541425: ext4_free_branches:1023: inode 11 [ 197.968149][ C1] EXT4-fs (loop1): last error at time 1785541425: ext4_free_branches:1023: inode 11 [ 198.028710][ T7202] netlink: 'syz.2.977': attribute type 21 has an invalid length. [ 198.042159][ T7195] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 198.043978][ T7195] EXT4-fs (loop1): 2 truncates cleaned up [ 198.050564][ T7202] netlink: 100 bytes leftover after parsing attributes in process `syz.2.977'. [ 198.053618][ T7195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.112077][ T28] audit: type=1400 audit(1785541425.321:903): avc: denied { write } for pid=7206 comm="syz.1.975" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.115514][ T7206] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.975: bg 0: block 5: invalid block bitmap [ 198.318525][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.438519][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.445613][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.452808][ T7183] bridge_slave_0: entered allmulticast mode [ 198.459342][ T7183] bridge_slave_0: entered promiscuous mode [ 198.468059][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 198.550232][ T7231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7231 comm=syz.1.980 [ 198.578894][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.578932][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.579109][ T7183] bridge_slave_1: entered allmulticast mode [ 198.579669][ T7183] bridge_slave_1: entered promiscuous mode [ 198.592127][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.601381][ T28] audit: type=1400 audit(1785541425.651:904): avc: denied { write } for pid=7215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.604784][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.675619][ T28] audit: type=1400 audit(1785541425.831:905): avc: denied { write } for pid=7243 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.713164][ T7183] team0: Port device team_slave_0 added [ 198.721159][ T7183] team0: Port device team_slave_1 added [ 198.736541][ T7231] syzkaller0: entered promiscuous mode [ 198.742087][ T7231] syzkaller0: entered allmulticast mode [ 198.772493][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.779562][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.806600][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.818545][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.825593][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.066315][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.095373][ T7246] netlink: 'syz.2.983': attribute type 10 has an invalid length. [ 199.152560][ T7249] netlink: 'syz.2.983': attribute type 10 has an invalid length. [ 199.674139][ T7246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.684006][ T7246] team0: Port device netdevsim2 added [ 199.694828][ T7249] team0: Port device netdevsim2 removed [ 199.702650][ T7249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.712445][ T7249] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 199.834019][ T7183] hsr_slave_0: entered promiscuous mode [ 199.871452][ T7183] hsr_slave_1: entered promiscuous mode [ 199.935596][ T7183] debugfs: 'hsr0' already exists in 'hsr' [ 199.963627][ T7257] netlink: 'syz.1.986': attribute type 49 has an invalid length. [ 199.978669][ T7183] Cannot create hsr debugfs directory [ 200.214202][ T7263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.227059][ T7263] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.267088][ T7251] set_capacity_and_notify: 2 callbacks suppressed [ 200.267182][ T7251] loop5: detected capacity change from 0 to 8192 [ 200.312266][ T7263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.374541][ T28] audit: type=1400 audit(1785541427.571:906): avc: denied { write } for pid=7255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.465811][ T2980] ================================================================== [ 200.473984][ T2980] BUG: KCSAN: data-race in d_delete / lookup_fast [ 200.480477][ T2980] [ 200.482816][ T2980] read-write to 0xffff8881073119c0 of 4 bytes by task 3838 on cpu 1: [ 200.490895][ T2980] d_delete+0x15a/0x180 [ 200.495081][ T2980] d_delete_notify+0x32/0x100 [ 200.499765][ T2980] vfs_unlink+0x287/0x490 [ 200.504287][ T2980] filename_unlinkat+0x1dc/0x410 [ 200.509237][ T2980] __se_sys_unlink+0x2b/0xe0 [ 200.513844][ T2980] __x64_sys_unlink+0x1f/0x30 [ 200.518531][ T2980] x64_sys_call+0x2eb6/0x3020 [ 200.523219][ T2980] do_syscall_64+0x136/0x3c0 [ 200.527817][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.533716][ T2980] [ 200.536058][ T2980] read to 0xffff8881073119c0 of 4 bytes by task 2980 on cpu 0: [ 200.543605][ T2980] lookup_fast+0xf1/0x320 [ 200.547946][ T2980] path_lookupat+0x120/0x4c0 [ 200.552633][ T2980] filename_lookup+0x18f/0x390 [ 200.557406][ T2980] do_readlinkat+0x74/0x2f0 [ 200.561925][ T2980] __x64_sys_readlink+0x47/0x60 [ 200.566810][ T2980] x64_sys_call+0x2b51/0x3020 [ 200.571540][ T2980] do_syscall_64+0x136/0x3c0 [ 200.576144][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.582045][ T2980] [ 200.584726][ T2980] value changed: 0x00300180 -> 0x00000080 [ 200.590481][ T2980] [ 200.592818][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 200.598973][ T2980] CPU: 0 UID: 0 PID: 2980 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 200.609399][ T2980] Tainted: [W]=WARN [ 200.613204][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.623302][ T2980] ================================================================== [ 200.638308][ T7183] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 200.657057][ T7273] loop2: detected capacity change from 0 to 1764 [ 200.662445][ T28] audit: type=1400 audit(1785541427.861:907): avc: denied { write } for pid=7277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.690793][ T7183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.696968][ T7273] netlink: 48 bytes leftover after parsing attributes in process `syz.2.988'. [ 200.708393][ T7183] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 200.722396][ T7183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.729571][ T7278] loop3: detected capacity change from 0 to 1764 [ 200.739853][ T7183] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 200.753868][ T7183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.762551][ T7278] netlink: 48 bytes leftover after parsing attributes in process `syz.3.989'. [ 200.784769][ T7183] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 200.815146][ T7183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.020079][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.107423][ T7289] loop3: detected capacity change from 0 to 764 [ 201.117181][ T7289] iso9660: Bad value for 'gid' [ 201.122340][ T7289] iso9660: Bad value for 'gid' [ 201.162153][ T7289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.989'. [ 201.171952][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 201.209865][ T7290] loop2: detected capacity change from 0 to 764 [ 201.218467][ T7290] iso9660: Bad value for 'gid' [ 201.223695][ T7290] iso9660: Bad value for 'gid' [ 201.453320][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.988'. [ 201.462451][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 201.478563][ T7183] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.505872][ T2037] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.513471][ T2037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.526313][ T2037] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.533439][ T2037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.793146][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.022819][ T7183] veth0_vlan: entered promiscuous mode [ 202.038556][ T7183] veth1_vlan: entered promiscuous mode [ 202.057554][ T7183] veth0_macvtap: entered promiscuous mode [ 202.065870][ T7183] veth1_macvtap: entered promiscuous mode [ 202.079615][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.093531][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.120843][ T4055] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.130190][ T4055] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.142437][ T4055] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.151910][ T4055] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0