last executing test programs: 1m10.099677105s ago: executing program 3 (id=1359): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m10.014513969s ago: executing program 3 (id=1362): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x1, 0x4, 0x7, 0x0, 0x3, 0x58000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3fc0}, 0xc42, 0xc, 0x2, 0x6, 0x5, 0x9, 0xff, 0x0, 0xcb1, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1m9.944095254s ago: executing program 3 (id=1366): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1m9.862520299s ago: executing program 3 (id=1370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffed, 0x0, @perf_config_ext={0x74, 0x1ef7}, 0x11efa, 0x4, 0x1, 0x3, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 1m9.820117031s ago: executing program 3 (id=1373): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x188, 0x43, 0xa0, 0x0, 0x98, 0x2b0, 0x178, 0x178, 0x2b0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00', {}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1m9.796315702s ago: executing program 3 (id=1375): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 54.659004941s ago: executing program 32 (id=1375): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 51.731057653s ago: executing program 0 (id=1946): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'dh\x00', 0x0, 0x10001, 0x6c}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @broadcast, 0x1ff4, 0x200000001, 'nq\x00', 0x19, 0x821}, 0x2c) 51.659965697s ago: executing program 0 (id=1947): r0 = socket(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x100a0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2ef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000780)={0x5, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0xffffffff, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x6, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000390009fffe0f0f00000000000300"], 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x208) shutdown(r7, 0x1) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000180), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = geteuid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10000, &(0x7f0000000800)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'gre0\x00'}}, {@fowner_eq}, {@uid_gt}, {@context={'context', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x688746cba7758039, 0x30, 0x30, 0x30, 0x37, 0x64], 0x2d, [0x33, 0x36, 0x66, 0x37], 0x2d, [0x38, 0x30, 0x65, 0x38], 0x2d, [0x38, 0x39, 0x63, 0x37], 0x2d, [0x31, 0x31, 0x62, 0x65, 0x36, 0x66, 0x61, 0x39]}}}, {@euid_lt={'euid<', r9}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01"], 0x44}}, 0x0) socket(0x2, 0xa, 0x300) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet(0x2, 0x1, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02017d298cdc18000e3580009f0001140000002f0600ac141414e0000003808a89723a0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) 51.338038716s ago: executing program 0 (id=1948): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x937, 0xfffffffc, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) 51.302434008s ago: executing program 0 (id=1949): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x100c404, &(0x7f0000000300)=ANY=[@ANYBLOB='flush,fmask=00000000000000000006675,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB='\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',check=strict,nodots,dots,allow_utime=00000000000000000000002,nodots,check=normal,dots,nodots,nfs,nodots,showexec,nodots,umask=00000000000000000000007,dots,dots,subj_user=$],\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x2800008, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x325, 0x70bd28, 0x25dfdbfe}, 0x14}}, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r4 = gettid() syz_open_procfs$pagemap(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0xa509, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) 50.954169179s ago: executing program 0 (id=1951): r0 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) close(r0) eventfd2(0xfffffffe, 0x800) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10000, 0x1, 0x80008212, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) io_uring_enter(r0, 0x7762, 0x4723, 0x36, &(0x7f0000000040)={[0x200000000004]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 50.749721351s ago: executing program 0 (id=1952): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000480)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@errors_continue}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x6c, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x401}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x80000000000000}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3492}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4050}, 0x40001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r4, r4, 0x0, 0x800000009) 50.733651362s ago: executing program 33 (id=1952): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000480)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@errors_continue}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x6c, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x401}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x80000000000000}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3492}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4050}, 0x40001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r4, r4, 0x0, 0x800000009) 4.820830306s ago: executing program 6 (id=2849): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port0\x00', 0x100, 0x131845, 0x0, 0x0, 0x7, 0x0, 0x100000, 0x0, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x6, 0x17}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r8 = socket$inet6(0xa, 0x6, 0x4) ioctl$sock_ifreq(r8, 0x8913, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_addrs=@rc={0x1f, @none, 0x7}}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x0, {0x2, 0x1, 0x2}, {0x2, 0x0, 0x1}, 0xfe, 0xfe}, {0xfffffffffffffffe, 0x0, {0x2, 0xff, 0x2}, {0x2, 0xf0}, 0xfd, 0xfd}, {0x1, 0x2, {0x1, 0x0, 0x3}, {0x0, 0xff}, 0xfe, 0x2}], 0x60) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) futex(&(0x7f0000000000)=0x1, 0x6, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x82}, 'port0\x00', 0x25, 0x60041, 0x8000, 0xfffffffe, 0x9, 0x0, 0x5, 0x0, 0x7, 0x9}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000340)=""/133, 0x85, 0x0, &(0x7f0000000640)=""/219, 0xdb}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000030000000100000007000006040000000c0000000f0000000a0000000000000003000000020000000300000005000000100000000200000010000000090000000c0000001c0d0000050000000b01000000005f00000000"], &(0x7f00000008c0)=""/246, 0x6b, 0xf6, 0x0, 0x8}, 0x28) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0xe5}}, './file0\x00'}) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800b35361498bbb37a913bcce29563b84"], &(0x7f0000000240)='GPL\x00', 0x4c9, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x1b, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r12 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r11}, 0x8) close(r12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 3.481019025s ago: executing program 6 (id=2853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x54}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x738e57bcc03ad255}, 0x4040) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xffffffffffffffff}, 0x0, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.475951506s ago: executing program 2 (id=2854): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0xfffe, @empty}, 0x2, 0x0, 0x0, 0x40}}, 0x2e) sendmmsg$sock(r1, &(0x7f0000003bc0)=[{{0x0, 0xfe3d, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000002ca, 0x4040014) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000005f40)={'gretap0\x00', 0x0, 0x10, 0x40, 0x180, 0x4f9, {{0x21, 0x4, 0x1, 0x0, 0x84, 0x67, 0x0, 0x1, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x24, 0xef, 0x0, 0x4, [0x5, 0x3, 0x8, 0x89, 0x4, 0x5, 0x4, 0x5]}, @end, @rr={0x7, 0x7, 0xf, [@dev={0xac, 0x14, 0x14, 0x33}]}, @generic={0x94, 0x7, "3aa30c4365"}, @timestamp_addr={0x44, 0x1c, 0x60, 0x1, 0x6, [{@multicast1, 0x6}, {@loopback, 0x4}, {@loopback, 0x3}]}, @noop, @generic={0x44, 0xa, "1ed6bd3897f0d396"}, @rr={0x7, 0x7, 0x3f, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x44, 0xd, "2483bd02b277d812662f8c"}]}}}}}) shutdown(r1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, 0x0) sendmmsg(r5, 0x0, 0x0, 0x4000001) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="180800006000000000000000000000801811", @ANYRES32=r6, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r5, &(0x7f00000000c0)="818f3d69149b997e15e0331ffb84139b2e821134083a", 0x16) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r8, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="021300030b0000002dbd7000000000000100090000000000030006000000000002001000000000000000000000000000020001000000498e32d8e1f46500000000061100000000a301a9a16964056cf9ba6875612b150005000000000002001600ac14148000"], 0x58}, 0x1, 0x7}, 0x0) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000000)=0xfffffffc) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0x80000601, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x800000000000000, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = getpgrp(0x0) ptrace$setregs(0xd, r10, 0x3, &(0x7f00000006c0)="93af01ed8af1a92f642d4adfa12d10a5681e8c4070abf3fe90027b89ee7b5c0da0790cf73b7a971e406db04f7156df1d8d03d20a7414bc172a52d0e883712839c6c44100") socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) 3.427611498s ago: executing program 6 (id=2856): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=@ipv4_newroute={0x20, 0x1a, 0x1, 0x80000000, 0x25dfdbfd, {0xa, 0x80, 0x80}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x20000050) symlink(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_socket_connect_nvme_tcp() unshare(0x2040400) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000ff0f000005", @ANYRES8=r5], 0x48) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000023c0)=ANY=[@ANYBLOB="4400000010000108f6ffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002f1c060008001b00000000001c0016801800018014000b"], 0x44}}, 0x0) 2.592564647s ago: executing program 4 (id=2863): select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x80, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@errors_continue}, {@quota}, {@delalloc}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {}]}, 0x1, 0x5d2, &(0x7f0000001a40)="$eJzs3U9oG9kZAPBvRlbsOE6dQgttySG0hRRC5D9J2rQn51oaCORQ6KU1smKCZStYchsbQ517KM2htCWX9NYeeiotPfRQeulxr3vZP+eFsDG7EOewq0XSyHYcOZFjW0qi3w9kvTdvPN/3RnrPM8MMDmBgnWv8SCO+HRE3kojxXW1DkTWea623tblefLa5XkyiXr/5aRJJRDzdXC+210+y91MRsRER34qI/+UjLqTbmzzRLlRX1xZmy+XSclafqC3emaiurl28vTg7X5ovLV360Y+vXL18ZWp6ane6z+q7a/mD9fX+hw9+d/+9nz568Le/n90o/mE2iZkYy9p292NHcrAAHSRZojN7ll8+9JbfLIffU/RDLhvnjaH0zRiPXDbqO6nvnhyGe5IecIzqwxH1bbuKwABIXjnoG8cInVvakwjwNmofBzTOf9uvXh5/PL7WOgFpxN3aXC/+Ntrxh1rXJmKkeW4y+lny3JlJ43zzTC8T5Z20cS8iJoeGXvz+J9n37/VNHkWCHKv/Xmt9UC9+/un2/BMd5p+x9rXTQ2rPf1vZ/LfVIX5un/nvRpcxvvjFx3/eN/694fhOx/jJdvykQ/w0In7VZfyHP//31f3a6n+JOB+d47clL78+PHHrdrk02frZMcZ/zp/9yf79jxjdJ37rmu1IM5Hd/T+R5ZR22f9//f+f3914SfwffO/ln3+n/X8yIn7fZfyvP/3rz/Zre3wvedI4Cjjo559EPh51Gf+HM+c+yIquGgIAAAAAAAAAwBFKm/eyJWlhu5ymhULrGd5vxGharlRrF25VVpbmWve8nYl82r7TarxVTxr1qex+3HZ9ek/9Ui4LmDvZrBeKlfJcn/sOAAAAAAAAAAAAAAAAAAAAb4pTe57//zzXfP5/JmL6dL9zA3pg/3/5DbzrjH8YXM+P/6RveQC95+8/DKy68Q+Dy/iHwWX8w+Ay/mFwdRz/J3ufB9B7O+N/tPU20r9cgN5y/A8AAAAAAAAAAAAAAAAAAAAAAAAAAMfixvXrjVf92eZ6sVGfG1pdWaj8+uJcqbpQWFwpFoqV5TuF+UplvlwqFCuLr9peUqncmYyllbsTtVK1NlFdXfvlYmVlqf0/RUv5Y+8RAAAAAAAAAAAAAAAAAAAAvH3Gmq8kLUTkW/U0LRQiTkfEmSSSW7fLpcmI+FpEvJ/LDzfqU/1OGgAAAAAAAAAAAAAAAAAAAN4x1dW1hdlyubT8YiHNVunQdKDC0IG281HtMLFeWRg6yMoRsXG0aTS2eODfymc7sLlk5Mh3yz9OtzZ/PDv8TSvkDv19HpBCP2YjAAAAAAAAAAAAAAAAAAAYbDsP/Xb7G18eb0IAAAAAAAAAAAAAAAAAAAAwkNJPkohovM6Pf39sb+uJZCvXfI+I3zy8+ce7s7Xa8lRj+ZPt5bU/Zcun+5E/0K32OE0jojGOAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB3V1bWF2XK5tPyaheEu1ul3HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABex1cBAAD//5RxvZQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) writev(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x145402, 0x8) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000280)}, {0x0}], 0x2) write$tun(0xffffffffffffffff, 0x0, 0xa2) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0xfffffffb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0xffffffff, {{0x2, 0x4e24, @multicast2}}}, 0xffffff69) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a40020000160a010400000000000000000200000a0900020073797a30000000000900010073797a30000006000000000000000240000000010800f43f00000000140000001100010000000000000000000180000a"], 0x68}}, 0x40) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) sync() prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ioprio_get$pid(0x2, 0x0) sync() sync() syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), 0xffffffffffffffff) 2.589741528s ago: executing program 2 (id=2864): ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x8, 0x7, 0x7, 0x885, 0x3}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="90010000", @ANYRES16=r4, @ANYBLOB="010027bd70000000000001000000280108800c00078008000600b60000001c000780080006005f00000008000600ca00000008000500017a08020c00078008000500fa01bb3e44000780080006007d00000008000500eb16615e080005002cd87d5e08000500bd52ef54080005005038f04b080006006700000008000600c600000008000600070000004c00078008000500b31dbe1b0800060006000000080006007c000000080006000f0000000800050049373e7c080005001cfb661c08000600520000000800060060000000080006003600000024000780080005004be4384c080006005a000000080006005200000008000600fa0000003c000780080005004dfb505c080005005a291553080006006300000008000500cb1f147e08000600bc00000008000600ec000000080006001600000008000200010000000800020002000000080002000300000024000c8004000b801c000b8008000a0002000000080009002e3c2c7208000a006fce0000"], 0x178}}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x8, 0x7, 0x7, 0x885, 0x3}) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="90010000", @ANYRES16=r4, @ANYBLOB="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"], 0x178}}, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) 2.495106733s ago: executing program 6 (id=2866): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)="20cd0eb2", 0x4}], 0x1}}], 0x1, 0x40d0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000080)=0x40, 0x4) 2.38988511s ago: executing program 2 (id=2868): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x5, 0xb1130, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x3288, 0x26f, 0x20, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x2, 0x0, 0x20000002}, 0x0, 0x7, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f000099a000/0x2000)=nil, 0x2000, 0x0, 0x4000011, r0, 0x0) (async) mmap$perf(&(0x7f000099a000/0x2000)=nil, 0x2000, 0x0, 0x4000011, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) creat(&(0x7f0000000040)='./file0\x00', 0x125) (async) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x125) close(r3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) (async) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wf\t\x00o=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c0e1}, 0x4890) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES8=r0, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfe83}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES8=r0, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfe83}, 0x94) unshare(0x26000400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e2100000008f5034000000008"], 0x9c}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r6], 0x31) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000005c0)=@req3={0x1, 0x276, 0xffffffff, 0x7a1, 0xfffffffd, 0x5, 0x10000}, 0x1c) (async) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000005c0)=@req3={0x1, 0x276, 0xffffffff, 0x7a1, 0xfffffffd, 0x5, 0x10000}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000004000), 0x0}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x4000) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x4000) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r11, &(0x7f0000000000)="fa", 0xfffffdef) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.38963473s ago: executing program 6 (id=2869): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r4, 0x9, 0x7}, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma']) 2.19568833s ago: executing program 4 (id=2870): rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mount$nfs4(0x0, &(0x7f00000002c0)='./file2\x00', 0x0, 0x100000, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757814"], 0x65) getpeername$llc(r0, 0x0, 0x0) 2.134289654s ago: executing program 6 (id=2871): syz_emit_ethernet(0x3b6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xa, 0x0, 0x0, 0x10, 0x0, 0x20, 0x4e822, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x210000009, 0x7}, 0x8100, 0x4, 0x80000001, 0x5, 0x0, 0x81, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_tables_matches\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x22, 0x4, 0x0) fsopen(0x0, 0x0) ioperm(0x9, 0x2, 0x0) syz_clone(0x49000100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x11, 0x0, 0x4) 2.133714525s ago: executing program 4 (id=2872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x402, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x480}], 0x1, 0xf0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004841}, 0x8000) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, &(0x7f0000000180)=""/83) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x402, 0x0) (async) poll(&(0x7f00000000c0)=[{r1, 0x480}], 0x1, 0xf0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004841}, 0x8000) (async) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$HIDIOCGRAWINFO(r3, 0x80084803, &(0x7f0000000180)=""/83) (async) 1.976892393s ago: executing program 4 (id=2873): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @local}, 0xfffffffffffffd8c, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000280)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0x2}}], 0x18}, 0x24008004) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x6, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6bae1de1f687281cbd282b82a01e4fa2226a1e785dd543e85f820e", @ANYRES32=0x0, @ANYBLOB="140006001000000002000000000000000100000008000a000100000014000100fe8000000000000000000000000000aa"], 0x48}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000840) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000008500000069000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write(r5, &(0x7f00000002c0)="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", 0xfc) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004c000044869ccdc1ed8172ce0000000000069078ac1e0001ac1414440c05030000000700000000860600"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x81, 0x7f}, 0x2012, 0x0, 0x7, 0x5, 0x2, 0x8d5e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r4, 0x5441, 0xb3d) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r9, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_FREEZE(r9, 0x400c620e, &(0x7f00000001c0)={r0, 0x0, 0x4b}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c000078000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002df31ab30c0000800800034000000002"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.806545763s ago: executing program 4 (id=2874): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x188, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000280)) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)) fchdir(r2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0xfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000380), 0x1, 0x785, &(0x7f0000001c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000300000004"], 0x184}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0xfffffff6) r6 = socket$isdn(0x22, 0x3, 0x23) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r4) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x36, 0x0, 0x0) close_range(r6, r7, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 1.51921264s ago: executing program 2 (id=2876): futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f0000003f80), 0x2}, {0x3, &(0x7f0000003fc0)=0x3, 0x82}, {0x6, &(0x7f0000004000)=0x6, 0x2}], 0x3, 0x0, 0x0, 0x1) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x0, 0x3f, 0xce, &(0x7f0000000000)="54d2f456fc9115fca3ecf656dde2b74f16d9158b6d5894a79c3ec8cab68c3ba56d96e742d5fe397f54cfc1d1b72471fc5bbfe6cab17551250b8530499b31be", &(0x7f0000000200)=""/206, 0xfffffff7, 0x0, 0x1000, 0x76, &(0x7f0000000300)="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", &(0x7f0000000040)="04ae134e6471ec91fa063caeeae7c376f979f7c2e39835deb72931f5f6ce1314ad38941e3285865469c456bfe0e1a2a2782dabf260e87a5dc18ce1be102bddd6749d5f7190c3bc2c1cd8905bc25e1cafb0b5d0604ec3d836ca67093d9a9a82983709f9778da671e8d77ed839f946fe572a54464547a7", 0x4, 0x0, 0x7fffffff}, 0x50) 1.405652367s ago: executing program 5 (id=2879): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x7, 0x7ffc0001}]}) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000200)=[{}], 0x1, 0x4) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x81) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000000)={0x3, 0x6c94fd8a, 0xb2, &(0x7f0000000180)=""/178}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, 0x1404, 0x10, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@dioread_lock}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") 722.271217ms ago: executing program 1 (id=2882): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x27, 0x1, 0x0, 0x9102, 0xffffffffffffffff, 0x9, '\x00', r0, r1, 0x3, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93c8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 672.3264ms ago: executing program 1 (id=2883): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x42000) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r5, 0xda90) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r7, 0x1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x70, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x510, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x440, 0xffffffff, 0xffffffff, 0x440, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x10, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x6], 0xffff94a7, 0xd78a4f1d57488402, 0xa, [@dev={0xfe, 0x80, '\x00', 0x1f}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @loopback, @private2, @mcast1, @local], 0x6}}, @common=@inet=@set3={{0x50}, {{0x4, 0x1, 0x2}, {0x9, 0xfffffffffffff000}, {0x7, 0x7fff}, 0x1ff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffff, 0x400}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) close(0x3) 582.450656ms ago: executing program 5 (id=2884): r0 = shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030001000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044044) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044055}, 0x40) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0xf0, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800}, {0x0, 0x0, 0x4}, 0x70bd29, 0xfffffffe, 0x2, 0x4, 0x0, 0x2c}}, 0xf0}}, 0x4050) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap(&(0x7f0000e9c000/0x4000)=nil, 0x4000, 0x2, 0x100010, r3, 0xc84fe000) mremap(&(0x7f0000e9b000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @const={0xfffffffc, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x30, 0x0, 0x5f]}}, 0x0, 0x66}, 0x28) shmdt(r0) 581.848926ms ago: executing program 2 (id=2885): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/13], 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r2 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x1, 'veth0_vlan\x00', {}, 0x1}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x3bf, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000000)=""/49}, 0x20) 581.539096ms ago: executing program 5 (id=2886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) (fail_nth: 4) 576.946416ms ago: executing program 1 (id=2887): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xd6d, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b00a0000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x11000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_emit_ethernet(0x0, 0x0, 0x0) getpid() ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) r3 = syz_io_uring_complete(0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x1f, 0xff, &(0x7f0000000280)="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"}) syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0) 335.27905ms ago: executing program 5 (id=2888): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000580)={0x6, "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"}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 310.092871ms ago: executing program 5 (id=2889): r0 = open(&(0x7f0000000000)='./file0\x00', 0x1491ff, 0x78) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="240000001a005f3814f9dc070009040180002000000000000000000008000f0040000000", 0x24) fcntl$setlease(r0, 0x400, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x420000, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) fcntl$setlease(r2, 0x400, 0x1) 229.049066ms ago: executing program 5 (id=2890): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0x94}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) 226.951756ms ago: executing program 2 (id=2891): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa06a6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x405, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_config_ext={0xfff, 0x90001}, 0x100410, 0x200, 0x400000a, 0x1, 0x2ca, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xe, 0x200, &(0x7f0000003c40)="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"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c1202, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000010080)=[{0x6, 0x0, 0x3}]}) write$ppp(r4, &(0x7f0000000400)='k\'', 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x7) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x19c, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x64, 0x14, {{'cmac(aes)\x00'}, 0xc0, 0x0, "e80c857b65087dea03da4c290569c738c39dac5defb806ba"}}]}, 0x19c}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r6) write(r2, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 226.272957ms ago: executing program 4 (id=2892): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"eb7a337a07519f7fa76e34221624216e", 0x0, 0x0, {0x8, 0x10}, {0x0, 0x3}, 0x8, [0x34, 0x4, 0x0, 0x4000003, 0x6, 0x5, 0x3, 0x7f, 0x8, 0x100000000, 0x1, 0xc, 0xe82, 0xffffffffffff812e, 0x3, 0x144]}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d0090000060011000700000008000100706369001100020030082e303a30303a31302e3000000000080003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x2, 0x800020, 0x6, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x2, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) r2 = syz_io_uring_setup(0x7a10, &(0x7f0000000100)={0x0, 0x9614, 0x0, 0x2, 0x1dd}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r5, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_type(r0, &(0x7f00000003c0), 0x2, 0x0) write$nci(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="0000a18b416dde75177f34d84a04af67a44b000a36"], 0x4) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x40890) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES64=r1, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xb43}]}, 0x2c}}, 0x0) sendto$packet(r7, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r11 = socket(0x10, 0x3, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r13, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 206.858348ms ago: executing program 1 (id=2893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, 0x0, &(0x7f0000000140)='%ps \x00'}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0) 155.6846ms ago: executing program 1 (id=2894): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) socket$inet(0x2, 0x1, 0x0) syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) write$binfmt_script(r3, &(0x7f0000000f80)={'#! ', './file1'}, 0xb) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe5da48a}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8b6, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0xe7, &(0x7f0000000340)=""/231, 0x0, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x9, 0x100, 0x200}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e22, 0x3, 'wlc\x00', 0x1, 0x0, 0x407b}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x2a, 0x1, 0x55}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4e23, 0x2, 0x1ff, 0x12d5c, 0x12d5c}}, 0x44) 0s ago: executing program 1 (id=2895): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0xffff, 0xfd01}, 0x4) kernel console output (not intermixed with test programs): em_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.737270][ T29] audit: type=1400 audit(1768965839.703:360): avc: denied { create } for pid=8606 comm="dhcpcd-run-hook" name="resolv.conf.eth1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.759943][ T29] audit: type=1400 audit(1768965839.703:361): avc: denied { write } for pid=8606 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=6292 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.786211][ T29] audit: type=1400 audit(1768965839.703:362): avc: denied { append } for pid=8606 comm="dhcpcd-run-hook" name="resolv.conf.eth1.ipv4ll" dev="tmpfs" ino=6292 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.814674][ T8635] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 95.845821][ T8635] System zones: 0-1, 3-36 [ 95.857542][ T8635] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2222: bad orphan inode 134217728 [ 95.877695][ T8635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.919032][ T8646] netlink: 'syz.1.2225': attribute type 1 has an invalid length. [ 95.946524][ T8646] loop1: detected capacity change from 0 to 512 [ 95.953254][ T8646] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 95.962091][ T8648] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 96.167279][ T8608] loop5: detected capacity change from 0 to 8192 [ 96.182277][ T8608] syz.5.2214: attempt to access beyond end of device [ 96.182277][ T8608] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 96.196383][ T8608] Buffer I/O error on dev loop5, logical block 57847, async page read [ 96.225859][ T8608] syz.5.2214: attempt to access beyond end of device [ 96.225859][ T8608] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 96.239889][ T8608] Buffer I/O error on dev loop5, logical block 57847, async page read [ 96.298287][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.632839][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2237'. [ 96.657480][ T8685] syzkaller0: entered promiscuous mode [ 96.663082][ T8685] syzkaller0: entered allmulticast mode [ 96.707235][ T8675] syz.2.2229 (8675) used greatest stack depth: 10072 bytes left [ 97.066567][ T8721] SELinux: policydb magic number 0x14 does not match expected magic number 0xf97cff8c [ 97.082805][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2246'. [ 97.092159][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2246'. [ 97.118598][ T8721] SELinux: failed to load policy [ 97.150493][ T8731] syzkaller0: entered promiscuous mode [ 97.156290][ T8731] syzkaller0: entered allmulticast mode [ 97.502292][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2255'. [ 97.520401][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2255'. [ 97.529535][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2255'. [ 97.603769][ T8747] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2255'. [ 97.723704][ T8753] syzkaller0: entered promiscuous mode [ 97.729341][ T8753] syzkaller0: entered allmulticast mode [ 97.888876][ T8762] loop6: detected capacity change from 0 to 764 [ 97.904541][ T8762] rock: directory entry would overflow storage [ 97.910832][ T8762] rock: sig=0x5850, size=36, remaining=22 [ 97.978232][ T8767] loop2: detected capacity change from 0 to 7 [ 98.061710][ T8777] FAULT_INJECTION: forcing a failure. [ 98.061710][ T8777] name failslab, interval 1, probability 0, space 0, times 1 [ 98.074561][ T8777] CPU: 0 UID: 0 PID: 8777 Comm: syz.5.2268 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.074589][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.074602][ T8777] Call Trace: [ 98.074610][ T8777] [ 98.074619][ T8777] __dump_stack+0x1d/0x30 [ 98.074715][ T8777] dump_stack_lvl+0x95/0xd0 [ 98.074738][ T8777] dump_stack+0x15/0x1b [ 98.074759][ T8777] should_fail_ex+0x263/0x280 [ 98.074786][ T8777] should_failslab+0x8c/0xb0 [ 98.074837][ T8777] __kmalloc_cache_noprof+0x64/0x4a0 [ 98.074913][ T8777] ? bpf_prog_alloc_no_stats+0xc4/0x380 [ 98.075007][ T8777] bpf_prog_alloc_no_stats+0xc4/0x380 [ 98.075043][ T8777] bpf_prog_alloc+0x3c/0x150 [ 98.075078][ T8777] bpf_prog_load+0x506/0x1140 [ 98.075175][ T8777] ? security_bpf+0x2b/0x90 [ 98.075205][ T8777] __sys_bpf+0x469/0x7b0 [ 98.075233][ T8777] __x64_sys_bpf+0x41/0x50 [ 98.075267][ T8777] x64_sys_call+0x28e1/0x3000 [ 98.075303][ T8777] do_syscall_64+0xc0/0x2a0 [ 98.075375][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.075398][ T8777] RIP: 0033:0x7f21d6f2acb9 [ 98.075414][ T8777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.075433][ T8777] RSP: 002b:00007f21d5987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.075454][ T8777] RAX: ffffffffffffffda RBX: 00007f21d71a5fa0 RCX: 00007f21d6f2acb9 [ 98.075538][ T8777] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 98.075551][ T8777] RBP: 00007f21d5987090 R08: 0000000000000000 R09: 0000000000000000 [ 98.075563][ T8777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.075651][ T8777] R13: 00007f21d71a6038 R14: 00007f21d71a5fa0 R15: 00007fff7db18418 [ 98.075676][ T8777] [ 98.434086][ T8787] loop1: detected capacity change from 0 to 1024 [ 98.453297][ T8787] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 98.511703][ T8787] System zones: 0-1, 3-36 [ 98.517347][ T8787] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2272: bad orphan inode 134217728 [ 98.539314][ T8787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.582552][ T2970] IPVS: starting estimator thread 0... [ 98.676139][ T8807] IPVS: using max 2208 ests per chain, 110400 per kthread [ 98.771876][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2283'. [ 98.837026][ T8774] syz.4.2267 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 98.848199][ T8774] CPU: 1 UID: 0 PID: 8774 Comm: syz.4.2267 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.848309][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.848323][ T8774] Call Trace: [ 98.848332][ T8774] [ 98.848342][ T8774] __dump_stack+0x1d/0x30 [ 98.848373][ T8774] dump_stack_lvl+0x95/0xd0 [ 98.848401][ T8774] dump_stack+0x15/0x1b [ 98.848426][ T8774] dump_header+0x80/0x240 [ 98.848456][ T8774] oom_kill_process+0x295/0x350 [ 98.848544][ T8774] out_of_memory+0x97d/0xb80 [ 98.848572][ T8774] try_charge_memcg+0x62e/0xa10 [ 98.848612][ T8774] charge_memcg+0x51/0xc0 [ 98.848644][ T8774] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 98.848737][ T8774] __read_swap_cache_async+0x17b/0x2d0 [ 98.848778][ T8774] swap_cluster_readahead+0x262/0x3c0 [ 98.848835][ T8774] swapin_readahead+0xde/0x840 [ 98.848870][ T8774] ? __rcu_read_unlock+0x33/0x70 [ 98.848939][ T8774] ? __rcu_read_unlock+0x4e/0x70 [ 98.848965][ T8774] ? swap_cache_get_folio+0x26f/0x280 [ 98.849002][ T8774] do_swap_page+0x2f4/0x2140 [ 98.849036][ T8774] ? css_rstat_updated+0xbb/0x280 [ 98.849075][ T8774] ? __pfx_default_wake_function+0x10/0x10 [ 98.849157][ T8774] handle_mm_fault+0xb40/0x3030 [ 98.849198][ T8774] ? vma_start_read+0x1c7/0x2c0 [ 98.849234][ T8774] do_user_addr_fault+0x62f/0x1050 [ 98.849262][ T8774] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 98.849320][ T8774] ? irqentry_exit+0x3c/0x510 [ 98.849416][ T8774] exc_page_fault+0x62/0xa0 [ 98.849450][ T8774] asm_exc_page_fault+0x26/0x30 [ 98.849556][ T8774] RIP: 0033:0x7fa91a495ebe [ 98.849572][ T8774] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 [ 98.849590][ T8774] RSP: 002b:00007ffe031da7c0 EFLAGS: 00010246 [ 98.849671][ T8774] RAX: 0000000000000000 RBX: 0000555575a87500 RCX: 00007fa91a49b58e [ 98.849687][ T8774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.849703][ T8774] RBP: 00007fa91a757da0 R08: 0000000000000000 R09: 0000000000000000 [ 98.849719][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001821e [ 98.849735][ T8774] R13: 00007fa91a755fac R14: 0000000000017f25 R15: 00007ffe031da940 [ 98.849792][ T8774] [ 98.849801][ T8774] memory: usage 307200kB, limit 307200kB, failcnt 10420 [ 99.081813][ T8774] memory+swap: usage 253256kB, limit 9007199254740988kB, failcnt 0 [ 99.089770][ T8774] kmem: usage 251752kB, limit 9007199254740988kB, failcnt 0 [ 99.097102][ T8774] Memory cgroup stats for /syz4: [ 99.118570][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2285'. [ 99.138161][ T8844] team0: entered promiscuous mode [ 99.143248][ T8844] team_slave_0: entered promiscuous mode [ 99.149156][ T8844] team_slave_1: entered promiscuous mode [ 99.166640][ T8844] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 99.175691][ T8774] cache 524288 [ 99.179232][ T8774] rss 16384 [ 99.182497][ T8774] shmem 0 [ 99.185471][ T8774] mapped_file 0 [ 99.189071][ T8774] dirty 0 [ 99.192032][ T8774] writeback 0 [ 99.195342][ T8774] workingset_refault_anon 100 [ 99.200065][ T8774] workingset_refault_file 772 [ 99.204760][ T8774] swap 139264 [ 99.208114][ T8774] swapcached 12288 [ 99.211857][ T8774] pgpgin 102910 [ 99.215342][ T8774] pgpgout 102777 [ 99.218961][ T8774] pgfault 68958 [ 99.222443][ T8774] pgmajfault 51 [ 99.226031][ T8774] inactive_anon 0 [ 99.229677][ T8774] active_anon 20480 [ 99.233505][ T8774] inactive_file 0 [ 99.237180][ T8774] active_file 405504 [ 99.241098][ T8774] unevictable 0 [ 99.244644][ T8774] hierarchical_memory_limit 314572800 [ 99.250076][ T8774] hierarchical_memsw_limit 9223372036854771712 [ 99.256285][ T8774] total_cache 524288 [ 99.260197][ T8774] total_rss 16384 [ 99.263859][ T8774] total_shmem 0 [ 99.267432][ T8774] total_mapped_file 0 [ 99.271457][ T8774] total_dirty 0 [ 99.274976][ T8774] total_writeback 0 [ 99.278859][ T8774] total_workingset_refault_anon 100 [ 99.284086][ T8774] total_workingset_refault_file 772 [ 99.289332][ T8774] total_swap 139264 [ 99.293172][ T8774] total_swapcached 12288 [ 99.297461][ T8774] total_pgpgin 102910 [ 99.301467][ T8774] total_pgpgout 102777 [ 99.305560][ T8774] total_pgfault 68958 [ 99.309618][ T8774] total_pgmajfault 51 [ 99.313649][ T8774] total_inactive_anon 0 [ 99.317896][ T8774] total_active_anon 20480 [ 99.322258][ T8774] total_inactive_file 0 [ 99.326511][ T8774] total_active_file 405504 [ 99.330687][ T8844] team0: left promiscuous mode [ 99.330942][ T8774] total_unevictable 0 [ 99.330952][ T8774] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2267,pid=8774,uid=0 [ 99.331064][ T8774] Memory cgroup out of memory: Killed process 8774 (syz.4.2267) total-vm:94000kB, anon-rss:1200kB, file-rss:21768kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 99.335911][ T8844] team_slave_0: left promiscuous mode [ 99.377153][ T8844] team_slave_1: left promiscuous mode [ 99.421031][ T8774] syz.4.2267 (8774) used greatest stack depth: 10008 bytes left [ 99.483133][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.550209][ T8868] loop6: detected capacity change from 0 to 512 [ 99.598979][ T8875] SELinux: failed to load policy [ 99.679967][ T8885] loop5: detected capacity change from 0 to 512 [ 99.996706][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2291'. [ 100.028750][ T8880] bridge_slave_1: left allmulticast mode [ 100.034470][ T8880] bridge_slave_1: left promiscuous mode [ 100.040261][ T8880] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.081116][ T8880] bridge_slave_0: left allmulticast mode [ 100.086890][ T8880] bridge_slave_0: left promiscuous mode [ 100.092670][ T8880] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.184444][ T8934] loop5: detected capacity change from 0 to 512 [ 100.247509][ T8938] syzkaller0: entered promiscuous mode [ 100.253209][ T8938] syzkaller0: entered allmulticast mode [ 100.525024][ T8957] loop1: detected capacity change from 0 to 1024 [ 100.534082][ T8957] EXT4-fs: inline encryption not supported [ 100.547098][ T8957] EXT4-fs: Ignoring removed bh option [ 100.552788][ T8957] journal_path: Non-blockdev passed as './file0' [ 100.559374][ T8957] EXT4-fs: error: could not find journal device path [ 100.580759][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 100.580776][ T29] audit: type=1400 audit(1768965844.633:381): avc: denied { write } for pid=8956 comm="syz.1.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.674190][ T3421] kernel read not supported for file /vcs (pid: 3421 comm: kworker/0:4) [ 100.713365][ T29] audit: type=1400 audit(1768965844.763:382): avc: denied { getopt } for pid=8972 comm="syz.2.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.784062][ T29] audit: type=1400 audit(1768965844.803:383): avc: denied { create } for pid=8977 comm="syz.1.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.804123][ T29] audit: type=1400 audit(1768965844.803:384): avc: denied { connect } for pid=8977 comm="syz.1.2323" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.824901][ T29] audit: type=1400 audit(1768965844.803:385): avc: denied { setopt } for pid=8977 comm="syz.1.2323" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.847069][ T29] audit: type=1400 audit(1768965844.803:386): avc: denied { write } for pid=8977 comm="syz.1.2323" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.869106][ T29] audit: type=1400 audit(1768965844.813:387): avc: denied { allowed } for pid=8977 comm="syz.1.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.888391][ T29] audit: type=1400 audit(1768965844.823:388): avc: denied { read } for pid=8977 comm="syz.1.2323" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.911585][ T29] audit: type=1400 audit(1768965844.823:389): avc: denied { open } for pid=8977 comm="syz.1.2323" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.934973][ T29] audit: type=1400 audit(1768965844.823:390): avc: denied { connect } for pid=8977 comm="syz.1.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.949096][ T8986] syzkaller0: entered promiscuous mode [ 100.960500][ T8986] syzkaller0: entered allmulticast mode [ 101.113246][ T9000] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 101.250967][ T9008] loop6: detected capacity change from 0 to 1024 [ 101.355002][ T9015] syzkaller0: entered promiscuous mode [ 101.360592][ T9015] syzkaller0: entered allmulticast mode [ 101.372739][ T9013] netlink: 'syz.2.2331': attribute type 1 has an invalid length. [ 101.380580][ T9013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2331'. [ 101.423236][ T9013] netlink: 'syz.2.2331': attribute type 1 has an invalid length. [ 101.513344][ T9024] syzkaller0: entered promiscuous mode [ 101.518958][ T9024] syzkaller0: entered allmulticast mode [ 101.627143][ T9031] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2343'. [ 101.637874][ T9026] loop2: detected capacity change from 0 to 1764 [ 101.943592][ T9040] syzkaller0: entered promiscuous mode [ 101.949281][ T9040] syzkaller0: entered allmulticast mode [ 102.210118][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2351'. [ 102.219573][ T9057] loop6: detected capacity change from 0 to 512 [ 102.242958][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2351'. [ 102.252065][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2351'. [ 102.264862][ T9057] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 102.287274][ T9057] ------------[ cut here ]------------ [ 102.292813][ T9057] EA inode 11 i_nlink=2 [ 102.292854][ T9057] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.6.2350/9057 [ 102.308079][ T9057] Modules linked in: [ 102.312007][ T9057] CPU: 0 UID: 0 PID: 9057 Comm: syz.6.2350 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.321808][ T9057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.331962][ T9057] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 102.338652][ T9057] Code: a4 ce 9b ff 4c 8d 2d 0d a7 3f 05 49 8d 7e 40 e8 54 85 b7 ff 49 8b 6e 40 4c 89 e7 e8 88 80 b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 6f c8 c5 03 66 66 66 66 66 66 2e [ 102.358362][ T9057] RSP: 0018:ffffc90000ebb778 EFLAGS: 00010246 [ 102.364473][ T9057] RAX: ffff888109ebdd10 RBX: ffff88811acab688 RCX: ffffffff81bc6a98 [ 102.372582][ T9057] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc1190 [ 102.380735][ T9057] RBP: 000000000000000b R08: 000188811acab63b R09: 0000000000000000 [ 102.388806][ T9057] R10: ffffc90000ebb6a8 R11: 0001c90000ebb6a8 R12: ffff88811acab638 [ 102.397032][ T9057] R13: ffffffff86fc1190 R14: ffff88811acab5f0 R15: 0000000000000001 [ 102.405122][ T9057] FS: 00007f2707a6d6c0(0000) GS:ffff8882aeb78000(0000) knlGS:0000000000000000 [ 102.414115][ T9057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.420826][ T9057] CR2: 00007fa730ae3000 CR3: 000000012efea000 CR4: 00000000003506f0 [ 102.428893][ T9057] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.436935][ T9057] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 102.445016][ T9057] Call Trace: [ 102.448358][ T9057] [ 102.451388][ T9057] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 102.457448][ T9057] ? errseq_check+0x2c/0x50 [ 102.462039][ T9057] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 102.467643][ T9057] ? ext4_truncate+0x92b/0xad0 [ 102.472542][ T9057] ext4_evict_inode+0xa1f/0xd40 [ 102.477524][ T9057] ? __pfx_ext4_evict_inode+0x10/0x10 [ 102.483107][ T9057] evict+0x2af/0x510 [ 102.487131][ T9057] ? __dquot_initialize+0x146/0x7c0 [ 102.492391][ T9057] iput+0x4b9/0x650 [ 102.496532][ T9057] ext4_process_orphan+0x1a9/0x1c0 [ 102.501754][ T9057] ext4_orphan_cleanup+0x6a8/0xa00 [ 102.507008][ T9057] ext4_fill_super+0x3476/0x3800 [ 102.511993][ T9057] ? set_blocksize+0x1a3/0x310 [ 102.516877][ T9057] ? setup_bdev_super+0x30e/0x370 [ 102.521944][ T9057] ? __pfx_ext4_fill_super+0x10/0x10 [ 102.527382][ T9057] get_tree_bdev_flags+0x291/0x300 [ 102.532610][ T9057] ? __pfx_ext4_fill_super+0x10/0x10 [ 102.537981][ T9057] get_tree_bdev+0x1f/0x30 [ 102.542464][ T9057] ext4_get_tree+0x1c/0x30 [ 102.546997][ T9057] vfs_get_tree+0x57/0x1d0 [ 102.551448][ T9057] do_new_mount+0x288/0x700 [ 102.556116][ T9057] path_mount+0x4c0/0xb90 [ 102.560475][ T9057] ? user_path_at+0xbf/0x130 [ 102.565121][ T9057] __se_sys_mount+0x28c/0x2e0 [ 102.569922][ T9057] __x64_sys_mount+0x67/0x80 [ 102.574551][ T9057] x64_sys_call+0x2cca/0x3000 [ 102.579366][ T9057] do_syscall_64+0xc0/0x2a0 [ 102.584014][ T9057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.590018][ T9057] RIP: 0033:0x7f27090fbf4a [ 102.594494][ T9057] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.614211][ T9057] RSP: 002b:00007f2707a6ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.622853][ T9057] RAX: ffffffffffffffda RBX: 00007f2707a6cee0 RCX: 00007f27090fbf4a [ 102.630945][ T9057] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f2707a6cea0 [ 102.638997][ T9057] RBP: 0000200000000180 R08: 00007f2707a6cee0 R09: 0000000000800718 [ 102.647074][ T9057] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 102.655118][ T9057] R13: 00007f2707a6cea0 R14: 000000000000047f R15: 0000200000000200 [ 102.663372][ T9057] [ 102.666529][ T9057] ---[ end trace 0000000000000000 ]--- [ 102.672427][ T9057] EXT4-fs (loop6): 1 orphan inode deleted [ 102.684820][ T9057] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.715535][ T9064] syzkaller0: entered promiscuous mode [ 102.721245][ T9064] syzkaller0: entered allmulticast mode [ 102.778679][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2356'. [ 102.787730][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2356'. [ 102.812826][ T7869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.147758][ T9116] syzkaller0: entered promiscuous mode [ 103.153393][ T9116] syzkaller0: entered allmulticast mode [ 103.209842][ T9120] netlink: 'syz.6.2362': attribute type 1 has an invalid length. [ 103.221874][ T9118] syzkaller1: entered allmulticast mode [ 103.226375][ T9120] netlink: 'syz.6.2362': attribute type 1 has an invalid length. [ 103.371198][ T9133] loop5: detected capacity change from 0 to 512 [ 103.401288][ T9133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.458557][ T9133] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.470876][ T9133] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.2376: corrupted inode contents [ 103.483229][ T9133] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #2: comm syz.5.2376: mark_inode_dirty error [ 103.494930][ T9133] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.2376: corrupted inode contents [ 103.507435][ T9133] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.2376: mark_inode_dirty error [ 103.623054][ T7673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.954181][ T9157] __nla_validate_parse: 8 callbacks suppressed [ 103.954216][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2385'. [ 104.148812][ T9187] loop5: detected capacity change from 0 to 512 [ 104.337750][ T9187] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2394: invalid indirect mapped block 4294967295 (level 1) [ 104.373494][ T9187] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2394: invalid indirect mapped block 4294967295 (level 1) [ 104.436354][ T9199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2398'. [ 104.540585][ T9187] EXT4-fs (loop5): 2 truncates cleaned up [ 104.606015][ T9187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.674193][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2400'. [ 104.692358][ T7673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.984795][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2405'. [ 105.054615][ T9239] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2412'. [ 105.068822][ T9240] syzkaller0: entered promiscuous mode [ 105.074357][ T9240] syzkaller0: entered allmulticast mode [ 105.101190][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2413'. [ 105.205607][ T9250] netlink: 'syz.5.2414': attribute type 1 has an invalid length. [ 105.213464][ T9250] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2414'. [ 105.223872][ T9251] netlink: 'syz.6.2415': attribute type 10 has an invalid length. [ 105.239066][ T9251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.257072][ T9250] netlink: 'syz.5.2414': attribute type 1 has an invalid length. [ 105.276805][ T9251] team0: Port device bond0 added [ 105.282411][ T9253] netlink: 'syz.6.2415': attribute type 3 has an invalid length. [ 105.609679][ T9274] netlink: 'syz.2.2423': attribute type 35 has an invalid length. [ 105.617658][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2423'. [ 105.659011][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 105.659031][ T29] audit: type=1400 audit(1768965849.713:427): avc: denied { getopt } for pid=9272 comm="syz.4.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.698962][ T9271] ip6gre1: entered promiscuous mode [ 105.704288][ T9271] ip6gre1: entered allmulticast mode [ 105.810839][ T9287] loop4: detected capacity change from 0 to 128 [ 105.824147][ T9287] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.842102][ T9287] ext4 filesystem being mounted at /488/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.848729][ T9278] syzkaller0: entered promiscuous mode [ 105.879619][ T9278] syzkaller0: entered allmulticast mode [ 106.168092][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'. [ 106.237531][ T29] audit: type=1326 audit(1768965850.293:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9302 comm="syz.1.2433" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a16eaacb9 code=0x0 [ 106.287248][ T9309] loop2: detected capacity change from 0 to 1024 [ 106.316129][ T29] audit: type=1400 audit(1768965850.343:429): avc: denied { bind } for pid=9310 comm="syz.6.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.335744][ T29] audit: type=1400 audit(1768965850.343:430): avc: denied { getopt } for pid=9310 comm="syz.6.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.355240][ T29] audit: type=1400 audit(1768965850.363:431): avc: denied { ioctl } for pid=9302 comm="syz.1.2433" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26884 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.382182][ T9309] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 106.390949][ T9309] System zones: 0-1, 3-36 [ 106.398445][ T9309] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2435: bad orphan inode 134217728 [ 106.409983][ T9309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.427622][ T9307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2435'. [ 106.615253][ T29] audit: type=1400 audit(1768965850.663:432): avc: denied { create } for pid=9323 comm="syz.6.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 106.641894][ T9324] loop6: detected capacity change from 0 to 1024 [ 106.649944][ T29] audit: type=1400 audit(1768965850.693:433): avc: denied { accept } for pid=9325 comm="syz.5.2441" lport=43398 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.672948][ T29] audit: type=1400 audit(1768965850.703:434): avc: denied { setopt } for pid=9325 comm="syz.5.2441" lport=43398 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 106.696692][ T29] audit: type=1400 audit(1768965850.703:435): avc: denied { getopt } for pid=9325 comm="syz.5.2441" lport=43398 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 106.722858][ T9324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 106.735103][ T9324] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.748334][ T9324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.872883][ T3328] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.054771][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.121692][ T29] audit: type=1400 audit(1768965851.173:436): avc: denied { setopt } for pid=9352 comm="syz.1.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 107.195894][ T7869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 107.298759][ T9369] loop2: detected capacity change from 0 to 512 [ 107.318719][ T9369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.345621][ T9369] ext4 filesystem being mounted at /540/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.368198][ T9373] netlink: 'syz.1.2451': attribute type 1 has an invalid length. [ 107.411635][ T9373] netlink: 'syz.1.2451': attribute type 1 has an invalid length. [ 107.454195][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.544060][ T9380] xfrm1: entered allmulticast mode [ 107.842568][ T9413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.872781][ T9413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.009145][ T9406] loop2: detected capacity change from 0 to 512 [ 108.031266][ T9406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.053290][ T9406] ext4 filesystem being mounted at /545/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.102864][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.341255][ T9422] loop4: detected capacity change from 0 to 8192 [ 108.359397][ T9422] FAT-fs (loop4): bogus sectors per cluster 254 [ 108.365816][ T9422] FAT-fs (loop4): Can't find a valid FAT filesystem [ 108.710231][ T9460] loop2: detected capacity change from 0 to 1024 [ 108.717537][ T9460] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.729652][ T9460] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2483: bad orphan inode 11 [ 108.741376][ T9460] EXT4-fs (loop2): Remounting filesystem read-only [ 108.748002][ T9460] ext4_test_bit(bit=10, block=4) = 1 [ 108.753332][ T9460] is_bad_inode(inode)=0 [ 108.757554][ T9460] NEXT_ORPHAN(inode)=3254779904 [ 108.762482][ T9460] max_ino=32 [ 108.765811][ T9460] i_nlink=0 [ 108.769519][ T9460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.784796][ T9460] EXT4-fs: Cannot change quota options when quota turned on [ 109.283788][ T9464] __nla_validate_parse: 4 callbacks suppressed [ 109.283810][ T9464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2484'. [ 109.299092][ T9464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2484'. [ 109.308111][ T9464] netlink: 'syz.5.2484': attribute type 4 has an invalid length. [ 109.340797][ T9472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.342755][ T9471] loop1: detected capacity change from 0 to 1024 [ 109.387467][ T9471] EXT4-fs: dax option not supported [ 109.425896][ T9472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.583748][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.151919][ T9548] loop5: detected capacity change from 0 to 4096 [ 110.162154][ T9548] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 110.174030][ T9548] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.187888][ T9548] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 110.203826][ T9548] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 110.213316][ T9548] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 110.275444][ T7673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.337611][ T9552] loop5: detected capacity change from 0 to 764 [ 110.344290][ T9552] iso9660: Unknown parameter '/dev/rtc#' [ 110.582934][ T9564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2508'. [ 110.804620][ T9574] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2511'. [ 110.817839][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2511'. [ 110.859008][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 110.859024][ T29] audit: type=1400 audit(1768965854.913:446): avc: denied { setattr } for pid=9591 comm="syz.4.2514" name="vcsa" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 110.950394][ T9599] loop4: detected capacity change from 0 to 128 [ 110.976736][ T9599] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 110.996079][ T9599] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.030528][ T29] audit: type=1400 audit(1768965855.083:447): avc: denied { setattr } for pid=9591 comm="syz.4.2514" path="/499/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.191524][ T4680] Process accounting resumed [ 111.200569][ T9599] netlink: 'syz.4.2514': attribute type 10 has an invalid length. [ 111.223525][ T9599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.237418][ T9599] team0: Port device bond0 added [ 111.248966][ T29] audit: type=1400 audit(1768965855.303:448): avc: denied { ioctl } for pid=9591 comm="syz.4.2514" path="/499/file1/file1" dev="loop4" ino=12 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.404050][ T9632] loop5: detected capacity change from 0 to 128 [ 111.483980][ T29] audit: type=1400 audit(1768965855.533:449): avc: denied { ioctl } for pid=9636 comm="syz.5.2527" path="socket:[27469]" dev="sockfs" ino=27469 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.527276][ T29] audit: type=1400 audit(1768965855.563:450): avc: denied { getopt } for pid=9636 comm="syz.5.2527" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.625912][ T29] audit: type=1400 audit(1768965855.673:451): avc: denied { create } for pid=9646 comm="syz.1.2531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 111.652560][ T29] audit: type=1400 audit(1768965855.703:452): avc: denied { mounton } for pid=9638 comm="syz.5.2529" path="/117/bus" dev="tmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.686454][ T9652] netlink: 'syz.6.2533': attribute type 4 has an invalid length. [ 111.694317][ T29] audit: type=1400 audit(1768965855.743:453): avc: denied { sys_admin } for pid=9646 comm="syz.1.2531" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 111.738291][ T9654] netlink: 'syz.6.2533': attribute type 4 has an invalid length. [ 111.747750][ T3328] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.794151][ T9658] loop4: detected capacity change from 0 to 1024 [ 111.802619][ T9658] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 111.810959][ T9658] System zones: 0-1, 3-36 [ 111.817048][ T9658] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2534: bad orphan inode 134217728 [ 111.828693][ T9658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.852362][ T9658] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.2534: corrupted in-inode xattr: bad e_name length [ 111.928452][ T29] audit: type=1400 audit(1768965855.983:454): avc: denied { read } for pid=9657 comm="syz.4.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.031551][ T9674] loop2: detected capacity change from 0 to 512 [ 112.042655][ T9674] EXT4-fs: Ignoring removed oldalloc option [ 112.070022][ T9674] EXT4-fs (loop2): 1 truncate cleaned up [ 112.077013][ T9674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.105751][ T29] audit: type=1400 audit(1768965856.153:455): avc: denied { setattr } for pid=9673 comm="syz.2.2536" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.128684][ T9679] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2537'. [ 112.137861][ T9679] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2537'. [ 112.187629][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.296619][ T9686] loop1: detected capacity change from 0 to 512 [ 112.304832][ T9686] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.317986][ T9686] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.346888][ T9686] EXT4-fs (loop1): 1 truncate cleaned up [ 112.353515][ T9686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.379100][ T9686] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.411524][ T9686] netlink: 'syz.1.2539': attribute type 4 has an invalid length. [ 112.440251][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.450201][ T9686] netlink: 'syz.1.2539': attribute type 1 has an invalid length. [ 112.510443][ T9692] loop5: detected capacity change from 0 to 1764 [ 112.522246][ T9692] iso9660: Bad value for 'uid' [ 112.527201][ T9692] iso9660: Bad value for 'uid' [ 112.646910][ T9724] SELinux: Context ÷ is not valid (left unmapped). [ 112.745752][ T9720] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2551'. [ 112.815114][ T9734] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 112.887480][ T9750] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2561'. [ 112.896820][ T9742] loop6: detected capacity change from 0 to 8192 [ 112.932375][ T9750] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9750 comm=syz.5.2561 [ 112.947470][ T9750] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.976181][ T9752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2562'. [ 113.030354][ T9756] netlink: 'syz.5.2564': attribute type 10 has an invalid length. [ 113.055288][ T9760] netlink: 'syz.6.2565': attribute type 1 has an invalid length. [ 113.076510][ T9760] bond1: (slave bridge0): making interface the new active one [ 113.084590][ T9760] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 113.111137][ T9760] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 113.347101][ T9792] usb usb8: usbfs: process 9792 (syz.6.2581) did not claim interface 0 before use [ 113.365248][ T9792] syzkaller1: entered promiscuous mode [ 113.371046][ T9792] syzkaller1: entered allmulticast mode [ 113.436882][ T9804] FAULT_INJECTION: forcing a failure. [ 113.436882][ T9804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.450033][ T9804] CPU: 0 UID: 0 PID: 9804 Comm: syz.1.2585 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 113.450082][ T9804] Tainted: [W]=WARN [ 113.450124][ T9804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.450201][ T9804] Call Trace: [ 113.450209][ T9804] [ 113.450217][ T9804] __dump_stack+0x1d/0x30 [ 113.450289][ T9804] dump_stack_lvl+0x95/0xd0 [ 113.450316][ T9804] dump_stack+0x15/0x1b [ 113.450342][ T9804] should_fail_ex+0x263/0x280 [ 113.450368][ T9804] should_fail+0xb/0x20 [ 113.450451][ T9804] should_fail_usercopy+0x1a/0x20 [ 113.450482][ T9804] _copy_from_user+0x1c/0xb0 [ 113.450514][ T9804] memdup_user+0x5e/0xd0 [ 113.450568][ T9804] strndup_user+0x68/0xb0 [ 113.450590][ T9804] __se_sys_mount+0x4d/0x2e0 [ 113.450616][ T9804] ? fput+0x8f/0xc0 [ 113.450672][ T9804] ? ksys_write+0x194/0x1a0 [ 113.450695][ T9804] __x64_sys_mount+0x67/0x80 [ 113.450715][ T9804] x64_sys_call+0x2cca/0x3000 [ 113.450739][ T9804] do_syscall_64+0xc0/0x2a0 [ 113.450788][ T9804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.450812][ T9804] RIP: 0033:0x7f6a16eaacb9 [ 113.450829][ T9804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.450885][ T9804] RSP: 002b:00007f6a15907028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 113.450905][ T9804] RAX: ffffffffffffffda RBX: 00007f6a17125fa0 RCX: 00007f6a16eaacb9 [ 113.450973][ T9804] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 113.450989][ T9804] RBP: 00007f6a15907090 R08: 0000200000000000 R09: 0000000000000000 [ 113.451005][ T9804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.451021][ T9804] R13: 00007f6a17126038 R14: 00007f6a17125fa0 R15: 00007ffcc1f958b8 [ 113.451042][ T9804] [ 113.682083][ T9806] loop5: detected capacity change from 0 to 128 [ 113.720103][ T9806] syz.5.2586: attempt to access beyond end of device [ 113.720103][ T9806] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 113.740659][ T9806] syz.5.2586: attempt to access beyond end of device [ 113.740659][ T9806] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 113.755499][ T9806] syz.5.2586: attempt to access beyond end of device [ 113.755499][ T9806] loop5: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 113.778815][ T9806] syz.5.2586: attempt to access beyond end of device [ 113.778815][ T9806] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 113.812425][ T9806] syz.5.2586: attempt to access beyond end of device [ 113.812425][ T9806] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 113.844294][ T9806] syz.5.2586: attempt to access beyond end of device [ 113.844294][ T9806] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 113.874263][ T9806] syz.5.2586: attempt to access beyond end of device [ 113.874263][ T9806] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 113.889484][ T9822] loop1: detected capacity change from 0 to 4096 [ 113.907528][ T9822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.922495][ T9806] syz.5.2586: attempt to access beyond end of device [ 113.922495][ T9806] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 113.936111][ T9806] syz.5.2586: attempt to access beyond end of device [ 113.936111][ T9806] loop5: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 113.974425][ T9822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.000118][ T9806] syz.5.2586: attempt to access beyond end of device [ 114.000118][ T9806] loop5: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 114.084913][ T9806] Buffer I/O error on dev loop5, logical block 305, async page read [ 114.093166][ T9806] Buffer I/O error on dev loop5, logical block 306, async page read [ 114.101566][ T9806] Buffer I/O error on dev loop5, logical block 307, async page read [ 114.110045][ T9806] Buffer I/O error on dev loop5, logical block 308, async page read [ 114.118817][ T9806] Buffer I/O error on dev loop5, logical block 309, async page read [ 114.126962][ T9806] Buffer I/O error on dev loop5, logical block 310, async page read [ 114.135028][ T9806] Buffer I/O error on dev loop5, logical block 311, async page read [ 114.143621][ T9806] Buffer I/O error on dev loop5, logical block 312, async page read [ 114.152096][ T9806] Buffer I/O error on dev loop5, logical block 305, async page read [ 114.160424][ T9806] Buffer I/O error on dev loop5, logical block 306, async page read [ 114.226686][ T9845] FAULT_INJECTION: forcing a failure. [ 114.226686][ T9845] name failslab, interval 1, probability 0, space 0, times 0 [ 114.239513][ T9845] CPU: 0 UID: 0 PID: 9845 Comm: syz.1.2599 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 114.239576][ T9845] Tainted: [W]=WARN [ 114.239585][ T9845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.239602][ T9845] Call Trace: [ 114.239610][ T9845] [ 114.239618][ T9845] __dump_stack+0x1d/0x30 [ 114.239723][ T9845] dump_stack_lvl+0x95/0xd0 [ 114.239745][ T9845] dump_stack+0x15/0x1b [ 114.239764][ T9845] should_fail_ex+0x263/0x280 [ 114.239799][ T9845] should_failslab+0x8c/0xb0 [ 114.239825][ T9845] __kmalloc_cache_noprof+0x64/0x4a0 [ 114.239849][ T9845] ? __se_sys_mount+0xef/0x2e0 [ 114.239868][ T9845] ? memdup_user+0x99/0xd0 [ 114.239934][ T9845] __se_sys_mount+0xef/0x2e0 [ 114.239960][ T9845] ? fput+0x8f/0xc0 [ 114.239985][ T9845] ? ksys_write+0x194/0x1a0 [ 114.240005][ T9845] __x64_sys_mount+0x67/0x80 [ 114.240032][ T9845] x64_sys_call+0x2cca/0x3000 [ 114.240082][ T9845] do_syscall_64+0xc0/0x2a0 [ 114.240104][ T9845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.240131][ T9845] RIP: 0033:0x7f6a16eaacb9 [ 114.240147][ T9845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.240239][ T9845] RSP: 002b:00007f6a15907028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.240282][ T9845] RAX: ffffffffffffffda RBX: 00007f6a17125fa0 RCX: 00007f6a16eaacb9 [ 114.240301][ T9845] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 114.240318][ T9845] RBP: 00007f6a15907090 R08: 0000200000000000 R09: 0000000000000000 [ 114.240336][ T9845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.240351][ T9845] R13: 00007f6a17126038 R14: 00007f6a17125fa0 R15: 00007ffcc1f958b8 [ 114.240373][ T9845] [ 114.438001][ T9850] loop1: detected capacity change from 0 to 512 [ 114.449836][ T9850] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 114.467223][ T9850] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 114.475446][ T9850] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.495790][ T9850] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 114.510406][ T9850] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 114.537402][ T9850] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.2600: invalid fast symlink length 9000 [ 114.550064][ T9850] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2600: couldn't read orphan inode 16 (err -117) [ 114.562699][ T9850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.586542][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.972170][ T9872] chnl_net:caif_netlink_parms(): no params data found [ 115.012735][ T9872] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.020415][ T9872] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.028102][ T9872] bridge_slave_0: entered allmulticast mode [ 115.034886][ T9872] bridge_slave_0: entered promiscuous mode [ 115.042415][ T9872] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.049602][ T9872] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.057178][ T9872] bridge_slave_1: entered allmulticast mode [ 115.070468][ T9872] bridge_slave_1: entered promiscuous mode [ 115.089689][ T9872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.100480][ T9872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.134172][ T9872] team0: Port device team_slave_0 added [ 115.141316][ T9872] team0: Port device team_slave_1 added [ 115.147698][ T9891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.172287][ T9872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.179410][ T9872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.205491][ T9872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.216884][ T9872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.223870][ T9872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.249896][ T9872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.261439][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.299507][ T9872] hsr_slave_0: entered promiscuous mode [ 115.306093][ T9872] hsr_slave_1: entered promiscuous mode [ 115.312051][ T9872] debugfs: 'hsr0' already exists in 'hsr' [ 115.317852][ T9872] Cannot create hsr debugfs directory [ 115.400741][ T9872] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.447443][ T9872] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.465232][ T9914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.488923][ T9910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=9910 comm=syz.6.2617 [ 115.502027][ T9910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=9910 comm=syz.6.2617 [ 115.516686][ T9872] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.553433][ T9921] __nla_validate_parse: 6 callbacks suppressed [ 115.553451][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2619'. [ 115.568779][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2619'. [ 115.578858][ T9872] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.650616][ T9872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.662329][ T9872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.671886][ T9872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.684849][ T9872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.718111][ T9872] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.725275][ T9872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.732670][ T9872] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.739818][ T9872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.752277][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.761693][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.828099][ T9942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4125 sclass=netlink_route_socket pid=9942 comm=syz.4.2626 [ 115.830369][ T9872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.854939][ T9942] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 115.881998][ T9872] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.891128][ T9945] futex_wake_op: syz.6.2627 tries to shift op by 32; fix this program [ 115.893211][ T9942] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 115.913498][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.920765][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.922593][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 115.922628][ T29] audit: type=1400 audit(1768965859.973:525): avc: denied { connect } for pid=9943 comm="syz.6.2627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.953169][ T9942] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: inode #32: comm syz.4.2626: iget: special inode unallocated [ 115.972869][ T9942] EXT4-fs (loop4): Remounting filesystem read-only [ 115.983074][ T9942] EXT4-fs (loop4): no journal found [ 115.988433][ T9942] EXT4-fs (loop4): can't get journal size [ 115.995326][ T9542] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.002560][ T9542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.010998][ T29] audit: type=1400 audit(1768965860.063:526): avc: denied { egress } for pid=4680 comm="kworker/0:9" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 116.040913][ T9942] EXT4-fs (loop4): filesystem is read-only [ 116.047867][ T29] audit: type=1400 audit(1768965860.063:527): avc: denied { sendto } for pid=4680 comm="kworker/0:9" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 116.058120][ T9872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.080586][ T9872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.086939][ T9942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 116.107331][ T9951] set_capacity_and_notify: 3 callbacks suppressed [ 116.107350][ T9951] loop5: detected capacity change from 0 to 1024 [ 116.131026][ T9951] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 116.139630][ T9951] System zones: 0-1, 3-36 [ 116.145019][ T9951] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2629: bad orphan inode 134217728 [ 116.164624][ T9951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.179614][ T9957] loop6: detected capacity change from 0 to 512 [ 116.194735][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.210800][ T9951] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.2629: corrupted in-inode xattr: bad e_name length [ 116.293742][ T9970] FAULT_INJECTION: forcing a failure. [ 116.293742][ T9970] name failslab, interval 1, probability 0, space 0, times 0 [ 116.307037][ T9970] CPU: 1 UID: 0 PID: 9970 Comm: syz.4.2634 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 116.307145][ T9970] Tainted: [W]=WARN [ 116.307153][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.307165][ T9970] Call Trace: [ 116.307171][ T9970] [ 116.307183][ T9970] __dump_stack+0x1d/0x30 [ 116.307211][ T9970] dump_stack_lvl+0x95/0xd0 [ 116.307238][ T9970] dump_stack+0x15/0x1b [ 116.307385][ T9970] should_fail_ex+0x263/0x280 [ 116.307412][ T9970] should_failslab+0x8c/0xb0 [ 116.307440][ T9970] kmem_cache_alloc_noprof+0x68/0x490 [ 116.307468][ T9970] ? getname_flags+0x7f/0x3b0 [ 116.307497][ T9970] ? should_fail_ex+0xd9/0x280 [ 116.307531][ T9970] getname_flags+0x7f/0x3b0 [ 116.307561][ T9970] user_path_at+0x28/0x130 [ 116.307642][ T9970] __se_sys_mount+0x25b/0x2e0 [ 116.307661][ T9970] ? fput+0x8f/0xc0 [ 116.307687][ T9970] __x64_sys_mount+0x67/0x80 [ 116.307748][ T9970] x64_sys_call+0x2cca/0x3000 [ 116.307789][ T9970] do_syscall_64+0xc0/0x2a0 [ 116.307816][ T9970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.307840][ T9970] RIP: 0033:0x7fa91a4dacb9 [ 116.307861][ T9970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.307883][ T9970] RSP: 002b:00007fa918f37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.308026][ T9970] RAX: ffffffffffffffda RBX: 00007fa91a755fa0 RCX: 00007fa91a4dacb9 [ 116.308045][ T9970] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 116.308062][ T9970] RBP: 00007fa918f37090 R08: 0000200000000000 R09: 0000000000000000 [ 116.308078][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.308090][ T9970] R13: 00007fa91a756038 R14: 00007fa91a755fa0 R15: 00007ffe031da6d8 [ 116.308109][ T9970] [ 116.514981][ T9872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.523948][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.565383][ T29] audit: type=1400 audit(1768965860.613:528): avc: denied { write } for pid=9975 comm="syz.2.2635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 116.565947][ T9976] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2635'. [ 116.686314][ T9979] syzkaller1: entered promiscuous mode [ 116.691873][ T9979] syzkaller1: entered allmulticast mode [ 116.770134][ T9872] veth0_vlan: entered promiscuous mode [ 116.792350][ T9872] veth1_vlan: entered promiscuous mode [ 116.836639][ T9872] veth0_macvtap: entered promiscuous mode [ 116.861897][ T9872] veth1_macvtap: entered promiscuous mode [ 116.886676][ T29] audit: type=1400 audit(1768965860.943:529): avc: denied { execute } for pid=9996 comm="syz.6.2644" name="file0" dev="tmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.886898][ T9997] process 'syz.6.2644' launched './file0' with NULL argv: empty string added [ 116.929956][ T9872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.943191][ T29] audit: type=1400 audit(1768965860.993:530): avc: denied { execute_no_trans } for pid=9996 comm="syz.6.2644" path="/143/file0" dev="tmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.967689][ T7673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.979344][ T9872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.001576][ T9524] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.018906][ T9524] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.048852][ T9524] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.081477][ T9524] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.095016][ T29] audit: type=1400 audit(1768965861.133:531): avc: denied { mounton } for pid=9872 comm="syz-executor" path="/root/syzkaller.7GVvqY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 117.130711][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2647'. [ 117.153688][T10017] veth0_macvtap: left promiscuous mode [ 117.290511][ T29] audit: type=1400 audit(1768965861.343:532): avc: denied { create } for pid=10039 comm="syz.5.2653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 117.337556][T10043] loop1: detected capacity change from 0 to 1024 [ 117.399065][T10043] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 117.407958][T10055] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 2, id = 0 [ 117.427946][T10051] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 117.448457][ T29] audit: type=1400 audit(1768965861.403:533): avc: denied { mount } for pid=10045 comm="syz.2.2654" name="/" dev="hugetlbfs" ino=28502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 117.471682][ T29] audit: type=1400 audit(1768965861.483:534): avc: denied { write } for pid=10050 comm="syz.5.2655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.503392][T10043] System zones: 0-1, 3-36 [ 117.512987][T10051] loop5: detected capacity change from 0 to 512 [ 117.526015][T10043] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2652: bad orphan inode 134217728 [ 117.541756][T10043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.555038][T10051] EXT4-fs: Ignoring removed i_version option [ 117.561119][T10051] EXT4-fs: Ignoring removed nobh option [ 117.580519][T10051] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.621655][T10051] EXT4-fs (loop5): 1 truncate cleaned up [ 117.634441][T10051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.646868][T10043] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.2652: corrupted in-inode xattr: bad e_name length [ 117.694975][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2655'. [ 117.704625][T10080] FAULT_INJECTION: forcing a failure. [ 117.704625][T10080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.704744][T10080] CPU: 1 UID: 0 PID: 10080 Comm: syz.2.2661 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 117.704773][T10080] Tainted: [W]=WARN [ 117.704782][T10080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.704797][T10080] Call Trace: [ 117.704805][T10080] [ 117.704856][T10080] __dump_stack+0x1d/0x30 [ 117.704886][T10080] dump_stack_lvl+0x95/0xd0 [ 117.704923][T10080] dump_stack+0x15/0x1b [ 117.704957][T10080] should_fail_ex+0x263/0x280 [ 117.704981][T10080] should_fail+0xb/0x20 [ 117.705000][T10080] should_fail_usercopy+0x1a/0x20 [ 117.705030][T10080] _copy_from_user+0x1c/0xb0 [ 117.705066][T10080] ___sys_sendmsg+0xc1/0x1e0 [ 117.705183][T10080] __x64_sys_sendmsg+0xd4/0x160 [ 117.705218][T10080] x64_sys_call+0x17ba/0x3000 [ 117.705250][T10080] do_syscall_64+0xc0/0x2a0 [ 117.705278][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.705338][T10080] RIP: 0033:0x7fddb0e3acb9 [ 117.705417][T10080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.705448][T10080] RSP: 002b:00007fddaf897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.705474][T10080] RAX: ffffffffffffffda RBX: 00007fddb10b5fa0 RCX: 00007fddb0e3acb9 [ 117.705491][T10080] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 117.705506][T10080] RBP: 00007fddaf897090 R08: 0000000000000000 R09: 0000000000000000 [ 117.705518][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.705530][T10080] R13: 00007fddb10b6038 R14: 00007fddb10b5fa0 R15: 00007ffd237205a8 [ 117.705554][T10080] [ 117.754222][T10082] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 117.828892][ T7673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.856919][T10087] FAULT_INJECTION: forcing a failure. [ 117.856919][T10087] name failslab, interval 1, probability 0, space 0, times 0 [ 117.856954][T10087] CPU: 1 UID: 0 PID: 10087 Comm: syz.2.2665 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 117.856984][T10087] Tainted: [W]=WARN [ 117.857095][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.857152][T10087] Call Trace: [ 117.857166][T10087] [ 117.857181][T10087] __dump_stack+0x1d/0x30 [ 117.857268][T10087] dump_stack_lvl+0x95/0xd0 [ 117.857335][T10087] dump_stack+0x15/0x1b [ 117.857430][T10087] should_fail_ex+0x263/0x280 [ 117.857505][T10087] should_failslab+0x8c/0xb0 [ 117.857578][T10087] __kmalloc_cache_noprof+0x64/0x4a0 [ 117.857670][T10087] ? alloc_fs_context+0x46/0x590 [ 117.857808][T10087] alloc_fs_context+0x46/0x590 [ 117.857892][T10087] fs_context_for_mount+0x22/0x30 [ 117.857957][T10087] do_new_mount+0xea/0x700 [ 117.858049][T10087] ? security_capable+0x7b/0x90 [ 117.858172][T10087] path_mount+0x4c0/0xb90 [ 117.858234][T10087] ? user_path_at+0xbf/0x130 [ 117.858334][T10087] __se_sys_mount+0x28c/0x2e0 [ 117.858353][T10087] ? fput+0x8f/0xc0 [ 117.858440][T10087] __x64_sys_mount+0x67/0x80 [ 117.858560][T10087] x64_sys_call+0x2cca/0x3000 [ 117.858721][T10087] do_syscall_64+0xc0/0x2a0 [ 117.858795][T10087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.858877][T10087] RIP: 0033:0x7fddb0e3acb9 [ 117.858929][T10087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.859034][T10087] RSP: 002b:00007fddaf897028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.859091][T10087] RAX: ffffffffffffffda RBX: 00007fddb10b5fa0 RCX: 00007fddb0e3acb9 [ 117.859135][T10087] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 117.859179][T10087] RBP: 00007fddaf897090 R08: 0000200000000000 R09: 0000000000000000 [ 117.859220][T10087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.859254][T10087] R13: 00007fddb10b6038 R14: 00007fddb10b5fa0 R15: 00007ffd237205a8 [ 117.859370][T10087] [ 118.027394][T10105] loop4: detected capacity change from 0 to 512 [ 118.038152][T10102] loop5: detected capacity change from 0 to 128 [ 118.046864][T10102] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 118.047276][T10102] System zones: 1-3, 19-19, 35-36 [ 118.047888][T10102] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.048173][T10102] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.069378][T10105] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #4: comm syz.4.2670: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 3, max 516(4), depth 0(0) [ 118.405593][T10105] EXT4-fs error (device loop4): ext4_quota_enable:7180: comm syz.4.2670: Bad quota inode: 4, type: 1 [ 118.407322][T10105] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.408235][T10105] EXT4-fs (loop4): mount failed [ 118.490194][ T7673] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.525438][ T9872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.552003][T10126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2675'. [ 118.623736][ T9540] tipc: Subscription rejected, illegal request [ 118.648689][T10135] netlink: 'syz.1.2678': attribute type 1 has an invalid length. [ 118.664985][T10133] SELinux: failed to load policy [ 118.711960][T10137] syzkaller0: entered allmulticast mode [ 118.719373][T10137] syzkaller0: entered promiscuous mode [ 118.727926][T10137] syzkaller0 (unregistering): left allmulticast mode [ 118.734689][T10137] syzkaller0 (unregistering): left promiscuous mode [ 118.740655][T10143] FAULT_INJECTION: forcing a failure. [ 118.740655][T10143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.754702][T10143] CPU: 0 UID: 0 PID: 10143 Comm: syz.5.2682 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 118.754730][T10143] Tainted: [W]=WARN [ 118.754736][T10143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.754748][T10143] Call Trace: [ 118.754784][T10143] [ 118.754793][T10143] __dump_stack+0x1d/0x30 [ 118.754815][T10143] dump_stack_lvl+0x95/0xd0 [ 118.754834][T10143] dump_stack+0x15/0x1b [ 118.754852][T10143] should_fail_ex+0x263/0x280 [ 118.754930][T10143] should_fail+0xb/0x20 [ 118.755001][T10143] should_fail_usercopy+0x1a/0x20 [ 118.755023][T10143] _copy_to_user+0x20/0xa0 [ 118.755049][T10143] simple_read_from_buffer+0xb5/0x130 [ 118.755152][T10143] proc_fail_nth_read+0x10e/0x150 [ 118.755178][T10143] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.755202][T10143] vfs_read+0x1ab/0x7f0 [ 118.755231][T10143] ? __rcu_read_unlock+0x4e/0x70 [ 118.755325][T10143] ? __fget_files+0x184/0x1c0 [ 118.755343][T10143] ? mutex_lock+0x57/0x90 [ 118.755368][T10143] ksys_read+0xdc/0x1a0 [ 118.755424][T10143] __x64_sys_read+0x40/0x50 [ 118.755440][T10143] x64_sys_call+0x2889/0x3000 [ 118.755539][T10143] do_syscall_64+0xc0/0x2a0 [ 118.755557][T10143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.755576][T10143] RIP: 0033:0x7f21d6eeb58e [ 118.755660][T10143] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 118.755681][T10143] RSP: 002b:00007f21d5986fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.755704][T10143] RAX: ffffffffffffffda RBX: 00007f21d59876c0 RCX: 00007f21d6eeb58e [ 118.755721][T10143] RDX: 000000000000000f RSI: 00007f21d59870a0 RDI: 0000000000000003 [ 118.755778][T10143] RBP: 00007f21d5987090 R08: 0000000000000000 R09: 0000000000000000 [ 118.755799][T10143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.755810][T10143] R13: 00007f21d71a6038 R14: 00007f21d71a5fa0 R15: 00007fff7db18418 [ 118.755828][T10143] [ 119.010521][T10149] bond0: entered promiscuous mode [ 119.018174][T10149] batadv0: entered promiscuous mode [ 119.023973][T10149] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 119.033861][T10149] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 119.044391][T10149] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 119.053795][T10149] bond0: left promiscuous mode [ 119.060463][T10149] batadv0: left promiscuous mode [ 119.082428][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2685'. [ 119.091421][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2685'. [ 119.105465][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2685'. [ 119.105776][ T9524] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.114483][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2685'. [ 119.124720][ T9524] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.140342][ T9524] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.148648][ T9524] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.180842][T10158] loop1: detected capacity change from 0 to 128 [ 119.202775][T10160] loop5: detected capacity change from 0 to 1024 [ 119.217796][T10160] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 119.231445][T10160] System zones: 0-1, 3-36 [ 119.241425][T10162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10162 comm=syz.1.2688 [ 119.254859][T10160] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2687: bad orphan inode 134217728 [ 119.267202][T10160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.341284][T10167] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.2687: corrupted in-inode xattr: bad e_name length [ 119.536912][ T7673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.948688][T10179] chnl_net:caif_netlink_parms(): no params data found [ 120.032022][T10179] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.039260][T10179] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.051288][T10179] bridge_slave_0: entered allmulticast mode [ 120.063847][T10179] bridge_slave_0: entered promiscuous mode [ 120.071532][T10179] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.071579][T10179] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.071732][T10179] bridge_slave_1: entered allmulticast mode [ 120.072405][T10179] bridge_slave_1: entered promiscuous mode [ 120.094954][T10179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.096529][T10179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.116945][T10179] team0: Port device team_slave_0 added [ 120.124612][T10179] team0: Port device team_slave_1 added [ 120.154010][T10179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.154029][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.154065][T10179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.154655][T10179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.154740][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.154766][T10179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.192257][T10179] hsr_slave_0: entered promiscuous mode [ 120.192929][T10179] hsr_slave_1: entered promiscuous mode [ 120.193412][T10179] debugfs: 'hsr0' already exists in 'hsr' [ 120.193430][T10179] Cannot create hsr debugfs directory [ 120.340840][T10179] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.340934][T10179] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.387370][T10179] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.387495][T10179] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.437584][T10179] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.437697][T10179] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.487740][T10179] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.497745][T10179] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.540490][T10228] loop6: detected capacity change from 0 to 2048 [ 120.564801][T10179] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.574205][T10179] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.584413][T10179] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.586888][ T3311] loop6: p1 < > p3 [ 120.596368][ T3311] loop6: p3 size 134217728 extends beyond EOD, truncated [ 120.604927][T10179] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.614221][T10228] loop6: p1 < > p3 [ 120.619394][T10228] loop6: p3 size 134217728 extends beyond EOD, truncated [ 120.672049][T10179] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.679200][T10179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.686603][T10179] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.693721][T10179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.728841][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 120.740186][T10240] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 120.747319][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 120.780958][T10240] __nla_validate_parse: 2 callbacks suppressed [ 120.781004][T10240] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2711'. [ 120.840434][T10239] syzkaller0: entered promiscuous mode [ 120.846048][T10239] syzkaller0: entered allmulticast mode [ 120.854960][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.864706][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.934972][T10179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.952805][T10179] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.988206][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.995427][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.019286][T10252] FAULT_INJECTION: forcing a failure. [ 121.019286][T10252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.032501][T10252] CPU: 0 UID: 0 PID: 10252 Comm: syz.4.2716 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 121.032549][T10252] Tainted: [W]=WARN [ 121.032559][T10252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.032581][T10252] Call Trace: [ 121.032643][T10252] [ 121.032653][T10252] __dump_stack+0x1d/0x30 [ 121.032721][T10252] dump_stack_lvl+0x95/0xd0 [ 121.032749][T10252] dump_stack+0x15/0x1b [ 121.032774][T10252] should_fail_ex+0x263/0x280 [ 121.032893][T10252] should_fail+0xb/0x20 [ 121.032919][T10252] should_fail_usercopy+0x1a/0x20 [ 121.032951][T10252] _copy_to_user+0x20/0xa0 [ 121.032987][T10252] simple_read_from_buffer+0xb5/0x130 [ 121.033062][T10252] proc_fail_nth_read+0x10e/0x150 [ 121.033166][T10252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.033258][T10252] vfs_read+0x1ab/0x7f0 [ 121.033299][T10252] ? __rcu_read_unlock+0x4e/0x70 [ 121.033324][T10252] ? __fget_files+0x184/0x1c0 [ 121.033404][T10252] ? mutex_lock+0x57/0x90 [ 121.033517][T10252] ksys_read+0xdc/0x1a0 [ 121.033548][T10252] __x64_sys_read+0x40/0x50 [ 121.033572][T10252] x64_sys_call+0x2889/0x3000 [ 121.033669][T10252] do_syscall_64+0xc0/0x2a0 [ 121.033696][T10252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.033724][T10252] RIP: 0033:0x7fa91a49b58e [ 121.033789][T10252] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.033817][T10252] RSP: 002b:00007fa918f36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.033847][T10252] RAX: ffffffffffffffda RBX: 00007fa918f376c0 RCX: 00007fa91a49b58e [ 121.033865][T10252] RDX: 000000000000000f RSI: 00007fa918f370a0 RDI: 0000000000000003 [ 121.033882][T10252] RBP: 00007fa918f37090 R08: 0000000000000000 R09: 0000000000000000 [ 121.033912][T10252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.033928][T10252] R13: 00007fa91a756038 R14: 00007fa91a755fa0 R15: 00007ffe031da6d8 [ 121.033954][T10252] [ 121.089881][T10256] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2718'. [ 121.124905][T10179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.252645][T10179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.264388][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 121.264405][ T29] audit: type=1400 audit(1768965865.323:746): avc: denied { connect } for pid=10253 comm="syz.6.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.293114][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.300231][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.343093][ T29] audit: type=1400 audit(1768965865.393:747): avc: denied { bind } for pid=10253 comm="syz.6.2717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.412542][T10179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.453701][T10273] loop6: detected capacity change from 0 to 1024 [ 121.474542][T10273] EXT4-fs: inline encryption not supported [ 121.506047][T10273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.538369][ T29] audit: type=1400 audit(1768965865.583:748): avc: denied { remove_name } for pid=10253 comm="syz.6.2717" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.541926][T10179] veth0_vlan: entered promiscuous mode [ 121.561250][ T29] audit: type=1400 audit(1768965865.583:749): avc: denied { rename } for pid=10253 comm="syz.6.2717" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.573821][T10179] veth1_vlan: entered promiscuous mode [ 121.589644][ T29] audit: type=1400 audit(1768965865.583:750): avc: denied { unlink } for pid=10253 comm="syz.6.2717" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.612678][T10179] veth0_macvtap: entered promiscuous mode [ 121.625024][T10179] veth1_macvtap: entered promiscuous mode [ 121.637973][T10179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.647357][T10179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.673234][ T7869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.685545][ T9528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.694565][ T9528] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.716907][ T9532] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.726709][ T9532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.736403][ T29] audit: type=1400 audit(1768965865.793:751): avc: denied { mount } for pid=10179 comm="syz-executor" name="/" dev="gadgetfs" ino=3646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 121.842215][T10290] loop6: detected capacity change from 0 to 128 [ 121.851508][T10290] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 121.869857][T10290] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 121.882774][T10290] syzkaller1: linktype set to 6 [ 121.891723][T10290] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2724'. [ 121.917571][T10293] loop2: detected capacity change from 0 to 512 [ 121.922150][ T29] audit: type=1400 audit(1768965865.973:752): avc: denied { mounton } for pid=10289 comm="syz.6.2724" path="mnt:[4026532381]" dev="nsfs" ino=4026532381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 121.953943][T10293] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.956594][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2724'. [ 122.002041][T10293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.015435][T10293] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.106146][T10179] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.222293][T10304] loop4: detected capacity change from 0 to 256 [ 122.269483][T10306] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 122.279736][T10306] FAT-fs (loop4): Filesystem has been set read-only [ 122.289707][T10305] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 122.304184][T10305] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 122.316185][T10305] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 122.387616][T10315] FAULT_INJECTION: forcing a failure. [ 122.387616][T10315] name failslab, interval 1, probability 0, space 0, times 0 [ 122.400639][T10315] CPU: 0 UID: 0 PID: 10315 Comm: syz.4.2730 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 122.400709][T10315] Tainted: [W]=WARN [ 122.400719][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.400736][T10315] Call Trace: [ 122.400743][T10315] [ 122.400752][T10315] __dump_stack+0x1d/0x30 [ 122.400786][T10315] dump_stack_lvl+0x95/0xd0 [ 122.400814][T10315] dump_stack+0x15/0x1b [ 122.400841][T10315] should_fail_ex+0x263/0x280 [ 122.400879][T10315] should_failslab+0x8c/0xb0 [ 122.400908][T10315] __kmalloc_noprof+0xb8/0x580 [ 122.400938][T10315] ? nla_strdup+0x78/0xc0 [ 122.401034][T10315] nla_strdup+0x78/0xc0 [ 122.401067][T10315] nf_tables_newtable+0x3ba/0xea0 [ 122.401101][T10315] nfnetlink_rcv+0xc1e/0x1720 [ 122.401224][T10315] netlink_unicast+0x5c0/0x690 [ 122.401337][T10315] netlink_sendmsg+0x5c8/0x6f0 [ 122.401368][T10315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.401393][T10315] __sock_sendmsg+0x145/0x170 [ 122.401503][T10315] ____sys_sendmsg+0x31e/0x4a0 [ 122.401628][T10315] ___sys_sendmsg+0x195/0x1e0 [ 122.401680][T10315] __x64_sys_sendmsg+0xd4/0x160 [ 122.401724][T10315] x64_sys_call+0x17ba/0x3000 [ 122.401751][T10315] do_syscall_64+0xc0/0x2a0 [ 122.401847][T10315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.401875][T10315] RIP: 0033:0x7fa91a4dacb9 [ 122.401896][T10315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.401919][T10315] RSP: 002b:00007fa918f37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.401945][T10315] RAX: ffffffffffffffda RBX: 00007fa91a755fa0 RCX: 00007fa91a4dacb9 [ 122.401969][T10315] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 122.402064][T10315] RBP: 00007fa918f37090 R08: 0000000000000000 R09: 0000000000000000 [ 122.402081][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.402097][T10315] R13: 00007fa91a756038 R14: 00007fa91a755fa0 R15: 00007ffe031da6d8 [ 122.402123][T10315] [ 123.048757][T10326] sd 0:0:1:0: device reset [ 123.100613][ T29] audit: type=1400 audit(1768965867.153:753): avc: denied { setopt } for pid=10324 comm="syz.2.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 123.129600][T10329] loop4: detected capacity change from 0 to 512 [ 123.165944][ T29] audit: type=1400 audit(1768965867.203:754): avc: denied { listen } for pid=10331 comm="syz.5.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.207088][T10329] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.259389][T10329] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.303832][T10340] loop1: detected capacity change from 0 to 8192 [ 123.337595][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.444240][T10340] loop1: detected capacity change from 0 to 512 [ 123.470749][T10340] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.486392][T10351] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2742'. [ 123.499449][T10351] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2742'. [ 123.528403][T10351] loop4: detected capacity change from 0 to 1764 [ 123.640110][T10360] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2744'. [ 123.658542][T10362] loop1: detected capacity change from 0 to 128 [ 123.666898][T10362] vfat: Unknown parameter 'sh' [ 123.691618][T10364] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2747'. [ 123.823046][T10381] loop6: detected capacity change from 0 to 1024 [ 123.877445][T10381] EXT4-fs: inline encryption not supported [ 123.883361][T10381] EXT4-fs: Ignoring removed orlov option [ 123.892105][T10379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.904441][T10381] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 123.917504][T10383] pim6reg1: entered promiscuous mode [ 123.922864][T10383] pim6reg1: entered allmulticast mode [ 123.928777][T10381] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 123.942449][T10381] System zones: 0-1, 3-12 [ 123.951972][T10381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.977253][T10379] bond1: option lp_interval: invalid value (0) [ 123.983598][T10379] bond1: option lp_interval: allowed values 1 - 2147483647 [ 124.000205][ T29] audit: type=1400 audit(1768965868.053:755): avc: denied { read write } for pid=10380 comm="syz.6.2753" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.027798][T10379] bond1 (unregistering): Released all slaves [ 124.089839][T10383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.122615][T10398] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 124.132219][ T7869] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.195820][T10383] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.242581][T10404] EXT4-fs: Ignoring removed nobh option [ 124.248582][T10404] EXT4-fs: Ignoring removed bh option [ 124.362298][T10404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.591067][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2756'. [ 124.702695][T10179] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.713428][ T9872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.761204][ T7673] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.824592][T10416] x_tables: duplicate underflow at hook 2 [ 124.832456][ T23] IPVS: starting estimator thread 0... [ 124.917858][T10428] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.930114][T10421] IPVS: using max 2112 ests per chain, 105600 per kthread [ 125.026131][T10412] netlink: 5164 bytes leftover after parsing attributes in process `syz.4.2759'. [ 125.266974][T10442] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 125.291419][T10442] System zones: 0-1, 3-36 [ 125.299227][T10442] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2770: bad orphan inode 134217728 [ 125.323084][T10442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.342401][T10442] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.2770: corrupted in-inode xattr: bad e_name length [ 125.533409][T10179] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.620552][T10468] EXT4-fs: Ignoring removed bh option [ 125.693153][T10468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.815473][T10481] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 125.840347][T10478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.861566][T10481] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 125.880373][T10486] SET target dimension over the limit! [ 125.890805][T10486] xt_hashlimit: size too large, truncated to 1048576 [ 126.194436][T10508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.226044][T10511] __nla_validate_parse: 2 callbacks suppressed [ 126.226064][T10511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2793'. [ 126.248835][T10508] ext4 filesystem being mounted at /545/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.266572][T10514] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.2795: ea_inode file size=4 entry size=6 [ 126.296217][T10514] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2795: corrupted inode contents [ 126.308655][T10514] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.2795: mark_inode_dirty error [ 126.320961][T10514] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.2795: corrupted inode contents [ 126.333451][T10514] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.2795: mark_inode_dirty error [ 126.345979][T10514] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.2795: mark inode dirty (error -117) [ 126.358938][T10514] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 126.368385][T10514] EXT4-fs (loop1): 1 orphan inode deleted [ 126.390890][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2795'. [ 126.400103][T10514] chnl_net:caif_netlink_parms(): no params data found [ 126.560342][T10533] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.567574][T10533] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.585409][T10534] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.597901][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2799'. [ 126.633613][T10533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.644911][T10533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.731824][T10540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.747907][ T62] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.761957][ T62] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.781683][ T62] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.803673][ T62] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.824009][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 126.824029][ T29] audit: type=1400 audit(1768965870.873:777): avc: denied { read append } for pid=10548 comm="syz.5.2805" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 126.853996][ T29] audit: type=1400 audit(1768965870.873:778): avc: denied { open } for pid=10548 comm="syz.5.2805" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 126.966271][T10555] netlink: 'syz.2.2804': attribute type 1 has an invalid length. [ 126.974130][T10555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2804'. [ 126.983514][T10555] netlink: 'syz.2.2804': attribute type 1 has an invalid length. [ 126.985237][T10554] set_capacity_and_notify: 9 callbacks suppressed [ 126.985273][T10554] loop5: detected capacity change from 0 to 512 [ 127.029570][T10554] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.038486][T10554] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.094088][T10554] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2806: Allocating blocks 41-42 which overlap fs metadata [ 127.124124][T10562] loop6: detected capacity change from 0 to 1024 [ 127.144769][T10554] Quota error (device loop5): write_blk: dquota write failed [ 127.152245][T10554] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 127.164968][T10564] loop1: detected capacity change from 0 to 512 [ 127.186017][T10564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.196474][T10554] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 127.206815][T10554] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2806: Failed to acquire dquot type 1 [ 127.218822][T10554] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 127.228986][T10562] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 127.235901][T10554] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2806: corrupted inode contents [ 127.248639][T10564] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.261257][T10562] System zones: 0-1, 3-36 [ 127.270584][T10554] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.2806: mark_inode_dirty error [ 127.283044][T10554] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2806: corrupted inode contents [ 127.296727][T10554] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.2806: mark_inode_dirty error [ 127.313645][T10562] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2808: bad orphan inode 134217728 [ 127.331240][T10554] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2806: corrupted inode contents [ 127.331426][T10554] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 127.331557][T10554] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2806: corrupted inode contents [ 127.331701][T10554] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.2806: mark_inode_dirty error [ 127.331881][T10554] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 127.332195][T10554] EXT4-fs (loop5): 1 truncate cleaned up [ 127.367436][T10554] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 127.448911][T10554] syz.5.2806 (10554) used greatest stack depth: 9968 bytes left [ 127.465118][T10562] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.2808: corrupted in-inode xattr: bad e_name length [ 127.567803][ T29] audit: type=1400 audit(1768965871.623:779): avc: denied { setattr } for pid=10570 comm="syz.5.2810" name="/" dev="configfs" ino=2125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.591609][T10571] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 127.602532][T10571] SELinux: failed to load policy [ 127.634065][T10571] bond1: option lacp_rate: invalid value (32) [ 127.641872][T10571] bond1 (unregistering): Released all slaves [ 127.709977][T10580] loop4: detected capacity change from 0 to 512 [ 127.732432][ T29] audit: type=1400 audit(1768965871.783:780): avc: denied { read } for pid=10579 comm="syz.4.2812" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 127.901383][T10589] loop5: detected capacity change from 0 to 128 [ 127.911240][ T29] audit: type=1400 audit(1768965871.963:781): avc: denied { connect } for pid=10591 comm="syz.6.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 127.961208][ T29] audit: type=1400 audit(1768965872.013:782): avc: denied { map } for pid=10579 comm="syz.4.2812" path="/549/file0/cpu.stat" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 127.984292][ T29] audit: type=1400 audit(1768965872.013:783): avc: denied { execute } for pid=10579 comm="syz.4.2812" path="/549/file0/cpu.stat" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 128.009932][T10594] loop1: detected capacity change from 0 to 1024 [ 128.041984][T10596] loop6: detected capacity change from 0 to 512 [ 128.050638][T10596] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 128.064711][T10596] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2818'. [ 128.105413][T10596] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 128.111843][T10596] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 128.160997][T10605] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 128.173922][T10605] batman_adv: batadv0: Adding interface: gretap1 [ 128.180451][T10605] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.207037][T10605] batman_adv: batadv0: Interface activated: gretap1 [ 128.378825][T10621] loop5: detected capacity change from 0 to 1024 [ 128.378892][T10620] loop6: detected capacity change from 0 to 512 [ 128.409923][T10620] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.450012][T10621] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 128.468380][T10620] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.491625][T10621] System zones: 0-1, 3-36 [ 128.497063][T10621] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2825: bad orphan inode 134217728 [ 128.537480][T10621] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.2825: corrupted in-inode xattr: bad e_name length [ 128.554063][T10624] loop4: detected capacity change from 0 to 8192 [ 128.859654][T10638] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.866616][T10638] EXT4-fs: Ignoring removed nobh option [ 128.884839][T10638] EXT4-fs: Mount option(s) incompatible with ext3 [ 128.953872][T10641] netlink: 'syz.1.2832': attribute type 58 has an invalid length. [ 128.961923][T10641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2832'. [ 129.205281][T10645] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 129.278110][T10650] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.2836: missing EA_INODE flag [ 129.346655][T10650] EXT4-fs (loop2): Remounting filesystem read-only [ 129.448432][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2835'. [ 129.458406][T10649] bridge_slave_1: left allmulticast mode [ 129.464087][T10649] bridge_slave_1: left promiscuous mode [ 129.469911][T10649] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.517499][T10649] bridge_slave_0: left allmulticast mode [ 129.523437][T10649] bridge_slave_0: left promiscuous mode [ 129.529227][T10649] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.616431][T10662] FAULT_INJECTION: forcing a failure. [ 129.616431][T10662] name failslab, interval 1, probability 0, space 0, times 0 [ 129.629287][T10662] CPU: 1 UID: 0 PID: 10662 Comm: syz.2.2840 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 129.629389][T10662] Tainted: [W]=WARN [ 129.629398][T10662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.629414][T10662] Call Trace: [ 129.629425][T10662] [ 129.629435][T10662] __dump_stack+0x1d/0x30 [ 129.629532][T10662] dump_stack_lvl+0x95/0xd0 [ 129.629561][T10662] dump_stack+0x15/0x1b [ 129.629587][T10662] should_fail_ex+0x263/0x280 [ 129.629658][T10662] should_failslab+0x8c/0xb0 [ 129.629687][T10662] __kvmalloc_node_noprof+0x148/0x680 [ 129.629718][T10662] ? alloc_netdev_mqs+0xa5/0xa40 [ 129.629789][T10662] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 129.629821][T10662] alloc_netdev_mqs+0xa5/0xa40 [ 129.629863][T10662] ipip6_tunnel_locate+0x308/0x4c0 [ 129.629899][T10662] ? selinux_capable+0x31/0x40 [ 129.629937][T10662] ipip6_tunnel_ctl+0x865/0xc40 [ 129.629974][T10662] ip_tunnel_siocdevprivate+0x77/0xe0 [ 129.630006][T10662] ipip6_tunnel_siocdevprivate+0x1da/0xe20 [ 129.630051][T10662] ? full_name_hash+0x92/0xe0 [ 129.630080][T10662] ? strcmp+0x22/0x50 [ 129.630105][T10662] ? netdev_name_node_lookup+0xa4/0xd0 [ 129.630179][T10662] dev_ifsioc+0x8f8/0xaa0 [ 129.630207][T10662] dev_ioctl+0x78c/0x960 [ 129.630253][T10662] sock_ioctl+0x593/0x610 [ 129.630278][T10662] ? __pfx_sock_ioctl+0x10/0x10 [ 129.630301][T10662] __se_sys_ioctl+0xce/0x140 [ 129.630342][T10662] __x64_sys_ioctl+0x43/0x50 [ 129.630441][T10662] x64_sys_call+0x14b0/0x3000 [ 129.630474][T10662] do_syscall_64+0xc0/0x2a0 [ 129.630504][T10662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.630528][T10662] RIP: 0033:0x7f9b6c73acb9 [ 129.630548][T10662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.630630][T10662] RSP: 002b:00007f9b6b197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.630663][T10662] RAX: ffffffffffffffda RBX: 00007f9b6c9b5fa0 RCX: 00007f9b6c73acb9 [ 129.630682][T10662] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 129.630700][T10662] RBP: 00007f9b6b197090 R08: 0000000000000000 R09: 0000000000000000 [ 129.630717][T10662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.630778][T10662] R13: 00007f9b6c9b6038 R14: 00007f9b6c9b5fa0 R15: 00007ffcab45a028 [ 129.630804][T10662] [ 129.898560][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2841'. [ 129.899398][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2841'. [ 129.986976][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2841'. [ 130.010939][T10631] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 130.151433][T10631] EXT4-fs (loop6): 1 truncate cleaned up [ 130.229911][T10682] netlink: 'syz.5.2846': attribute type 1 has an invalid length. [ 130.272896][T10682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.326477][T10682] bond1: (slave gretap2): making interface the new active one [ 130.364719][T10682] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 130.411851][T10685] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.478974][T10682] mmap: syz.5.2846 (10682) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.527017][T10682] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.5.2846: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0 [ 130.569836][T10682] syz.5.2846 (10682) used greatest stack depth: 9912 bytes left [ 130.967068][T10701] FAULT_INJECTION: forcing a failure. [ 130.967068][T10701] name failslab, interval 1, probability 0, space 0, times 0 [ 130.979822][T10701] CPU: 1 UID: 0 PID: 10701 Comm: syz.2.2851 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 130.979860][T10701] Tainted: [W]=WARN [ 130.979942][T10701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.979959][T10701] Call Trace: [ 130.979968][T10701] [ 130.979978][T10701] __dump_stack+0x1d/0x30 [ 130.980008][T10701] dump_stack_lvl+0x95/0xd0 [ 130.980034][T10701] dump_stack+0x15/0x1b [ 130.980119][T10701] should_fail_ex+0x263/0x280 [ 130.980144][T10701] should_failslab+0x8c/0xb0 [ 130.980236][T10701] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 130.980319][T10701] ? __d_alloc+0x37/0x340 [ 130.980347][T10701] __d_alloc+0x37/0x340 [ 130.980372][T10701] ? default_pointer+0xf2/0x5e0 [ 130.980437][T10701] ? __account_obj_stock+0x211/0x350 [ 130.980460][T10701] d_alloc+0x2e/0x100 [ 130.980494][T10701] lookup_one_qstr_excl+0x99/0x250 [ 130.980594][T10701] start_dirop+0x3e/0x70 [ 130.980620][T10701] simple_start_creating+0xa2/0xd0 [ 130.980675][T10701] debugfs_start_creating+0xda/0x150 [ 130.980697][T10701] __debugfs_create_file+0x70/0x2b0 [ 130.980719][T10701] debugfs_create_file_full+0x3f/0x60 [ 130.980741][T10701] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 130.980837][T10701] ref_tracker_dir_debugfs+0x10e/0x220 [ 130.980873][T10701] alloc_netdev_mqs+0x1a7/0xa40 [ 130.980950][T10701] ipip6_tunnel_locate+0x308/0x4c0 [ 130.981057][T10701] ? selinux_capable+0x31/0x40 [ 130.981085][T10701] ipip6_tunnel_ctl+0x865/0xc40 [ 130.981114][T10701] ip_tunnel_siocdevprivate+0x77/0xe0 [ 130.981193][T10701] ipip6_tunnel_siocdevprivate+0x1da/0xe20 [ 130.981281][T10701] ? __mutex_lock+0xa3d/0xe50 [ 130.981320][T10701] ? full_name_hash+0x92/0xe0 [ 130.981345][T10701] ? strcmp+0x22/0x50 [ 130.981364][T10701] ? netdev_name_node_lookup+0xa4/0xd0 [ 130.981428][T10701] dev_ifsioc+0x8f8/0xaa0 [ 130.981449][T10701] dev_ioctl+0x78c/0x960 [ 130.981469][T10701] sock_ioctl+0x593/0x610 [ 130.981499][T10701] ? __pfx_sock_ioctl+0x10/0x10 [ 130.981524][T10701] __se_sys_ioctl+0xce/0x140 [ 130.981556][T10701] __x64_sys_ioctl+0x43/0x50 [ 130.981588][T10701] x64_sys_call+0x14b0/0x3000 [ 130.981639][T10701] do_syscall_64+0xc0/0x2a0 [ 130.981662][T10701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.981684][T10701] RIP: 0033:0x7f9b6c73acb9 [ 130.981701][T10701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.981853][T10701] RSP: 002b:00007f9b6b197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.981966][T10701] RAX: ffffffffffffffda RBX: 00007f9b6c9b5fa0 RCX: 00007f9b6c73acb9 [ 130.981980][T10701] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 130.981994][T10701] RBP: 00007f9b6b197090 R08: 0000000000000000 R09: 0000000000000000 [ 130.982007][T10701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.982020][T10701] R13: 00007f9b6c9b6038 R14: 00007f9b6c9b5fa0 R15: 00007ffcab45a028 [ 130.982041][T10701] [ 131.060242][T10695] syz.5.2850 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 131.292861][T10695] CPU: 0 UID: 0 PID: 10695 Comm: syz.5.2850 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 131.292918][T10695] Tainted: [W]=WARN [ 131.292927][T10695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.292972][T10695] Call Trace: [ 131.292981][T10695] [ 131.292991][T10695] __dump_stack+0x1d/0x30 [ 131.293023][T10695] dump_stack_lvl+0x95/0xd0 [ 131.293120][T10695] dump_stack+0x15/0x1b [ 131.293147][T10695] dump_header+0x80/0x240 [ 131.293181][T10695] oom_kill_process+0x295/0x350 [ 131.293210][T10695] out_of_memory+0x97d/0xb80 [ 131.293246][T10695] try_charge_memcg+0x62e/0xa10 [ 131.293291][T10695] obj_cgroup_charge_pages+0xa6/0x150 [ 131.293351][T10695] __memcg_kmem_charge_page+0x9e/0x170 [ 131.293388][T10695] __alloc_frozen_pages_noprof+0x18a/0x350 [ 131.293438][T10695] alloc_pages_mpol+0xb3/0x260 [ 131.293477][T10695] alloc_pages_noprof+0x8f/0x130 [ 131.293515][T10695] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 131.293608][T10695] __kvmalloc_node_noprof+0x471/0x680 [ 131.293674][T10695] ? ip_set_alloc+0x24/0x30 [ 131.293799][T10695] ? ip_set_alloc+0x24/0x30 [ 131.293841][T10695] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 131.293870][T10695] ip_set_alloc+0x24/0x30 [ 131.293900][T10695] hash_netiface_create+0x282/0x740 [ 131.294042][T10695] ? __pfx_hash_netiface_create+0x10/0x10 [ 131.294089][T10695] ip_set_create+0x3cf/0x970 [ 131.294127][T10695] ? __nla_parse+0x40/0x60 [ 131.294185][T10695] nfnetlink_rcv_msg+0x509/0x5d0 [ 131.294246][T10695] netlink_rcv_skb+0x123/0x220 [ 131.294285][T10695] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 131.294380][T10695] nfnetlink_rcv+0x167/0x1720 [ 131.294413][T10695] ? __kfree_skb+0x109/0x150 [ 131.294467][T10695] ? nlmon_xmit+0x4f/0x60 [ 131.294495][T10695] ? consume_skb+0x49/0x140 [ 131.294530][T10695] ? nlmon_xmit+0x4f/0x60 [ 131.294558][T10695] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 131.294683][T10695] ? __dev_queue_xmit+0x139a/0x1f20 [ 131.294721][T10695] ? __dev_queue_xmit+0x148/0x1f20 [ 131.294839][T10695] ? ref_tracker_free+0x37d/0x3e0 [ 131.294879][T10695] ? __netlink_deliver_tap+0x4dc/0x500 [ 131.294929][T10695] netlink_unicast+0x5c0/0x690 [ 131.294985][T10695] netlink_sendmsg+0x5c8/0x6f0 [ 131.295014][T10695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.295039][T10695] __sock_sendmsg+0x145/0x170 [ 131.295068][T10695] ____sys_sendmsg+0x31e/0x4a0 [ 131.295163][T10695] ___sys_sendmsg+0x195/0x1e0 [ 131.295217][T10695] __x64_sys_sendmsg+0xd4/0x160 [ 131.295263][T10695] x64_sys_call+0x17ba/0x3000 [ 131.295296][T10695] do_syscall_64+0xc0/0x2a0 [ 131.295365][T10695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.295391][T10695] RIP: 0033:0x7f21d6f2acb9 [ 131.295466][T10695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.295490][T10695] RSP: 002b:00007f21d5987028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.295510][T10695] RAX: ffffffffffffffda RBX: 00007f21d71a5fa0 RCX: 00007f21d6f2acb9 [ 131.295529][T10695] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 131.295547][T10695] RBP: 00007f21d6f98bf7 R08: 0000000000000000 R09: 0000000000000000 [ 131.295631][T10695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.295644][T10695] R13: 00007f21d71a6038 R14: 00007f21d71a5fa0 R15: 00007fff7db18418 [ 131.295739][T10695] [ 131.624946][T10695] memory: usage 189828kB, limit 307200kB, failcnt 125 [ 131.631816][T10695] memory+swap: usage 183480kB, limit 9007199254740988kB, failcnt 0 [ 131.639879][T10695] kmem: usage 175816kB, limit 9007199254740988kB, failcnt 0 [ 131.647230][T10695] Memory cgroup stats for /syz5: [ 131.651725][T10695] cache 0 [ 131.660106][T10695] rss 28672 [ 131.663274][T10695] shmem 0 [ 131.666267][T10695] mapped_file 0 [ 131.669796][T10695] dirty 0 [ 131.672758][T10695] writeback 0 [ 131.676131][T10695] workingset_refault_anon 22 [ 131.680746][T10695] workingset_refault_file 32 [ 131.685365][T10695] swap 155648 [ 131.688720][T10695] swapcached 40960 [ 131.692463][T10695] pgpgin 38735 [ 131.695915][T10695] pgpgout 38725 [ 131.699411][T10695] pgfault 50020 [ 131.702906][T10695] pgmajfault 11 [ 131.706493][T10695] inactive_anon 16384 [ 131.710498][T10695] active_anon 24576 [ 131.714463][T10695] inactive_file 0 [ 131.718223][T10695] active_file 0 [ 131.721699][T10695] unevictable 0 [ 131.725186][T10695] hierarchical_memory_limit 314572800 [ 131.730720][T10695] hierarchical_memsw_limit 9223372036854771712 [ 131.737096][T10695] total_cache 0 [ 131.740682][T10695] total_rss 28672 [ 131.744343][T10695] total_shmem 0 [ 131.747880][T10695] total_mapped_file 0 [ 131.751890][T10695] total_dirty 0 [ 131.755437][T10695] total_writeback 0 [ 131.759305][T10695] total_workingset_refault_anon 22 [ 131.764449][T10695] total_workingset_refault_file 32 [ 131.769762][T10695] total_swap 155648 [ 131.773590][T10695] total_swapcached 40960 [ 131.777894][T10695] total_pgpgin 38735 [ 131.781906][T10695] total_pgpgout 38725 [ 131.785945][T10695] total_pgfault 50020 [ 131.790014][T10695] total_pgmajfault 11 [ 131.794065][T10695] total_inactive_anon 16384 [ 131.798641][T10695] total_active_anon 24576 [ 131.803041][T10695] total_inactive_file 0 [ 131.807317][T10695] total_active_file 0 [ 131.811328][T10695] total_unevictable 0 [ 131.815392][T10695] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2850,pid=10693,uid=0 [ 131.830548][T10695] Memory cgroup out of memory: Killed process 10693 (syz.5.2850) total-vm:94132kB, anon-rss:1332kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 131.852480][T10695] syz.5.2850 (10695) used greatest stack depth: 7416 bytes left [ 132.068127][T10715] netlink: 'syz.4.2857': attribute type 12 has an invalid length. [ 132.076061][T10715] __nla_validate_parse: 3 callbacks suppressed [ 132.076079][T10715] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2857'. [ 132.165846][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 132.165864][ T29] audit: type=1400 audit(1768965876.223:787): avc: denied { shutdown } for pid=10708 comm="syz.2.2854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.423442][T10723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.747362][T10729] bridge_slave_0: default FDB implementation only supports local addresses [ 132.773964][T10731] ÿÿÿÿ: renamed from bridge_slave_0 [ 132.892136][T10744] set_capacity_and_notify: 6 callbacks suppressed [ 132.892153][T10744] loop4: detected capacity change from 0 to 1024 [ 132.946033][T10744] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.001232][ T29] audit: type=1400 audit(1768965877.053:788): avc: denied { append } for pid=10735 comm="syz.4.2863" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.051518][T10755] 9pnet_fd: Insufficient options for proto=fd [ 133.241843][T10765] SELinux: failed to load policy [ 133.422998][T10775] netlink: 'syz.4.2873': attribute type 12 has an invalid length. [ 134.038439][ T29] audit: type=1326 audit(1768965878.083:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d6f2acb9 code=0x7ffc0000 [ 134.062066][ T29] audit: type=1326 audit(1768965878.083:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d6f2acb9 code=0x7ffc0000 [ 134.085715][ T29] audit: type=1326 audit(1768965878.093:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d6f2acb9 code=0x7ffc0000 [ 134.109204][ T29] audit: type=1326 audit(1768965878.093:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f21d6f2acb9 code=0x7ffc0000 [ 134.132687][ T29] audit: type=1326 audit(1768965878.093:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d6f2acb9 code=0x7ffc0000 [ 134.156174][ T29] audit: type=1326 audit(1768965878.093:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d6f2acb9 code=0x7ffc0000 [ 134.179786][ T29] audit: type=1326 audit(1768965878.093:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d6f2acb9 code=0x7ffc0000 [ 134.203436][ T29] audit: type=1326 audit(1768965878.093:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10796 comm="syz.5.2879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d6f2acb9 code=0x7ffc0000 [ 134.304089][T10797] loop5: detected capacity change from 0 to 512 [ 134.339348][T10797] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.348164][T10797] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.394045][T10797] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2879: Allocating blocks 41-42 which overlap fs metadata [ 134.416039][T10797] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.2879: Allocating blocks 41-42 which overlap fs metadata [ 134.441630][T10797] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2879: Failed to acquire dquot type 1 [ 134.466405][T10797] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 134.497501][T10797] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2879: corrupted inode contents [ 134.510705][T10797] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.2879: mark_inode_dirty error [ 134.522664][T10783] loop4: detected capacity change from 0 to 2048 [ 134.530194][T10797] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2879: corrupted inode contents [ 134.545699][T10797] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.2879: mark_inode_dirty error [ 134.558327][T10797] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2879: corrupted inode contents [ 134.591948][T10797] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 134.602863][T10797] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.2879: corrupted inode contents [ 134.615432][T10797] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.2879: mark_inode_dirty error [ 134.628424][T10797] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 134.638080][T10797] EXT4-fs (loop5): 1 truncate cleaned up [ 134.644635][T10797] EXT4-fs mount: 28 callbacks suppressed [ 134.644655][T10797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.665375][T10797] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.761627][T10783] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2874'. [ 134.772256][T10783] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2874'. [ 134.823896][T10818] FAULT_INJECTION: forcing a failure. [ 134.823896][T10818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.837200][T10818] CPU: 1 UID: 0 PID: 10818 Comm: syz.5.2886 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 134.837320][T10818] Tainted: [W]=WARN [ 134.837329][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.837344][T10818] Call Trace: [ 134.837351][T10818] [ 134.837360][T10818] __dump_stack+0x1d/0x30 [ 134.837422][T10818] dump_stack_lvl+0x95/0xd0 [ 134.837450][T10818] dump_stack+0x15/0x1b [ 134.837475][T10818] should_fail_ex+0x263/0x280 [ 134.837536][T10818] should_fail+0xb/0x20 [ 134.837563][T10818] should_fail_usercopy+0x1a/0x20 [ 134.837595][T10818] _copy_from_iter+0xcf/0xea0 [ 134.837629][T10818] ? __alloc_skb+0x397/0x4b0 [ 134.837668][T10818] ? __alloc_skb+0x219/0x4b0 [ 134.837703][T10818] netlink_sendmsg+0x4ae/0x6f0 [ 134.837730][T10818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.837765][T10818] __sock_sendmsg+0x145/0x170 [ 134.837794][T10818] ____sys_sendmsg+0x31e/0x4a0 [ 134.837828][T10818] ___sys_sendmsg+0x195/0x1e0 [ 134.837916][T10818] __x64_sys_sendmsg+0xd4/0x160 [ 134.837954][T10818] x64_sys_call+0x17ba/0x3000 [ 134.837986][T10818] do_syscall_64+0xc0/0x2a0 [ 134.838016][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.838061][T10818] RIP: 0033:0x7f21d6f2acb9 [ 134.838080][T10818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.838152][T10818] RSP: 002b:00007f21d5987028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.838173][T10818] RAX: ffffffffffffffda RBX: 00007f21d71a5fa0 RCX: 00007f21d6f2acb9 [ 134.838253][T10818] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 134.838270][T10818] RBP: 00007f21d5987090 R08: 0000000000000000 R09: 0000000000000000 [ 134.838283][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.838295][T10818] R13: 00007f21d71a6038 R14: 00007f21d71a5fa0 R15: 00007fff7db18418 [ 134.838323][T10818] [ 135.204088][T10831] loop2: detected capacity change from 0 to 1024 [ 135.217278][T10831] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 135.227617][T10831] System zones: 0-1, 3-36 [ 135.244995][T10831] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2891: bad orphan inode 134217728 [ 135.260697][T10831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.287340][T10831] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.2891: corrupted in-inode xattr: bad e_name length [ 135.300447][T10843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2892'. [ 135.372538][ T3557] IPVS: starting estimator thread 0... [ 135.429782][T10846] ================================================================== [ 135.437938][T10846] BUG: KCSAN: data-race in filemap_read / filemap_read [ 135.444843][T10846] [ 135.447197][T10846] write to 0xffff88810c7ddb28 of 8 bytes by task 10831 on cpu 1: [ 135.454954][T10846] filemap_read+0x98d/0xa10 [ 135.459512][T10846] generic_file_read_iter+0x79/0x330 [ 135.464905][T10846] ext4_file_read_iter+0x1cc/0x290 [ 135.470069][T10846] copy_splice_read+0x471/0x6c0 [ 135.474966][T10846] splice_direct_to_actor+0x28f/0x670 [ 135.480372][T10846] do_splice_direct+0x119/0x1a0 [ 135.485272][T10846] do_sendfile+0x380/0x650 [ 135.489822][T10846] __x64_sys_sendfile64+0x105/0x150 [ 135.495054][T10846] x64_sys_call+0x2db1/0x3000 [ 135.499772][T10846] do_syscall_64+0xc0/0x2a0 [ 135.504307][T10846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.510237][T10846] [ 135.512583][T10846] read to 0xffff88810c7ddb28 of 8 bytes by task 10846 on cpu 0: [ 135.520255][T10846] filemap_read+0x6f/0xa10 [ 135.524709][T10846] generic_file_read_iter+0x79/0x330 [ 135.530037][T10846] ext4_file_read_iter+0x1cc/0x290 [ 135.535204][T10846] copy_splice_read+0x471/0x6c0 [ 135.540113][T10846] splice_direct_to_actor+0x28f/0x670 [ 135.545524][T10846] do_splice_direct+0x119/0x1a0 [ 135.550406][T10846] do_sendfile+0x380/0x650 [ 135.554861][T10846] __x64_sys_sendfile64+0x105/0x150 [ 135.560095][T10846] x64_sys_call+0x2db1/0x3000 [ 135.564818][T10846] do_syscall_64+0xc0/0x2a0 [ 135.569376][T10846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.575307][T10846] [ 135.577697][T10846] value changed: 0x00000000000000dd -> 0x00000000000000de [ 135.584831][T10846] [ 135.587189][T10846] Reported by Kernel Concurrency Sanitizer on: [ 135.593368][T10846] CPU: 0 UID: 0 PID: 10846 Comm: syz.2.2891 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 135.604792][T10846] Tainted: [W]=WARN [ 135.608623][T10846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.618711][T10846] ================================================================== [ 135.627226][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.656666][T10847] IPVS: using max 2160 ests per chain, 108000 per kthread [ 136.012601][T10179] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.