last executing test programs: 2m34.738082934s ago: executing program 1 (id=60): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x6, 0x4) umount2(&(0x7f0000000040)='./file0\x00', 0xa) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'os2.', ']^2-\x00'}, &(0x7f0000000100)=""/56, 0x38) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) faccessat(r0, &(0x7f0000000140)='./file0\x00', 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f0000ffa000/0x2000)=nil) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000340)=0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000380)={r0, r0}) r3 = open(&(0x7f00000003c0)='./file0\x00', 0xdca048040d85b45, 0xbfaa060beb6f2126) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x700, 0x700, 0xfffffa01, 0x2, {{0x6, 0x4, 0x2, 0x3c, 0x18, 0x67, 0x0, 0x10, 0x0, 0x0, @local, @multicast1, {[@end]}}}}}) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@deltclass={0x44, 0x29, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x3, 0xfff3}, {0xd, 0x1}, {0xe, 0x7}}, [@c_atm={{0x8}, {0x18, 0x2, [@TCA_ATM_HDR={0x11, 0x3, "4bf02457a075f3effceb505776"}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000005c0), 0x155001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, &(0x7f0000000600)={0x6d76a3ef, 0x9}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) pipe2$9p(&(0x7f0000000900)={0xffffffffffffffff}, 0x80000) newfstatat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r8 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000b00)=0xe8) mount$9p_fd(0x0, &(0x7f0000000880)='./file0/file0\x00', &(0x7f00000008c0), 0x820, &(0x7f0000000b40)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose}], [{@fsmagic={'fsmagic', 0x3d, 0xd4bd}}, {@euid_lt={'euid<', r7}}, {@uid_lt={'uid<', r8}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@euid_eq={'euid', 0x3d, r9}}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000c40)=0x6) lgetxattr(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)=@random={'os2.', '/\f@.\x00'}, &(0x7f0000000d00)=""/4096, 0x1000) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000001d00)) socket$rxrpc(0x21, 0x2, 0xa) getpid() prlimit64(r2, 0xd, &(0x7f0000001d80)={0x101, 0x5}, &(0x7f0000001dc0)) r10 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r10, 0x0, 0x483, &(0x7f0000001e00), &(0x7f0000001e80)=0x68) 2m34.631544949s ago: executing program 1 (id=61): r0 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffd, @local, 0x20007ffb}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x118, 0x10, 0x4, 0x101, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x7}, [@typed={0x4, 0x106}, @nested={0x8, 0x27, 0x0, 0x1, [@nested={0x4, 0x43}]}, @generic="236fbdab36fa0f1ca22137908cbccd5371258674851e69c58d2be5b1e23e6a4a0be502caf4b6f3956f88bbcd5d0be05356b94e34cc1094c8b5ef36894834a25e1a615559bfeb5d76add471c20805095a7e90e8c85c199c562e33d4800279fac953992989de6c6bab4420fd930330f5efa794d55866fb591c678fb1216d10562dd450c36371fb7c5007ffa8c8ecc78509ad37270d5deafc25a04ad21b1e0bb30c5d4abbf3d0223ba5576db50459cfbd82dd6528685df22d3502a746a63c861e86f7e0f9bd30dfa0795c985abe1684cb1c88dc22532262b37412d343ca393b8290df5f5cddac528fc2f4222051b020762a45ac16c05e", @generic]}, 0x118}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', r3, 0x29, 0x2, 0x7, 0xffff, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x8, 0xc0, 0x4b815cdf, 0x2}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x8}, 0x1c) r4 = socket(0x40000000015, 0x80000, 0xfffffffc) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @private0}]}, &(0x7f0000000040)=0x10) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) getsockname$packet(r5, 0x0, &(0x7f0000000240)) bind$inet(r4, &(0x7f0000000340)={0x2, 0xffff, @empty}, 0x10) 2m33.736888101s ago: executing program 1 (id=73): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa101020000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 2m33.736325051s ago: executing program 1 (id=74): r0 = syz_clone(0x4008600, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x69) ptrace(0x4207, r0) ptrace(0x4207, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xec, 0x1e, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xec}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r5, &(0x7f0000000100)=[{0x0}], 0x1, 0x5405, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r9, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r8, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000040)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xfff1, 0xb}, {0x5, 0x7}, {0x0, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, 0x3, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000980)={'gretap0\x00', 0x0, 0x700, 0x0, 0x8, 0x9, {{0x38, 0x4, 0x1, 0x2c, 0xe0, 0x68, 0x0, 0xb, 0x2f, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0xa3, 0x1, 0x8, [{@loopback, 0x6}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x3ff}, {@multicast2, 0x101}]}, @cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x1, 0x7, "80375ac6bb"}, {0x2, 0xc, "c168df214433e8dc0278"}, {0x5, 0x3, "05"}]}, @timestamp={0x44, 0x8, 0xee, 0x0, 0x3, [0x90000000]}, @generic={0x44, 0x11, "5cc77956a901cd68f803e2fa4aa82a"}, @end, @lsrr={0x83, 0xf, 0x10, [@empty, @empty, @multicast2]}, @noop, @rr={0x7, 0x7, 0x2d, [@empty]}, @cipso={0x86, 0x50, 0x1, [{0x7, 0x3, "ac"}, {0x0, 0x10, "9dc02a87b4a8a3ebd72423d45f48"}, {0xe1097dbf83b4a350, 0xe, "c4ecb61b16484c06ab19d504"}, {0x7, 0xe, "e661dd0e19daf2b83d926551"}, {0x7, 0x9, "f2ce6aedd4f4c8"}, {0x2, 0x12, "78958f317fc60868706512d5b771955b"}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000a80)={'sit0\x00', 0x0, 0x1, 0x40, 0x7, 0x529, {{0x20, 0x4, 0x2, 0x3a, 0x80, 0x66, 0x0, 0x3, 0x29, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x7e, 0x3, 0x8, [{@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x4}]}, @ssrr={0x89, 0xf, 0x76, [@multicast2, @broadcast, @multicast1]}, @generic={0x94, 0xe, "891cfa84ecb8e28c4eec5c00"}, @timestamp={0x44, 0x18, 0x6b, 0x0, 0x0, [0x2, 0x1, 0x1, 0x1000, 0x5]}, @timestamp={0x44, 0x18, 0xc9, 0x0, 0x7, [0x7, 0x5, 0x7fff, 0x3, 0x3]}, @ssrr={0x89, 0xb, 0xd2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="78010000", @ANYRES16=r6, @ANYBLOB="00042dbd7000fddbdf25150000000c00018008000100", @ANYRES32=r7, @ANYBLOB="3c0001801400020076657468305f746f5f627269646765001400020076657468305f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000002c000180080003000000000008000300030000000800030001000000080003000000000008000100", @ANYRES32=r10, @ANYBLOB="640001801400020076657468315f766c616e00000000000008000300020000000800030000000000080003000300000014000200776c616e310000000000000000000000080003000100000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0800030002000000200001801400020076657468315f746f5f6272696467650008000300030000006c00018008000100", @ANYRES32=r13, @ANYBLOB="1400020076657468305f766f5f7465616d000000140002006d6143766c616e3000000000000000001400020076657468305f746f5f6272696467650008000100", @ANYRES32, @ANYBLOB="08000300000000001400020069703667726530000000000000000000"], 0x178}, 0x1, 0x0, 0x0, 0x20008000}, 0x40c0804) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000020601034000000000000000070000000c0007800800124000feffff0500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d616300"], 0x54}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$eJzs281rHOUfAPDvTF77mvz66++ltWq0CEExadKqPXhRFEQqCnqox7jZltBtI00E+4KNIp4EKehZPIr+BeJFBFFPgifBkycpFM2lrafI7M4k2U02bZJNtnY/H9js88w8O/N8d+aZeeZ5NgF0rKHsTxKxOyJ+jYiBWra+wFDt7eb85dKt+culJBYWXv0jqZa7MX+5VBQtPrcrzwynEen7Sb6TejMXLp6ZqFTK5/P86OzZvjw5cbp8unxu/PjxY0fHnnpy/ImWxJnFdePgO9OHDrzw+tWXSievvvHDl1l9d+frl8exTr+MNlkxlAX+50JV47pHNrizu9WeZemku40VYV268ldPtf0PRFcsHbyBeP69tlYO2FLZvamv+eq5BeAelkS7awC0R3Gj3znfVcqegVc+Bw9sZfej7a4/E5E98mRx38xftTXdkeZlehqeb1tpKCJOzv31afaKzY1DAADckQ9Ln5zojYhLt754Met7LPX20u7/Vt9/q/7dm/cEByPiXxGxLyL+HRH7I+I/EZGV/V9E/H+T9VnZ/0mvbXKTa8r6f0/nc1v1/b+i9xeDXXluTzX+nuTUVKV8JP9OhqOnL8uPrbGPb577+aNm65b3/7JXtv+iL5jX41p3wwDd5MTsRLVT2gLX34042J0kK+NPFmcCkog4EBEH17fpvUVi6tHPDzUrdPv419CCeaaFz7Lw5rLjPxcN8ReS2vzkm6MzFy4+PnW2cX5ytD8q5SOjxVmx0o8/ffBKs/3X4u/Pc6vHv2PzYTZ1vVx7X3b8l61dbANL87Uzrd3/Bs//tDd5rTrP3Jsve3tidvb8WERvcqKar1s+vvTZIl+Uz87/4cOrt/99+Wey439fRGQn8f0R8UBEPJjX/aGIeDgiDq8R4/fP3j7+SDdw/rdAFv/kqte/xfN/MKk7/utPdJ357qtm+7+z43+smhrOl1Svfw2Shvxq1emO6Gus4Ga/PwAAAPgnSKu/gU/SkcV0mo6M1H7Dvz92ppXpmdnHTk2/dW6y9lv5wehJi5GugXw8tDJVKY8lc/kWa+Oj4/lYcTFeejQfN/64a0c1P1Karky2OXbodLuatP/M713trh2wxeqnl4oJ4PHetlQG2GaN8+hpffbKy+FiAPcq/68Nnes27T/drnoA28/9HzrXau3/SkPeXADcm9z/oXNp/9Ch0m9XXfz1tlcEaAf3f+hIm/m//i1M9N8d1WhPYrsPSqyrcBSJtO1fVKsS/XFXVGPjiUt5a27lltt8YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiRvwMAAP//6zPa6w==") 2m33.239282364s ago: executing program 1 (id=77): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)="883d6f35f94f7c41df0242a04198017295b6ea14bb125150e64e599b4aa7b6e0e05c4c56b3eec358aa4ff52c0153ddd9e9b2fc235cf8a989af98154208eba80c3c232ada90e6ba94090879da07578a74b2012f95012a9b3d9a18d2ae2b87205471afe4", 0x63, r0}, 0x68) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f00000001c0)={'\x00', 0x2, 0x0, 0xa95}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x3fa, 0x800, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x1, '\x00', 0x0, r4, 0x4, 0x5, 0x3}, 0x50) sendto$inet_nvme_icreq_pdu(r3, &(0x7f0000000440)={{0x0, 0x4, 0x80, 0x4}, 0x0, 0x0, 0x2, 0x5}, 0x80, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0xb, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7a08}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x400}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20840}, 0x840) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000600)=0xfffffffffffffff5) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000640)='wg0\x00', 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@deltclass={0x6c, 0x29, 0x200, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffe0, 0xfff2}, {0x4, 0x7}, {0x7, 0xc}}, [@tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0xa8, 0x6}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_RATE={0x6, 0x5, {0xf4, 0x8}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x2e, 0x5}}, @TCA_RATE={0x6, 0x5, {0x40, 0x1}}]}, 0x6c}}, 0x4000010) process_madvise(r3, &(0x7f0000000a00)=[{&(0x7f0000000800)="8ecaa054668cc992eaa86a61e4a724b363256c54f78af1e01527d4cb6c6f3d375cebed2dc18d276e33a9217ccc9cc15b5b593753f40f08a45707d450623952a20f8bd35a0b665489dc3484fb754bdf3ef4b683703d239be9a7d50e54174516b7a3691601d3c6ac713c8d974a9ee2d1373bcca8980c010b1d698d6178caf7a709f85d5555b9ac9dc5935773fc7452a5564d4493d089e48a235ed9308abedb4d75025d5edde82f94040909891db4b2348f7a2fe91da84340fc61f93af067d9cc70bfe07bf77a6654a6f5852545", 0xcc}, {&(0x7f0000000900)="53465a138c7e6a028ce870718b63017d9613148b2ed10e29223f8af7e50ca2f7dd8fb3d021620fd639fdf576f0cd8477360cd85f996b8927b216a4402e2f914a4469a49a5f366184d9f1624cd1960560d5351c4d33c70298041a127b9d6bd00f9e3b921f0cec264abc2e6745a5684aedd051fa56cd066b9bdcddac8d5d0fc8adf59d23d693e93283f378b3df0f991eaeaac51fb56652b1a7ab161d71c9285363e6a9e43ee7bdcd8e46ccbeeae1eead9019176454334db5dc7af85b8a350bbc7bead8c2f93f084208ee694c5e31aecda59e79b83f9e807343d7367329e5be14284aa126e59d3d1e7f518df752e6ee45fb72a3b73cb3477dc708", 0xf9}], 0x2, 0x17, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@enum={0xd, 0x6, 0x0, 0x6, 0x4, [{0x9, 0x1}, {0x2, 0x1}, {0xc, 0x2}, {0xd, 0x9}, {0xd, 0x3}, {0xf, 0x8}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}, @fwd={0x9}, @fwd={0xf}]}, {0x0, [0x5f, 0x4f, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000ac0)=""/195, 0x7f, 0xc3, 0x1, 0x8}, 0x28) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000041) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000d00), 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r4, {0x7fffffffffffffff}}, './file0\x00'}) ioctl$XFS_IOC_FD_TO_HANDLE(r9, 0xc038586a, &(0x7f0000000e80)={r2, &(0x7f0000000d80)='}:-\x00', 0x40, &(0x7f0000000dc0)={@align=0x6be, {0x9, 0x8, 0x8fe, 0x7fffffffffffffff}}, 0x6, &(0x7f0000000e00)={@_ha_fsid}, &(0x7f0000000e40)=0x5}) ioctl$RNDADDENTROPY(r10, 0x40085203, &(0x7f0000000ec0)={0x1, 0xe9, "4173fcd29ac692646256fe3f7ea0cf750af085f5fd85fbcf4c3e6d52f4489b4926ba21cdd0fee05b9dae9ea48cb7d1e8b4aac91793062e1d653baf8a48accf4e8853ae4704c652f1a4fd26bfa16a2a3593a3016c7f5ae6c91bbeb4de3237e10f2abcb51b53fdaf4d3f05372950449802fde1f12b38d1b909637a2e69c773081d0ef0948dbb75aff19fe586f2305d7ac9062f9e5ad9949a947f9dfe91cd928c20e8983683c41404105b892b0a1dd0f2741ff730faf8baaff9da26994a901c10bb4e8789fbaa031d39ebf79cb671753f96d8b91eb0a48d4e071ad9d007d797125300ec9d835df7917235"}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r10, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x1406, 0x800, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x111}, 0x8000) socket$kcm(0x29, 0x0, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x5, &(0x7f00000010c0)=0x6, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000001100)={0x0, 0x48, "9d863c944cb7d7769b42f6363d61d8fc795d55c75ebb45f24fe02d73509a8087a2799be7e4d99e51cf2c6b386d4b9fcc08c7d9c57413115b3756ec0255b65fbbd1bbc7ca45a2918c"}, &(0x7f0000001180)=0x50) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000011c0)={r11, 0xd9, "5af6f7e52c685878830edbf36a2a2359c437bfcda8a070b9af397ecc91a0c0e59c8e24233d0f83e0949a41ba48f8f7360ba1c65b7aa657e20a03454ec4edf2cb703756f5c218bc4f6fb1e0c57789ade418542449a9a435aaabb9fd689cdf4cc26a67168d3cbd0768ff8abf5af81a99f43071835626c1791948386fd9d6280344b469d4da578ecb33ca6c25686865df066ef5e9e645aa8e5ae59f7fb2bf18d36b2cdf56df5882f15e032c14fe1091a02590a75e89f5c2734a94bd87ff274d2b373b8842bc1b3ac8be0d4e561b52a5050a6a3f5b6fc8900618ca"}, &(0x7f00000012c0)=0xe1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x6, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @ldst={0x3, 0x2, 0x2, 0x4, 0x2, 0x50, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x8, 0xb, 0x0, 0x0, 0x10}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}], &(0x7f0000001340)='syzkaller\x00', 0x2, 0x49, &(0x7f0000001380)=""/73, 0x41000, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001440)={0x4, 0x9, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[r9, r5, r10, r10, r10], 0x0, 0x10, 0x47b0}, 0x94) 2m32.352792875s ago: executing program 1 (id=85): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x16, &(0x7f0000000140)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 2m32.333233366s ago: executing program 32 (id=85): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x15, 0x16, &(0x7f0000000140)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 2m31.37723825s ago: executing program 3 (id=94): r0 = io_uring_setup(0x684d, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0x11) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x0, 0xe, 0x32, 0x81, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x10, 0x8, 0xfffff907}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', r4, 0x8000, 0x8000, 0x7fff, 0x2, {{0x3f, 0x4, 0x0, 0x0, 0xfc, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x23, 0xc, [@empty, @empty, @rand_addr=0x64010102, @rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010102, @local]}, @cipso={0x86, 0x34, 0x3, [{0x7, 0x5, '$Z['}, {0x1, 0x4, "f156"}, {0x6, 0x2}, {0x2, 0xe, "d1f4331380a2096e871666aa"}, {0x6, 0x4, "90be"}, {0x6, 0x5, "76581c"}, {0x7, 0xc, "779334a6116833b1bb4d"}]}, @cipso={0x86, 0x3a, 0x1, [{0x7, 0x12, "59249e00358d57a9d51b1a69b2d77f86"}, {0x5, 0xe, "9de19a45f9107c34b8762bcc"}, {0x5, 0xf, "35acee0d18bcc603518d75abcc"}, {0x6, 0x5, "b366c8"}]}, @rr={0x7, 0x17, 0x55, [@loopback, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0x88, 0x3, 0x6, [{@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010102, 0x3}, {@empty, 0x287}, {@multicast1, 0x4}, {@empty, 0xc3a}, {@empty, 0xa9c}]}, @end]}}}}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x684d, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0x11) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async) pipe(&(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x0, 0xe, 0x32, 0x81, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x10, 0x8, 0xfffff907}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', r4, 0x8000, 0x8000, 0x7fff, 0x2, {{0x3f, 0x4, 0x0, 0x0, 0xfc, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x23, 0xc, [@empty, @empty, @rand_addr=0x64010102, @rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010102, @local]}, @cipso={0x86, 0x34, 0x3, [{0x7, 0x5, '$Z['}, {0x1, 0x4, "f156"}, {0x6, 0x2}, {0x2, 0xe, "d1f4331380a2096e871666aa"}, {0x6, 0x4, "90be"}, {0x6, 0x5, "76581c"}, {0x7, 0xc, "779334a6116833b1bb4d"}]}, @cipso={0x86, 0x3a, 0x1, [{0x7, 0x12, "59249e00358d57a9d51b1a69b2d77f86"}, {0x5, 0xe, "9de19a45f9107c34b8762bcc"}, {0x5, 0xf, "35acee0d18bcc603518d75abcc"}, {0x6, 0x5, "b366c8"}]}, @rr={0x7, 0x17, 0x55, [@loopback, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x22}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0x88, 0x3, 0x6, [{@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010102, 0x3}, {@empty, 0x287}, {@multicast1, 0x4}, {@empty, 0xc3a}, {@empty, 0xa9c}]}, @end]}}}}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 2m31.231592397s ago: executing program 3 (id=96): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100030000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 2m31.16032599s ago: executing program 3 (id=97): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x40c, &(0x7f0000000240)={[{@init_itable}, {@quota}, {@nojournal_checksum}, {@grpjquota}, {@lazytime}, {@block_validity}, {}]}, 0xff, 0x501, &(0x7f0000000e80)="$eJzs3c9vY0cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRe37OehN7E20SO8Sfj/T0Zt54/Z2J982sv1l7AhhbtyPiICKKEfF+RMxl13PZEe90juRxnx0+Wj06fLSai3b7vX/k0vbkWvT8mcSt7DlLEfGD70T8OHc6bnNvf3OlVqvuZPWFVn17obm3f2+jvrJeXa9uVSrLS8uLb91/s3JpY32lXsxKX/709wff+GnSrdnsSu84LlNn6IXjOInJiPjeVQQbgYlsPMVRd4Rnko+IFyPi1fT+n4uJ9NUEAG6ydnsu2nO9dQDgpos0B5bLl7NcwGzk8+VyJ4f3Uszka41m6+7Dxu7WWidXNh+F/MONWnUxyxXORyGX1JfS8uN65UT9fkS8EBE/n5pO6+XVRm1thP/uAYBxduvE+v/vqc76DwDccKVRdwAAGDrrPwCMH+s/AIwf6z8AjJ/O+j896m4AAEPk/T8AjB/rPwCMle+/+25ytI+y779e+2Bvd7Pxwb21anOzXN9dLa82drbL643GevqdPfWznq/WaGwvvRG7H85/c7vZWmju7T+oN3a3Wg/S7/V+UC2kjzoYwsgAgEFeeOWTP+WSFfnt6fSInr0cCiPtGXDV8qPuADAyE6PuADAydvuC8XWB9/jSA3BD9Nmi9wmlfh8Q6m4gAvxfuvMF+X8YVz35f/8LGMaM/D+ML/l/GF/tdu68e/7HeR8IAFxvcvzAgN//v5idf5P9cuBHaycf8fFV9goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+7+v+VsL/DZyOfL5YjnImI+CrmHG7XqYkQ8HxF/nCpMJfWlEfcZALio/F9z2f5fd+Zen32i6eVbx8ViRPzkl+/94sOVVmvnDxHF3D+nutdbH2fXK8PvPQBwtu46nZ573sh/dvhotXsMsz9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuLuLgo4j4fL/x52I2zYF0dj49GT+J/dxQ4+efiJ9P2zrn5GfxuUvoC4ybT5L5551+918+bqfn/vd/KZ2hLi6b/5KnWj1K58DH8bvz38SA+e/2eWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Vzxv/zl15+dVBb+1cRd6J//N5YC6369kJzb//eRn1lvbpe3apUlpeWF9+6/2ZlIc1RLwxeDf7+9t3nB7Ul458ZEL90xvi/es7x//q/7//wK0+J//XX+sXPx0tPiZ+siV87Z/yVmd+WBrUl8dcGjP+s1//uOeN/+pf9U9uGAwCj09zb31yp1ao7Cte5UMxeruvSn0GF0hX3MPkZXI+Rni58a1ixitG/6Wev9f1L0m4/U6xBM8ZlZN2A6+D4po+I/4y6MwAAAAAAAAAAAAAAQF/D+MTSqMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfW/AAAA//+Y9srv") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000300000000050000000200000000000000020000000000000c2000000000002e"], 0x0, 0x40}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r2, 0x200000000000000) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r3, 0x0, 0xcf, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={0x0, 0x0, 0x18}, 0x18) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0xa1001) r4 = syz_io_uring_setup(0x10a, &(0x7f00000003c0)={0x0, 0x3093, 0x1000, 0x1, 0x81}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x9) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) socket(0x10, 0x3, 0x0) remap_file_pages(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1000000, 0x9, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x80) mount(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x54, 0x0, 0xfffffffffe000001}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 2m30.446271623s ago: executing program 3 (id=98): r0 = syz_clone(0x4008600, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x69) ptrace(0x4207, r0) ptrace(0x4207, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000020601030000000000000000070000000c000780080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000010000300686173893a69702c6d616300"], 0x54}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$eJzs281rHOUfAPDvTF77mvz66++ltWq0CEExadKqPXhRFEQqCnqox7jZltBtI00E+4KNIp4EKehZPIr+BeJFBFFPgifBkycpFM2lrafI7M4k2U02bZJNtnY/H9js88w8O/N8d+aZeeZ5NgF0rKHsTxKxOyJ+jYiBWra+wFDt7eb85dKt+culJBYWXv0jqZa7MX+5VBQtPrcrzwynEen7Sb6TejMXLp6ZqFTK5/P86OzZvjw5cbp8unxu/PjxY0fHnnpy/ImWxJnFdePgO9OHDrzw+tWXSievvvHDl1l9d+frl8exTr+MNlkxlAX+50JV47pHNrizu9WeZemku40VYV268ldPtf0PRFcsHbyBeP69tlYO2FLZvamv+eq5BeAelkS7awC0R3Gj3znfVcqegVc+Bw9sZfej7a4/E5E98mRx38xftTXdkeZlehqeb1tpKCJOzv31afaKzY1DAADckQ9Ln5zojYhLt754Met7LPX20u7/Vt9/q/7dm/cEByPiXxGxLyL+HRH7I+I/EZGV/V9E/H+T9VnZ/0mvbXKTa8r6f0/nc1v1/b+i9xeDXXluTzX+nuTUVKV8JP9OhqOnL8uPrbGPb577+aNm65b3/7JXtv+iL5jX41p3wwDd5MTsRLVT2gLX34042J0kK+NPFmcCkog4EBEH17fpvUVi6tHPDzUrdPv419CCeaaFz7Lw5rLjPxcN8ReS2vzkm6MzFy4+PnW2cX5ytD8q5SOjxVmx0o8/ffBKs/3X4u/Pc6vHv2PzYTZ1vVx7X3b8l61dbANL87Uzrd3/Bs//tDd5rTrP3Jsve3tidvb8WERvcqKar1s+vvTZIl+Uz87/4cOrt/99+Wey439fRGQn8f0R8UBEPJjX/aGIeDgiDq8R4/fP3j7+SDdw/rdAFv/kqte/xfN/MKk7/utPdJ357qtm+7+z43+smhrOl1Svfw2Shvxq1emO6Gus4Ga/PwAAAPgnSKu/gU/SkcV0mo6M1H7Dvz92ppXpmdnHTk2/dW6y9lv5wehJi5GugXw8tDJVKY8lc/kWa+Oj4/lYcTFeejQfN/64a0c1P1Karky2OXbodLuatP/M713trh2wxeqnl4oJ4PHetlQG2GaN8+hpffbKy+FiAPcq/68Nnes27T/drnoA28/9HzrXau3/SkPeXADcm9z/oXNp/9Ch0m9XXfz1tlcEaAf3f+hIm/m//i1M9N8d1WhPYrsPSqyrcBSJtO1fVKsS/XFXVGPjiUt5a27lltt8YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiRvwMAAP//6zPa6w==") 2m29.800917793s ago: executing program 3 (id=103): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000050000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000002b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 2m29.046467188s ago: executing program 3 (id=114): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100060000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 2m28.962470062s ago: executing program 33 (id=114): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100060000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 17.921923041s ago: executing program 5 (id=868): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000380)={0x0, 0x3, 0x7, 0x2, 0x40, 0xc, 0x4, 0x4}, 0x0, &(0x7f0000000400)={0x8, 0x80000001, 0x8, 0x0, 0x1, 0x5, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x3938700}, 0x0) 17.805820126s ago: executing program 5 (id=872): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) write(r1, &(0x7f0000000080)="e7", 0x1) close(r0) 17.699082101s ago: executing program 5 (id=875): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x2, &(0x7f0000006680)) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$usbmon(r2, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x40) readv(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xd]}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) quotactl_fd$Q_SYNC(r4, 0xffffffff80000101, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000440)={0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0}, 0x0) 16.520428545s ago: executing program 5 (id=899): r0 = syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c02002c00"], 0x6, 0x2d0, &(0x7f0000000740)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x5b}, 0x28) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x20, 0x103) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004", 0x25}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00'], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x7, 0x8, 0x8, 0x5}, 0x50) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f0000000000)=0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000000)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0xfffffff9, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xa, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0xffffffffffffffff], &(0x7f0000000680)=[{0x4, 0x1, 0x6, 0x7}, {0x2, 0x4, 0x2, 0x6}, {0x1, 0x3, 0x3, 0xb}, {0x1, 0x1, 0x4, 0xb}, {0x5, 0x6, 0x8, 0x4}, {0x4, 0x2, 0x6, 0x9}], 0x10, 0x8eb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="9bac557954fffbe37718000000000000000000000000f71fffff080000000000007b8af8ff00000000b708fe00000000007b8af0ff00050000bfa10000000000000701000000feffffbfa40026c100000000000708000000feffffb7020000080000001823ab9367911e3a09f2cdfe978ff4b4026491df7923826146de04f0954e01ff23153c17a36e3bcaad75b5e4fc00806337bcecd2117607d7f56235f9b1d6cfab8d816734f2e5ca6c7698605e8fe1406fe59148f9e9f03d314507ecaadd53229b80975c5a482429055911ddcf6656e2a83e", @ANYRES64=r2, @ANYRES8=r2], &(0x7f0000000300)='syzkaller\x00', 0x4df9, 0x0, 0x0, 0x602e8f52a4c159d9, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x6, 0x40000) bind$inet6(r3, &(0x7f0000000700)={0xa, 0x4e21, 0x58c6caf6, @private2={0xfc, 0x2, '\x00', 0x2}, 0x8}, 0x1c) syz_open_dev$usbfs(&(0x7f00000000c0), 0x2, 0x34200) connect(r6, &(0x7f0000000b00)=@l2tp={0x2, 0x0, @empty}, 0x80) 16.335342974s ago: executing program 5 (id=901): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000003000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 15.923155673s ago: executing program 5 (id=905): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) r1 = io_uring_setup(0x25c9, &(0x7f0000000380)={0x0, 0x5800, 0x8, 0x0, 0x13c}) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) pwritev(r0, 0x0, 0x0, 0x73a, 0x20000001) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x88, 0x10, 0x10, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8061}, [@IFLA_GROUP={0x8}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'lo\x00'}, {0x14, 0x35, 'macvlan1\x00'}, {0x14, 0x35, 'ipvlan0\x00'}, {0x14, 0x35, 'veth1_vlan\x00'}]}]}, 0x88}}, 0x800) syz_usb_connect(0x5, 0x35, &(0x7f0000000140)=ANY=[@ANYRES64], 0x0) r6 = socket$inet(0x2, 0x2, 0x5) setsockopt(r6, 0x9, 0x7, &(0x7f0000000280)="bdb4c4660e0dfc1b42a6d34eab816dfd85ef3cd00e9f13784b6fcd3e7a9f5740c8c790ac93656f65e64bafe38804df97b7873492bf3f8019bcff400d9dbcd324fa7101d90cd8f0451edaac478c133703d163e11183443b0a7410d1a3d475a5b0cbb4f81c61f185086718dc9c633b761822823faa2ca2255d53b2ed281c0497b6efc4d7020351d47a02a0884c050c3ccd13a690092e8f104fba137f63ba8a09c541b6313ef2a7ab90c52a3ad4431d4f8a7638d450421fd3ceb3fec3b8a93b71a950dd592dc1a79908a3f57447b9737887eaf3d812d28e4b62177faabffdbbe40b2d3d42", 0xe3) 15.78481795s ago: executing program 34 (id=905): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) r1 = io_uring_setup(0x25c9, &(0x7f0000000380)={0x0, 0x5800, 0x8, 0x0, 0x13c}) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) pwritev(r0, 0x0, 0x0, 0x73a, 0x20000001) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x88, 0x10, 0x10, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8061}, [@IFLA_GROUP={0x8}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'lo\x00'}, {0x14, 0x35, 'macvlan1\x00'}, {0x14, 0x35, 'ipvlan0\x00'}, {0x14, 0x35, 'veth1_vlan\x00'}]}]}, 0x88}}, 0x800) syz_usb_connect(0x5, 0x35, &(0x7f0000000140)=ANY=[@ANYRES64], 0x0) r6 = socket$inet(0x2, 0x2, 0x5) setsockopt(r6, 0x9, 0x7, &(0x7f0000000280)="bdb4c4660e0dfc1b42a6d34eab816dfd85ef3cd00e9f13784b6fcd3e7a9f5740c8c790ac93656f65e64bafe38804df97b7873492bf3f8019bcff400d9dbcd324fa7101d90cd8f0451edaac478c133703d163e11183443b0a7410d1a3d475a5b0cbb4f81c61f185086718dc9c633b761822823faa2ca2255d53b2ed281c0497b6efc4d7020351d47a02a0884c050c3ccd13a690092e8f104fba137f63ba8a09c541b6313ef2a7ab90c52a3ad4431d4f8a7638d450421fd3ceb3fec3b8a93b71a950dd592dc1a79908a3f57447b9737887eaf3d812d28e4b62177faabffdbbe40b2d3d42", 0xe3) 8.251277188s ago: executing program 7 (id=1067): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000340)='O', 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x10, r1, 0x1, 0xf0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 7.898959975s ago: executing program 7 (id=1077): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="a3") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 7.857670367s ago: executing program 4 (id=1078): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {0x0}], 0x2}, 0x101}], 0x2, 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={0xffffffffffffffff, r2, 0x35, 0x0, @void}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 7.765406641s ago: executing program 4 (id=1082): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 7.695482944s ago: executing program 4 (id=1085): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) 7.602861499s ago: executing program 0 (id=1089): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x6, 0xfffffffb, 0x200, 0x0, 0x7}) 7.586741969s ago: executing program 4 (id=1090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) mmap(&(0x7f00006f2000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xdc560000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000010000000000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2f00, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = getpgid(r0) fcntl$setown(0xffffffffffffffff, 0x8, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000380)=@filename='./file0\x00', 0x0, &(0x7f0000000500)={0x3, 0x2000000000004, 0x5, 0x7fffffffffffffff, 0x10000008, 0xfffffffffffffffb, 0x8, 0x7fff, 0x9b}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x41, 0x2c8, &(0x7f0000000580)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x4, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r5, 0x407, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) 7.531290942s ago: executing program 7 (id=1091): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x353, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0xd9}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x2000000, {0x80, 0x20, 0x0, 0x0, 0xfd, 0x4, 0xfd, 0x5}}, 0x1c}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x0, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r6, 0x702, 0xfc67, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 7.530945432s ago: executing program 0 (id=1092): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888, 0x5}]}}}}}}}, 0x0) 7.470659875s ago: executing program 6 (id=1093): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8000000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) shutdown(r0, 0x0) listen(r1, 0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7.397503248s ago: executing program 6 (id=1095): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="77f41157", @ANYRES16=0x0, @ANYBLOB="010000000000fedbdf2503000000140001800e00010069623a767863616e31"], 0x28}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1403000037"], 0x314}, 0x1, 0x0, 0x0, 0xc0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x2000000, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) 6.431186593s ago: executing program 0 (id=1096): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x7}}, 0x10) bind$tipc(r0, 0x0, 0x0) 4.795455309s ago: executing program 2 (id=1097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0x94}, 0x1, 0x0, 0x0, 0x24040086}, 0x0) 4.702896662s ago: executing program 6 (id=1098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffee, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x64, 0x2, [@TCA_FW_ACT={0x60, 0x4, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb74}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1870, 0x7fff, 0x20000000, 0x58, 0x400}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x800) 4.634751506s ago: executing program 0 (id=1099): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0xb, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xfed, &(0x7f0000001840)=""/4077}, 0x94) 4.587493648s ago: executing program 6 (id=1100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x353, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0xd9}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x2000000, {0x80, 0x20, 0x0, 0x0, 0xfd, 0x4, 0xfd, 0x5}}, 0x1c}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x0, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r6, 0x702, 0xfc67, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 4.555897419s ago: executing program 7 (id=1101): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000050000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000001800000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 4.475145053s ago: executing program 0 (id=1102): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae708000000000004087"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="0000000000d9bd00950000000000200045"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) exit(0xffffffffffffffa9) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") r4 = open(0x0, 0x442000, 0x7c) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x65, 0x8, 0x0, 0x0, 0x0, 0x5, 0x20091, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0xb0d, 0x2000000, 0x10ffe, 0x3, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, r4, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) exit(0xfa) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfd, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xdd47, 0x6f81, 0x8, 0x82, 0xfffffff8, 0x6}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x6, 0x7b1, 0xfe, 0x1, 0x3, 0x4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4c884) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x709f, 0x6361, 0x8, 0xc, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40804) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040e0}, 0x2880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000340)='O', 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x10, r5, 0x1, 0xf0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 1.502585631s ago: executing program 2 (id=1104): r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendfile(r1, r0, 0x0, 0x547) 507.039267ms ago: executing program 2 (id=1105): ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000001c0)={0x6, 0xfffffffb, 0x200, 0x0, 0x7}) 331.345315ms ago: executing program 2 (id=1106): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 330.936185ms ago: executing program 0 (id=1107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket(0x10, 0x3, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 313.627996ms ago: executing program 4 (id=1108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0xa, 0xfff1}}}, 0x24}}, 0x40004) 312.250966ms ago: executing program 2 (id=1109): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x7}}, 0x10) bind$tipc(r0, 0x0, 0x0) 254.408009ms ago: executing program 6 (id=1110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56f5d, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 199.141081ms ago: executing program 2 (id=1111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x353, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0xd9}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x2000000, {0x80, 0x20, 0x0, 0x0, 0xfd, 0x4, 0xfd, 0x5}}, 0x1c}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x0, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r6, 0x702, 0xfc67, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 94.565826ms ago: executing program 7 (id=1112): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r9}, 0x27) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'tunl0\x00', r10, 0x10, 0x0, 0x4, 0x3, {{0x1f, 0x4, 0x1, 0x0, 0x7c, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @local, {[@cipso={0x86, 0x5c, 0x2, [{0x4, 0x6, "47f3d950"}, {0x6, 0x11, "a75f1ec760c53f8be5f2d180f0cdbb"}, {0x5, 0x6, "78c80ba6"}, {0x6, 0x11, "49a8a6911034a3019ea188be41771a"}, {0x5, 0x12, "badfdb48e624d3d969f7b5e021608292"}, {0x1, 0x12, "1ab832851c85df87d292cdbde47aa00e"}, {0x3, 0x4, "98a7"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0xd7, [@remote]}]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@delqdisc={0x4c, 0x25, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x3, 0x1000b}, {0x1, 0xfff2}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x4c}}, 0x0) 10.79946ms ago: executing program 4 (id=1113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffee, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x64, 0x2, [@TCA_FW_ACT={0x60, 0x4, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb74}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1870, 0x7fff, 0x20000000, 0x58, 0x400}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x800) 0s ago: executing program 6 (id=1114): r0 = open(&(0x7f0000000400)='./file1\x00', 0x160a00, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$rfkill(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x125) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) write$P9_RVERSION(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065fffffc7f000005000000000000002e4c"], 0x41) r10 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x56f, &(0x7f0000000140)="$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") kernel console output (not intermixed with test programs): t for type 5 error -117 [ 68.660971][ T4651] Quota error (device loop6): write_blk: dquota write failed [ 68.668352][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 68.668390][ C0] EXT4-fs (loop6): last error at time 1774009617: ext4_validate_block_bitmap:441 [ 68.702838][ T4678] netlink: 596 bytes leftover after parsing attributes in process `syz.5.224'. [ 68.722154][ T28] audit: type=1400 audit(1774009617.776:525): avc: denied { watch_reads } for pid=4677 comm="syz.5.224" path="/15" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.772409][ T4651] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 68.815116][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.226'. [ 68.817471][ T4651] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.219: Failed to acquire dquot type 1 [ 68.861274][ T4651] loop6: lost filesystem error report for type 5 error -117 [ 68.861940][ T4651] EXT4-fs (loop6): 1 truncate cleaned up [ 68.895775][ T4651] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 68.923725][ T4696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.980554][ T28] audit: type=1400 audit(1774009618.038:526): avc: denied { create } for pid=4704 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 69.002457][ T4651] EXT4-fs error (device loop6): ext4_lookup:1789: inode #2: comm syz.6.219: deleted inode referenced: 12 [ 69.024003][ T4696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.038376][ T4651] EXT4-fs error (device loop6): ext4_lookup:1789: inode #2: comm syz.6.219: deleted inode referenced: 12 [ 69.076414][ T4696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.084385][ T4651] EXT4-fs error (device loop6): ext4_lookup:1789: inode #2: comm syz.6.219: deleted inode referenced: 12 [ 69.106164][ T4651] EXT4-fs error (device loop6): ext4_lookup:1789: inode #2: comm syz.6.219: deleted inode referenced: 12 [ 69.122320][ T4696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.136949][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.285404][ T4719] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.296163][ T4719] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.230: bg 0: block 393: padding at end of block bitmap is not set [ 69.314193][ T4651] syz.6.219 (4651) used greatest stack depth: 9016 bytes left [ 69.338181][ T4719] loop4: lost filesystem error report for type 5 error -117 [ 69.347878][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 69.359839][ T4044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 69.361922][ C1] EXT4-fs (loop4): initial error at time 1774009618: ext4_validate_block_bitmap:441 [ 69.380323][ C1] EXT4-fs (loop4): last error at time 1774009618: ext4_validate_block_bitmap:441 [ 69.412360][ T4719] EXT4-fs (loop4): Remounting filesystem read-only [ 69.419371][ T4719] EXT4-fs (loop4): 2 truncates cleaned up [ 69.425693][ T4719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.556737][ T4714] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.228'. [ 69.562621][ T4735] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 69.562755][ T4735] EXT4-fs (loop6): orphan cleanup on readonly fs [ 69.564008][ T4735] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 69.564029][ T4735] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 69.564060][ T4735] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.232: Failed to acquire dquot type 1 [ 69.564137][ T4735] loop6: lost filesystem error report for type 5 error -5 [ 69.566306][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 69.566325][ C0] EXT4-fs (loop6): initial error at time 1774009618: ext4_acquire_dquot:7001 [ 69.566344][ C0] EXT4-fs (loop6): last error at time 1774009618: ext4_acquire_dquot:7001 [ 69.568868][ T4735] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.232: bg 0: block 40: padding at end of block bitmap is not set [ 69.568904][ T4735] loop6: lost filesystem error report for type 5 error -117 [ 69.569054][ T4735] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 69.569077][ T4735] loop6: lost filesystem error report for type 5 error -117 [ 69.569424][ T4735] EXT4-fs (loop6): 1 truncate cleaned up [ 69.570558][ T4735] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.698474][ T28] audit: type=1400 audit(1774009618.774:527): avc: denied { write } for pid=4734 comm="syz.6.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 69.908279][ T4750] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.923581][ T4750] EXT4-fs (loop5): mount failed [ 69.959339][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.689487][ T4764] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 71.218077][ T4775] netlink: 'syz.0.241': attribute type 12 has an invalid length. [ 71.406413][ T4781] netlink: 'syz.5.243': attribute type 39 has an invalid length. [ 71.460815][ T4781] hsr_slave_1 (unregistering): left promiscuous mode [ 71.620622][ T4786] set_capacity_and_notify: 5 callbacks suppressed [ 71.620642][ T4786] loop0: detected capacity change from 0 to 256 [ 71.673127][ T4785] loop5: detected capacity change from 0 to 4096 [ 71.692676][ T4789] loop0: detected capacity change from 0 to 512 [ 71.704745][ T4785] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 71.719617][ T4789] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.245: inode has both inline data and extents flags [ 71.751240][ T4789] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.751929][ T4789] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.245: couldn't read orphan inode 15 (err -117) [ 71.761130][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 71.761165][ C1] EXT4-fs (loop0): initial error at time 1774009620: ext4_orphan_get:1391: inode 15 [ 71.761202][ C1] EXT4-fs (loop0): last error at time 1774009620: ext4_orphan_get:1391: inode 15 [ 71.812443][ T4789] loop0: lost filesystem error report for type 5 error -117 [ 71.815015][ T4789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.846855][ T4788] netlink: 256 bytes leftover after parsing attributes in process `syz.0.245'. [ 71.856311][ T4789] netlink: 256 bytes leftover after parsing attributes in process `syz.0.245'. [ 71.867367][ T4788] netlink: 'syz.0.245': attribute type 12 has an invalid length. [ 71.875673][ T4788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 71.889524][ T3760] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.898387][ T3760] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.908489][ T4788] netlink: 'syz.0.245': attribute type 12 has an invalid length. [ 71.917299][ T3760] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.925817][ T4788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 71.934993][ T3760] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.956792][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.517323][ T4735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 72.558263][ T4044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.631966][ T4803] loop6: detected capacity change from 0 to 512 [ 72.632440][ T4803] msdos: Unknown parameter 'msdos' [ 72.708543][ T4813] netlink: 'syz.6.251': attribute type 63 has an invalid length. [ 72.708572][ T4813] lo: entered promiscuous mode [ 72.708586][ T4813] lo: entered allmulticast mode [ 72.774516][ T4816] lo speed is unknown, defaulting to 1000 [ 72.847655][ T4827] netlink: 128 bytes leftover after parsing attributes in process `syz.2.254'. [ 72.872293][ T4827] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 72.878406][ T4827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 72.924152][ T4809] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.248'. [ 72.980791][ T4832] loop5: detected capacity change from 0 to 256 [ 73.053271][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 73.053286][ T28] audit: type=1400 audit(1774009622.167:531): avc: denied { bind } for pid=4833 comm="syz.5.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.089612][ T4834] loop5: detected capacity change from 0 to 1024 [ 73.096536][ T4834] EXT4-fs: inline encryption not supported [ 73.120817][ T28] audit: type=1400 audit(1774009622.187:532): avc: denied { listen } for pid=4833 comm="syz.5.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.159591][ T28] audit: type=1400 audit(1774009622.187:533): avc: denied { connect } for pid=4833 comm="syz.5.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.200133][ T4834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.222426][ T28] audit: type=1400 audit(1774009622.187:534): avc: denied { write } for pid=4833 comm="syz.5.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.250054][ T28] audit: type=1400 audit(1774009622.197:535): avc: denied { accept } for pid=4833 comm="syz.5.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.270117][ T28] audit: type=1400 audit(1774009622.197:536): avc: denied { read } for pid=4833 comm="syz.5.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.297074][ T4834] EXT4-fs error (device loop5): mb_free_blocks:2047: group 0, inode 15: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 73.343153][ T4834] EXT4-fs (loop5): Remounting filesystem read-only [ 73.356825][ T28] audit: type=1326 audit(1774009622.459:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8bcc799 code=0x7ffc0000 [ 73.391441][ T28] audit: type=1326 audit(1774009622.459:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f3ad8bcc799 code=0x7ffc0000 [ 73.392036][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.425254][ T4824] loop4: detected capacity change from 0 to 512 [ 73.441245][ T4824] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.460620][ T28] audit: type=1326 audit(1774009622.459:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8bcc799 code=0x7ffc0000 [ 73.484842][ T28] audit: type=1326 audit(1774009622.459:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4814 comm="syz.4.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f3ad8bcc799 code=0x7ffc0000 [ 73.500945][ T4824] EXT4-fs (loop4): 1 truncate cleaned up [ 73.576361][ T4824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.619957][ T4856] loop5: detected capacity change from 0 to 512 [ 73.730439][ T4856] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 74.984384][ T4874] loop5: detected capacity change from 0 to 512 [ 75.017496][ T4874] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.042365][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.096138][ T4874] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.263: bg 0: block 393: padding at end of block bitmap is not set [ 75.149929][ T4874] loop5: lost filesystem error report for type 5 error -117 [ 75.150080][ T4874] EXT4-fs (loop5): Remounting filesystem read-only [ 75.163972][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 75.163989][ C0] EXT4-fs (loop5): initial error at time 1774009624: ext4_validate_block_bitmap:441 [ 75.164040][ C0] EXT4-fs (loop5): last error at time 1774009624: ext4_validate_block_bitmap:441 [ 75.259367][ T4874] EXT4-fs (loop5): 2 truncates cleaned up [ 75.265662][ T4874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.360527][ T4884] loop4: detected capacity change from 0 to 2048 [ 75.380754][ T4884] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 75.517573][ T4890] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.266'. [ 75.664187][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 75.677189][ T4913] netlink: 'syz.2.274': attribute type 21 has an invalid length. [ 75.696985][ T4911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.271'. [ 75.706019][ T4911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.271'. [ 75.930088][ T4911] syz.0.271 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 75.946131][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.966627][ T4911] CPU: 1 UID: 0 PID: 4911 Comm: syz.0.271 Tainted: G W syzkaller #0 PREEMPT(full) [ 75.966665][ T4911] Tainted: [W]=WARN [ 75.966674][ T4911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 75.966691][ T4911] Call Trace: [ 75.966698][ T4911] [ 75.966705][ T4911] __dump_stack+0x1d/0x30 [ 75.966815][ T4911] dump_stack_lvl+0x95/0xd0 [ 75.966847][ T4911] dump_stack+0x15/0x1b [ 75.966925][ T4911] dump_header+0x80/0x240 [ 75.966956][ T4911] oom_kill_process+0x295/0x350 [ 75.967025][ T4911] out_of_memory+0x97d/0xb80 [ 75.967049][ T4911] try_charge_memcg+0x62e/0xa10 [ 75.967101][ T4911] obj_cgroup_charge_pages+0x23/0xc0 [ 75.967222][ T4911] __memcg_kmem_charge_page+0x9e/0x170 [ 75.967272][ T4911] __alloc_frozen_pages_noprof+0x18a/0x360 [ 75.967305][ T4911] alloc_pages_mpol+0xb3/0x260 [ 75.967408][ T4911] alloc_pages_noprof+0x8f/0x130 [ 75.967438][ T4911] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 75.967477][ T4911] __kvmalloc_node_noprof+0x3d4/0x650 [ 75.967558][ T4911] ? futex_hash_allocate+0x190/0x9d0 [ 75.967590][ T4911] ? futex_hash_allocate+0x190/0x9d0 [ 75.967626][ T4911] futex_hash_allocate+0x190/0x9d0 [ 75.967724][ T4911] ? cap_task_prctl+0x13f/0x6e0 [ 75.967753][ T4911] futex_hash_prctl+0xd8/0xf0 [ 75.967814][ T4911] __se_sys_prctl+0xa3d/0x13f0 [ 75.967901][ T4911] __x64_sys_prctl+0x67/0x80 [ 75.967937][ T4911] x64_sys_call+0x2533/0x3020 [ 75.968027][ T4911] do_syscall_64+0x12c/0x370 [ 75.968061][ T4911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.968090][ T4911] RIP: 0033:0x7f624be8c799 [ 75.968107][ T4911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.968160][ T4911] RSP: 002b:00007f624a8e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 75.968185][ T4911] RAX: ffffffffffffffda RBX: 00007f624c105fa0 RCX: 00007f624be8c799 [ 75.968199][ T4911] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 75.968252][ T4911] RBP: 00007f624bf22c99 R08: 0000000000000000 R09: 0000000000000000 [ 75.968267][ T4911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.968280][ T4911] R13: 00007f624c106038 R14: 00007f624c105fa0 R15: 00007ffc276c6608 [ 75.968299][ T4911] [ 75.968333][ T4911] memory: usage 278080kB, limit 307200kB, failcnt 87 [ 76.106769][ T4921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.154276][ T4911] memory+swap: usage 246100kB, limit 9007199254740988kB, failcnt 0 [ 76.245146][ T4911] kmem: usage 234312kB, limit 9007199254740988kB, failcnt 0 [ 76.252900][ T4911] Memory cgroup stats for /syz0: [ 76.253147][ T4911] cache 286720 [ 76.267642][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.291727][ T4911] rss 299008 [ 76.303355][ T4911] shmem 143360 [ 76.311160][ T4911] mapped_file 143360 [ 76.329539][ T4911] dirty 143360 [ 76.339684][ T4911] writeback 0 [ 76.355318][ T4911] workingset_refault_anon 7 [ 76.359991][ T4911] workingset_refault_file 0 [ 76.395021][ T4911] swap 0 [ 76.395035][ T4911] swapcached 315392 [ 76.395046][ T4911] pgpgin 37019 [ 76.395055][ T4911] pgpgout 36875 [ 76.395106][ T4911] pgfault 38779 [ 76.395116][ T4911] pgmajfault 5 [ 76.395126][ T4911] inactive_anon 442368 [ 76.395135][ T4911] active_anon 0 [ 76.395142][ T4911] inactive_file 0 [ 76.395149][ T4911] active_file 147456 [ 76.395156][ T4911] unevictable 0 [ 76.395203][ T4911] hierarchical_memory_limit 314572800 [ 76.395214][ T4911] hierarchical_memsw_limit 9223372036854771712 [ 76.395224][ T4911] total_cache 286720 [ 76.395231][ T4911] total_rss 299008 [ 76.395238][ T4911] total_shmem 143360 [ 76.395245][ T4911] total_mapped_file 143360 [ 76.395257][ T4911] total_dirty 143360 [ 76.395265][ T4911] total_writeback 0 [ 76.395290][ T4911] total_workingset_refault_anon 7 [ 76.395299][ T4911] total_workingset_refault_file 0 [ 76.395307][ T4911] total_swap 0 [ 76.395314][ T4911] total_swapcached 315392 [ 76.395323][ T4911] total_pgpgin 37019 [ 76.395333][ T4911] total_pgpgout 36875 [ 76.395344][ T4911] total_pgfault 38779 [ 76.395418][ T4911] total_pgmajfault 5 [ 76.395426][ T4911] total_inactive_anon 442368 [ 76.395434][ T4911] total_active_anon 0 [ 76.395441][ T4911] total_inactive_file 0 [ 76.395448][ T4911] total_active_file 147456 [ 76.395459][ T4911] total_unevictable 0 [ 76.395467][ T4911] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.271,pid=4910,uid=0 [ 76.395694][ T4911] Memory cgroup out of memory: Killed process 4910 (syz.0.271) total-vm:94164kB, anon-rss:1412kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 76.590724][ T4964] xt_TCPMSS: Only works on TCP SYN packets [ 76.595450][ T4964] netlink: 'syz.0.286': attribute type 1 has an invalid length. [ 76.612899][ T4964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.614154][ T4950] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.280'. [ 76.687303][ T4969] netlink: 'syz.0.286': attribute type 1 has an invalid length. [ 76.824241][ T4964] bond2: (slave veth3): Enslaving as an active interface with a down link [ 76.892235][ T4977] set_capacity_and_notify: 5 callbacks suppressed [ 76.892257][ T4977] loop4: detected capacity change from 0 to 512 [ 76.926567][ T4977] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.957624][ T4977] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.290: bg 0: block 393: padding at end of block bitmap is not set [ 76.972264][ T4977] loop4: lost filesystem error report for type 5 error -117 [ 76.972458][ T4977] EXT4-fs (loop4): Remounting filesystem read-only [ 76.979795][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 76.979820][ C0] EXT4-fs (loop4): initial error at time 1774009626: ext4_validate_block_bitmap:441 [ 76.979860][ C0] EXT4-fs (loop4): last error at time 1774009626: ext4_validate_block_bitmap:441 [ 77.006811][ T4990] loop5: detected capacity change from 0 to 512 [ 77.013108][ T4977] EXT4-fs (loop4): 2 truncates cleaned up [ 77.023993][ T4977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.118734][ T4990] EXT4-fs: Ignoring removed oldalloc option [ 77.173460][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 77.186466][ T4990] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.288: invalid indirect mapped block 4294967295 (level 1) [ 77.244408][ T4990] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 77.245047][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 77.248866][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.254230][ C0] EXT4-fs (loop5): initial error at time 1774009626: ext4_free_branches:1023: inode 11 [ 77.279308][ C0] EXT4-fs (loop5): last error at time 1774009626: ext4_free_branches:1023: inode 11 [ 77.289908][ T4990] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.288: invalid indirect mapped block 4294967295 (level 1) [ 77.328236][ T5003] loop0: detected capacity change from 0 to 256 [ 77.379863][ T4990] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 77.400155][ T4990] EXT4-fs (loop5): 2 truncates cleaned up [ 77.437688][ T4990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.782258][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.828185][ T5014] loop5: detected capacity change from 0 to 512 [ 77.835759][ T5014] EXT4-fs: dax option not supported [ 78.111073][ T5017] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.300'. [ 78.164819][ T5029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.302'. [ 78.193710][ T5031] loop5: detected capacity change from 0 to 512 [ 78.225965][ T5031] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 78.254696][ T5031] EXT4-fs error (device loop5): ext4_get_journal_inode:5863: comm syz.5.303: inode #1792: comm syz.5.303: iget: illegal inode # [ 78.259210][ T5032] loop4: detected capacity change from 0 to 1024 [ 78.288368][ T5031] loop5: lost filesystem error report for type 5 error -117 [ 78.288513][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 78.302413][ C0] EXT4-fs (loop5): initial error at time 1774009627: ext4_get_journal_inode:5863 [ 78.311576][ C0] EXT4-fs (loop5): last error at time 1774009627: ext4_get_journal_inode:5863 [ 78.321568][ T5031] EXT4-fs (loop5): Remounting filesystem read-only [ 78.337965][ T5031] EXT4-fs (loop5): no journal found [ 78.353408][ T5031] EXT4-fs (loop5): can't get journal size [ 78.360522][ T5032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.368828][ T5031] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 78.383324][ T5028] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 78.425037][ T5028] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 78.438512][ T5031] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 78.446624][ T5031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.498413][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.560748][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.588901][ T5044] loop4: detected capacity change from 0 to 128 [ 78.596973][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 78.607128][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 78.607143][ T28] audit: type=1326 audit(1774009627.752:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8bcc799 code=0x7ffc0000 [ 78.696142][ T5044] loop4: detected capacity change from 0 to 512 [ 78.703182][ T5044] journal_path: Non-blockdev passed as './file2' [ 78.716984][ T5044] EXT4-fs: error: could not find journal device path [ 78.729269][ T5047] loop5: detected capacity change from 0 to 256 [ 78.747590][ T28] audit: type=1326 audit(1774009627.752:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ad8bcc799 code=0x7ffc0000 [ 78.774078][ T5047] FAULT_INJECTION: forcing a failure. [ 78.774078][ T5047] name failslab, interval 1, probability 0, space 0, times 1 [ 78.817625][ T5047] CPU: 1 UID: 0 PID: 5047 Comm: syz.5.306 Tainted: G W syzkaller #0 PREEMPT(full) [ 78.817664][ T5047] Tainted: [W]=WARN [ 78.817706][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 78.817722][ T5047] Call Trace: [ 78.817731][ T5047] [ 78.817738][ T5047] __dump_stack+0x1d/0x30 [ 78.817766][ T5047] dump_stack_lvl+0x95/0xd0 [ 78.817790][ T5047] dump_stack+0x15/0x1b [ 78.817813][ T5047] should_fail_ex+0x263/0x280 [ 78.817905][ T5047] ? getname_long+0x32/0x100 [ 78.818016][ T5047] should_failslab+0x8c/0xb0 [ 78.818044][ T5047] __kmalloc_cache_noprof+0x5f/0x410 [ 78.818152][ T5047] ? should_fail_usercopy+0x1a/0x20 [ 78.818264][ T5047] getname_long+0x32/0x100 [ 78.818298][ T5047] do_getname+0x12e/0x1c0 [ 78.818324][ T5047] getname_flags+0x1d/0x30 [ 78.818405][ T5047] do_sys_openat2+0x60/0x130 [ 78.818438][ T5047] __x64_sys_creat+0x65/0x90 [ 78.818469][ T5047] x64_sys_call+0x2ea0/0x3020 [ 78.818501][ T5047] do_syscall_64+0x12c/0x370 [ 78.818598][ T5047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.818647][ T5047] RIP: 0033:0x7fcbc6cbc799 [ 78.818667][ T5047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.818756][ T5047] RSP: 002b:00007fcbc570f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 78.818814][ T5047] RAX: ffffffffffffffda RBX: 00007fcbc6f35fa0 RCX: 00007fcbc6cbc799 [ 78.818861][ T5047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 78.818879][ T5047] RBP: 00007fcbc570f090 R08: 0000000000000000 R09: 0000000000000000 [ 78.818896][ T5047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.818912][ T5047] R13: 00007fcbc6f36038 R14: 00007fcbc6f35fa0 R15: 00007ffcb7fdb628 [ 78.818981][ T5047] [ 78.819372][ T5044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 78.845239][ T28] audit: type=1326 audit(1774009627.752:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8bcc799 code=0x7ffc0000 [ 79.124876][ T5057] loop5: detected capacity change from 0 to 512 [ 79.134168][ T5050] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5050 comm=syz.2.307 [ 79.156036][ T5059] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 79.274909][ T5057] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.302423][ T28] audit: type=1326 audit(1774009627.752:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3ad8bcc799 code=0x7ffc0000 [ 79.304064][ T5057] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.336344][ T28] audit: type=1326 audit(1774009627.752:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8bcc799 code=0x7ffc0000 [ 79.360460][ T28] audit: type=1326 audit(1774009627.752:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3ad8bcc799 code=0x7ffc0000 [ 79.383859][ T28] audit: type=1326 audit(1774009627.752:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8bcc799 code=0x7ffc0000 [ 79.408214][ T28] audit: type=1326 audit(1774009627.762:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3ad8bcc799 code=0x7ffc0000 [ 79.432202][ T28] audit: type=1326 audit(1774009627.762:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8bcc799 code=0x7ffc0000 [ 79.456433][ T28] audit: type=1326 audit(1774009627.762:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3ad8bcc799 code=0x7ffc0000 [ 79.654093][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.731892][ T5079] FAULT_INJECTION: forcing a failure. [ 79.731892][ T5079] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.779601][ T5079] CPU: 1 UID: 0 PID: 5079 Comm: syz.6.319 Tainted: G W syzkaller #0 PREEMPT(full) [ 79.779636][ T5079] Tainted: [W]=WARN [ 79.779642][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.779655][ T5079] Call Trace: [ 79.779660][ T5079] [ 79.779667][ T5079] __dump_stack+0x1d/0x30 [ 79.779701][ T5079] dump_stack_lvl+0x95/0xd0 [ 79.779748][ T5079] dump_stack+0x15/0x1b [ 79.779772][ T5079] should_fail_ex+0x263/0x280 [ 79.779852][ T5079] should_fail+0xb/0x20 [ 79.779899][ T5079] should_fail_usercopy+0x1a/0x20 [ 79.779927][ T5079] strncpy_from_user+0x27/0x250 [ 79.779952][ T5079] ? __kmalloc_cache_noprof+0x18a/0x410 [ 79.779986][ T5079] getname_long+0x66/0x100 [ 79.780050][ T5079] do_getname+0x12e/0x1c0 [ 79.780078][ T5079] getname_flags+0x1d/0x30 [ 79.780106][ T5079] do_sys_openat2+0x60/0x130 [ 79.780159][ T5079] __x64_sys_creat+0x65/0x90 [ 79.780195][ T5079] x64_sys_call+0x2ea0/0x3020 [ 79.780241][ T5079] do_syscall_64+0x12c/0x370 [ 79.780272][ T5079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.780296][ T5079] RIP: 0033:0x7fd9d805c799 [ 79.780377][ T5079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.780396][ T5079] RSP: 002b:00007fd9d6aaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 79.780421][ T5079] RAX: ffffffffffffffda RBX: 00007fd9d82d5fa0 RCX: 00007fd9d805c799 [ 79.780478][ T5079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 79.780495][ T5079] RBP: 00007fd9d6aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 79.780513][ T5079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.780529][ T5079] R13: 00007fd9d82d6038 R14: 00007fd9d82d5fa0 R15: 00007ffd9f205418 [ 79.780579][ T5079] [ 80.013267][ T5085] EXT4-fs: old and new quota format mixing [ 80.031873][ T5087] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.322: inode has both inline data and extents flags [ 80.047335][ T3305] loop4: p1 p2 p3 p4 [ 80.057538][ T3305] loop4: p1 size 196608 extends beyond EOD, truncated [ 80.080700][ T3305] loop4: p2 size 150994944 extends beyond EOD, truncated [ 80.087868][ T5087] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.088439][ T5087] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.322: couldn't read orphan inode 15 (err -117) [ 80.097664][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 80.097685][ C1] EXT4-fs (loop6): initial error at time 1774009629: ext4_orphan_get:1391: inode 15 [ 80.097711][ C1] EXT4-fs (loop6): last error at time 1774009629: ext4_orphan_get:1391: inode 15 [ 80.134762][ T5091] netlink: 'syz.5.321': attribute type 10 has an invalid length. [ 80.163346][ T3305] loop4: p3 size 66846464 extends beyond EOD, truncated [ 80.185137][ T3305] loop4: p4 size 479744 extends beyond EOD, truncated [ 80.207836][ T5087] loop6: lost filesystem error report for type 5 error -117 [ 80.208460][ T5087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.235720][ T5083] loop4: p1 p2 p3 p4 [ 80.240297][ T5083] loop4: p1 size 196608 extends beyond EOD, truncated [ 80.249108][ T5083] loop4: p2 size 150994944 extends beyond EOD, truncated [ 80.258054][ T5083] loop4: p3 size 66846464 extends beyond EOD, truncated [ 80.267859][ T5083] loop4: p4 size 479744 extends beyond EOD, truncated [ 80.305321][ T4044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.370235][ T5109] EXT4-fs: inline encryption not supported [ 80.379568][ T5107] sctp: [Deprecated]: syz.0.314 (pid 5107) Use of int in max_burst socket option deprecated. [ 80.379568][ T5107] Use struct sctp_assoc_value instead [ 80.405963][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 80.406211][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 80.421410][ T4402] udevd[4402]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 80.435033][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 80.452584][ T5103] 9p: Bad value for 'rfdno' [ 80.498298][ T5109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 80.521984][ T4402] udevd[4402]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 80.528178][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 80.531237][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 80.552800][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 80.563988][ T5109] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.638270][ T5109] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 3: comm syz.6.325: lblock 3 mapped to illegal pblock 3 (length 3) [ 80.662859][ T5109] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 80.706600][ T5109] EXT4-fs (loop6): This should not happen!! Data will be lost [ 80.706600][ T5109] [ 81.708698][ T3790] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:17: lblock 8 mapped to illegal pblock 8 (length 8) [ 81.740621][ T3790] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 81.753559][ T3790] EXT4-fs (loop6): This should not happen!! Data will be lost [ 81.753559][ T3790] [ 81.802551][ T4044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.924284][ T3402] IPVS: starting estimator thread 0... [ 82.026217][ T5196] IPVS: using max 2208 ests per chain, 110400 per kthread [ 82.135803][ T5201] __nla_validate_parse: 10 callbacks suppressed [ 82.135822][ T5201] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.336'. [ 82.152788][ T5210] set_capacity_and_notify: 6 callbacks suppressed [ 82.152808][ T5210] loop0: detected capacity change from 0 to 128 [ 83.002989][ T5214] loop4: detected capacity change from 0 to 128 [ 83.016516][ T5214] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.905691][ T28] kauditd_printk_skb: 214 callbacks suppressed [ 83.905707][ T28] audit: type=1400 audit(1774009633.074:800): avc: denied { create } for pid=5237 comm="syz.6.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.097123][ T28] audit: type=1400 audit(1774009633.074:801): avc: denied { read } for pid=5237 comm="syz.6.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.225747][ T5252] netlink: 'syz.0.347': attribute type 12 has an invalid length. [ 84.260535][ T28] audit: type=1400 audit(1774009633.436:802): avc: denied { create } for pid=5250 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.323486][ T28] audit: type=1400 audit(1774009633.456:803): avc: denied { listen } for pid=5250 comm="syz.0.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.343938][ T5253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.362610][ T28] audit: type=1400 audit(1774009633.456:804): avc: denied { ioctl } for pid=5250 comm="syz.0.347" path="socket:[10183]" dev="sockfs" ino=10183 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.388178][ T3395] lo speed is unknown, defaulting to 1000 [ 84.404141][ T5263] loop0: detected capacity change from 0 to 1024 [ 84.553332][ T28] audit: type=1400 audit(1774009633.737:805): avc: denied { setopt } for pid=5264 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.937158][ T5276] loop0: detected capacity change from 0 to 512 [ 86.610021][ T28] audit: type=1400 audit(1774009635.256:806): avc: denied { setopt } for pid=5272 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.836640][ T5281] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.355'. [ 90.067169][ T5295] loop0: detected capacity change from 0 to 512 [ 90.141503][ T5295] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.356: invalid indirect mapped block 256 (level 2) [ 90.171923][ T5295] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.177293][ T5295] EXT4-fs (loop0): 2 truncates cleaned up [ 90.187404][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 90.187530][ C1] EXT4-fs (loop0): initial error at time 1774009639: ext4_free_branches:1023: inode 11 [ 90.187712][ C1] EXT4-fs (loop0): last error at time 1774009639: ext4_free_branches:1023: inode 11 [ 90.430789][ T5295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.486285][ T5322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.363'. [ 90.543754][ T28] audit: type=1400 audit(1774009639.749:807): avc: denied { mounton } for pid=5294 comm="syz.0.356" path="/66/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.621783][ T10] IPVS: starting estimator thread 0... [ 90.633007][ T5327] Illegal XDP return value 4950 on prog (id 160) dev syz_tun, expect packet loss! [ 90.683873][ T5324] process 'syz.6.364' launched '/dev/fd/7' with NULL argv: empty string added [ 90.696904][ T28] audit: type=1400 audit(1774009639.900:808): avc: denied { execute_no_trans } for pid=5323 comm="syz.6.364" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.730264][ T5326] IPVS: using max 1632 ests per chain, 81600 per kthread [ 90.921592][ T5332] loop6: detected capacity change from 0 to 512 [ 90.929177][ T5332] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.961621][ T5332] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.366: bg 0: block 393: padding at end of block bitmap is not set [ 91.155162][ T5332] loop6: lost filesystem error report for type 5 error -117 [ 91.156328][ T5332] EXT4-fs (loop6): Remounting filesystem read-only [ 91.163705][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 91.163726][ C0] EXT4-fs (loop6): initial error at time 1774009640: ext4_validate_block_bitmap:441 [ 91.163746][ C0] EXT4-fs (loop6): last error at time 1774009640: ext4_validate_block_bitmap:441 [ 91.444202][ T5332] EXT4-fs (loop6): 2 truncates cleaned up [ 91.450575][ T5332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.519602][ T5340] loop5: detected capacity change from 0 to 512 [ 91.556067][ T5340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.597897][ T5340] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.877260][ T5337] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.367'. [ 92.055528][ T4044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.154763][ T5354] EXT4-fs (loop5): shut down requested (0) [ 92.190539][ T5354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.368'. [ 92.433900][ T28] audit: type=1400 audit(1774009641.649:809): avc: denied { setattr } for pid=5358 comm="syz.4.371" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.916552][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.052565][ T28] audit: type=1400 audit(1774009642.272:810): avc: denied { read } for pid=5367 comm="syz.6.374" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 93.128459][ T5370] loop6: detected capacity change from 0 to 256 [ 93.139514][ T28] audit: type=1400 audit(1774009642.292:811): avc: denied { open } for pid=5367 comm="syz.6.374" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 93.746970][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.175152][ T5400] netlink: 'syz.5.383': attribute type 83 has an invalid length. [ 94.309864][ T5408] netlink: 'syz.5.386': attribute type 12 has an invalid length. [ 94.354952][ T5408] loop5: detected capacity change from 0 to 512 [ 94.361660][ T5406] lo speed is unknown, defaulting to 1000 [ 95.600253][ T5421] loop0: detected capacity change from 0 to 512 [ 97.024998][ T5421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.039359][ T5421] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.124380][ T5436] loop4: detected capacity change from 0 to 164 [ 98.621693][ T5447] loop5: detected capacity change from 0 to 512 [ 98.633783][ T5447] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.653805][ T5447] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 98.719246][ T5447] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 98.746535][ T5447] System zones: 0-2, 18-18, 34-34 [ 98.800732][ T5457] netlink: 44 bytes leftover after parsing attributes in process `syz.2.401'. [ 98.809301][ T5447] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.396: bad orphan inode 15 [ 98.810161][ T5458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.401'. [ 98.840972][ T5464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.849631][ T5464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.851542][ T5447] loop5: lost filesystem error report for type 5 error -117 [ 98.857861][ T5447] ext4_test_bit(bit=14, block=18) = 1 [ 98.865243][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 98.865283][ C0] EXT4-fs (loop5): initial error at time 1774009648: ext4_orphan_get:1417 [ 98.865313][ C0] EXT4-fs (loop5): last error at time 1774009648: ext4_orphan_get:1417 [ 98.939841][ T5447] is_bad_inode(inode)=0 [ 98.944055][ T5447] NEXT_ORPHAN(inode)=2264924160 [ 98.948984][ T5447] max_ino=32 [ 98.952276][ T5447] i_nlink=0 [ 98.959680][ T5447] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.396: corrupted inode contents [ 98.972165][ T5447] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.972359][ T5447] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.396: mark_inode_dirty error [ 98.992950][ T5447] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.999499][ T5447] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.396: corrupted inode contents [ 99.079314][ T5447] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.141220][ T5447] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.396: mark_inode_dirty error [ 99.180698][ T5447] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.180874][ T5447] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.396: mark inode dirty (error -117) [ 99.203040][ T5447] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.203185][ T5447] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 99.248938][ T5447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.413645][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.248051][ T5464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.712814][ T5464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.732063][ T5476] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.396: bg 0: block 80: padding at end of block bitmap is not set [ 101.241093][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.265739][ T28] audit: type=1400 audit(1774009650.519:812): avc: denied { append } for pid=5484 comm="syz.0.409" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 101.570624][ T5487] loop4: detected capacity change from 0 to 512 [ 101.714305][ T5487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.727015][ T5487] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.488133][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.786540][ T5514] tc_dump_action: action bad kind [ 102.858355][ T5504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.877209][ T28] audit: type=1400 audit(1774009652.136:813): avc: denied { write } for pid=5518 comm="syz.4.412" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 102.891377][ T5504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.972560][ T28] audit: type=1400 audit(1774009652.136:814): avc: denied { open } for pid=5518 comm="syz.4.412" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 103.051666][ T28] audit: type=1400 audit(1774009652.277:815): avc: denied { bind } for pid=5531 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.141518][ T28] audit: type=1400 audit(1774009652.287:816): avc: denied { name_bind } for pid=5531 comm="syz.2.422" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 103.261037][ T28] audit: type=1400 audit(1774009652.287:817): avc: denied { node_bind } for pid=5531 comm="syz.2.422" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 103.286091][ T5540] loop4: detected capacity change from 0 to 512 [ 103.293715][ T28] audit: type=1326 audit(1774009652.297:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.0.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624be8c799 code=0x7fc00000 [ 103.327254][ T28] audit: type=1400 audit(1774009652.468:819): avc: denied { write } for pid=5529 comm="syz.4.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.371277][ T5540] EXT4-fs error (device loop4): __ext4_fill_super:5563: inode #2: comm syz.4.421: iget: checksum invalid [ 103.416695][ T5540] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 103.419650][ T5540] EXT4-fs (loop4): get root inode failed [ 103.428687][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 103.428711][ C0] EXT4-fs (loop4): initial error at time 1774009652: __ext4_fill_super:5563: inode 2 [ 103.428749][ C0] EXT4-fs (loop4): last error at time 1774009652: __ext4_fill_super:5563: inode 2 [ 103.450427][ T28] audit: type=1400 audit(1774009652.709:820): avc: denied { write } for pid=5503 comm="syz.6.414" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.459222][ T28] audit: type=1400 audit(1774009652.719:821): avc: denied { open } for pid=5503 comm="syz.6.414" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.459826][ T5540] EXT4-fs (loop4): mount failed [ 104.597315][ T5566] loop0: detected capacity change from 0 to 1024 [ 104.619870][ T5566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.138655][ T5577] netlink: 'syz.6.433': attribute type 1 has an invalid length. [ 105.213562][ T5577] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 105.214271][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.495118][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.502357][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.873473][ T5583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.996571][ T5583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.070660][ T3768] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.090353][ T3768] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.169546][ T3768] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.259186][ T3768] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.453179][ T5603] loop6: detected capacity change from 0 to 128 [ 106.524469][ T28] kauditd_printk_skb: 2330 callbacks suppressed [ 106.524499][ T28] audit: type=1400 audit(1774009655.791:3152): avc: denied { write } for pid=5597 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.282364][ T5615] loop0: detected capacity change from 0 to 512 [ 107.304955][ T28] audit: type=1400 audit(1774009656.574:3153): avc: denied { remount } for pid=5614 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.339829][ T28] audit: type=1400 audit(1774009656.614:3154): avc: denied { create } for pid=5614 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 107.705241][ T5627] loop4: detected capacity change from 0 to 2048 [ 107.785207][ T3305] loop4: p1 p2 [ 107.796639][ T5627] loop4: p1 p2 [ 108.171497][ T28] audit: type=1400 audit(1774009657.447:3155): avc: denied { sqpoll } for pid=5614 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 108.322921][ T28] audit: type=1400 audit(1774009657.608:3156): avc: denied { egress } for pid=10 comm="kworker/0:1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 108.358188][ T28] audit: type=1400 audit(1774009657.608:3157): avc: denied { sendto } for pid=10 comm="kworker/0:1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 108.510474][ T5654] netlink: 36 bytes leftover after parsing attributes in process `syz.0.455'. [ 108.529619][ T5654] netlink: 36 bytes leftover after parsing attributes in process `syz.0.455'. [ 108.568874][ T5654] loop0: detected capacity change from 0 to 2048 [ 108.699464][ T28] audit: type=1400 audit(1774009657.939:3158): avc: denied { connect } for pid=5653 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.284443][ T5664] syzkaller0: entered promiscuous mode [ 109.351350][ T5664] syzkaller0: entered allmulticast mode [ 109.507365][ T28] audit: type=1400 audit(1774009658.783:3159): avc: denied { relabelfrom } for pid=5663 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.750048][ T28] audit: type=1400 audit(1774009658.823:3160): avc: denied { relabelto } for pid=5663 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.919221][ T28] audit: type=1400 audit(1774009659.214:3161): avc: denied { write } for pid=5675 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.916137][ T5697] netlink: 32 bytes leftover after parsing attributes in process `syz.4.471'. [ 110.943604][ T5703] loop4: detected capacity change from 0 to 164 [ 110.954740][ T5703] Unable to read rock-ridge attributes [ 110.962081][ T5703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.472'. [ 111.339243][ T5715] bond3: entered allmulticast mode [ 113.087816][ T5733] loop4: detected capacity change from 0 to 1024 [ 113.118980][ T5733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.981119][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.616038][ T5739] netlink: 12 bytes leftover after parsing attributes in process `syz.6.481'. [ 114.655467][ T5739] vlan2: entered promiscuous mode [ 114.677751][ T5739] syz_tun: entered promiscuous mode [ 114.987483][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 114.987545][ T28] audit: type=1400 audit(1774009664.302:3167): avc: denied { read } for pid=5741 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 115.032681][ T5743] loop0: detected capacity change from 0 to 512 [ 115.067384][ T5743] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.108216][ T5743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.126324][ T5743] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.217664][ T28] audit: type=1400 audit(1774009664.533:3168): avc: denied { create } for pid=5752 comm="syz.4.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 115.246775][ T28] audit: type=1400 audit(1774009664.533:3169): avc: denied { ioctl } for pid=5752 comm="syz.4.484" path="socket:[12198]" dev="sockfs" ino=12198 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 115.289320][ T5753] netlink: 40 bytes leftover after parsing attributes in process `syz.4.484'. [ 115.313132][ T5753] loop4: detected capacity change from 0 to 128 [ 115.335986][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.340012][ T5753] vfat: Unknown parameter 'D' [ 115.561325][ T28] audit: type=1400 audit(1774009664.874:3170): avc: denied { listen } for pid=5756 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 115.690217][ T28] audit: type=1400 audit(1774009665.005:3171): avc: denied { setopt } for pid=5762 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.714550][ T5763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.723440][ T5763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.790092][ T5764] loop4: detected capacity change from 0 to 512 [ 115.835409][ T5764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.848312][ T5764] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.080118][ T5768] loop6: detected capacity change from 0 to 1024 [ 116.132903][ T5768] ext4: Unknown parameter 'uid' [ 116.443807][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.795365][ T5785] loop0: detected capacity change from 0 to 512 [ 116.883836][ T5768] netlink: 4116 bytes leftover after parsing attributes in process `syz.6.488'. [ 116.896975][ T5785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.909597][ T5785] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.018490][ T5775] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.491'. [ 117.740092][ T5805] loop5: detected capacity change from 0 to 1024 [ 117.780182][ T5805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.316228][ T5808] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.492'. [ 118.347562][ T5768] loop6: detected capacity change from 0 to 4096 [ 118.363221][ T5768] EXT4-fs: Ignoring removed bh option [ 118.391212][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.506385][ T5813] netlink: 40 bytes leftover after parsing attributes in process `syz.4.495'. [ 118.520482][ T5768] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.547535][ T5817] loop5: detected capacity change from 0 to 512 [ 118.578933][ T5817] EXT4-fs (loop5): bad geometry: first data block is 0 with a 1k block and cluster size [ 118.607278][ T5819] lo speed is unknown, defaulting to 1000 [ 118.703850][ T5819] netlink: 'syz.2.498': attribute type 7 has an invalid length. [ 118.711711][ T5819] netlink: 'syz.2.498': attribute type 8 has an invalid length. [ 118.753620][ T4044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.818531][ T5825] netlink: 'syz.6.500': attribute type 1 has an invalid length. [ 118.848902][ T5825] bond1: entered promiscuous mode [ 118.865642][ T5825] bond1: entered allmulticast mode [ 118.883882][ T5825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.896208][ T5829] erspan1: entered allmulticast mode [ 118.915522][ T5829] bond1: (slave erspan1): making interface the new active one [ 118.931145][ T5825] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 118.937903][ T5825] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.946258][ T5829] erspan1: entered promiscuous mode [ 118.952818][ T5829] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 118.961951][ T5825] vhci_hcd vhci_hcd.0: Device attached [ 118.992928][ T5825] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(12) [ 118.999755][ T5825] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 119.012538][ T5837] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20004 [ 119.017911][ T5825] vhci_hcd vhci_hcd.0: Device attached [ 119.033445][ T5825] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(14) [ 119.040144][ T5825] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 119.048302][ T5825] vhci_hcd vhci_hcd.0: Device attached [ 119.063410][ T28] audit: type=1400 audit(1774009668.366:3172): avc: denied { accept } for pid=5836 comm="syz.4.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.083471][ T5825] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 119.133203][ T5825] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(18) [ 119.140078][ T5825] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 119.160491][ T5825] vhci_hcd vhci_hcd.0: Device attached [ 119.171622][ T5825] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(20) [ 119.178281][ T5825] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 119.189964][ T5825] vhci_hcd vhci_hcd.0: Device attached [ 119.202565][ T23] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 119.214362][ T5849] vhci_hcd: connection closed [ 119.214518][ T5834] vhci_hcd: connection closed [ 119.219689][ T5831] vhci_hcd: connection reset by peer [ 119.222548][ T5845] vhci_hcd: connection closed [ 119.229895][ T5838] vhci_hcd: connection closed [ 119.234920][ T3768] vhci_hcd vhci_hcd.6: stop threads [ 119.250279][ T3768] vhci_hcd vhci_hcd.6: release socket [ 119.260252][ T3768] vhci_hcd vhci_hcd.6: disconnect device [ 119.274320][ T3768] vhci_hcd vhci_hcd.6: stop threads [ 119.280945][ T3768] vhci_hcd vhci_hcd.6: release socket [ 119.298959][ T3768] vhci_hcd vhci_hcd.6: disconnect device [ 119.325638][ T3768] vhci_hcd vhci_hcd.6: stop threads [ 119.331189][ T3768] vhci_hcd vhci_hcd.6: release socket [ 119.337647][ T3768] vhci_hcd vhci_hcd.6: disconnect device [ 119.501145][ T5864] loop5: detected capacity change from 0 to 1024 [ 119.540559][ T5864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.570134][ T3768] vhci_hcd vhci_hcd.6: stop threads [ 119.610226][ T3768] vhci_hcd vhci_hcd.6: release socket [ 119.616439][ T3768] vhci_hcd vhci_hcd.6: disconnect device [ 119.623419][ T3768] vhci_hcd vhci_hcd.6: stop threads [ 119.628973][ T3768] vhci_hcd vhci_hcd.6: release socket [ 119.666117][ T3768] vhci_hcd vhci_hcd.6: disconnect device [ 119.938794][ T5870] loop6: detected capacity change from 0 to 128 [ 120.040754][ T5844] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.503'. [ 120.061665][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.079184][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 120.862381][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.940042][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.947359][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.239857][ T5907] loop4: detected capacity change from 0 to 512 [ 121.293744][ T5912] netlink: zone id is out of range [ 121.325927][ T28] audit: type=1400 audit(1774009670.653:3173): avc: denied { mount } for pid=5888 comm="syz.2.514" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 121.429094][ T5915] loop5: detected capacity change from 0 to 512 [ 121.440019][ T5912] netlink: get zone limit has 8 unknown bytes [ 121.465899][ T5915] EXT4-fs: Ignoring removed i_version option [ 121.472051][ T5915] EXT4-fs: Ignoring removed oldalloc option [ 121.508321][ T5915] EXT4-fs (loop5): 1 truncate cleaned up [ 121.533696][ T5915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.581681][ T5918] lo speed is unknown, defaulting to 1000 [ 121.588493][ T28] audit: type=1400 audit(1774009670.924:3174): avc: denied { remount } for pid=5914 comm="syz.5.520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 121.617787][ T5915] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 122.055382][ T5937] loop0: detected capacity change from 0 to 1024 [ 122.082412][ T5937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.465396][ T5940] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.524'. [ 122.563540][ T28] audit: type=1400 audit(1774009671.907:3175): avc: denied { mount } for pid=5951 comm="syz.2.526" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 122.604819][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.647640][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.658841][ T28] audit: type=1400 audit(1774009671.977:3176): avc: denied { getopt } for pid=5950 comm="syz.6.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.701401][ T28] audit: type=1400 audit(1774009671.977:3177): avc: denied { create } for pid=5950 comm="syz.6.527" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.724277][ T5961] netlink: 36 bytes leftover after parsing attributes in process `syz.2.530'. [ 122.743920][ T28] audit: type=1400 audit(1774009671.977:3178): avc: denied { map } for pid=5950 comm="syz.6.527" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.776045][ T5964] loop5: detected capacity change from 0 to 4096 [ 122.791085][ T28] audit: type=1400 audit(1774009671.977:3179): avc: denied { read write } for pid=5950 comm="syz.6.527" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 122.838556][ T5964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.277633][ T5980] loop0: detected capacity change from 0 to 512 [ 123.356456][ T5980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.369470][ T5980] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.238931][ T5991] loop6: detected capacity change from 0 to 128 [ 124.297770][ T23] usb 13-1: enqueue for inactive port 0 [ 124.303396][ T23] usb 13-1: enqueue for inactive port 0 [ 124.377174][ T23] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 124.397282][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.588265][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.338721][ T6014] loop4: detected capacity change from 0 to 1024 [ 126.507864][ T6018] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.538'. [ 126.550892][ T6014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.704132][ T6025] loop5: detected capacity change from 0 to 512 [ 126.772158][ T6025] netlink: 'syz.5.536': attribute type 3 has an invalid length. [ 126.918642][ T28] audit: type=1400 audit(1774009676.190:3180): avc: denied { mounton } for pid=6010 comm="syz.5.536" path="/71/file0/bus" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 126.976171][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.719154][ T6045] loop4: detected capacity change from 0 to 256 [ 128.051377][ T6052] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 128.520373][ T6063] loop5: detected capacity change from 0 to 512 [ 129.077012][ T6076] loop0: detected capacity change from 0 to 1024 [ 129.181788][ T6076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.201957][ T6063] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.215582][ T6063] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.666281][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.744831][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.791650][ T28] audit: type=1400 audit(1774009679.148:3181): avc: denied { write } for pid=6093 comm="syz.5.557" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 129.792988][ T28] audit: type=1400 audit(1774009679.148:3182): avc: denied { ioctl } for pid=6093 comm="syz.5.557" path="/dev/usbmon5" dev="devtmpfs" ino=157 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 129.876609][ T28] audit: type=1400 audit(1774009679.228:3183): avc: denied { override_creds } for pid=6097 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 129.883880][ T6088] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.553'. [ 129.978593][ T6101] xt_limit: Overflow, try lower: 0/0 [ 130.306891][ T6108] loop4: detected capacity change from 0 to 128 [ 130.349377][ T6108] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.939213][ T6108] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.014734][ T28] audit: type=1326 audit(1774009680.371:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624be8c799 code=0x7ffc0000 [ 131.074123][ T6113] lo speed is unknown, defaulting to 1000 [ 131.136740][ T28] audit: type=1326 audit(1774009680.371:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624be8c799 code=0x7ffc0000 [ 131.228717][ T28] audit: type=1326 audit(1774009680.371:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f624be8c799 code=0x7ffc0000 [ 131.263815][ T6118] loop5: detected capacity change from 0 to 256 [ 131.276645][ T6108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.283995][ T6108] IPv6: NLM_F_CREATE should be set when creating new route [ 131.291518][ T6108] IPv6: NLM_F_CREATE should be set when creating new route [ 131.366998][ T28] audit: type=1326 audit(1774009680.371:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624be8c799 code=0x7ffc0000 [ 131.476444][ T28] audit: type=1326 audit(1774009680.371:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f624be8c799 code=0x7ffc0000 [ 131.526437][ T28] audit: type=1326 audit(1774009680.371:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.0.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f624be8c799 code=0x7ffc0000 [ 131.993898][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.016899][ T6122] netlink: 'syz.5.566': attribute type 29 has an invalid length. [ 132.035744][ T6122] netlink: 'syz.5.566': attribute type 3 has an invalid length. [ 132.043429][ T6122] netlink: 132 bytes leftover after parsing attributes in process `syz.5.566'. [ 132.287654][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 132.287671][ T28] audit: type=1400 audit(1774009681.584:3205): avc: denied { create } for pid=6123 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 132.375683][ T6134] loop4: detected capacity change from 0 to 512 [ 132.799634][ T6134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.812898][ T6134] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.399795][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.489137][ T28] audit: type=1400 audit(1774009682.848:3206): avc: denied { mounton } for pid=6149 comm="syz.5.571" path="/syzcgroup/net/syz5/cgroup.procs" dev="cgroup" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 134.007830][ T6161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19456 sclass=netlink_route_socket pid=6161 comm=syz.0.574 [ 134.022093][ T6166] loop5: detected capacity change from 0 to 1024 [ 134.067277][ T6166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 134.069443][ T6171] loop6: detected capacity change from 0 to 256 [ 134.102381][ T6166] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.115237][ T6172] x_tables: duplicate underflow at hook 1 [ 134.124891][ T6171] vfat: Unknown parameter '00000000000000000000000' [ 134.221763][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.958201][ T6191] loop0: detected capacity change from 0 to 512 [ 136.687026][ T6199] gre0: entered promiscuous mode [ 136.724146][ T6199] gre0: entered allmulticast mode [ 136.737077][ T6191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.750605][ T6191] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.834580][ T6199] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 136.862750][ T28] audit: type=1400 audit(1774009686.236:3207): avc: denied { write } for pid=6194 comm="syz.4.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 136.881316][ T6205] netlink: 'syz.2.586': attribute type 10 has an invalid length. [ 136.933302][ T6205] team0: Device wg1 is of different type [ 137.040935][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.085855][ T6217] netlink: 16 bytes leftover after parsing attributes in process `syz.6.590'. [ 137.114794][ T6217] netlink: 16 bytes leftover after parsing attributes in process `syz.6.590'. [ 137.124704][ T6217] netlink: 16 bytes leftover after parsing attributes in process `syz.6.590'. [ 137.243881][ T6225] 9p: Bad value for 'rfdno' [ 137.323165][ T6231] loop0: detected capacity change from 0 to 1024 [ 137.370772][ T6233] loop4: detected capacity change from 0 to 512 [ 137.488694][ T28] audit: type=1400 audit(1774009686.858:3208): avc: denied { accept } for pid=6218 comm="syz.4.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 137.639602][ T6231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.154083][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.202387][ T6235] netlink: 'syz.2.592': attribute type 12 has an invalid length. [ 139.230876][ T6235] netlink: 132 bytes leftover after parsing attributes in process `syz.2.592'. [ 139.706837][ T6273] loop4: detected capacity change from 0 to 512 [ 139.773108][ T6273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.785711][ T6273] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.042283][ T6282] netlink: 36 bytes leftover after parsing attributes in process `syz.6.602'. [ 140.339851][ T6290] 9p: Bad value for 'rfdno' [ 140.406331][ T6295] loop6: detected capacity change from 0 to 1024 [ 140.451919][ T6295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.607746][ T6299] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.603'. [ 140.882604][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.951893][ T6303] loop4: detected capacity change from 0 to 128 [ 141.048246][ T6303] /dev/loop4: Can't open blockdev [ 141.053918][ T4044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.130391][ T6312] tipc: Started in network mode [ 141.141637][ T6312] tipc: Node identity , cluster identity 4711 [ 143.267840][ T6327] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 143.274407][ T6327] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 143.292573][ T6328] loop4: detected capacity change from 0 to 512 [ 143.299525][ T6328] /dev/loop4: Can't open blockdev [ 143.352519][ T6327] vhci_hcd vhci_hcd.0: Device attached [ 143.359548][ T6332] rdma_rxe: rxe_newlink: failed to add lo [ 143.397685][ T6327] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 143.404368][ T6327] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 143.567700][ T6339] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 143.574324][ T6339] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 143.597622][ T6342] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 143.604259][ T6342] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 143.939003][ T6346] loop6: detected capacity change from 0 to 512 [ 144.149183][ T6327] vhci_hcd vhci_hcd.0: Device attached [ 144.178728][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 144.186200][ T6342] vhci_hcd vhci_hcd.0: Device attached [ 144.192143][ T6339] vhci_hcd vhci_hcd.0: Device attached [ 144.228202][ T6327] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 144.236451][ T10] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 144.257449][ T6327] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 144.288442][ T6327] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(18) [ 144.295150][ T6327] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 144.353252][ T6347] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(10) [ 144.359932][ T6347] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 144.411011][ T6327] vhci_hcd vhci_hcd.0: Device attached [ 144.436979][ T6347] vhci_hcd vhci_hcd.0: Device attached [ 144.457801][ T6349] vhci_hcd: connection closed [ 144.458051][ T3790] vhci_hcd vhci_hcd.0: stop threads [ 144.472560][ T6333] vhci_hcd: connection closed [ 144.472861][ T6330] vhci_hcd: connection reset by peer [ 144.486076][ T6343] vhci_hcd: connection closed [ 144.486426][ T6340] vhci_hcd: connection closed [ 144.494621][ T6348] vhci_hcd: connection closed [ 144.505886][ T3790] vhci_hcd vhci_hcd.0: release socket [ 144.537929][ T6346] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.550547][ T6346] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.591709][ T3790] vhci_hcd vhci_hcd.0: disconnect device [ 144.608428][ T3790] vhci_hcd vhci_hcd.0: stop threads [ 144.614592][ T28] audit: type=1326 audit(1774009694.004:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6355 comm="syz.2.616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1be1f7c799 code=0x0 [ 144.638466][ T3790] vhci_hcd vhci_hcd.0: release socket [ 144.644523][ T3790] vhci_hcd vhci_hcd.0: disconnect device [ 144.651081][ T3790] vhci_hcd vhci_hcd.0: stop threads [ 144.656965][ T3790] vhci_hcd vhci_hcd.0: release socket [ 144.662447][ T3790] vhci_hcd vhci_hcd.0: disconnect device [ 144.668608][ T3790] vhci_hcd vhci_hcd.0: stop threads [ 144.674000][ T3790] vhci_hcd vhci_hcd.0: release socket [ 144.679980][ T3790] vhci_hcd vhci_hcd.0: disconnect device [ 144.686274][ T3790] vhci_hcd vhci_hcd.0: stop threads [ 144.691572][ T3790] vhci_hcd vhci_hcd.0: release socket [ 144.697462][ T3790] vhci_hcd vhci_hcd.0: disconnect device [ 144.703341][ T3790] vhci_hcd vhci_hcd.0: stop threads [ 144.708874][ T3790] vhci_hcd vhci_hcd.0: release socket [ 144.714410][ T3790] vhci_hcd vhci_hcd.0: disconnect device [ 144.814202][ T4044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.918928][ T6368] 9p: Bad value for 'rfdno' [ 144.990498][ T6371] loop4: detected capacity change from 0 to 1024 [ 145.016955][ T6371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.484616][ T6380] netlink: 76 bytes leftover after parsing attributes in process `syz.0.623'. [ 145.636234][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.717646][ T6392] loop0: detected capacity change from 0 to 512 [ 145.794830][ T6392] EXT4-fs (loop0): 1 truncate cleaned up [ 145.800998][ T6392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.896432][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.059039][ T6401] loop4: detected capacity change from 0 to 512 [ 147.860201][ T6407] loop0: detected capacity change from 0 to 164 [ 148.344584][ T6407] isofs_fill_super: root inode is not a directory. Corrupted media? [ 148.405014][ T6411] loop4: detected capacity change from 0 to 1764 [ 148.452755][ T6411] iso9660: Unknown parameter 'iocharset9]' [ 148.493660][ T6417] gretap1: entered promiscuous mode [ 148.853292][ T28] audit: type=1400 audit(1774009698.253:3210): avc: denied { getopt } for pid=6425 comm="syz.6.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.043223][ T6428] loop6: detected capacity change from 0 to 512 [ 149.185957][ T6428] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.219337][ T6428] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.255271][ T10] usb 1-1: enqueue for inactive port 0 [ 149.260801][ T10] usb 1-1: enqueue for inactive port 0 [ 149.268522][ T4044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.348726][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 149.384575][ T6438] 9p: Bad value for 'wfdno' [ 149.456377][ T6443] loop4: detected capacity change from 0 to 1024 [ 149.507875][ T6443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.664899][ T6448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.640'. [ 149.763659][ T6452] loop6: detected capacity change from 0 to 128 [ 150.100922][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.217382][ T6464] loop0: detected capacity change from 0 to 512 [ 150.247793][ T6464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.260447][ T6464] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.389030][ T6468] loop6: detected capacity change from 0 to 512 [ 153.094376][ T6480] tipc: Failed to remove unknown binding: 66,1,1/0:2366699187/2366699189 [ 153.104015][ T6479] tipc: Failed to remove unknown binding: 66,1,1/0:2366699187/2366699189 [ 153.131856][ T6479] tipc: Failed to remove unknown binding: 66,1,1/0:2366699187/2366699189 [ 153.174837][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.196768][ T3403] IPVS: starting estimator thread 0... [ 153.322267][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'. [ 153.357277][ T6487] IPVS: using max 2208 ests per chain, 110400 per kthread [ 153.380284][ T28] audit: type=1400 audit(1774009702.782:3211): avc: denied { connect } for pid=6490 comm="syz.2.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.431438][ T6492] loop0: detected capacity change from 0 to 512 [ 153.466018][ T6492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.479267][ T6492] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.497489][ T6492] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 153.512810][ T6492] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 153.525142][ T6492] EXT4-fs (loop0): This should not happen!! Data will be lost [ 153.525142][ T6492] [ 153.535090][ T6492] EXT4-fs (loop0): Total free blocks count 0 [ 153.541878][ T6492] EXT4-fs (loop0): Free/Dirty block details [ 153.547838][ T6492] EXT4-fs (loop0): free_blocks=65280 [ 153.553153][ T6492] EXT4-fs (loop0): dirty_blocks=33 [ 153.558382][ T6492] EXT4-fs (loop0): Block reservation details [ 153.564645][ T6492] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 153.574488][ T28] audit: type=1400 audit(1774009702.902:3212): avc: denied { read write } for pid=6491 comm="syz.0.652" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.606721][ T28] audit: type=1400 audit(1774009702.902:3213): avc: denied { open } for pid=6491 comm="syz.0.652" path="/124/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.652235][ T28] audit: type=1400 audit(1774009702.952:3214): avc: denied { map } for pid=6491 comm="syz.0.652" path="/124/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.686215][ T28] audit: type=1400 audit(1774009702.952:3215): avc: denied { execute } for pid=6491 comm="syz.0.652" path="/124/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.711850][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.748330][ T6512] tipc: Trying to set illegal importance in message [ 155.307043][ T6520] 9p: Bad value for 'wfdno' [ 155.409551][ T6522] loop0: detected capacity change from 0 to 1024 [ 155.541613][ T6529] loop4: detected capacity change from 0 to 512 [ 155.566340][ T6529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.579065][ T6529] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.714168][ T6522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.898372][ T6536] loop6: detected capacity change from 0 to 512 [ 155.958424][ T6536] msdos: Bad value for 'uid' [ 155.987200][ T6536] msdos: Bad value for 'uid' [ 156.007653][ T6536] netlink: 60 bytes leftover after parsing attributes in process `syz.6.664'. [ 156.046566][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.094671][ T6542] loop4: detected capacity change from 0 to 256 [ 156.132836][ T6542] msdos: Invalid uid '0x00000000ffffffff' [ 156.184167][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.196154][ T6545] lo speed is unknown, defaulting to 1000 [ 156.323141][ T6548] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 156.548939][ T6568] netlink: 60 bytes leftover after parsing attributes in process `syz.0.673'. [ 156.795347][ T28] audit: type=1326 audit(1774533994.201:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be1f7c799 code=0x7ffc0000 [ 156.827021][ T28] audit: type=1326 audit(1774533994.211:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f1be1f7c799 code=0x7ffc0000 [ 156.852296][ T28] audit: type=1326 audit(1774533994.211:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be1f7c799 code=0x7ffc0000 [ 156.876513][ T28] audit: type=1326 audit(1774533994.240:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f1be1f7c799 code=0x7ffc0000 [ 156.935164][ T6577] loop0: detected capacity change from 0 to 512 [ 156.963060][ T6577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.975658][ T6577] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.335639][ T6584] 9p: Bad value for 'wfdno' [ 157.412326][ T6587] loop4: detected capacity change from 0 to 1024 [ 157.575955][ T6587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.648503][ T28] audit: type=1326 audit(1774533995.044:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6570 comm="syz.2.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be1f7c799 code=0x7ffc0000 [ 158.095562][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.157741][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.323675][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 158.397225][ T6613] netlink: 'syz.4.685': attribute type 8 has an invalid length. [ 160.638349][ T6645] netlink: 277 bytes leftover after parsing attributes in process `syz.0.693'. [ 161.027976][ T6653] FAULT_INJECTION: forcing a failure. [ 161.027976][ T6653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.068566][ T6653] CPU: 0 UID: 0 PID: 6653 Comm: syz.0.696 Tainted: G W syzkaller #0 PREEMPT(full) [ 161.068614][ T6653] Tainted: [W]=WARN [ 161.068624][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.068693][ T6653] Call Trace: [ 161.068701][ T6653] [ 161.068710][ T6653] __dump_stack+0x1d/0x30 [ 161.068745][ T6653] dump_stack_lvl+0x95/0xd0 [ 161.068781][ T6653] dump_stack+0x15/0x1b [ 161.068811][ T6653] should_fail_ex+0x263/0x280 [ 161.068846][ T6653] should_fail+0xb/0x20 [ 161.068869][ T6653] should_fail_usercopy+0x1a/0x20 [ 161.068965][ T6653] _copy_to_user+0x20/0xa0 [ 161.069006][ T6653] simple_read_from_buffer+0xb5/0x130 [ 161.069032][ T6653] proc_fail_nth_read+0x10e/0x150 [ 161.069064][ T6653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.069160][ T6653] vfs_read+0x1ab/0x7f0 [ 161.069259][ T6653] ? __rcu_read_unlock+0x4e/0x70 [ 161.069344][ T6653] ? __fget_files+0x184/0x1c0 [ 161.069376][ T6653] ? mutex_lock+0x57/0x90 [ 161.069462][ T6653] ksys_read+0xdc/0x1a0 [ 161.069506][ T6653] __x64_sys_read+0x40/0x50 [ 161.069530][ T6653] x64_sys_call+0x2886/0x3020 [ 161.069603][ T6653] do_syscall_64+0x12c/0x370 [ 161.069630][ T6653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.069653][ T6653] RIP: 0033:0x7f624be4cfce [ 161.069681][ T6653] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.069708][ T6653] RSP: 002b:00007f624a8e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.069734][ T6653] RAX: ffffffffffffffda RBX: 00007f624a8e76c0 RCX: 00007f624be4cfce [ 161.069753][ T6653] RDX: 000000000000000f RSI: 00007f624a8e70a0 RDI: 0000000000000004 [ 161.069770][ T6653] RBP: 00007f624a8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 161.069786][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.069798][ T6653] R13: 00007f624c106038 R14: 00007f624c105fa0 R15: 00007ffc276c6608 [ 161.069819][ T6653] [ 161.319886][ T6655] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.694'. [ 161.457616][ T6668] loop5: detected capacity change from 0 to 256 [ 161.487256][ T6668] FAT-fs (loop5): Directory bread(block 64) failed [ 161.499971][ T6668] FAT-fs (loop5): Directory bread(block 65) failed [ 161.518694][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 161.518714][ T28] audit: type=1400 audit(1774533998.892:3223): avc: denied { bind } for pid=6670 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.544863][ T6668] FAT-fs (loop5): Directory bread(block 66) failed [ 161.551445][ T6668] FAT-fs (loop5): Directory bread(block 67) failed [ 161.558630][ T28] audit: type=1400 audit(1774533998.892:3224): avc: denied { read } for pid=6670 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.620897][ T6668] FAT-fs (loop5): Directory bread(block 68) failed [ 161.628816][ T6668] FAT-fs (loop5): Directory bread(block 69) failed [ 161.638604][ T6668] FAT-fs (loop5): Directory bread(block 70) failed [ 161.645260][ T28] audit: type=1400 audit(1774533998.962:3225): avc: denied { ioctl } for pid=6663 comm="syz.6.700" path="socket:[15687]" dev="sockfs" ino=15687 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 161.669999][ T6668] FAT-fs (loop5): Directory bread(block 71) failed [ 161.676737][ T6668] FAT-fs (loop5): Directory bread(block 72) failed [ 161.683355][ T6668] FAT-fs (loop5): Directory bread(block 73) failed [ 161.690095][ T6669] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.701'. [ 161.699664][ T6684] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.701'. [ 163.036335][ T6697] loop0: detected capacity change from 0 to 512 [ 163.821026][ T6700] netlink: 3 bytes leftover after parsing attributes in process `syz.5.704'. [ 163.989659][ T6710] netlink: 'syz.5.710': attribute type 3 has an invalid length. [ 164.022796][ T6710] netlink: 24 bytes leftover after parsing attributes in process `syz.5.710'. [ 164.060179][ T6712] loop5: detected capacity change from 0 to 512 [ 164.077646][ T6713] netlink: 14 bytes leftover after parsing attributes in process `syz.2.705'. [ 164.101968][ T6712] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 164.199270][ T28] audit: type=1400 audit(1774534001.552:3226): avc: denied { setopt } for pid=6716 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 164.262453][ T28] audit: type=1400 audit(1774534001.582:3227): avc: denied { accept } for pid=6716 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 164.301485][ T6724] loop4: detected capacity change from 0 to 256 [ 164.344936][ T28] audit: type=1400 audit(1774534001.631:3228): avc: denied { getopt } for pid=6720 comm="syz.2.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.389325][ T28] audit: type=1326 audit(1774534001.681:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6723 comm="syz.4.713" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ad8bcc799 code=0x0 [ 164.540056][ T6730] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.715'. [ 164.849664][ T28] audit: type=1400 audit(1774534002.207:3230): avc: denied { read } for pid=6738 comm="syz.5.717" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 164.898890][ T6741] loop5: detected capacity change from 0 to 128 [ 164.985513][ T6743] loop0: detected capacity change from 0 to 8192 [ 166.120766][ T6743] loop0: p1 < > p2 p4 < p5 > [ 166.125572][ T6743] loop0: partition table partially beyond EOD, truncated [ 166.133432][ T6743] loop0: p1 start 134217728 is beyond EOD, truncated [ 167.120619][ T6743] loop0: p2 size 591360 extends beyond EOD, truncated [ 167.370123][ T6743] loop0: p5 size 591360 extends beyond EOD, truncated [ 167.396798][ T6762] loop5: detected capacity change from 0 to 512 [ 167.421730][ T6762] EXT4-fs: Ignoring removed oldalloc option [ 167.439975][ T3000] loop0: p1 < > p2 p4 < p5 > [ 167.454508][ T6762] EXT4-fs: Mount option(s) incompatible with ext2 [ 167.466756][ T3000] loop0: partition table partially beyond EOD, truncated [ 167.486136][ T3000] loop0: p1 start 134217728 is beyond EOD, truncated [ 167.516293][ T3000] loop0: p2 size 591360 extends beyond EOD, truncated [ 167.554994][ T3000] loop0: p5 size 591360 extends beyond EOD, truncated [ 168.552222][ T6774] loop5: detected capacity change from 0 to 4096 [ 168.560626][ T6774] ext4: Unknown parameter 'fowner' [ 168.593524][ T6774] loop5: detected capacity change from 0 to 512 [ 168.688763][ T6774] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.726: invalid block [ 168.700793][ T6774] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 168.701647][ T6774] EXT4-fs (loop5): Remounting filesystem read-only [ 168.710828][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 168.710859][ C0] EXT4-fs (loop5): initial error at time 1774534006: ext4_get_branch:178: inode 11: block 4294967295 [ 168.710903][ C0] EXT4-fs (loop5): last error at time 1774534006: ext4_get_branch:178: inode 11: block 4294967295 [ 168.746265][ T6774] EXT4-fs (loop5): 2 truncates cleaned up [ 168.753724][ T6774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.217030][ T6785] batadv_slave_1: entered promiscuous mode [ 169.613234][ T6791] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.730'. [ 169.662962][ T28] audit: type=1400 audit(1774534006.089:3231): avc: denied { setattr } for pid=6770 comm="syz.5.726" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.923964][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.941345][ T6798] loop0: detected capacity change from 0 to 128 [ 170.058075][ T6784] batadv_slave_1: left promiscuous mode [ 170.418432][ T28] audit: type=1400 audit(1774534007.678:3232): avc: denied { listen } for pid=6803 comm="syz.5.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.299662][ T6823] loop4: detected capacity change from 0 to 128 [ 172.967209][ T6833] loop0: detected capacity change from 0 to 512 [ 173.566789][ T6830] lo speed is unknown, defaulting to 1000 [ 173.729404][ T6833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.742841][ T6833] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.886827][ T6847] loop5: detected capacity change from 0 to 128 [ 173.897212][ T6839] bond2: option fail_over_mac: invalid value (127) [ 173.906247][ T6839] bond2 (unregistering): Released all slaves [ 174.017031][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.103893][ T6856] SELinux: Context Y7j [ 174.103893][ T6856] u/$2Sٟ2'ks2- vjd #,N< [ 174.103893][ T6856] :E]Y\?ͼ=ً1KIk{kL^0}4nr}pįNwyxiu?+H~F1Wjm &8UۂVN2)GxV%5xeRM4r4cJsHU&'p2EMMk&cbU,,f@8bD%$f=8@kI|w Ox&KCH;x-Ko4i!Oi%ڂ2 F"2E,P] k? is not valid (left unmapped). [ 174.153026][ T6860] loop5: detected capacity change from 0 to 512 [ 174.191035][ T6866] loop4: detected capacity change from 0 to 512 [ 174.215412][ T6856] SELinux: Context *mkXI$hx4۫KM is not valid (left unmapped). [ 174.257286][ T6866] EXT4-fs: Ignoring removed bh option [ 174.263823][ T6856] SELinux: Context bkcj-<o;{Z^⬝3h is not valid (left unmapped). [ 174.277397][ T6856] SELinux: Context 5}M3pX:]Q?֧p{O)B RDP_N[`3?"Mp$=J9[ՃCZ &Zw8 lX&D;td BIݛ~L [ 174.310591][ T6856] uSċkxIRI$4"lX7f9٬bB|72*kNM is not valid (left unmapped). [ 174.347043][ T6866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.422100][ T6856] SELinux: Context WXE][O:Ѹo߭ObZDfq :~t6uYx(Q8NPZeoQ[aSI> is not valid (left unmapped). [ 174.449563][ T6866] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.596207][ T6887] loop5: detected capacity change from 0 to 1024 [ 174.678134][ T6887] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.729235][ T6866] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.745: iget: bad i_size value: 2533274857506816 [ 174.820924][ T6891] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.745: iget: bad i_size value: 2533274857506816 [ 174.991451][ T6856] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.745: iget: bad i_size value: 2533274857506816 [ 175.011857][ T6856] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.745: iget: bad i_size value: 2533274857506816 [ 175.124643][ T3867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.146114][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.221587][ T6900] loop4: detected capacity change from 0 to 512 [ 175.264963][ T6900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.292709][ T6900] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.471053][ T28] audit: type=1400 audit(1774542204.756:3233): avc: denied { shutdown } for pid=6897 comm="syz.5.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.506887][ T6880] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.748'. [ 175.556448][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.751'. [ 175.804252][ T6913] netlink: 'syz.2.754': attribute type 9 has an invalid length. [ 176.009092][ T28] audit: type=1400 audit(1774542204.756:3234): avc: denied { connect } for pid=6897 comm="syz.5.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.034679][ T28] audit: type=1400 audit(1774542204.766:3235): avc: denied { read } for pid=6897 comm="syz.5.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.112578][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.171265][ T28] audit: type=1400 audit(1774542205.466:3236): avc: denied { mount } for pid=6917 comm="syz.5.757" name="/" dev="configfs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 176.200125][ T28] audit: type=1400 audit(1774542205.496:3237): avc: denied { search } for pid=6917 comm="syz.5.757" name="/" dev="configfs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 176.303681][ T28] audit: type=1400 audit(1774542205.596:3238): avc: denied { read open } for pid=6917 comm="syz.5.757" path="/" dev="configfs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 176.355463][ T6923] loop4: detected capacity change from 0 to 512 [ 176.419181][ T6926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.759'. [ 176.845972][ T28] audit: type=1400 audit(1774542206.136:3239): avc: denied { mount } for pid=6950 comm="syz.5.768" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 176.986672][ T28] audit: type=1400 audit(1774542206.166:3240): avc: denied { name_bind } for pid=6964 comm="syz.4.774" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 177.343326][ T6998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.787'. [ 177.400128][ T6998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.787'. [ 177.518182][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.789'. [ 177.735589][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.758748][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.427720][ T7052] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 178.585950][ T28] audit: type=1400 audit(1774542207.876:3241): avc: denied { connect } for pid=7043 comm="syz.0.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 178.602349][ T7072] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 178.614260][ T7072] macsec1: entered allmulticast mode [ 178.621161][ T7072] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 178.630607][ T7072] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 178.637821][ T7072] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 178.756002][ T28] audit: type=1400 audit(1774542208.046:3242): avc: denied { name_connect } for pid=7079 comm="syz.4.822" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 178.792192][ T7086] netlink: 80 bytes leftover after parsing attributes in process `syz.0.825'. [ 179.746668][ T7124] netlink: 68 bytes leftover after parsing attributes in process `syz.5.839'. [ 179.871817][ T7141] lo speed is unknown, defaulting to 1000 [ 179.902179][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.912612][ T7149] netlink: 28 bytes leftover after parsing attributes in process `syz.6.843'. [ 179.935731][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.054794][ T7167] syzkaller0: entered promiscuous mode [ 180.067761][ T7167] syzkaller0: entered allmulticast mode [ 181.115911][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 181.116008][ T28] audit: type=1400 audit(1774542210.406:3244): avc: denied { shutdown } for pid=7273 comm="syz.6.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 181.329196][ T28] audit: type=1400 audit(1774542210.616:3245): avc: denied { nlmsg_read } for pid=7288 comm="syz.4.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 181.410390][ T7294] tipc: Started in network mode [ 181.471942][ T7294] tipc: Node identity f603b51fd6c, cluster identity 4711 [ 181.490424][ T7294] tipc: Enabled bearer , priority 0 [ 181.497569][ T7296] syzkaller0: entered promiscuous mode [ 181.503463][ T7296] syzkaller0: entered allmulticast mode [ 181.514423][ T7294] tipc: Resetting bearer [ 181.521039][ T7292] tipc: Resetting bearer [ 181.531379][ T7292] tipc: Disabling bearer [ 181.628232][ T28] audit: type=1400 audit(1774542210.916:3246): avc: denied { read } for pid=7303 comm="syz.0.882" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 181.651493][ T28] audit: type=1400 audit(1774542210.916:3247): avc: denied { open } for pid=7303 comm="syz.0.882" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 181.729178][ T28] audit: type=1400 audit(1774542211.016:3248): avc: denied { sys_module } for pid=7307 comm="syz.0.883" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 181.762163][ T7311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.772322][ T7311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.142581][ T28] audit: type=1400 audit(1774542211.426:3249): avc: denied { map } for pid=7327 comm="syz.0.890" path="socket:[17913]" dev="sockfs" ino=17913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.247312][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'. [ 182.360640][ T7341] netlink: 'syz.0.896': attribute type 21 has an invalid length. [ 182.368436][ T7341] netlink: 156 bytes leftover after parsing attributes in process `syz.0.896'. [ 182.445426][ T7345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.897'. [ 182.533325][ T7347] loop5: detected capacity change from 0 to 256 [ 182.588031][ T3867] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 182.596528][ T3867] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 182.820403][ T28] audit: type=1400 audit(1774542211.976:3250): avc: denied { open } for pid=7342 comm="syz.2.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 182.964656][ T28] audit: type=1400 audit(1774542211.976:3251): avc: denied { kernel } for pid=7342 comm="syz.2.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 183.085023][ T5288] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.108140][ T28] audit: type=1400 audit(1774542212.356:3252): avc: denied { read write } for pid=7360 comm="syz.4.904" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 183.122189][ T5288] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 183.140355][ T28] audit: type=1400 audit(1774542212.356:3253): avc: denied { open } for pid=7360 comm="syz.4.904" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 183.177980][ T5288] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.200223][ T5288] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.214086][ T3774] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.231000][ T5288] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.250197][ T5288] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.271208][ T5288] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.301092][ T3774] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.319611][ T5288] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.327181][ T5288] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.340262][ T5288] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 183.392958][ T5288] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 183.455384][ T7374] fido_id[7374]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 183.484371][ T3774] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.542883][ T3774] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.603678][ T7365] lo speed is unknown, defaulting to 1000 [ 183.669158][ T3774] bridge_slave_1: left allmulticast mode [ 183.675503][ T3774] bridge_slave_1: left promiscuous mode [ 183.692014][ T3774] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.703509][ T3774] bridge_slave_0: left allmulticast mode [ 183.709214][ T3774] bridge_slave_0: left promiscuous mode [ 183.715315][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.891903][ T3774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.902494][ T3774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.913795][ T3774] bond0 (unregistering): Released all slaves [ 183.942554][ T7420] syz.6.927 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 183.981062][ T3774] hsr_slave_0: left promiscuous mode [ 184.006263][ T3774] veth1_macvtap: left promiscuous mode [ 184.019649][ T3774] veth0_macvtap: left promiscuous mode [ 184.036641][ T3774] veth1_vlan: left promiscuous mode [ 184.044563][ T3774] veth0_vlan: left promiscuous mode [ 184.168159][ T3774] team0 (unregistering): Port device team_slave_1 removed [ 184.178418][ T3774] team0 (unregistering): Port device team_slave_0 removed [ 184.227639][ T5288] lo speed is unknown, defaulting to 1000 [ 184.241226][ T5288] syz0: Port: 1 Link DOWN [ 184.251670][ T7365] chnl_net:caif_netlink_parms(): no params data found [ 184.297573][ T7365] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.315547][ T7365] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.330162][ T7365] bridge_slave_0: entered allmulticast mode [ 184.336897][ T7365] bridge_slave_0: entered promiscuous mode [ 184.343813][ T7365] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.351123][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.358286][ T7365] bridge_slave_1: entered allmulticast mode [ 184.365765][ T7365] bridge_slave_1: entered promiscuous mode [ 184.391315][ T7365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.409662][ T7365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.435273][ T7365] team0: Port device team_slave_0 added [ 184.448193][ T7365] team0: Port device team_slave_1 added [ 184.503759][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.512113][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.539430][ T7365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.568917][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.575964][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.628681][ T7365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.665525][ T3774] IPVS: stop unused estimator thread 0... [ 184.690703][ T7365] hsr_slave_0: entered promiscuous mode [ 184.712179][ T7365] hsr_slave_1: entered promiscuous mode [ 185.022827][ T7365] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 185.049941][ T7365] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 185.064397][ T7365] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 185.103228][ T7365] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 185.606470][ T7365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.627150][ T7365] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.659797][ T3781] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.666921][ T3781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.692939][ T7531] netlink: 'syz.0.949': attribute type 2 has an invalid length. [ 185.709409][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.716503][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.858831][ T7550] netlink: 'syz.0.953': attribute type 4 has an invalid length. [ 185.961288][ T7365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.065364][ T7567] netlink: 44 bytes leftover after parsing attributes in process `syz.2.957'. [ 186.096355][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.103571][ T7567] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.178399][ T7555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.209801][ T7555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.279831][ T7365] veth0_vlan: entered promiscuous mode [ 186.295846][ T7365] veth1_vlan: entered promiscuous mode [ 186.323759][ T7365] veth0_macvtap: entered promiscuous mode [ 186.343222][ T7365] veth1_macvtap: entered promiscuous mode [ 186.368646][ T7604] 8021q: VLANs not supported on ip6gre0 [ 186.395999][ T7365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.415032][ T7365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.438363][ T3774] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.450481][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 186.450497][ T28] audit: type=1400 audit(1774542215.736:3256): avc: denied { write } for pid=7609 comm="syz.4.971" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 186.481555][ T3774] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.499834][ T3774] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.508915][ T3774] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.549253][ T28] audit: type=1400 audit(1774542215.836:3257): avc: denied { mounton } for pid=7365 comm="syz-executor" path="/root/syzkaller.WQcz1k/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 186.587663][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.972'. [ 186.591316][ T28] audit: type=1400 audit(1774542215.836:3258): avc: denied { mount } for pid=7365 comm="syz-executor" name="/" dev="gadgetfs" ino=3939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 186.633962][ T7615] vlan0: entered promiscuous mode [ 186.641422][ T7615] gretap0: entered promiscuous mode [ 186.673244][ T7619] netlink: 64 bytes leftover after parsing attributes in process `syz.7.907'. [ 186.793629][ T7635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.980'. [ 186.870191][ T7641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.896630][ T7641] team0: Port device bond0 added [ 186.919701][ T7641] bridge0: port 3(team0) entered blocking state [ 186.928865][ T7641] bridge0: port 3(team0) entered disabled state [ 186.935968][ T7641] team0: entered allmulticast mode [ 186.942117][ T7641] team_slave_0: entered allmulticast mode [ 186.947907][ T7641] team_slave_1: entered allmulticast mode [ 186.956910][ T7641] bond0: entered allmulticast mode [ 186.962652][ T7641] bond_slave_0: entered allmulticast mode [ 186.968495][ T7641] bond_slave_1: entered allmulticast mode [ 186.978414][ T7641] team0: entered promiscuous mode [ 186.984375][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.993237][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.004832][ T7641] team_slave_0: entered promiscuous mode [ 187.042458][ T7641] team_slave_1: entered promiscuous mode [ 187.059150][ T7641] bond0: entered promiscuous mode [ 187.075400][ T7641] bond_slave_0: entered promiscuous mode [ 187.096396][ T7641] bond_slave_1: entered promiscuous mode [ 187.896995][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1002'. [ 187.910139][ T7690] vlan2: entered promiscuous mode [ 187.915322][ T7690] bridge0: entered promiscuous mode [ 188.159675][ T7702] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 188.772142][ T28] audit: type=1326 audit(1774542218.066:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be1f7c799 code=0x7ffc0000 [ 188.826667][ T28] audit: type=1326 audit(1774542218.096:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f1be1f7c799 code=0x7ffc0000 [ 188.858349][ T28] audit: type=1326 audit(1774542218.096:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be1f7c799 code=0x7ffc0000 [ 188.929441][ T28] audit: type=1326 audit(1774542218.096:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be1f7c799 code=0x7ffc0000 [ 188.970050][ T28] audit: type=1326 audit(1774542218.096:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f1be1f7c799 code=0x7ffc0000 [ 188.993851][ T28] audit: type=1400 audit(1774542218.096:3264): avc: denied { watch watch_reads } for pid=7737 comm="syz.2.1021" path="/242/file0" dev="tmpfs" ino=1281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 189.018622][ T28] audit: type=1326 audit(1774542218.096:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.2.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be1f7c799 code=0x7ffc0000 [ 189.210687][ T7768] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1034'. [ 189.475641][ T7798] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1046'. [ 190.576066][ T7846] tipc: Enabling of bearer rejected, failed to enable media [ 190.915198][ T7872] netlink: 'syz.0.1073': attribute type 2 has an invalid length. [ 191.172103][ T7892] tipc: Enabling of bearer rejected, failed to enable media [ 191.307470][ T7909] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1085'. [ 191.523648][ T7926] loop7: detected capacity change from 0 to 128 [ 191.535490][ T7927] tipc: Enabling of bearer rejected, failed to enable media [ 191.687707][ T7933] loop4: detected capacity change from 0 to 512 [ 192.735425][ T7939] netlink: 748 bytes leftover after parsing attributes in process `syz.6.1095'. [ 194.191194][ T7933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.203970][ T7933] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.425226][ T7960] netlink: 'syz.2.1097': attribute type 2 has an invalid length. [ 196.630101][ T7973] syzkaller0: entered promiscuous mode [ 196.712180][ T7971] loop0: detected capacity change from 0 to 512 [ 197.484804][ T7973] syzkaller0: entered allmulticast mode [ 198.668800][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.730276][ T7990] tipc: Started in network mode [ 198.735255][ T7990] tipc: Node identity 42306355a3de, cluster identity 4711 [ 198.759922][ T7990] tipc: Enabled bearer , priority 0 [ 198.882663][ T7990] syzkaller0: entered promiscuous mode [ 198.889433][ T7990] syzkaller0: entered allmulticast mode [ 198.948846][ T8012] netlink: 'syz.7.1112': attribute type 1 has an invalid length. [ 199.007188][ T7990] tipc: Resetting bearer [ 199.569427][ T8017] ================================================================== [ 199.577574][ T8017] BUG: KCSAN: data-race in ktime_get / timekeeping_update_from_shadow [ 199.585890][ T8017] [ 199.588228][ T8017] write to 0xffffffff893c7108 of 280 bytes by interrupt on cpu 0: [ 199.596053][ T8017] timekeeping_update_from_shadow+0x2b4/0x2f0 [ 199.602252][ T8017] __timekeeping_advance+0xa5b/0xbe0 [ 199.607589][ T8017] update_wall_time+0x24/0x90 [ 199.612307][ T8017] tick_do_update_jiffies64+0x169/0x1c0 [ 199.617894][ T8017] tick_nohz_handler+0x8d/0x3d0 [ 199.622808][ T8017] __hrtimer_run_queues+0x218/0x4f0 [ 199.628036][ T8017] hrtimer_interrupt+0x269/0x810 [ 199.633089][ T8017] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 199.639026][ T8017] sysvec_apic_timer_interrupt+0x6f/0x80 [ 199.644699][ T8017] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 199.650795][ T8017] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 199.656458][ T8017] __unix_dgram_recvmsg+0x3a7/0x860 [ 199.661708][ T8017] unix_dgram_recvmsg+0x81/0x90 [ 199.666601][ T8017] sock_recvmsg_nosec+0xc2/0xf0 [ 199.671480][ T8017] ____sys_recvmsg+0x26f/0x280 [ 199.676290][ T8017] ___sys_recvmsg+0x11f/0x3b0 [ 199.681003][ T8017] do_recvmmsg+0x1ef/0x560 [ 199.685460][ T8017] __x64_sys_recvmmsg+0xe5/0x170 [ 199.690445][ T8017] x64_sys_call+0x80f/0x3020 [ 199.695075][ T8017] do_syscall_64+0x12c/0x370 [ 199.699703][ T8017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.705703][ T8017] [ 199.708046][ T8017] read to 0xffffffff893c7128 of 8 bytes by task 8017 on cpu 1: [ 199.715615][ T8017] ktime_get+0x12e/0x210 [ 199.719888][ T8017] bpf_test_timer_continue+0x2ea/0x350 [ 199.725394][ T8017] bpf_test_run+0x2f8/0x620 [ 199.729947][ T8017] bpf_prog_test_run_skb+0x9a4/0xef0 [ 199.735279][ T8017] bpf_prog_test_run+0x204/0x340 [ 199.740256][ T8017] __sys_bpf+0x52e/0x7e0 [ 199.744532][ T8017] __x64_sys_bpf+0x41/0x50 [ 199.748986][ T8017] x64_sys_call+0x10cb/0x3020 [ 199.753796][ T8017] do_syscall_64+0x12c/0x370 [ 199.758413][ T8017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.764338][ T8017] [ 199.766694][ T8017] value changed: 0x00330937fc3d149a -> 0x0033a1ce7f0bdb3a [ 199.773812][ T8017] [ 199.776269][ T8017] Reported by Kernel Concurrency Sanitizer on: [ 199.782453][ T8017] CPU: 1 UID: 0 PID: 8017 Comm: syz.2.1111 Tainted: G W syzkaller #0 PREEMPT(full) [ 199.793336][ T8017] Tainted: [W]=WARN [ 199.797154][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.807317][ T8017] ================================================================== [ 199.953465][ T7987] tipc: Resetting bearer [ 199.971084][ T7987] tipc: Disabling bearer [ 199.992938][ T8012] bond1: entered promiscuous mode [ 200.077888][ T8012] bond1: entered allmulticast mode [ 200.083421][ T8012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.319785][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 200.319802][ T28] audit: type=1400 audit(1774542229.586:3269): avc: denied { write } for pid=8013 comm="syz.6.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 200.410850][ T8019] erspan1: entered allmulticast mode [ 201.016464][ T8019] bond1: (slave erspan1): making interface the new active one [ 201.030072][ T8012] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 201.036720][ T8012] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.042191][ T8019] erspan1: entered promiscuous mode [ 201.065285][ T8019] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 201.101219][ T8019] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(13) [ 201.107871][ T8019] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 201.127556][ T8012] vhci_hcd vhci_hcd.0: Device attached [ 201.139854][ T8019] vhci_hcd vhci_hcd.0: Device attached [ 201.155467][ T8012] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(12) [ 201.162122][ T8012] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 201.203005][ T8012] vhci_hcd vhci_hcd.0: Device attached [ 201.219747][ T8012] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.237962][ T8012] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(18) [ 201.244609][ T8012] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 201.269209][ T8012] vhci_hcd vhci_hcd.0: Device attached [ 201.283740][ T8012] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(20) [ 201.290404][ T8012] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 201.312016][ T8012] vhci_hcd vhci_hcd.0: Device attached [ 201.326596][ T3395] tipc: Node number set to 3790496597 [ 201.338022][ T8036] vhci_hcd: connection closed [ 201.338261][ T70] vhci_hcd vhci_hcd.7: stop threads [ 201.338402][ T8030] vhci_hcd: connection closed [ 201.348820][ T8051] vhci_hcd: connection closed [ 201.349458][ T70] vhci_hcd vhci_hcd.7: release socket [ 201.354306][ T8041] vhci_hcd: connection closed [ 201.358259][ T70] vhci_hcd vhci_hcd.7: disconnect device [ 201.360164][ T8047] vhci_hcd: connection closed [ 201.364993][ T10] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 201.381899][ T70] vhci_hcd vhci_hcd.7: stop threads [ 201.392538][ T70] vhci_hcd vhci_hcd.7: release socket [ 201.398030][ T70] vhci_hcd vhci_hcd.7: disconnect device [ 201.404194][ T70] vhci_hcd vhci_hcd.7: stop threads [ 201.404414][ T10] usb 15-1: enqueue for inactive port 0 [ 201.410040][ T70] vhci_hcd vhci_hcd.7: release socket [ 201.421491][ T70] vhci_hcd vhci_hcd.7: disconnect device [ 201.424305][ T10] usb 15-1: enqueue for inactive port 0 [ 201.437560][ T70] vhci_hcd vhci_hcd.7: stop threads [ 201.437618][ T10] usb 15-1: enqueue for inactive port 0 [ 201.445980][ T70] vhci_hcd vhci_hcd.7: release socket [ 201.456241][ T70] vhci_hcd vhci_hcd.7: disconnect device [ 201.462469][ T70] vhci_hcd vhci_hcd.7: stop threads [ 201.467917][ T70] vhci_hcd vhci_hcd.7: release socket [ 201.474126][ T70] vhci_hcd vhci_hcd.7: disconnect device [ 201.519693][ T10] vhci_hcd vhci_hcd.7: vhci_device speed not set