last executing test programs: 3m58.246272313s ago: executing program 3 (id=1905): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f00000003c0)={0x3d, 0x2c, 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) 3m57.087360229s ago: executing program 3 (id=1908): r0 = socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x4, 0x8, 0x4, 0x4, 0x2, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0x2}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3m56.835376825s ago: executing program 3 (id=1909): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x2000000000000216, &(0x7f0000000580)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xdfc, 0x9}, 0xf0a0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8, 0x80000) socket$packet(0x11, 0x3, 0x300) sendto(r0, &(0x7f0000000100)="9e8d65d6fa2c1546076aa58ed328964279855af5a55f917c69d9bfed18a4ddb413a7380000ade5d3dc05f18ec046493c3fde640000000000000000", 0x3b, 0x404009c, &(0x7f0000000500)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x6000, 0xfffff298, @private1, 0xfffffffd}}, 0x80) 3m52.376112444s ago: executing program 3 (id=1929): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, 0x0, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x7, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080), 0x4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0xc000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x100000a, 0x10, r2, 0x0) syz_io_uring_setup(0x3b04, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000002c0)=0x5, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x0, 0x0) keyctl$set_timeout(0xf, r4, 0x101fffffe) 3m51.737584968s ago: executing program 3 (id=1931): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m51.104538123s ago: executing program 3 (id=1932): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3m50.893386538s ago: executing program 32 (id=1932): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 10.362316258s ago: executing program 1 (id=2796): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_config_ext={0x200000000003, 0x1}, 0x10d561, 0x0, 0x0, 0x7, 0x4, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0xa) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x6}, 0x108407, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 9.630822834s ago: executing program 1 (id=2800): socket$inet6_icmp(0xa, 0x2, 0x3a) socket$l2tp(0x2, 0x2, 0x73) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) getpgid(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x49880) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x20000046) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) finit_module(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) getpid() ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_clone3(&(0x7f00000002c0)={0x801400, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x65, 0x0) 9.456268818s ago: executing program 1 (id=2803): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) open(0x0, 0x0, 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_config_ext={0x4b, 0x4168}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000002c0)={0x8}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000200)={[{@grpquota}]}, 0x9, 0xbac, &(0x7f00000017c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {0x0, 0xffffffffffffffff}}, './file0\x00'}) getgroups(0x0, &(0x7f0000000400)) getegid() fallocate(r2, 0x63, 0x0, 0x8001000f3) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x10012, r6, 0x0) perf_event_open(0x0, 0x0, 0xb, r1, 0x9) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0) 8.170895367s ago: executing program 2 (id=2814): sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64], 0x70}, 0x4080) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x40) r2 = msgget$private(0x0, 0x480) msgsnd(r2, &(0x7f0000000480)=ANY=[], 0x401, 0x0) msgrcv(r2, 0x0, 0x0, 0x0, 0x1400) msgctl$IPC_RMID(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000f206000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000000200000000000009000000718a0c00fcffffffda0be0ffffffffff18180000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x1f, r4, 0xa, 0xf) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400000000080c000000140001002001000000000000000000000000000114000200fc0200000000000000000000000000ff080018004e244e246ffec4d916392a7a6e2891"], 0x4c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/19, @ANYRES32=r1, @ANYBLOB="00000000600000003c0012800b000180697036746e6c000700000000000000002001000000000000000000000000000114000200fc020000000000000800000000000000c23584"], 0x5c}, 0x1, 0x0, 0x0, 0x8024}, 0x801) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4002004) unshare(0xc040480) syz_io_uring_setup(0x63f0, &(0x7f0000000000)={0x0, 0x87da, 0x2, 0x80002, 0x124}, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001e002102000000000000000007060000000000000000f380500028804c000a"], 0x6c}}, 0x4000090) 8.013499631s ago: executing program 0 (id=2815): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x4, 0x4, 0x3a8, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@empty, @mcast1, [0xff000000, 0xffffff00, 0x0, 0xff000000], [0x100000001, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'ip6gre0\x00', {}, {}, 0x3b, 0xa2, 0x1}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x41, {0xa14}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0xfc}, @remote, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe3, 0x4, 0x44}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x4, 0x800, 0xb9e, 0x6, 0x8, 0x3, 0x4], 0x13}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="03030800060416000c0045", @ANYRES64=r3, @ANYRESDEC=r3, @ANYRES16=r4], 0x2f) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, 0x0, &(0x7f0000000100)=0x54) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map, r6, 0x26}, 0x10) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x2404, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") socket$nl_generic(0x10, 0x3, 0x10) 6.967549754s ago: executing program 1 (id=2816): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYRES64=r0], 0x108}}], 0x2, 0xc040) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x80000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.613729794s ago: executing program 2 (id=2819): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x2900, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20001850) 5.495094977s ago: executing program 2 (id=2821): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000300)={0x0, 0x0, 0x100, 0x0, 0x2}) fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) mmap$xdp(&(0x7f00002a0000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x80000000) r7 = syz_clone(0x1008100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r7, 0x1, &(0x7f00000001c0)={&(0x7f00000003c0)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0547f05841e0000000000000000", 0x28}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 5.162707985s ago: executing program 1 (id=2823): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001100000000000000000000000000100000208000a400000000008000640ffffff000900010073797a3000000000080005400000001c0900020073797a3200000000080003400000008c38000980340002800c00018008000140000000000c0001800800014000000002140000001000010000000000000000000784000a00"/161], 0xac}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) r2 = socket$inet(0xa, 0x1, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0xfffffffffffffd31) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000440)={[{@errors_remount}, {@jqfmt_vfsv1}]}, 0xfa, 0x4cc, &(0x7f00000016c0)="$eJzs3M1vVFUbAPDnTqct5eNtX15eFUSpohEltrSAsnABRhMXxpi40WXTFqwUatpihBCtLnBpTNwTl/wLrnRjjCsTtrg3JMSwATQmY+7MvdNp54PpFyPM7xdm5pw7d+49T885M+fcw0wAXWs4vUsidkbEjYgYrGRX7jBcebh7+/LkvduXJ5Mold77Iynvd+f25cl81/x1O/LM0srttRYuXjo7MTs73X/82jtpfnTx3MejCxcvvTxzbuLM9Jnp8+MnThw7OvbqK+PHmxe+t/040zLd2ffZ3P69b33wTe+q+FfE8Un7B21tuMG2njzx/Gad5V9iV/l+oHyfFPOthc4ViLakDbKYdaUbMRg9Ua28GIw3v+xo4YAt1fojdCgiSsuS7LF2G/AQS9ruzb36PTxSsg/6JGJpMp0D187nu8GtU5UJUBr33exWeaZYnb32Vue3my+dbb2/9OfV9BbL1yH6tuh0AADxw6nKYz72Wx7/FaoXgpN7pdLJbG1oKCL+GxG7I+J/EbEnIv4fEY9FxOMR8UTNsRut+6y2epGkfvxZuLnu4Npw63DEa9na1srxX3XtYqgny+0qx9+bnJ6ZnT4SEf+JiEPR25/mx1qc48c3rn+dJevGdcM147/0lp4/Hwtm5bhZ7F/5mqmJxYmNxp279UXEvmKj+JPqSkBaj3sjYt+B9Z1j5qVr+5s91yD+gYi42vKAxVWPG1D6LuKFSv0vxar4c0nr9cnRbTE7fWQ0bxX1fvn1yrvNzn//+t9aaf1vb9j+q/EPJTXrtfMLaz/Hld++ajqnbLP9r+g3afvvS1Z2pU8nFhfnxyL6krfL+b44mW2P+v3Gl/dP4z90sHH/3x3Lf4knIyJtxE9FxNMRcSAr+zMR8WxEHGwR/8+vP/fR+uPfWmn8U/ev/w9frNZ/00S+tl33VM/Zn74vP5NX2VCL+JNoUP/HyqlD2ZZ23v9alnR+I60ZAAAAHj6FiNgZSWGkmi4URkYq/19+T2wvzM4tLB4+PXfh/FTlOwJD0VvIr3QNVq+HxtJYNq3Pr4+Or8ofza4bf9szUM6PTM7NTnU6eOhyO5r0/9TvPZ0uHbDlNmEdDXhIrbf/l0qlzze5KMADVtf/Dfyhaxj/Q/dq0P8HajP95X/Ao6im/xfyTM3E/u/l7wkDj5pm4//rD7gcwINn/g/dS/+H7qX/Q1fKvglfjLa+Lb9FifT9p+k+PRHRqYI1SZRK2+p/5aCSmLmwlWfv28QD7lz9KwmDaztOFNZ40qS2jW1bw2801CWi0w1gjYm/sh/b3OBxim38xdKuND/QvDe1k0jKL+/0OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDm+CcAAP//p1vRPQ==") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x16) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='8', 0x0, 0x41, 0x0, 0x4c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r4, 0x0, r4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.89385002s ago: executing program 5 (id=2825): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000004c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x97, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}}], 0x2, 0x0) 4.632698576s ago: executing program 5 (id=2826): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c9020000", @ANYRES16, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 4.481168469s ago: executing program 5 (id=2827): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3cff8000480001ff80000000000000000a000000072000000000000014000180"], 0x3c}}, 0x0) 4.44088505s ago: executing program 0 (id=2829): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x3, 0x209, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000012c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r4, &(0x7f0000000540), 0x0}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3c4, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r7 = dup(r6) r8 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r7, r8, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 4.353574712s ago: executing program 5 (id=2830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff004) 3.686615187s ago: executing program 1 (id=2831): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) close(0x3) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80e42, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 3.141467479s ago: executing program 2 (id=2832): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500"], 0x54}}, 0x0) 3.038515622s ago: executing program 2 (id=2833): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYRES64=r0], 0x108}}], 0x2, 0xc040) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x80000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.953147654s ago: executing program 0 (id=2834): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r0, &(0x7f0000001880)=[{&(0x7f0000000040)="02a7dd3ff423d7e888b571755b92daeb", 0x10}, {&(0x7f0000000240)="7f38d9ef454c1f43c6e23c05814144c9e7c0bb9142f1f01ee39f51b054873922592fe9bfbc11ff41266f0d2471232bd451b40dc2aeea80a9f5462575f5c4bea709ebbdacfbce58fcf896a11ae0ecade6df4f402c9b05d664c3f1742d054885f4ef913536c5b977ca3e81f8dd278ee5b4085efa9b998ad9a97295fa3f1e57b275add8557e68714040b648d1d96d93b01c7096bc0596891ae7c834c693edabf86bb3c754fe6d4da009d109ac5d2f", 0xad}, {&(0x7f0000000380)="1a44a7c5fde4d492822f276bae1c9966cc80797a2d7d0bce08877c1f9c9670931b7b0822f4fca84c70df8a16bbe009820bdd1cda4e6839e19d34d6f4bf85d4711567bd4ed0b8f2dec28a97aa75cd5653623322d3c9ddb77d6f89594598931be38375323cbd3eb6943c3a7a940dad7e2d593de65c5bae84491c71ead09ce7cb33c641358d07f871fb25fc728564d2e6c52b781ac95a666bf6c26a928b3c0256b0e9d49609e0744f626b00f35655", 0xad}, {&(0x7f0000000440)="899dea6c1ed001d107b550992f1193f4361936d466ae9cbaa45d9647235d75de1a1114c48a560091bf56721f94c9884df0aa14755dd12903ba47c5d9671574fef0830d69ce06e845e9bf8758317eeb22c63b1b6c0f66755f63ca8e0dcef2d11814dcbbe710fa29412fddc03de1aa73edba7d35cab3567f6bda910afa617da2a40cd903f9c22398010b2b6f5c065eec1cce12a7b7d438dd27fbbecc252478754be6e638c77883e2f9e3a4cb05f5c73182d16f591098fe1adbfa085d3629c9885eb37a77611674817200c58568f27a95cba011e4e59e19355ec3d5fadc485292b1f8ab506ddc2bd48f9ca34683880baf26b94f4f02510f", 0xf6}, {&(0x7f0000000540)="55447ea17fb0d5e9c2c3db5500b81644a705749799a4f0b7452f2d5d0eeee5715866a4216933ed231fd8f2e666f0c229b182076b4f32c79227d3c3af0b00f5d7e5cb67e453719139ae570f43b5cd219a5b", 0x51}, {&(0x7f00000005c0)="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", 0xffd}, {&(0x7f00000015c0)="c135d56d0ff40506b6e234ef7bf87ac7af89a9d3f5528d926e34846d2bc2aa1c05f6934dd637950169407bbba0663e1d4d7b6c474efbdac0c58ae9fb8fb46c556bfdc8f9109cca1123c3f352ad910eda4165274d5e99bbb38242134e3a1e31d4560e6ad40319c9d2484d303682cc9581f1b0a491dee4c8ed66c305baa4e92e3059d719e576ef03f6542525c3ed07370338ac8df461da5776da6f2fb89d89c6c57ef02f09c8ed3a3e253d1841c754077d706793ba078e3a8110cab4002f058366c205f1c1c1c5bf0d49803ac780", 0xcd}, {&(0x7f00000016c0)}, {&(0x7f0000001700)="e266b4a591acccb1ef3926138ca4882246c6d012e9302484f616b9a4eab989c3535811cb007d3180d3b492781f6d6d87daf77b748fbe509663797e0c459f9be7218500f238f09bc77c10bae090f992", 0x4f}, {&(0x7f0000001780)="f140623ea6ed7a6e4923b28aa05ad951fd6a9707e25a6de0ce15776d75b18c039efb8cf4cc7a9220da91f41080f17af13678cc4d0d8bab149426a363ed1b25a1e40225364cc78ef118fda204fbefef65dff44e9c6794cac3e511626c5cd3def2b7342f53a1df19bcf200632479413f4f72e6a3d3a33fea2053001bac93226fdda88383146b1eec901d337842d39c7eed685059c7fdddcef1f7ec6be19ee86332b9e5cd44cb75ab6ef3faccad888d0e17c98780e4d5ae73", 0xb7}], 0xa) 2.833399866s ago: executing program 0 (id=2836): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000100"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004e000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = dup(r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x2b, 0x1, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000540)) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x1000, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newlink={0x34, 0x10, 0xffffff1f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x77288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a6c020000060a030400000000000000000a0000010900010073797a3100000000400204803c0201800a0001006d617463680000002c0202800b0001006367726f7570000008000240000000021402030006275c852770226714b06026799504d26462d0f7a66ead44d6899e1445d97832ad457d06138b69af69d529be95f1911eab1846eb51bda151a6b0736302fdfb9f2c903fa06bb26b5a1ce76b17878e8174d345499079f1da597f0326854d62b1f5d97f2de35a9cb60da0764d08dbaf74939de34af914a3ea3f02ca57df07e9ed10aecb90bdbabcfcdd62e3ef6913b29a63fd42d9276dc54b68f9bc26a02bfec3c72f303f719fe6ca141e405417118a3316ef2a473417d47a2c37cecc2f4333caf9b5d8096a71bc60c57dd3fc882043377d4140b7f4580a622043a0da245a977be1af6ec12bf2ec5c7ed50e1b4f9e144fe641036e5673089a6707b709515c62734ab864914ef7e6e82143b0f6a3a6ec884fb0ecb0567dff30ef656a1316898954a71db76db8b74d4749e35b33481ad897934c4c5b1ca2f8b7e93e8dadaa1d2c96c5f1e9ce253fc6f3335b981003f183afc65a3618d2ac05c2a557154862dc7805bf408ec8c74aef836fff2e6caf6925c8bb1f460cc68d410733bd2ff5d15c60bfd8c080839e416b589d51e18c402e0282aa1918d13aadca89120112ba089e9925a0b4cbf9441a2e63268c0b2fc90c38b840eb48e9800d6f4d731051bcae4924d5a7176d83d5951cf4dbd6108032b6a35b67d6c585ee1c047b1fea250f941fccce0210922b1d9f6c6a0da7e9bf3704c31afdf08438c1021cbe05fb24ec20dc9630f8c92a4f833f431b8ac1b0cc0a19fbf9420900020073797a3200000000140000001100010000000000000000000a00000a"], 0x294}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDMKTONE(r8, 0x4b30, 0xf) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x20000040) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000740)={0x0, 0xffffffffffffff5a, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="28000000100001000000000000000000100000003e0000001f0000000000000008001c00c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 2.780062967s ago: executing program 4 (id=2837): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c9020000", @ANYRES16, @ANYBLOB="00012dbd7000fedbdf2518000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000000000006001600060000000500120001000000060011000200000008000b00a3d100000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000100000006001600090000000500120000000000060011000100000008000b00050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000200000006001600800000000500120000000000060011000000000008000b0002000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b00ca0100000600160000260000050012000000000006001100fdff000008000b00020000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000001000006001600070000000500120000000000060011007900000008000b0000100000"], 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 2.68021526s ago: executing program 4 (id=2838): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x89a3, 0x0) 2.525514013s ago: executing program 4 (id=2839): sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64], 0x70}, 0x4080) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x40) r2 = msgget$private(0x0, 0x480) msgsnd(r2, &(0x7f0000000480)=ANY=[], 0x401, 0x0) msgrcv(r2, 0x0, 0x0, 0x0, 0x1400) msgctl$IPC_RMID(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000f206000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000000200000000000009000000718a0c00fcffffffda0be0ffffffffff18180000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x1f, r4, 0xa, 0xf) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400000000080c000000140001002001000000000000000000000000000114000200fc0200000000000000000000000000ff080018004e244e246ffec4d916392a7a6e2891"], 0x4c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=r1, @ANYBLOB="00000000600000003c0012800b000180697036746e6c000700000000000000002001000000000000000000000000000114000200fc020000000000000800000000000000c23584"], 0x5c}, 0x1, 0x0, 0x0, 0x8024}, 0x801) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x4002004) unshare(0xc040480) syz_io_uring_setup(0x63f0, &(0x7f0000000000)={0x0, 0x87da, 0x2, 0x80002, 0x124}, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001e002102000000000000000007060000000000000000f380500028804c000a"], 0x6c}}, 0x4000090) 2.437819795s ago: executing program 5 (id=2840): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x4, 0x4, 0x3a8, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@empty, @mcast1, [0xff000000, 0xffffff00, 0x0, 0xff000000], [0x100000001, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'ip6gre0\x00', {}, {}, 0x3b, 0xa2, 0x1}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x41, {0xa14}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0xfc}, @remote, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe3, 0x4, 0x44}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x4, 0x800, 0xb9e, 0x6, 0x8, 0x3, 0x4], 0x13}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="03030800060416000c0045", @ANYRES64=r3, @ANYRESDEC=r3, @ANYRES16=r4], 0x2f) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, 0x0, &(0x7f0000000100)=0x54) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map, r6, 0x26}, 0x10) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x2404, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") socket$nl_generic(0x10, 0x3, 0x10) 1.650615263s ago: executing program 2 (id=2841): r0 = socket(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000000)=0x5, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r2 = syz_usb_connect$midi(0x5, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r2, 0x0, 0xcf, &(0x7f00000007c0)=""/207) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x80000308) socket$nl_netfilter(0x10, 0x3, 0xc) rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00') open(0x0, 0x101800, 0x1) r4 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r4, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7, 0x43, 0x6, 0x4, 0x3, 0x3, 0x5, 0x2a6, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7362, 0x204, 0x200004, 0xce1, 0x80}]}, 0x58) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x52000a11) close(r4) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x4, 0x0, 0x4}, 0x1c) 1.159221883s ago: executing program 0 (id=2842): io_uring_setup(0x664b, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={&(0x7f0000000540), 0x4}, 0x11c0cc, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007000000af7bd369913461013b462da7ae711be8599b849632aba2bd00"/68], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noauto_da_alloc}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@noauto_da_alloc}, {@nouid32}]}, 0x7, 0x56a, &(0x7f00000015c0)="$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") close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b866c1d0000007ea60864160af3653c001a0038000000040000000600010009000300eab556a705251e618a94ff0251f60a84a7f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xe}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r6, 0x7}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 1.158426934s ago: executing program 4 (id=2843): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg(r0, &(0x7f00000000c0)={0x0, 0xb00, &(0x7f0000002700)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000001700)="b9447d4c69c8244a372504466b6e43ebf412f1fef2f1a2e6dae401227c0781eabf995fe875960d591f564478e0162049aa7f15e8c2fb66f2d8a5f705e03574752d7ada21c1f844012c1d53d35ff3395d97025bad87d35b2f1891a514d3ce973184c8943f819802b1ddcfb55b3b8fd65276c71f5b17c14efda15703f6ac92fb08fb26d2dbfa781ea0cbcadf778afca8823d0633803b63b1d88013c7f78705ecd1619946fc11ce5830055aded0d3abd6e9aa9bd535b3d85c66846257c7d77dcae12b6e5107d9356a6f0c458dbcfb4e6442be23987a9eeff289c947323914a575ce0de00a97f00cd9f7bb3b148679ff5f240de7d883dae3edb86e724365b35e7340bd201280cd932c8158d836267f0709c2bcacb2d536d515759b6609cf6eeb37c34599dc05c3d00b814b238811dda6e73cd075c7c08eb74c73d0362ee69f7c30e0981f637b9e3b84f02d8bfb94fb3f09c8631fbdf6e81de54a66972711fa5beae5544bc3eec8e916ab682a89b85ddcf49e85740cb670996f8a37b4680ecd005a800093a0d221f857f8c8717528bb736c004b184e796a83e75a5489b816433854b19063a550137a62bcf9862dbd03a846b9aa969fe2d66def8bc9074cc6d00c79ba9c4060121a4b5e5992ea2fe30895958543d8006b0ae1131cf469301e8b08e2f783028ccc8c4f0cc2ffe07907661be2f9b3934c414066a9273d72400674460efb3b866a29d066357a3cb0f7608657eecae6074fd9e959a0c6b6df0657a4067c3ff97deee05ad7554f2221f315b7b7aea91e3daaebe1f07f3daa4bf37f09053737acd16158d4aaca7ebffb12effc1a2f461e3ca29e10f52c45e527c250f55ad4c30ce16b27be0d681c6f6bde927f3d47dff7464ab6e06bd0f090694d06c0dec7b338e45d824d7ef28ee07b2d4824ed4a0400167c63ce87ea2f9dc076565d2fe99a7a263a1071af851477a85d17097d95ecb3ec112c236faa7a4e9f9a008c9ad9ca813ed6217bd81ecd5a7e638855a75fef82bb9b78d4684900b095e0db75039e91ac15b3fbe32981dfe6d4e1bb1a348a20fdb783c72f3e278cd6c6d7000c53ec4493fa905e109997af811b4313b24b2fb89710bb1e022dcdb9dc9378cfde50391939370e280f54c9ac0c449b02a509493b6291f88cd04d601e97545a07ba2c85bb8928d59af7bbe73a79bed16d7f6929441e84553b3bc26339f10261c54d705bec6630bd70323d77851e1c4d4158fe1c9070beb6a1fcd4830483793a4d7db7008c79d34b0d86ebec1b14187a2aaca81b982900a4eb3999f1c2c40f62ccc554cee22363911b9e527817bb9854719567f74db9381c232d57f9ecac9eb95773f462ea3776dad9163a1b12a5d758f8dc80395e3f8df546baea635682c38c3088b0276083228ebc702b60117126be9b4fe204eaa9fa8e1d7ecb84d6699fea24f36fe51b83a207974291fa21130384dba8530c96db33dd66cbff2460b7cee114202b06ccf9f822d66a61865fa30b77806573d57cf23aa3190a2370bd163d62270b8700cc3eef5d85dcdc1060fe105cc1239d26394fd66a1500a1e225adb9c546b38d6464ca89ae26a2703c9feae863e71c3c3b41f3b50aa6c9d2032e652573f248d43d150e5e9f10795123a525778ef2052c601eca23bf2dfd052996660898842fe3dfc7698a5879950418b0bed7fe5fe6f49aec1fc502a110cb985d3e7de949cb6a2b042e255fdb30967469578a313994bad45930812dba44e62bab7cf2de18d7a43471439c0f42c4ad7943d2af0bb11ed3b42876ff865c445a5bfed1e77c1bca397d7f11e40a00cc04dffb7ec7b7f4a2895b980795cf2b07ec0c49c0ae031075821e8dd4b154583feacc7fdf1a5637bb7f1a88879470f73fb46236f583e7ec8403048192a53587438b025792f7f87d5c96a8fd84c1b78dc30469e727d61169140fe2ba34df347aae97506440f0cd7892e246fb7586a8b0546f2a183362b841385655747802de19fa927e1072002818fb9110a0a707ea6f5eda70baf97f7f491f8be8ea47a0bdb6e8e540a355387517ed5928fe4bbfc6943bf93e09b31f9c4ccf42e0011ddc3634de8751b77a8cbf4247e8fb9bc3", 0x5d1}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) 997.458338ms ago: executing program 4 (id=2844): r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x8, 0x1}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/warn_count', 0x181080, 0x30) io_setup(0x1, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x6, r2, &(0x7f0000000440)='H', 0x1, 0x9, 0x0, 0x0, r2}]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, 0x0) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$sock_SIOCINQ(r10, 0x541b, &(0x7f0000000000)) io_submit(r3, 0x4, &(0x7f0000000a00)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x2, 0x60b1, r7, &(0x7f0000000600)="509ac0b851ee68da978cd155076382f2cb9b5fa5c66df85101b42d83d86272dd38d1e3104c9e76f8e1da0a6d5fc3654c49ec033871cfbb540f43c59116ba9010d49fc65b4f2f79fe90314c449e6ecfa755d9d3d66add4815f145a57ff07e3066679c74f2364335c3e02e39f52184ca9e27255a43e30031fcc7054faf0a7867f0a3ea89ccf4d907f1f12338070a0796abe203491b91a4331e1bd3d4ebcde526c786e5d511f1", 0xa5, 0x5, 0x0, 0x2, r4}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000000740)="647382c4b0807c4f7e3c734122f886d828dbc0dc038c503ce228c3d71bc4fa562043f670b04a61af5cdad5a10a98aad7d8b9890033f4df61c5cda448fe40e1542c55da29c449bfc76d483c07efdd7f6fa406cf60cd291fd74a84c57573b45c77f475b61e13f62db38a9f58df5e7ac3d30f573e36a986cf125afe0b152e1a2ae8d9f0f98024999a427b8b77f199b094dac0c5f343ade1983272", 0x99, 0x1, 0x0, 0xff2a6e6cc681f7cd, r4}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000000840)="31d9457bf4c2dc662e38112008a29c69af54db36f89dc09f03b3897771dc8351dc682b4499aecdd15df18514844ad5fab8d0fbdb7594dfc2952cefd1fa1b15f70e972183e630078d7e02c115cde0e5ef9c79fc01828242912e0dde69614e8d28390e745e5e3de80fe44f3c", 0x6b, 0x8}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, r10, &(0x7f0000000900)="6d219dd3df6e782ca01c9ece57ea14870e9671769b99180d8ac02d6250bd72fd909cfb3789ba0fbf5edf94751a422398c276105f7e1569c21dfc70c7b7a688819badb8560d5d6c83de5a3b7233f363aec41b0475969232eb7eeb4718b77addd0d9f2f9f5f3058b4c6a6df75805aba6deeecbbf1bf4d1265c8fec9be1637a730001d4", 0x82, 0x0, 0x0, 0x3, r4}]) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r6, &(0x7f0000000380)="ca091cc2e088", 0xffe3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private2, @in=@multicast1, 0x4e22, 0x0, 0x4e21, 0x6, 0x0, 0x0, 0x20, 0x4, 0x0, r5}, {0xa6d5, 0x7, 0x100000001, 0x7, 0x2, 0x2, 0xffffffffffffffff, 0x401}, {0x20bc, 0x96, 0x5, 0x1}, 0x7ff, 0x6e6bb9, 0x2, 0x0, 0x0, 0x3}, {{@in=@broadcast, 0x4d2, 0x33}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3507, 0x2, 0x3, 0x2, 0x2, 0x8, 0x5a}}, 0xe8) 294.219073ms ago: executing program 5 (id=2845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 234.879214ms ago: executing program 4 (id=2846): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x4, 0x60}, 0x10c0e8, 0x1, 0x0, 0x3, 0x209, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000012c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r4, &(0x7f0000000540), 0x0}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3c4, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r7 = dup(r6) sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 0s ago: executing program 0 (id=2847): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c9020000", @ANYRES16, @ANYBLOB="00012dbd7000fedbdf2518000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000000000006001600060000000500120001000000060011000200000008000b00a3d100000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000100000006001600090000000500120000000000060011000100000008000b00050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000200000006001600800000000500120000000000060011000000000008000b0002000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b00ca0100000600160000260000050012000000000006001100fdff000008000b00020000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000001000006001600070000000500120000000000060011007900000008000b0000100000"], 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) kernel console output (not intermixed with test programs): "/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 311.360291][ T28] audit: type=1400 audit(1784217442.426:449): avc: denied { write } for pid=10607 comm="syz.1.2198" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 311.417684][T10630] loop0: detected capacity change from 0 to 512 [ 311.436911][T10631] loop5: detected capacity change from 0 to 512 [ 311.448553][T10626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10626 comm=syz.4.2202 [ 311.491718][T10624] loop2: detected capacity change from 0 to 8192 [ 311.527435][T10630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.540824][T10631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.578603][T10631] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.590016][T10630] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.655139][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 313.337123][T10645] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2205'. [ 313.713761][ T28] audit: type=1400 audit(1784217445.026:450): avc: denied { write } for pid=10628 comm="syz.5.2203" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.292724][T10649] syzkaller0: entered promiscuous mode [ 314.304346][T10649] syzkaller0: entered allmulticast mode [ 314.629065][ T28] audit: type=1400 audit(1784217445.026:451): avc: denied { write } for pid=10629 comm="syz.0.2204" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 315.666538][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.684470][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.895615][T10671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2212'. [ 315.975551][ T4893] Bluetooth: hci0: Frame reassembly failed (-84) [ 315.997893][ T4893] Bluetooth: hci0: Frame reassembly failed (-84) [ 316.024574][T10664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2211'. [ 316.166466][T10671] loop4: detected capacity change from 0 to 1024 [ 316.208083][T10671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.343372][T10664] loop0: detected capacity change from 0 to 1024 [ 316.397255][T10664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.552464][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.569409][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.591108][T10768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2216'. [ 317.797227][T10768] loop2: detected capacity change from 0 to 1024 [ 317.829288][T10775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2217'. [ 317.855151][T10768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.897129][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.118830][ T3771] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 318.125230][ T3803] Bluetooth: hci0: command 0x1003 tx timeout [ 318.379310][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2221'. [ 318.516946][T10795] syzkaller0: entered promiscuous mode [ 318.524185][T10795] syzkaller0: entered allmulticast mode [ 318.706777][T10800] loop0: detected capacity change from 0 to 8192 [ 318.732088][T10797] loop5: detected capacity change from 0 to 1024 [ 318.798604][T10797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.017834][T10833] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2231'. [ 319.037013][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.115406][T10830] netlink: 'syz.1.2228': attribute type 10 has an invalid length. [ 319.215463][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 319.454099][T10865] loop5: detected capacity change from 0 to 128 [ 319.512711][T10865] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 319.529147][T10865] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 319.684133][ T28] audit: type=1400 audit(1784217451.256:452): avc: denied { write } for pid=10843 comm="syz.5.2232" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.808409][ T28] audit: type=1400 audit(1784217451.286:453): avc: denied { write } for pid=10843 comm="syz.5.2232" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.890051][ T28] audit: type=1400 audit(1784217451.296:454): avc: denied { write } for pid=10843 comm="syz.5.2232" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.350314][T10874] loop4: detected capacity change from 0 to 1024 [ 320.394008][T10874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.431496][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.908671][T10944] loop1: detected capacity change from 0 to 1164 [ 321.155342][ T9392] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 321.172955][T10946] syzkaller0: entered promiscuous mode [ 321.178681][T10946] syzkaller0: entered allmulticast mode [ 321.262388][ T3771] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 321.334597][T10954] loop0: detected capacity change from 0 to 8192 [ 321.376494][T10952] netlink: 'syz.1.2240': attribute type 10 has an invalid length. [ 321.787446][T10964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2243'. [ 321.974627][T10968] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2244'. [ 322.138644][T10969] loop1: detected capacity change from 0 to 1024 [ 323.328156][T10969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.438958][T10983] netlink: 'syz.4.2248': attribute type 10 has an invalid length. [ 323.849697][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.902600][ T4899] Bluetooth: hci0: Frame reassembly failed (-84) [ 325.433001][T11001] loop0: detected capacity change from 0 to 1024 [ 325.483923][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2253'. [ 325.601423][T11001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.679123][T11005] loop1: detected capacity change from 0 to 128 [ 325.724927][T11005] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 325.741458][T11005] ext4 filesystem being mounted at /497/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 325.923289][ T28] audit: type=1400 audit(1784217457.456:455): avc: denied { write } for pid=11002 comm="syz.1.2253" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 325.967323][ T28] audit: type=1400 audit(1784217457.496:456): avc: denied { write } for pid=11002 comm="syz.1.2253" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 326.009508][T11016] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2257'. [ 326.184869][ T3803] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 326.280047][ T28] audit: type=1400 audit(1784217457.506:457): avc: denied { write } for pid=11002 comm="syz.1.2253" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 326.359207][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.443561][T11021] syzkaller0: entered promiscuous mode [ 326.449151][T11021] syzkaller0: entered allmulticast mode [ 326.458734][T11021] tipc: Enabled bearer , priority 0 [ 326.468354][T11019] tipc: Resetting bearer [ 326.485186][T11019] tipc: Disabling bearer [ 327.105530][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 327.328915][T11027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2263'. [ 328.632388][ T3771] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 329.251335][T11037] loop1: detected capacity change from 0 to 128 [ 329.349356][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 329.365469][T11037] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 329.379358][T11037] ext4 filesystem being mounted at /498/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 329.909011][T11046] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2265'. [ 329.953831][T11030] loop4: detected capacity change from 0 to 1024 [ 329.994001][T11048] loop5: detected capacity change from 0 to 1164 [ 330.009403][T11030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.309917][T11061] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2270'. [ 330.461486][ T28] audit: type=1400 audit(1784217461.136:458): avc: denied { write } for pid=11031 comm="syz.1.2262" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.483785][ T28] audit: type=1400 audit(1784217461.176:459): avc: denied { write } for pid=11031 comm="syz.1.2262" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.803992][ T28] audit: type=1400 audit(1784217461.186:460): avc: denied { write } for pid=11031 comm="syz.1.2262" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.864300][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 331.343595][ T3803] Bluetooth: hci0: command 0x1003 tx timeout [ 331.349679][ T3771] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 331.441965][ T3454] Bluetooth: hci0: Frame reassembly failed (-84) [ 331.457717][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.506679][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2278'. [ 332.532639][T11089] syzkaller0: entered promiscuous mode [ 332.573077][T11089] syzkaller0: entered allmulticast mode [ 332.750474][T11095] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2282'. [ 332.765178][T11096] loop4: detected capacity change from 0 to 1024 [ 332.794390][T11096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.532203][ T3771] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 333.538486][ T3803] Bluetooth: hci0: command 0x1003 tx timeout [ 333.546347][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.590367][ T3454] Bluetooth: hci0: Frame reassembly failed (-84) [ 336.577958][ T30] Bluetooth: hci1: Frame reassembly failed (-84) [ 337.662516][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 337.668676][ T3771] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 337.684812][T11121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2289'. [ 337.841088][T11130] loop5: detected capacity change from 0 to 512 [ 337.871095][T11132] syzkaller0: entered promiscuous mode [ 337.881429][T11132] syzkaller0: entered allmulticast mode [ 337.898650][T11132] tipc: Enabled bearer , priority 0 [ 337.907128][T11130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.933665][T11131] tipc: Resetting bearer [ 337.939444][T11130] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.973135][T11131] tipc: Disabling bearer [ 338.290561][ T28] audit: type=1400 audit(1784217469.866:461): avc: denied { write } for pid=11129 comm="syz.5.2293" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 338.369722][T11137] loop4: detected capacity change from 0 to 1024 [ 338.569064][T11137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.706141][ T3803] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 338.712323][ T3771] Bluetooth: hci1: command 0x1003 tx timeout [ 338.742860][T11140] netlink: 'syz.1.2295': attribute type 10 has an invalid length. [ 338.906007][T11148] loop1: detected capacity change from 0 to 512 [ 338.955308][T11148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.009242][T11148] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.172301][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.163879][ T28] audit: type=1400 audit(1784217472.716:462): avc: denied { write } for pid=11147 comm="syz.1.2296" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.474045][T11161] loop5: detected capacity change from 0 to 512 [ 342.173676][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.204251][T11161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.492348][T11161] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.087204][ T28] audit: type=1400 audit(1784217474.676:463): avc: denied { write } for pid=11160 comm="syz.5.2299" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.146897][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.321780][T11171] syzkaller0: entered promiscuous mode [ 343.340624][T11171] syzkaller0: entered allmulticast mode [ 344.242208][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2306'. [ 344.630423][T11187] loop0: detected capacity change from 0 to 128 [ 344.642791][T11187] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 344.655632][T11187] ext4 filesystem being mounted at /429/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 344.761523][T11176] netlink: 'syz.1.2302': attribute type 10 has an invalid length. [ 344.776562][ T28] audit: type=1400 audit(1784217476.346:464): avc: denied { write } for pid=11179 comm="syz.0.2306" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.029601][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.105860][T11190] netlink: 'syz.2.2307': attribute type 10 has an invalid length. [ 345.116291][ T28] audit: type=1400 audit(1784217476.366:465): avc: denied { write } for pid=11179 comm="syz.0.2306" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.185580][ T28] audit: type=1400 audit(1784217476.376:466): avc: denied { write } for pid=11179 comm="syz.0.2306" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.160531][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 346.562478][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2316'. [ 347.218446][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2315'. [ 347.234460][T11226] loop5: detected capacity change from 0 to 1024 [ 348.274108][T11226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.360992][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.453026][T11242] loop5: detected capacity change from 0 to 512 [ 348.496297][T11235] netlink: 'syz.4.2321': attribute type 10 has an invalid length. [ 348.670614][T11242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.705348][T11242] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.776133][T11257] loop4: detected capacity change from 0 to 1024 [ 349.857540][ T28] audit: type=1400 audit(1784217481.496:467): avc: denied { write } for pid=11241 comm="syz.5.2323" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.127976][T11257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.226891][ T4893] Bluetooth: hci0: Frame reassembly failed (-84) [ 350.309976][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.152838][T11318] syzkaller0: entered promiscuous mode [ 351.160078][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.174613][T11318] syzkaller0: entered allmulticast mode [ 351.397768][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2332'. [ 351.551115][T11362] loop5: detected capacity change from 0 to 1164 [ 352.256935][ T3771] Bluetooth: hci0: command 0x1003 tx timeout [ 352.263049][ T3803] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 353.637945][T11415] syzkaller0: entered promiscuous mode [ 353.643548][T11415] syzkaller0: entered allmulticast mode [ 354.981133][T11433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2345'. [ 355.482391][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2344'. [ 355.843141][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'. [ 356.112396][T11432] loop5: detected capacity change from 0 to 128 [ 356.969390][T11443] syzkaller0: entered promiscuous mode [ 356.975047][T11443] syzkaller0: entered allmulticast mode [ 357.012723][T11441] loop2: detected capacity change from 0 to 8192 [ 357.020784][T11438] loop4: detected capacity change from 0 to 128 [ 357.922297][T11432] EXT4-fs: error -4 creating inode table initialization thread [ 357.930031][T11432] EXT4-fs (loop5): mount failed [ 358.080896][T11451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2350'. [ 358.557082][T11456] loop1: detected capacity change from 0 to 128 [ 358.565749][T11438] EXT4-fs: error -4 creating inode table initialization thread [ 358.573456][T11438] EXT4-fs (loop4): mount failed [ 358.597691][T11456] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 358.611122][T11456] ext4 filesystem being mounted at /512/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 358.669266][ T28] audit: type=1400 audit(1784217490.306:468): avc: denied { write } for pid=11444 comm="syz.1.2349" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.034900][ T28] audit: type=1400 audit(1784217490.306:469): avc: denied { write } for pid=11444 comm="syz.1.2349" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.071878][ T28] audit: type=1400 audit(1784217490.306:470): avc: denied { write } for pid=11444 comm="syz.1.2349" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.139230][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 360.181804][T11469] syzkaller0: entered promiscuous mode [ 361.110387][T11469] syzkaller0: entered allmulticast mode [ 361.117531][T11473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2355'. [ 361.140692][T11469] tipc: Started in network mode [ 361.152362][T11469] tipc: Node identity aa816301ab, cluster identity 4711 [ 361.362322][T11469] tipc: Enabled bearer , priority 0 [ 361.385868][T11468] tipc: Resetting bearer [ 361.975569][T11468] tipc: Disabling bearer [ 362.175448][T11473] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 362.188239][ T3420] Bluetooth: hci0: Frame reassembly failed (-84) [ 363.210279][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2359'. [ 363.398600][T11489] loop2: detected capacity change from 0 to 1164 [ 364.178601][ T3803] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 364.582851][T11506] syzkaller0: entered promiscuous mode [ 364.588895][T11506] syzkaller0: entered allmulticast mode [ 364.623306][T11508] syzkaller0: entered promiscuous mode [ 364.629493][T11508] syzkaller0: entered allmulticast mode [ 366.009274][T11524] syzkaller0: entered promiscuous mode [ 366.027524][T11524] syzkaller0: entered allmulticast mode [ 366.220502][T11531] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2370'. [ 366.274350][T11524] tipc: Enabled bearer , priority 0 [ 366.345702][T11523] tipc: Resetting bearer [ 366.425342][T11523] tipc: Disabling bearer [ 367.032485][T11541] loop1: detected capacity change from 0 to 8192 [ 367.621149][T11545] netlink: 'syz.4.2377': attribute type 10 has an invalid length. [ 367.661961][T11550] tipc: Enabled bearer , priority 0 [ 367.694155][T11546] tipc: Disabling bearer [ 367.728568][T11554] syzkaller0: entered promiscuous mode [ 367.748577][T11554] syzkaller0: entered allmulticast mode [ 367.941420][T11566] loop2: detected capacity change from 0 to 512 [ 368.126655][T11566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.139384][T11574] loop5: detected capacity change from 0 to 512 [ 368.154253][T11566] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.575010][T11574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.892540][T11574] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.052681][ T28] audit: type=1400 audit(1784217500.656:471): avc: denied { write } for pid=11565 comm="syz.2.2384" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 370.679619][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.713479][ T28] audit: type=1400 audit(1784217502.356:472): avc: denied { write } for pid=11573 comm="syz.5.2387" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.462750][T11636] syzkaller0: entered promiscuous mode [ 371.472647][T11636] syzkaller0: entered allmulticast mode [ 372.278138][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.448360][T11651] syzkaller0: entered promiscuous mode [ 372.454356][T11651] syzkaller0: entered allmulticast mode [ 372.509888][T11649] netlink: 'syz.0.2395': attribute type 10 has an invalid length. [ 372.594562][T11662] loop2: detected capacity change from 0 to 512 [ 372.702358][T11662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.715589][ T3771] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 372.721876][ T3803] Bluetooth: hci0: command 0x1003 tx timeout [ 372.728123][T11662] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.702570][ T28] audit: type=1400 audit(1784217505.276:473): avc: denied { write } for pid=11661 comm="syz.2.2398" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 373.847635][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2401'. [ 373.953739][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2403'. [ 373.992927][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2405'. [ 374.067404][T11692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11692 comm=syz.5.2401 [ 374.145693][T11683] netlink: 'syz.4.2404': attribute type 10 has an invalid length. [ 374.174227][T11696] syzkaller0: entered promiscuous mode [ 374.186678][T11696] syzkaller0: entered allmulticast mode [ 374.216668][T11696] tipc: Enabled bearer , priority 0 [ 374.241133][T11695] tipc: Resetting bearer [ 374.271272][T11695] tipc: Disabling bearer [ 374.308338][T11698] netlink: 'syz.0.2408': attribute type 10 has an invalid length. [ 374.394733][T11705] syzkaller0: entered promiscuous mode [ 374.416864][T11705] syzkaller0: entered allmulticast mode [ 375.173881][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.478950][T11745] loop2: detected capacity change from 0 to 512 [ 375.496047][T11748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2419'. [ 375.531103][T11745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.572339][T11745] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.780647][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2420'. [ 376.183907][ T28] audit: type=1400 audit(1784217507.736:474): avc: denied { write } for pid=11743 comm="syz.2.2414" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 376.778160][ T4899] Bluetooth: hci0: Frame reassembly failed (-84) [ 376.784898][ T4908] Bluetooth: hci1: Frame reassembly failed (-84) [ 376.973410][T11760] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2421'. [ 377.157966][T11793] syzkaller0: entered promiscuous mode [ 377.168704][T11793] syzkaller0: entered allmulticast mode [ 377.189942][T11793] tipc: Enabled bearer , priority 0 [ 377.207143][T11792] tipc: Resetting bearer [ 377.233485][T11792] tipc: Disabling bearer [ 377.574477][T11828] loop1: detected capacity change from 0 to 512 [ 377.626648][T11828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.664683][T11828] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.807490][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.815053][T11768] Bluetooth: hci1: command 0x1003 tx timeout [ 378.821354][T11768] Bluetooth: hci0: command 0x1003 tx timeout [ 378.842145][ T3803] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 378.865887][ T3771] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 379.131491][ T28] audit: type=1400 audit(1784217510.496:475): avc: denied { write } for pid=11827 comm="syz.1.2424" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 379.856942][T11844] syzkaller0: entered promiscuous mode [ 379.879020][T11844] syzkaller0: entered allmulticast mode [ 380.063259][T11852] syzkaller0: entered promiscuous mode [ 380.076351][T11850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2431'. [ 380.096429][T11852] syzkaller0: entered allmulticast mode [ 380.449231][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.641327][T11857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2435'. [ 380.895773][T11859] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2436'. [ 381.020774][T11855] loop0: detected capacity change from 0 to 1024 [ 381.081618][T11855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.815085][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.012167][ T28] audit: type=1400 audit(1784217513.656:476): avc: denied { unmount } for pid=11893 comm="syz.0.2439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 382.220832][T11857] loop4: detected capacity change from 0 to 1024 [ 382.234640][T11885] loop5: detected capacity change from 0 to 1024 [ 382.323429][T11857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.364616][T11885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.625261][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.701769][T11929] loop4: detected capacity change from 0 to 512 [ 382.748739][T11931] loop0: detected capacity change from 0 to 1164 [ 382.756868][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 382.811084][T11929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.833249][T11929] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.864511][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.040237][T11953] loop5: detected capacity change from 0 to 8192 [ 383.150936][ T28] audit: type=1400 audit(1784217514.796:477): avc: denied { write } for pid=11928 comm="syz.4.2444" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 384.690863][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.719294][T12020] loop0: detected capacity change from 0 to 512 [ 384.748174][T12020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.767648][T12020] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.782450][ T3771] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 385.186040][ T28] audit: type=1400 audit(1784217516.696:478): avc: denied { write } for pid=12019 comm="syz.0.2448" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.208786][T12032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2449'. [ 385.521041][ T28] audit: type=1400 audit(1784217517.166:479): avc: denied { mount } for pid=12041 comm="syz.2.2456" name="/" dev="ramfs" ino=29443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 385.834237][T12044] vlan2: entered promiscuous mode [ 386.154192][T12044] bridge0: entered promiscuous mode [ 386.336415][T12049] loop4: detected capacity change from 0 to 512 [ 386.385069][T12045] loop2: detected capacity change from 0 to 4096 [ 386.397960][T12045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.411691][ T28] audit: type=1400 audit(1784217518.066:480): avc: denied { write } for pid=12041 comm="syz.2.2456" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.435992][T12049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.488569][T12049] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.522553][ T28] audit: type=1400 audit(1784217518.096:481): avc: denied { read write } for pid=12041 comm="syz.2.2456" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 386.593365][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.737830][ T28] audit: type=1400 audit(1784217518.096:482): avc: denied { open } for pid=12041 comm="syz.2.2456" path="/459/file0/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 386.777306][T12056] loop5: detected capacity change from 0 to 1164 [ 386.784644][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.903392][ T28] audit: type=1400 audit(1784217518.536:483): avc: denied { write } for pid=12048 comm="syz.4.2458" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 387.400866][ T28] audit: type=1400 audit(1784217519.046:484): avc: denied { remount } for pid=12059 comm="syz.2.2460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 387.423905][T12062] tmpfs: Too small a size for current use [ 389.560611][T12072] Can't find ip_set type hash:ip,porI [ 389.935746][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.046432][T12081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2467'. [ 390.057394][T12082] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2463'. [ 390.312549][T12086] syzkaller0: entered promiscuous mode [ 390.331112][T12086] syzkaller0: entered allmulticast mode [ 390.520076][T12087] loop1: detected capacity change from 0 to 1024 [ 390.547450][T12087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.865356][T12101] loop0: detected capacity change from 0 to 512 [ 391.373591][T12101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.387542][T12107] loop4: detected capacity change from 0 to 1164 [ 391.395800][T12101] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.464048][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.692493][ T28] audit: type=1400 audit(1784217523.336:485): avc: denied { write } for pid=12100 comm="syz.0.2472" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 392.527243][T12119] loop2: detected capacity change from 0 to 512 [ 392.590151][T12119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.639257][T12119] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.997005][T12129] loop5: detected capacity change from 0 to 1024 [ 393.065456][T12129] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 393.077700][T12129] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 393.089874][T12129] jbd2_journal_init_inode: Cannot locate journal superblock [ 393.097511][T12129] EXT4-fs (loop5): Could not load journal inode [ 393.293260][T12131] FAULT_INJECTION: forcing a failure. [ 393.293260][T12131] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 393.347351][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.477224][ T28] audit: type=1400 audit(1784217525.036:486): avc: denied { write } for pid=12118 comm="syz.2.2476" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 393.513610][T12131] CPU: 0 UID: 0 PID: 12131 Comm: syz.4.2480 Not tainted syzkaller #0 PREEMPT(lazy) [ 393.513696][T12131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 393.513716][T12131] Call Trace: [ 393.513724][T12131] [ 393.513733][T12131] __dump_stack+0x1d/0x30 [ 393.513758][T12131] dump_stack_lvl+0x95/0xd0 [ 393.513782][T12131] dump_stack+0x15/0x1b [ 393.513812][T12131] should_fail_ex+0x25e/0x270 [ 393.513846][T12131] should_fail+0xb/0x20 [ 393.513879][T12131] should_fail_usercopy+0x1a/0x20 [ 393.513969][T12131] _copy_from_user+0x1c/0xb0 [ 393.513994][T12131] do_sys_poll+0x148/0xc00 [ 393.514027][T12131] ? security_inode_alloc+0x37/0x100 [ 393.514055][T12131] ? __rcu_read_unlock+0x4e/0x70 [ 393.514119][T12131] ? avc_has_perm_noaudit+0xa3/0x120 [ 393.514192][T12131] ? __fget_files+0x184/0x1c0 [ 393.514254][T12131] __se_sys_ppoll+0x1e2/0x220 [ 393.514284][T12131] ? fput+0x8f/0xc0 [ 393.514319][T12131] __x64_sys_ppoll+0x67/0x80 [ 393.514393][T12131] x64_sys_call+0x28d3/0x3020 [ 393.514426][T12131] do_syscall_64+0x136/0x3c0 [ 393.514448][T12131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.514494][T12131] RIP: 0033:0x7eff0eb1de59 [ 393.514554][T12131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.514573][T12131] RSP: 002b:00007eff0d577028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 393.514592][T12131] RAX: ffffffffffffffda RBX: 00007eff0eda5fa0 RCX: 00007eff0eb1de59 [ 393.514662][T12131] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000140 [ 393.514728][T12131] RBP: 00007eff0d577090 R08: 0000000000000000 R09: 0000000000000000 [ 393.514824][T12131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.514841][T12131] R13: 00007eff0eda6038 R14: 00007eff0eda5fa0 R15: 00007ffe24fa4178 [ 393.514863][T12131] [ 393.966421][T12139] loop5: detected capacity change from 0 to 512 [ 394.035331][T12139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.067335][T12145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2481'. [ 394.080753][ T28] audit: type=1400 audit(1784217525.726:487): avc: denied { name_connect } for pid=12142 comm="syz.4.2484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 394.117451][T12139] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.135402][ T28] audit: type=1400 audit(1784217525.786:488): avc: denied { read } for pid=12144 comm="syz.0.2481" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 394.164532][T12145] geneve1: entered promiscuous mode [ 394.364223][ T28] audit: type=1400 audit(1784217525.786:489): avc: denied { open } for pid=12144 comm="syz.0.2481" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 395.184306][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.193895][ T28] audit: type=1400 audit(1784217526.766:490): avc: denied { write } for pid=12138 comm="syz.5.2483" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 395.446470][T12156] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2487'. [ 395.462046][T12155] loop4: detected capacity change from 0 to 1164 [ 395.552548][T12161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2490'. [ 395.839970][T12162] loop1: detected capacity change from 0 to 1024 [ 395.924468][T12162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.166961][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.352628][T12171] team0: Caught tx_queue_len zero misconfig [ 396.422517][ T28] audit: type=1400 audit(1784217528.056:491): avc: denied { getopt } for pid=12170 comm="syz.1.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 396.449571][ T28] audit: type=1400 audit(1784217528.056:492): avc: denied { append } for pid=12170 comm="syz.1.2492" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 396.600430][ T28] audit: type=1400 audit(1784217528.056:493): avc: denied { open } for pid=12170 comm="syz.1.2492" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 396.701099][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.747190][ T28] audit: type=1400 audit(1784217528.386:494): avc: denied { read } for pid=12176 comm="syz.4.2493" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 396.883885][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2495'. [ 396.939723][ T28] audit: type=1400 audit(1784217528.426:495): avc: denied { ioctl } for pid=12176 comm="syz.4.2493" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 397.229664][T12177] loop4: detected capacity change from 0 to 4096 [ 397.322647][T12177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.480654][T12195] loop2: detected capacity change from 0 to 128 [ 397.621809][T12195] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 397.638547][T12195] ext4 filesystem being mounted at /466/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 398.495104][T12171] loop1: detected capacity change from 0 to 128 [ 398.560593][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.568453][T12171] vfat: Unknown parameter 'i?x\½ò‡ä૸â½CÞÈP6ÞܹmÙ€{2¥`7ð1{Œ™ øÀ^>’ÆÇž·ü³&ØPö¯ Ø ' [ 399.283070][ T3297] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 399.376345][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 399.376364][ T28] audit: type=1400 audit(1784217531.026:509): avc: denied { setopt } for pid=12215 comm="syz.0.2504" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 399.377150][T12212] loop4: detected capacity change from 0 to 1164 [ 399.594952][T12220] loop0: detected capacity change from 0 to 8192 [ 399.799955][T12225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2508'. [ 400.260728][ T28] audit: type=1400 audit(1784217531.906:510): avc: denied { name_bind } for pid=12230 comm="syz.2.2510" src=28194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 400.321752][T12235] loop0: detected capacity change from 0 to 512 [ 400.416300][T12235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.433172][T12243] loop5: detected capacity change from 0 to 512 [ 400.451654][T12243] EXT4-fs: Ignoring removed nobh option [ 400.481438][T12235] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.501185][T12243] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 400.671435][T12243] EXT4-fs (loop5): 1 truncate cleaned up [ 400.689899][T12239] loop1: detected capacity change from 0 to 1024 [ 400.698214][T12243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.718800][ T28] audit: type=1400 audit(1784217532.366:511): avc: denied { write } for pid=12242 comm="syz.5.2512" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 401.050305][T12239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.309219][ T28] audit: type=1400 audit(1784217532.366:512): avc: denied { add_name } for pid=12242 comm="syz.5.2512" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 401.375390][T12268] loop4: detected capacity change from 0 to 1164 [ 401.389446][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.406722][ T28] audit: type=1400 audit(1784217532.456:513): avc: denied { write } for pid=12233 comm="syz.0.2509" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 401.536483][ T28] audit: type=1400 audit(1784217532.466:514): avc: denied { map } for pid=12242 comm="syz.5.2512" path="/104/bus/memory.events.local" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 401.685832][T12270] loop5: detected capacity change from 0 to 8192 [ 401.956838][ T28] audit: type=1400 audit(1784217533.606:515): avc: denied { ioctl } for pid=12277 comm="syz.2.2524" path="socket:[30944]" dev="sockfs" ino=30944 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 402.502738][T12282] loop2: detected capacity change from 0 to 128 [ 402.642725][T12282] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 402.659323][T12282] ext4 filesystem being mounted at /474/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 402.721149][ T28] audit: type=1400 audit(1784217534.366:516): avc: denied { write } for pid=12277 comm="syz.2.2524" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.131542][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2525'. [ 403.140613][ T28] audit: type=1400 audit(1784217534.416:517): avc: denied { write } for pid=12277 comm="syz.2.2524" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.167345][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.181918][ T28] audit: type=1400 audit(1784217534.426:518): avc: denied { write } for pid=12277 comm="syz.2.2524" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.273604][T12287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=12287 comm=syz.5.2525 [ 404.128652][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.371381][T12296] loop1: detected capacity change from 0 to 512 [ 404.380787][T12296] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 404.405875][ T3297] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 404.421211][T12296] lo speed is unknown, defaulting to 1000 [ 404.431208][T12296] lo speed is unknown, defaulting to 1000 [ 404.438707][T12296] lo speed is unknown, defaulting to 1000 [ 404.551088][T12296] infiniband sz1: set active [ 404.556013][T12296] infiniband sz1: added lo [ 404.561965][ T3411] lo speed is unknown, defaulting to 1000 [ 404.582446][T12296] RDS/IB: sz1: added [ 404.586583][T12296] smc: adding ib device sz1 with port count 1 [ 404.592918][T12296] smc: ib device sz1 port 1 has no pnetid [ 404.600158][T12296] lo speed is unknown, defaulting to 1000 [ 404.625726][T12304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.638246][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 404.638262][ T28] audit: type=1400 audit(1784217536.286:522): avc: denied { create } for pid=12297 comm="syz.5.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 404.737389][T12296] lo speed is unknown, defaulting to 1000 [ 404.845842][T12296] lo speed is unknown, defaulting to 1000 [ 404.971780][T12296] lo speed is unknown, defaulting to 1000 [ 405.084498][T12296] lo speed is unknown, defaulting to 1000 [ 405.204407][T12306] loop0: detected capacity change from 0 to 128 [ 405.280799][T12304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.330004][ T3411] lo speed is unknown, defaulting to 1000 [ 405.338859][ T28] audit: type=1400 audit(1784217536.316:523): avc: denied { setopt } for pid=12297 comm="syz.5.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 405.515677][ T28] audit: type=1400 audit(1784217536.926:524): avc: denied { connect } for pid=12297 comm="syz.5.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 405.750099][T12308] netlink: 'syz.2.2532': attribute type 10 has an invalid length. [ 406.201047][T12296] syz.1.2529 (12296) used greatest stack depth: 10064 bytes left [ 406.567129][T12323] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2537'. [ 406.650655][ T28] audit: type=1400 audit(1784217538.296:525): avc: denied { wake_alarm } for pid=12322 comm="syz.4.2537" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 406.722442][ T28] audit: type=1400 audit(1784217538.376:526): avc: denied { block_suspend } for pid=12327 comm="syz.1.2536" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 406.809311][ T28] audit: type=1400 audit(1784217538.456:527): avc: denied { read append } for pid=12334 comm="syz.2.2540" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 406.843781][ T28] audit: type=1400 audit(1784217538.456:528): avc: denied { open } for pid=12334 comm="syz.2.2540" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 407.030859][T12335] loop2: detected capacity change from 0 to 512 [ 407.059369][T12335] EXT4-fs (loop2): 1 orphan inode deleted [ 407.068579][T12335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.081790][ T4908] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 407.094291][ T4908] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:18: Failed to release dquot type 1 [ 407.109626][T12335] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.254479][T12346] loop0: detected capacity change from 0 to 512 [ 407.318425][T12346] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2542: corrupted inode contents [ 407.330515][T12346] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 407.330949][T12346] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.2542: mark_inode_dirty error [ 407.340148][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 407.340188][ C0] EXT4-fs (loop0): initial error at time 1784217538: ext4_do_update_inode:5742: inode 16 [ 407.340218][ C0] EXT4-fs (loop0): last error at time 1784217538: ext4_do_update_inode:5742: inode 16 [ 407.377533][T12346] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 407.394007][T12346] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2542: corrupted inode contents [ 407.415110][T12346] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 407.415809][T12346] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.2542: mark_inode_dirty error [ 407.436347][T12346] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 407.437809][T12346] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2542: corrupted inode contents [ 407.458866][T12346] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 407.459362][T12346] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 407.477191][T12346] loop0: lost filesystem error report for type 5 error -117 [ 407.477988][T12346] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2542: corrupted inode contents [ 407.497290][T12346] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 407.500086][T12346] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.2542: mark_inode_dirty error [ 407.520464][T12346] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 407.522389][T12346] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 407.540478][T12346] loop0: lost filesystem error report for type 5 error -117 [ 407.541904][T12346] EXT4-fs (loop0): 1 truncate cleaned up [ 407.556666][T12346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.569480][T12346] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.608265][ T7102] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 407.657413][ T7102] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:19: Failed to release dquot type 1 [ 407.900952][ T28] audit: type=1400 audit(1784217539.536:529): avc: denied { write } for pid=12334 comm="syz.2.2540" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 407.953430][T12346] syz.0.2542 (12346) used greatest stack depth: 9720 bytes left [ 408.022517][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.069395][T12353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=12353 comm=syz.2.2544 [ 408.951944][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.132197][T12369] FAULT_INJECTION: forcing a failure. [ 409.132197][T12369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.145394][T12369] CPU: 0 UID: 0 PID: 12369 Comm: syz.2.2549 Not tainted syzkaller #0 PREEMPT(lazy) [ 409.145443][T12369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 409.145456][T12369] Call Trace: [ 409.145464][T12369] [ 409.145483][T12369] __dump_stack+0x1d/0x30 [ 409.145587][T12369] dump_stack_lvl+0x95/0xd0 [ 409.145685][T12369] dump_stack+0x15/0x1b [ 409.145759][T12369] should_fail_ex+0x25e/0x270 [ 409.145798][T12369] should_fail+0xb/0x20 [ 409.145899][T12369] should_fail_usercopy+0x1a/0x20 [ 409.145940][T12369] _copy_from_user+0x1c/0xb0 [ 409.145998][T12369] ___sys_sendmsg+0xc1/0x1e0 [ 409.146058][T12369] __x64_sys_sendmsg+0xd4/0x160 [ 409.146106][T12369] x64_sys_call+0x194c/0x3020 [ 409.146169][T12369] do_syscall_64+0x136/0x3c0 [ 409.146197][T12369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.146227][T12369] RIP: 0033:0x7f51dec6de59 [ 409.146246][T12369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.146284][T12369] RSP: 002b:00007f51dd6c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.146311][T12369] RAX: ffffffffffffffda RBX: 00007f51deef5fa0 RCX: 00007f51dec6de59 [ 409.146330][T12369] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 409.146348][T12369] RBP: 00007f51dd6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 409.146366][T12369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.146383][T12369] R13: 00007f51deef6038 R14: 00007f51deef5fa0 R15: 00007fff06fb1c68 [ 409.146410][T12369] [ 409.270821][ T4886] Bluetooth: hci0: Frame reassembly failed (-84) [ 409.561818][T12323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 409.627880][T12380] loop4: detected capacity change from 0 to 512 [ 409.671924][T12380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.685925][T12380] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.858729][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 410.858748][ T28] audit: type=1400 audit(1784217541.636:531): avc: denied { write } for pid=12379 comm="syz.4.2553" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 411.291744][T12393] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 411.303791][T12393] bridge1: entered promiscuous mode [ 411.803153][ T3771] Bluetooth: hci0: command 0x1003 tx timeout [ 411.873750][ T3803] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 412.083280][T12393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12393 comm=syz.1.2556 [ 412.734275][T12398] loop5: detected capacity change from 0 to 512 [ 412.767276][T12400] loop0: detected capacity change from 0 to 512 [ 412.784096][T12398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.809244][T12398] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.824789][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.842631][T12400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.856567][T12400] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.872762][ T28] audit: type=1326 audit(1784217544.526:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.0.2560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd47ba7de59 code=0x0 [ 412.983268][T12412] netlink: 'syz.2.2563': attribute type 1 has an invalid length. [ 412.998251][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.012719][T12412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 413.032317][T12412] bond2: (slave bond3): making interface the new active one [ 413.042322][T12412] bond2: (slave bond3): Enslaving as an active interface with an up link [ 413.055959][ T28] audit: type=1400 audit(1784217544.706:533): avc: denied { ioctl } for pid=12415 comm="syz.1.2565" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 413.090943][T12412] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 413.110627][T12421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=12421 comm=syz.1.2565 [ 413.129549][T12412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2563'. [ 413.158621][T12409] netlink: 'syz.4.2561': attribute type 10 has an invalid length. [ 413.166843][ T28] audit: type=1400 audit(1784217544.806:534): avc: denied { getopt } for pid=12416 comm="syz.5.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 413.197643][T12412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.208899][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2564'. [ 413.332402][T12419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=12419 comm=syz.1.2565 [ 413.347406][ T28] audit: type=1400 audit(1784217544.996:535): avc: denied { shutdown } for pid=12415 comm="syz.1.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 413.371764][T12419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2565'. [ 413.468015][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2574'. [ 413.617334][T12452] netlink: 'syz.4.2577': attribute type 10 has an invalid length. [ 413.718344][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.720400][T12467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2584'. [ 414.238430][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2587'. [ 414.287393][T12477] loop5: detected capacity change from 0 to 512 [ 414.352823][T12477] EXT4-fs: Ignoring removed i_version option [ 414.515536][T12477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.582583][T12477] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.603435][T12480] lo speed is unknown, defaulting to 1000 [ 414.657206][ T28] audit: type=1400 audit(1784217546.306:536): avc: denied { setattr } for pid=12475 comm="syz.5.2588" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.716837][T12477] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2588'. [ 414.755091][T12485] cgroup: Unknown subsys name 'dont_measure' [ 414.786485][ T28] audit: type=1400 audit(1784217546.346:537): avc: denied { write } for pid=12475 comm="syz.5.2588" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.895290][ T28] audit: type=1400 audit(1784217546.346:538): avc: denied { setattr } for pid=12475 comm="syz.5.2588" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 414.962170][ T28] audit: type=1400 audit(1784217546.396:539): avc: denied { read } for pid=12484 comm="syz.0.2583" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 415.006153][T12486] loop2: detected capacity change from 0 to 1024 [ 415.067959][ T28] audit: type=1400 audit(1784217546.396:540): avc: denied { open } for pid=12484 comm="syz.0.2583" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 415.180824][T12495] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2591'. [ 415.231381][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.241495][T12486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.265099][T12491] sctp: [Deprecated]: syz.4.2591 (pid 12491) Use of int in max_burst socket option. [ 415.265099][T12491] Use struct sctp_assoc_value instead [ 415.322898][T12491] loop4: detected capacity change from 0 to 736 [ 415.347733][T12491] iso9660: Bad value for 'session' [ 415.429307][T12496] loop0: detected capacity change from 0 to 1024 [ 415.444169][T12496] ext4: Unknown parameter 'dont_hash' [ 415.655830][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.716429][T12505] lo speed is unknown, defaulting to 1000 [ 415.762029][T12510] loop2: detected capacity change from 0 to 512 [ 415.778998][T12514] loop0: detected capacity change from 0 to 512 [ 415.786008][T12514] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 415.815663][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'. [ 415.834067][T12510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.847143][T12510] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.857494][T12503] netlink: 'syz.5.2592': attribute type 10 has an invalid length. [ 415.898543][T12511] lo speed is unknown, defaulting to 1000 [ 415.934979][T12514] syzkaller0: entered promiscuous mode [ 415.940579][T12514] syzkaller0: entered allmulticast mode [ 416.040724][T12524] loop5: detected capacity change from 0 to 512 [ 416.184953][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 416.184982][ T28] audit: type=1400 audit(1784217547.776:547): avc: denied { write } for pid=12508 comm="syz.2.2597" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.234753][T12526] loop4: detected capacity change from 0 to 2048 [ 416.423653][T12524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.442768][T12526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.465889][T12524] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.490907][ T28] audit: type=1400 audit(1784217548.136:548): avc: denied { read write } for pid=12525 comm="syz.4.2601" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 416.564358][ T28] audit: type=1400 audit(1784217548.136:549): avc: denied { open } for pid=12525 comm="syz.4.2601" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 416.909772][ T28] audit: type=1400 audit(1784217548.556:550): avc: denied { getopt } for pid=12525 comm="syz.4.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 417.612866][ T28] audit: type=1400 audit(1784217549.196:551): avc: denied { create } for pid=12535 comm="syz.1.2603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 417.945106][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.157286][T12543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2605'. [ 418.296841][T12545] loop0: detected capacity change from 0 to 512 [ 418.327763][T12545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.377171][T12545] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.583836][ T28] audit: type=1400 audit(1784217549.466:552): avc: denied { write } for pid=12523 comm="syz.5.2600" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 418.632616][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.272302][ T28] audit: type=1400 audit(1784217550.886:553): avc: denied { write } for pid=12544 comm="syz.0.2606" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 419.417856][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.694071][ T28] audit: type=1326 audit(1784217551.336:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12555 comm="syz.5.2608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd467de59 code=0x7ffc0000 [ 419.830885][ T28] audit: type=1326 audit(1784217551.376:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12555 comm="syz.5.2608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd467de59 code=0x7ffc0000 [ 419.938015][ T28] audit: type=1326 audit(1784217551.376:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12555 comm="syz.5.2608" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bd467de59 code=0x7ffc0000 [ 419.973128][T12542] loop1: detected capacity change from 0 to 1024 [ 420.049000][T12542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.175672][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.311460][T12568] netlink: 'syz.1.2611': attribute type 10 has an invalid length. [ 420.426203][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'. [ 420.634995][T12587] loop1: detected capacity change from 0 to 128 [ 420.649089][T12587] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 420.661419][T12587] ext4 filesystem being mounted at /566/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 420.799362][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.920931][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2621'. [ 420.994740][T12586] loop2: detected capacity change from 0 to 512 [ 421.037653][T12586] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2617: bg 0: block 104: invalid block bitmap [ 421.055956][T12586] loop2: lost filesystem error report for type 5 error -117 [ 421.062092][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 421.075923][ C1] EXT4-fs (loop2): initial error at time 1784217552: ext4_validate_block_bitmap:432 [ 421.085388][ C1] EXT4-fs (loop2): last error at time 1784217552: ext4_validate_block_bitmap:432 [ 421.099069][T12586] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 421.354037][T12586] loop2: lost filesystem error report for type 5 error -117 [ 421.375019][T12586] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2617: invalid indirect mapped block 1 (level 1) [ 421.498918][T12586] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 421.659069][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 421.679765][T12586] EXT4-fs (loop2): 1 truncate cleaned up [ 421.811540][T12586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.829241][T12604] loop5: detected capacity change from 0 to 1024 [ 421.909399][T12604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.931009][T12606] netlink: 'syz.1.2623': attribute type 10 has an invalid length. [ 422.060088][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.112405][T12607] loop4: detected capacity change from 0 to 8192 [ 422.152704][T12607] loop4: p1 p2 p3 p4 [ 422.158134][T12607] loop4: p3 start 117772289 is beyond EOD, truncated [ 422.160581][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.164968][T12607] loop4: p4 size 262144 extends beyond EOD, truncated [ 422.279470][T12626] loop2: detected capacity change from 0 to 512 [ 422.287957][T12626] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 422.358745][ T4639] udevd[4639]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 422.367070][T12637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.377809][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 422.377826][ T28] audit: type=1400 audit(1784217554.026:571): avc: denied { connect } for pid=12631 comm="syz.4.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 422.385978][T12635] udevd[12635]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 422.390323][T12637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.400327][T12636] udevd[12636]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 422.438319][ T28] audit: type=1400 audit(1784217554.086:572): avc: denied { shutdown } for pid=12631 comm="syz.4.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 422.479459][T12626] rdma_rxe: rxe_newlink: failed to add lo [ 422.519364][T12624] lo speed is unknown, defaulting to 1000 [ 422.791978][T12643] loop0: detected capacity change from 0 to 512 [ 422.819972][T12643] EXT4-fs: Ignoring removed bh option [ 422.850332][T12643] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 422.890310][T12643] EXT4-fs (loop0): 1 truncate cleaned up [ 422.919175][T12643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.960677][T12643] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.2631'. [ 423.030463][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.122740][T12654] netlink: 'syz.1.2635': attribute type 10 has an invalid length. [ 423.218569][T12660] loop5: detected capacity change from 0 to 512 [ 423.245799][T12660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 423.267069][T12662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2638'. [ 423.283435][T12660] EXT4-fs (loop5): too many log groups per flexible block group [ 423.296537][T12660] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 423.311103][T12660] EXT4-fs (loop5): mount failed [ 423.523365][T12665] loop1: detected capacity change from 0 to 1024 [ 423.632995][T12665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.667994][ T28] audit: type=1400 audit(1784217555.316:573): avc: denied { name_connect } for pid=12666 comm="syz.0.2636" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 423.739638][ T28] audit: type=1400 audit(1784217555.366:574): avc: denied { ioctl } for pid=12666 comm="syz.0.2636" path="socket:[31934]" dev="sockfs" ino=31934 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 423.981765][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.017236][T12681] loop0: detected capacity change from 0 to 512 [ 424.128807][ T7196] Bluetooth: hci0: Frame reassembly failed (-84) [ 424.147830][T12681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.162285][T12681] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.366897][T12687] loop1: detected capacity change from 0 to 8192 [ 425.435954][T12692] syzkaller0: entered promiscuous mode [ 425.442001][T12692] syzkaller0: entered allmulticast mode [ 426.141159][T12692] tipc: Enabled bearer , priority 0 [ 426.152883][T12691] tipc: Resetting bearer [ 426.162132][ T3771] Bluetooth: hci0: command 0x1003 tx timeout [ 426.168276][ T3803] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 426.179619][T12691] tipc: Disabling bearer [ 426.512207][ T28] audit: type=1400 audit(1784217557.886:575): avc: denied { write } for pid=12680 comm="syz.0.2644" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 427.707861][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.772394][T12699] netlink: 'syz.2.2648': attribute type 10 has an invalid length. [ 427.849875][T12715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2653'. [ 427.877937][T12717] loop4: detected capacity change from 0 to 512 [ 427.886715][T12717] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 427.915867][T12717] rdma_rxe: rxe_newlink: failed to add lo [ 427.926364][T12717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.936040][T12717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.003403][T12719] loop2: detected capacity change from 0 to 8192 [ 428.075296][T12723] syzkaller0: entered promiscuous mode [ 428.083855][T12723] syzkaller0: entered allmulticast mode [ 428.105199][ T28] audit: type=1400 audit(1784217559.756:576): avc: denied { bind } for pid=12725 comm="syz.2.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 428.157134][T12723] tipc: Enabled bearer , priority 0 [ 428.160079][ T28] audit: type=1400 audit(1784217559.756:577): avc: denied { node_bind } for pid=12725 comm="syz.2.2659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 428.187870][T12722] tipc: Resetting bearer [ 428.189648][ T28] audit: type=1400 audit(1784217559.796:578): avc: denied { create } for pid=12725 comm="syz.2.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 428.218435][T12722] tipc: Disabling bearer [ 428.237396][ T28] audit: type=1400 audit(1784217559.806:579): avc: denied { setopt } for pid=12725 comm="syz.2.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 428.259737][ T28] audit: type=1400 audit(1784217559.806:580): avc: denied { write } for pid=12725 comm="syz.2.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 428.279895][ T28] audit: type=1400 audit(1784217559.876:581): avc: denied { map } for pid=12720 comm="syz.0.2657" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 428.323618][ T28] audit: type=1400 audit(1784217559.876:582): avc: denied { read write } for pid=12720 comm="syz.0.2657" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 428.437351][T12730] loop1: detected capacity change from 0 to 1024 [ 428.510623][T12730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.597793][T12742] netlink: 'syz.5.2666': attribute type 10 has an invalid length. [ 428.673943][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.697584][T12753] syzkaller0: entered promiscuous mode [ 428.703264][T12753] syzkaller0: entered allmulticast mode [ 429.015991][T12757] loop1: detected capacity change from 0 to 8192 [ 429.024749][T12761] syzkaller0: entered promiscuous mode [ 429.046024][T12761] syzkaller0: entered allmulticast mode [ 429.095269][T12763] capability: warning: `syz.0.2672' uses deprecated v2 capabilities in a way that may be insecure [ 429.116377][T12761] tipc: Enabled bearer , priority 0 [ 429.129221][T12760] tipc: Resetting bearer [ 429.158144][T12760] tipc: Disabling bearer [ 429.226385][ T28] audit: type=1400 audit(1784217560.876:583): avc: denied { map } for pid=12762 comm="syz.0.2672" path="socket:[32931]" dev="sockfs" ino=32931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 429.551084][ T28] audit: type=1400 audit(1784217560.876:584): avc: denied { read } for pid=12762 comm="syz.0.2672" path="socket:[32931]" dev="sockfs" ino=32931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 429.721126][T12780] FAULT_INJECTION: forcing a failure. [ 429.721126][T12780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.734846][T12780] CPU: 0 UID: 0 PID: 12780 Comm: syz.5.2677 Not tainted syzkaller #0 PREEMPT(lazy) [ 429.734881][T12780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 429.734897][T12780] Call Trace: [ 429.734968][T12780] [ 429.734976][T12780] __dump_stack+0x1d/0x30 [ 429.735001][T12780] dump_stack_lvl+0x95/0xd0 [ 429.735088][T12780] dump_stack+0x15/0x1b [ 429.735142][T12780] should_fail_ex+0x25e/0x270 [ 429.735176][T12780] should_fail+0xb/0x20 [ 429.735264][T12780] should_fail_usercopy+0x1a/0x20 [ 429.735299][T12780] _copy_from_user+0x1c/0xb0 [ 429.735318][T12780] ___sys_sendmsg+0xc1/0x1e0 [ 429.735408][T12780] __x64_sys_sendmsg+0xd4/0x160 [ 429.735455][T12780] x64_sys_call+0x194c/0x3020 [ 429.735481][T12780] do_syscall_64+0x136/0x3c0 [ 429.735502][T12780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.735563][T12780] RIP: 0033:0x7f2bd467de59 [ 429.735584][T12780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.735607][T12780] RSP: 002b:00007f2bd30d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.735632][T12780] RAX: ffffffffffffffda RBX: 00007f2bd4905fa0 RCX: 00007f2bd467de59 [ 429.735650][T12780] RDX: 0000000000009004 RSI: 0000200000000100 RDI: 0000000000000004 [ 429.735667][T12780] RBP: 00007f2bd30d7090 R08: 0000000000000000 R09: 0000000000000000 [ 429.735946][T12780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.735966][T12780] R13: 00007f2bd4906038 R14: 00007f2bd4905fa0 R15: 00007ffe61e4c1c8 [ 429.736023][T12780] [ 429.908038][T12782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2679'. [ 429.920520][ T28] audit: type=1400 audit(1784217561.576:585): avc: denied { create } for pid=12783 comm="syz.1.2678" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 430.301632][T12792] netlink: 'syz.1.2682': attribute type 10 has an invalid length. [ 430.357351][T12792] netlink: 'syz.1.2682': attribute type 10 has an invalid length. [ 430.382545][T12792] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2682'. [ 430.402574][T12792] team0: entered promiscuous mode [ 430.414701][T12792] team_slave_0: entered promiscuous mode [ 430.429266][T12792] team_slave_1: entered promiscuous mode [ 430.441468][T12792] team0: entered allmulticast mode [ 430.453350][T12792] team_slave_0: entered allmulticast mode [ 430.465441][T12792] team_slave_1: entered allmulticast mode [ 430.481925][T12792] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.501494][T12792] bridge0: port 3(team0) entered blocking state [ 430.516003][T12792] bridge0: port 3(team0) entered disabled state [ 430.537286][T12792] bridge0: port 3(team0) entered blocking state [ 430.543769][T12792] bridge0: port 3(team0) entered forwarding state [ 430.628805][T12796] loop1: detected capacity change from 0 to 512 [ 430.657442][T12782] loop0: detected capacity change from 0 to 1024 [ 430.767657][T12796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.786636][T12782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.796245][T12796] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.894638][T12810] loop5: detected capacity change from 0 to 512 [ 430.925744][T12808] loop4: detected capacity change from 0 to 512 [ 430.958860][T12805] loop2: detected capacity change from 0 to 512 [ 430.985339][T12805] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 431.024308][T12810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.074305][T12810] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.114798][T12808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.127729][T12805] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2685: bg 0: block 4: invalid block bitmap [ 432.038578][T12805] loop2: lost filesystem error report for type 5 error -117 [ 432.039092][T12808] ext4 filesystem being mounted at /555/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.046561][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 432.046577][ C0] EXT4-fs (loop2): initial error at time 1784217563: ext4_validate_block_bitmap:432 [ 432.046598][ C0] EXT4-fs (loop2): last error at time 1784217563: ext4_validate_block_bitmap:432 [ 432.192253][T12805] EXT4-fs (loop2): Remounting filesystem read-only [ 432.199064][T12805] EXT4-fs (loop2): 1 truncate cleaned up [ 433.053844][T12805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.274315][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.293789][T12812] mmap: syz.2.2685 (12812) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 433.307592][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 433.307614][ T28] audit: type=1400 audit(1784217564.926:598): avc: denied { setopt } for pid=12804 comm="syz.2.2685" lport=44927 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 434.290961][ T28] audit: type=1400 audit(1784217564.946:599): avc: denied { write } for pid=12804 comm="syz.2.2685" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 434.314701][ T28] audit: type=1400 audit(1784217565.006:600): avc: denied { write } for pid=12809 comm="syz.5.2687" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.812702][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.824865][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.899946][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.925740][T12827] loop0: detected capacity change from 0 to 8192 [ 436.076454][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.137627][T12834] loop2: detected capacity change from 0 to 2048 [ 436.181509][T12840] loop1: detected capacity change from 0 to 512 [ 436.186439][T12834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.298345][T12853] loop5: detected capacity change from 0 to 512 [ 436.307849][T12853] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 436.344977][T12851] netlink: 'syz.0.2695': attribute type 10 has an invalid length. [ 436.387337][T12840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.400586][T12840] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.417475][T12853] rdma_rxe: rxe_newlink: failed to add lo [ 436.427936][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.437515][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.742351][ T28] audit: type=1400 audit(1784217568.376:601): avc: denied { write } for pid=12839 comm="syz.1.2693" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.179397][T12866] loop0: detected capacity change from 0 to 4096 [ 437.853284][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.321690][T12866] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.535299][T12872] loop2: detected capacity change from 0 to 512 [ 438.580958][T12872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.629712][T12872] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.643942][T12872] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.665128][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.698719][T12872] loop2: detected capacity change from 0 to 128 [ 438.713633][T12872] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 438.721555][T12878] loop1: detected capacity change from 0 to 512 [ 438.735646][T12872] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 438.797800][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.824841][T12878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.839165][T12878] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.847022][T12880] loop4: detected capacity change from 0 to 8192 [ 438.878753][ T28] audit: type=1400 audit(1784217570.526:602): avc: denied { connect } for pid=12871 comm="syz.2.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 439.234603][ T28] audit: type=1400 audit(1784217570.756:603): avc: denied { write } for pid=12876 comm="syz.1.2700" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.395591][ T28] audit: type=1400 audit(1784217570.786:604): avc: denied { mount } for pid=12883 comm="syz.0.2703" name="/" dev="rpc_pipefs" ino=32240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 439.596683][ T28] audit: type=1400 audit(1784217570.876:605): avc: denied { allowed } for pid=12876 comm="syz.1.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 439.621751][ T28] audit: type=1400 audit(1784217570.946:606): avc: denied { execute } for pid=12883 comm="syz.0.2703" dev="tmpfs" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 439.643349][ T28] audit: type=1400 audit(1784217571.036:607): avc: denied { create } for pid=12888 comm="syz.2.2704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 439.667269][T12894] team_slave_1: Caught tx_queue_len zero misconfig [ 439.675538][ T28] audit: type=1400 audit(1784217571.316:608): avc: denied { watch } for pid=12892 comm="syz.0.2706" path="/513" dev="tmpfs" ino=2715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 440.087342][ T28] audit: type=1400 audit(1784217571.736:609): avc: denied { setopt } for pid=12895 comm="syz.5.2705" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 440.298039][ T28] audit: type=1400 audit(1784217571.766:610): avc: denied { write } for pid=12895 comm="syz.5.2705" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 440.725727][T12906] netlink: 'syz.2.2708': attribute type 10 has an invalid length. [ 440.812771][ T28] audit: type=1400 audit(1784217572.466:611): avc: denied { watch_reads } for pid=12897 comm="syz.4.2707" path="/561/file0" dev="tmpfs" ino=2956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 440.847718][T12911] loop2: detected capacity change from 0 to 512 [ 440.869382][T12911] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 440.961519][T12911] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2708: invalid indirect mapped block 9 (level 0) [ 440.974830][T12911] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 440.976574][T12911] EXT4-fs (loop2): 1 truncate cleaned up [ 440.985828][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 440.985845][ C0] EXT4-fs (loop2): initial error at time 1784217572: ext4_free_branches:1023: inode 11 [ 440.985885][ C0] EXT4-fs (loop2): last error at time 1784217572: ext4_free_branches:1023: inode 11 [ 441.017829][T12911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.050752][T12911] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.317827][T12906] team0: Device wg2 is of different type [ 441.336800][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.536968][T12918] loop5: detected capacity change from 0 to 128 [ 441.599155][T12918] FAT-fs (loop5): bogus number of reserved sectors [ 441.616935][T12918] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 441.640119][T12918] FAT-fs (loop5): Can't find a valid FAT filesystem [ 441.887664][T12922] loop4: detected capacity change from 0 to 4096 [ 441.896151][T12927] syzkaller0: entered promiscuous mode [ 441.924938][T12922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.941738][T12918] loop5: detected capacity change from 0 to 512 [ 441.950912][T12927] syzkaller0: entered allmulticast mode [ 442.023692][T12918] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000103) [ 442.049562][T12918] FAT-fs (loop5): Filesystem has been set read-only [ 442.114270][T12918] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000103) [ 442.130994][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.504648][T12946] loop0: detected capacity change from 0 to 164 [ 442.532697][T12946] iso9660: Unknown parameter 'éÝ Fn^(¢Ví·ôH2 àÏGû©8­ìò`00000000000000000000003' [ 442.596430][T12951] loop1: detected capacity change from 0 to 512 [ 442.660009][T12951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.673003][T12951] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.758077][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2711'. [ 443.094408][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.139383][T12959] netlink: 6716 bytes leftover after parsing attributes in process `syz.2.2724'. [ 443.240996][T12967] loop2: detected capacity change from 0 to 512 [ 443.344864][T12967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.433694][T12967] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.446667][ T4908] Bluetooth: hci0: Frame reassembly failed (-84) [ 443.463834][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.679350][T12975] lo speed is unknown, defaulting to 1000 [ 444.872206][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 444.872221][ T28] audit: type=1400 audit(1784217576.506:629): avc: denied { ioctl } for pid=12988 comm="syz.0.2733" path="socket:[33308]" dev="sockfs" ino=33308 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 444.988122][T12995] loop0: detected capacity change from 0 to 2048 [ 445.053833][T12995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 445.076786][T12995] EXT4-fs (loop0): shut down requested (2) [ 445.128669][T12991] loop1: detected capacity change from 0 to 4096 [ 445.160759][T12991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.227970][ T28] audit: type=1400 audit(1784217576.876:630): avc: denied { write } for pid=12990 comm="syz.1.2734" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.341558][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.387617][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 445.478679][T13007] xt_hashlimit: max too large, truncated to 1048576 [ 445.486679][T13007] xt_hashlimit: overflow, try lower: 1125899906842624/0 [ 445.495809][ T28] audit: type=1400 audit(1784217577.156:631): avc: denied { connect } for pid=13006 comm="syz.2.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 445.515882][ T3803] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 445.522402][ T3771] Bluetooth: hci0: command 0x1003 tx timeout [ 445.538277][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.554228][ T28] audit: type=1400 audit(1784217577.206:632): avc: denied { read } for pid=13006 comm="syz.2.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 445.611648][T13007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2738'. [ 445.634989][ T28] audit: type=1400 audit(1784217577.286:633): avc: denied { mounton } for pid=13006 comm="syz.2.2738" path="/515/file0" dev="tmpfs" ino=2716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 445.820242][T13029] loop2: detected capacity change from 0 to 512 [ 445.883816][T13029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.925426][T13029] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.280803][T13040] loop1: detected capacity change from 0 to 512 [ 446.363910][T13040] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.2745: corrupted inode contents [ 446.375956][T13040] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 446.377026][T13040] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.2745: mark_inode_dirty error [ 446.386347][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 446.386364][ C0] EXT4-fs (loop1): initial error at time 1784217578: ext4_do_update_inode:5742: inode 16 [ 446.386402][ C0] EXT4-fs (loop1): last error at time 1784217578: ext4_do_update_inode:5742: inode 16 [ 446.423723][T13040] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 446.428764][T13040] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.2745: corrupted inode contents [ 446.450158][T13040] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 446.450812][T13040] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.2745: mark_inode_dirty error [ 446.471501][T13040] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 446.479696][T13040] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.2745: corrupted inode contents [ 446.500910][T13040] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 446.501636][T13040] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 446.519508][T13040] loop1: lost filesystem error report for type 5 error -117 [ 446.520214][T13040] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.2745: corrupted inode contents [ 446.539647][T13040] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 446.545626][T13040] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.2745: mark_inode_dirty error [ 446.565962][T13040] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 446.566543][T13040] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 446.584685][T13040] loop1: lost filesystem error report for type 5 error -117 [ 446.586724][T13040] EXT4-fs (loop1): 1 truncate cleaned up [ 446.601766][T13040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.614594][T13040] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.632878][ T7196] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 446.672401][ T7196] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:21: Failed to release dquot type 1 [ 446.850390][ T28] audit: type=1400 audit(1784217578.296:634): avc: denied { read } for pid=13016 comm="syz.0.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 446.905964][T13048] syzkaller0: entered promiscuous mode [ 446.911672][T13048] syzkaller0: entered allmulticast mode [ 447.866824][T13052] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 447.896785][T13048] cgroup: name respecified [ 447.903927][ T28] audit: type=1400 audit(1784217579.546:635): avc: denied { mounton } for pid=13047 comm="syz.5.2750" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 448.893143][T13048] loop5: detected capacity change from 0 to 512 [ 448.972325][T13040] syz.1.2745 (13040) used greatest stack depth: 9504 bytes left [ 449.377889][ T28] audit: type=1400 audit(1784217580.626:636): avc: denied { write } for pid=13025 comm="syz.2.2746" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 449.825779][ T7102] Bluetooth: hci0: Frame reassembly failed (-84) [ 449.885476][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.937752][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.005467][T13077] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2762'. [ 450.017048][T13073] loop4: detected capacity change from 0 to 512 [ 450.252823][T13090] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2766'. [ 450.385629][T13091] loop1: detected capacity change from 0 to 1024 [ 450.521649][T13091] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 450.652358][T13096] netlink: 'syz.5.2768': attribute type 83 has an invalid length. [ 450.755127][T13091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.849053][ T28] audit: type=1400 audit(1784217582.466:637): avc: denied { write } for pid=13078 comm="syz.1.2761" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.135382][T13073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.174001][ T28] audit: type=1400 audit(1784217582.826:638): avc: denied { sqpoll } for pid=13097 comm="syz.5.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 451.203218][T13098] netlink: 'syz.5.2769': attribute type 10 has an invalid length. [ 451.217186][T13073] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.269731][T13106] loop5: detected capacity change from 0 to 512 [ 451.305245][T13106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.331993][T13106] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.041779][ T28] audit: type=1400 audit(1784217583.686:639): avc: denied { write } for pid=13105 comm="syz.5.2770" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.064042][ T3771] Bluetooth: hci0: command 0x1003 tx timeout [ 452.070240][ T3803] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 452.174432][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.380299][T13116] loop2: detected capacity change from 0 to 512 [ 452.388243][T13116] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 452.416254][T13116] rdma_rxe: rxe_newlink: failed to add lo [ 452.426451][T13116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.435466][T13116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.538796][T13119] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2775'. [ 452.651515][ T28] audit: type=1400 audit(1784217584.296:640): avc: denied { setopt } for pid=13072 comm="syz.4.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 452.708360][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.989873][T13127] loop0: detected capacity change from 0 to 4096 [ 453.021974][T13127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.092380][T13130] loop1: detected capacity change from 0 to 512 [ 453.100633][T13130] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 453.134507][T13130] sz1: rxe_newlink: already configured on lo [ 453.145029][T13130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.154069][T13130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.185562][T13132] loop2: detected capacity change from 0 to 512 [ 453.267369][T13132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.297647][ T28] audit: type=1400 audit(1784217584.946:641): avc: denied { write } for pid=13126 comm="syz.0.2780" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 453.322179][T13132] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.507546][ T28] audit: type=1400 audit(1784217584.976:642): avc: denied { getopt } for pid=13138 comm="syz.4.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 453.538564][T13142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2783'. [ 453.586389][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.596558][ T28] audit: type=1400 audit(1784217585.186:643): avc: denied { ioctl } for pid=13141 comm="syz.4.2783" path="socket:[33685]" dev="sockfs" ino=33685 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 453.774394][ T28] audit: type=1400 audit(1784217585.296:644): avc: denied { write } for pid=13131 comm="syz.2.2781" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.099446][ T28] audit: type=1400 audit(1784217585.746:645): avc: denied { bind } for pid=13146 comm="syz.1.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 454.174956][ T28] audit: type=1400 audit(1784217585.826:646): avc: denied { write } for pid=13146 comm="syz.1.2786" path="socket:[33702]" dev="sockfs" ino=33702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 454.288885][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.550616][T13158] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2788'. [ 454.808254][T13153] loop0: detected capacity change from 0 to 4096 [ 454.818606][T13155] loop4: detected capacity change from 0 to 4096 [ 454.872496][T13155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.891192][T13153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.089153][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.125622][T13168] loop5: detected capacity change from 0 to 512 [ 455.148796][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.195388][T13168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.219343][T13171] macvlan1: entered promiscuous mode [ 455.237058][T13168] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.254893][T13171] team0: entered promiscuous mode [ 455.260134][T13171] team_slave_0: entered promiscuous mode [ 455.267107][T13171] team_slave_1: entered promiscuous mode [ 455.274791][T13171] debugfs: 'hsr0' already exists in 'hsr' [ 455.280699][T13171] Cannot create hsr debugfs directory [ 455.315010][ T3297] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.504109][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2794'. [ 456.138371][T13199] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2799'. [ 456.364215][T13205] netlink: 'syz.0.2801': attribute type 10 has an invalid length. [ 457.189523][T13213] loop1: detected capacity change from 0 to 4096 [ 457.204150][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.304031][T13213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.337461][T13239] loop5: detected capacity change from 0 to 512 [ 457.403197][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 457.403296][ T28] audit: type=1400 audit(1784217589.056:650): avc: denied { write } for pid=13212 comm="syz.1.2803" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.463754][T13239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.482353][T13239] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.865912][ T28] audit: type=1400 audit(1784217589.426:651): avc: denied { write } for pid=13238 comm="syz.5.2810" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 458.892265][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.468471][T13255] loop0: detected capacity change from 0 to 512 [ 459.539427][T13255] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2815: corrupted inode contents [ 459.551563][T13255] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 459.552076][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 459.567916][ C1] EXT4-fs (loop0): initial error at time 1784217591: ext4_do_update_inode:5742: inode 16 [ 459.577800][ C1] EXT4-fs (loop0): last error at time 1784217591: ext4_do_update_inode:5742: inode 16 [ 459.596627][T13255] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.2815: mark_inode_dirty error [ 459.608112][T13255] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 459.676286][T13252] netlink: 'syz.2.2814': attribute type 10 has an invalid length. [ 459.680585][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.941737][T13255] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2815: corrupted inode contents [ 459.953861][T13255] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 459.957869][T13255] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.2815: mark_inode_dirty error [ 459.978455][T13255] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 459.992411][T13255] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2815: corrupted inode contents [ 460.013536][T13255] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 460.014819][T13255] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 460.032790][T13255] loop0: lost filesystem error report for type 5 error -117 [ 460.034064][T13255] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.2815: corrupted inode contents [ 460.053567][T13255] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 460.053870][T13255] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.2815: mark_inode_dirty error [ 460.074356][T13255] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 460.078088][T13255] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 460.096152][T13255] loop0: lost filesystem error report for type 5 error -117 [ 460.097410][T13255] EXT4-fs (loop0): 1 truncate cleaned up [ 460.111495][T13255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.124285][T13255] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.142312][ T7102] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 460.152345][ T7102] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:19: Failed to release dquot type 1 [ 460.521372][ T28] audit: type=1400 audit(1784217592.166:652): avc: denied { write } for pid=13279 comm="syz.4.2820" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 460.610301][T13283] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2822'. [ 460.705781][T13283] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2822'. [ 460.766647][ T28] audit: type=1400 audit(1784217592.196:653): avc: denied { open } for pid=13279 comm="syz.4.2820" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 460.926090][T13287] loop1: detected capacity change from 0 to 512 [ 461.003921][T13287] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 461.021112][T13293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2824'. [ 461.072012][ T28] audit: type=1400 audit(1784217592.226:654): avc: denied { read } for pid=13279 comm="syz.4.2820" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 461.141218][T13287] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2823: bg 0: block 4: invalid block bitmap [ 461.257591][T13255] syz.0.2815 (13255) used greatest stack depth: 8952 bytes left [ 461.278504][T13287] loop1: lost filesystem error report for type 5 error -117 [ 461.278667][T13287] EXT4-fs (loop1): Remounting filesystem read-only [ 461.286052][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 461.286070][ C1] EXT4-fs (loop1): initial error at time 1784217592: ext4_validate_block_bitmap:432 [ 461.286111][ C1] EXT4-fs (loop1): last error at time 1784217592: ext4_validate_block_bitmap:432 [ 461.375425][T13280] lo speed is unknown, defaulting to 1000 [ 461.386000][T13287] EXT4-fs (loop1): 1 truncate cleaned up [ 461.392509][T13287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.396330][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.582592][T13303] loop4: detected capacity change from 0 to 512 [ 461.615652][T13309] loop0: detected capacity change from 0 to 512 [ 461.624309][T13309] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 461.809668][T13313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.898650][T13313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.949991][T13303] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 462.155087][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.355898][T13309] rdma_rxe: rxe_newlink: failed to add lo [ 462.397687][T13303] rdma_rxe: rxe_newlink: failed to add lo [ 462.436319][T13303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.476668][T13303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.181899][ T28] audit: type=1400 audit(1784217594.826:655): avc: denied { ioctl } for pid=13334 comm="syz.4.2838" path="socket:[35105]" dev="sockfs" ino=35105 ioctlcmd=0x89a3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 463.228041][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.287231][T13330] veth1_macvtap: left promiscuous mode [ 463.743024][T13348] loop5: detected capacity change from 0 to 512 [ 463.790516][T13348] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.2840: corrupted inode contents [ 463.802448][T13348] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 463.803172][T13348] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #16: comm syz.5.2840: mark_inode_dirty error [ 463.812335][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 463.812358][ C1] EXT4-fs (loop5): initial error at time 1784217595: ext4_do_update_inode:5742: inode 16 [ 463.812408][ C1] EXT4-fs (loop5): last error at time 1784217595: ext4_do_update_inode:5742: inode 16 [ 463.849813][T13348] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 463.852069][T13348] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.2840: corrupted inode contents [ 463.873189][T13348] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 463.875377][T13348] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.2840: mark_inode_dirty error [ 463.897090][T13348] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.2840: corrupted inode contents [ 463.909197][T13348] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 463.917829][T13348] loop5: lost filesystem error report for type 5 error -117 [ 463.919114][T13348] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.2840: corrupted inode contents [ 463.938914][T13348] EXT4-fs error (device loop5): ext4_truncate:4691: inode #16: comm syz.5.2840: mark_inode_dirty error [ 463.950459][T13348] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 463.959528][T13348] loop5: lost filesystem error report for type 5 error -117 [ 463.960903][T13348] EXT4-fs (loop5): 1 truncate cleaned up [ 463.975327][T13348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.988030][T13348] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.164667][T13330] veth1_macvtap: entered promiscuous mode [ 464.289998][ T28] audit: type=1400 audit(1784217595.936:656): avc: denied { read } for pid=13353 comm="syz.2.2841" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 464.421375][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.441032][ T28] audit: type=1400 audit(1784217596.066:657): avc: denied { read } for pid=13353 comm="syz.2.2841" name="file1" dev="tmpfs" ino=2816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 464.485885][T13338] netlink: 'syz.4.2839': attribute type 10 has an invalid length. [ 464.497627][T13354] process 'syz.2.2841' launched './file0' with NULL argv: empty string added [ 464.523500][ T4889] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 464.584894][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.621533][ T28] audit: type=1400 audit(1784217596.086:658): avc: denied { unlink } for pid=13353 comm="syz.2.2841" name="file1" dev="tmpfs" ino=2816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 464.651984][ T4889] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:10: Failed to release dquot type 1 [ 464.739359][ T28] audit: type=1400 audit(1784217596.086:659): avc: denied { watch } for pid=13353 comm="syz.2.2841" path=2F3533332F66696C6531202864656C6574656429 dev="tmpfs" ino=2816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 464.804940][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.887362][ T28] audit: type=1400 audit(1784217596.116:660): avc: denied { watch watch_reads } for pid=13353 comm="syz.2.2841" path="/533/file0" dev="tmpfs" ino=2817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 465.040706][ T28] audit: type=1400 audit(1784217596.356:661): avc: denied { execute_no_trans } for pid=13353 comm="syz.2.2841" path="/533/file0" dev="tmpfs" ino=2817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 465.085124][ T36] bridge0: port 3(team0) entered disabled state [ 465.107373][ T36] bridge_slave_1: left allmulticast mode [ 465.128276][ T36] bridge_slave_1: left promiscuous mode [ 465.153857][ T28] audit: type=1400 audit(1784217596.376:662): avc: denied { connect } for pid=13360 comm="syz.4.2843" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 465.174911][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.209220][ T36] bridge_slave_0: left allmulticast mode [ 465.231624][ T36] bridge_slave_0: left promiscuous mode [ 465.254359][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.293576][ T28] audit: type=1400 audit(1784217596.946:663): avc: denied { write } for pid=13370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.449051][T13380] loop0: detected capacity change from 0 to 1024 [ 465.475453][T13380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.541713][ T9392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.565242][ T36] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 465.590327][ T36] bond1 (unregistering): Released all slaves [ 465.610629][ T36] bond2 (unregistering): Released all slaves [ 465.653437][T13391] loop4: detected capacity change from 0 to 512 [ 465.661866][T13391] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 465.697823][T13391] rdma_rxe: rxe_newlink: failed to add lo [ 465.706780][T13391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.715856][T13391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.731961][ T36] bond3 (unregistering): Released all slaves [ 465.750681][ T36] bond0 (unregistering): Released all slaves [ 465.773880][T13393] syzkaller0: entered promiscuous mode [ 465.793757][T13393] syzkaller0: entered allmulticast mode [ 465.812979][T13341] lo speed is unknown, defaulting to 1000 [ 465.835773][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.851412][ T3303] ================================================================== [ 465.859539][ T3303] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 465.867111][ T3303] [ 465.869453][ T3303] read-write to 0xffff888237d26528 of 1 bytes by task 13285 on cpu 1: [ 465.877620][ T3303] folio_add_lru+0xa4/0x250 [ 465.882145][ T3303] shmem_get_folio_gfp+0x7cc/0xd90 [ 465.887284][ T3303] shmem_write_begin+0xfc/0x1f0 [ 465.892174][ T3303] generic_perform_write+0x186/0x490 [ 465.897498][ T3303] shmem_file_write_iter+0xc5/0xf0 [ 465.902642][ T3303] __kernel_write_iter+0x30f/0x590 [ 465.907778][ T3303] dump_user_range+0xa73/0xd00 [ 465.912578][ T3303] elf_core_dump+0x21c0/0x2340 [ 465.917363][ T3303] coredump_write+0xaf9/0xdd0 [ 465.922075][ T3303] vfs_coredump+0x2770/0x3290 [ 465.926790][ T3303] get_signal+0xd33/0xf10 [ 465.931148][ T3303] arch_do_signal_or_restart+0x96/0x480 [ 465.936724][ T3303] irqentry_exit+0x14d/0x610 [ 465.941344][ T3303] asm_exc_page_fault+0x26/0x30 [ 465.946222][ T3303] [ 465.948566][ T3303] read to 0xffff888237d26528 of 1 bytes by task 3303 on cpu 0: [ 465.956125][ T3303] __lru_add_drain_all+0x17e/0x450 [ 465.961255][ T3303] lru_add_drain_all+0x10/0x20 [ 465.966048][ T3303] invalidate_bdev+0x47/0x70 [ 465.970661][ T3303] ext4_put_super+0x614/0x7c0 [ 465.975374][ T3303] generic_shutdown_super+0xee/0x220 [ 465.980693][ T3303] kill_block_super+0x2a/0x70 [ 465.985388][ T3303] ext4_kill_sb+0x42/0x80 [ 465.989742][ T3303] deactivate_locked_super+0x75/0x1c0 [ 465.995158][ T3303] deactivate_super+0x97/0xa0 [ 465.999872][ T3303] cleanup_mnt+0x2c3/0x340 [ 466.004313][ T3303] __cleanup_mnt+0x19/0x20 [ 466.008757][ T3303] task_work_run+0x130/0x1a0 [ 466.013356][ T3303] exit_to_user_mode_loop+0x1e4/0x8c0 [ 466.018751][ T3303] do_syscall_64+0x23c/0x3c0 [ 466.023360][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.029279][ T3303] [ 466.031614][ T3303] value changed: 0x05 -> 0x08 [ 466.036322][ T3303] [ 466.038661][ T3303] Reported by Kernel Concurrency Sanitizer on: [ 466.044841][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 466.054315][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.064385][ T3303] ================================================================== [ 466.072808][ T36] tipc: Left network mode [ 466.212519][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.221754][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.232715][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.247494][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.271038][ T36] veth1_macvtap: left promiscuous mode [ 466.282160][ T36] veth0_macvtap: left promiscuous mode [ 466.291482][ T36] veth1_vlan: left promiscuous mode [ 466.297570][ T36] veth0_vlan: left promiscuous mode [ 466.364972][ T36] team_slave_1 (unregistering): left promiscuous mode [ 466.371783][ T36] team_slave_1 (unregistering): left allmulticast mode [ 466.379543][ T36] team0 (unregistering): Port device team_slave_1 removed [ 466.390539][ T36] team_slave_0 (unregistering): left promiscuous mode [ 466.397638][ T36] team_slave_0 (unregistering): left allmulticast mode [ 466.405644][ T36] team0 (unregistering): Port device team_slave_0 removed [ 466.443952][ T7102] smc: removing ib device sz1 [ 466.460842][ T9] lo speed is unknown, defaulting to 1000 [ 466.466766][ T9] sz1: Port: 1 Link DOWN [ 466.679291][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 466.691394][T13341] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.698611][T13341] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.705941][T13341] bridge_slave_0: entered allmulticast mode [ 466.712589][T13341] bridge_slave_0: entered promiscuous mode [ 466.719549][T13341] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.726684][T13341] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.733941][T13341] bridge_slave_1: entered allmulticast mode [ 466.740390][T13341] bridge_slave_1: entered promiscuous mode [ 466.749900][ T36] IPVS: stop unused estimator thread 0... [ 466.766181][T13341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.777213][T13341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.799651][T13341] team0: Port device team_slave_0 added [ 466.807369][T13341] team0: Port device team_slave_1 added [ 466.825157][T13341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.832541][T13341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.858767][T13341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.870421][T13341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.877613][T13341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.903732][T13341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.933606][T13341] hsr_slave_0: entered promiscuous mode [ 466.939837][T13341] hsr_slave_1: entered promiscuous mode [ 466.946017][T13341] debugfs: 'hsr0' already exists in 'hsr' [ 466.951815][T13341] Cannot create hsr debugfs directory [ 466.990899][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 467.234538][T13341] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 467.243599][T13341] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.251702][T13341] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 467.260957][T13341] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.269078][T13341] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 467.278462][T13341] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.286484][T13341] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 467.295817][T13341] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.339138][T13341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.354006][T13341] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.364357][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.371495][ T7102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.383381][ T4906] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.390507][ T4906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.418859][T13341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.544411][T13341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.613431][T13341] veth0_vlan: entered promiscuous mode [ 467.621652][T13341] veth1_vlan: entered promiscuous mode [ 467.638699][T13341] veth0_macvtap: entered promiscuous mode [ 467.646527][T13341] veth1_macvtap: entered promiscuous mode [ 467.659977][T13341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.669974][T13341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.683158][ T7102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.692128][ T7102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.701206][ T7102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.710141][ T7102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0