last executing test programs: 2.870608525s ago: executing program 1 (id=1353): openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) 2.851690816s ago: executing program 1 (id=1354): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x84000221) 2.786240022s ago: executing program 1 (id=1357): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r4, &(0x7f0000000740)}, 0x20) listen(r1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r5, 0xd) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000d00000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="06000010060000000600000003000000230a0400", @ANYRES32, @ANYRES64, @ANYRES64, @ANYRES32=r6, @ANYBLOB="00000000041300000100000000000000000000000007000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000a}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000030000000100000000000007000000000000000001000004000000e5000000000100000000000000010000000000000800000000005f"], &(0x7f0000000300)=""/209, 0x4b, 0xd1, 0x2}, 0x28) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 2.494644019s ago: executing program 1 (id=1363): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x8000, 0x40, 0x5, 0x1000, {{0x12, 0x4, 0x1, 0x37, 0x48, 0x67, 0x0, 0x35, 0x2d, 0x0, @broadcast, @private=0xa010100, {[@ra={0x94, 0x4}, @cipso={0x86, 0x30, 0xffffffffffffffff, [{0x6, 0xc, "34c9535d9f20003098e0"}, {0x2, 0x8, "4c9a63ed4324"}, {0x7, 0xa, "1bc3ad69ad535512"}, {0x7, 0xc, "5894f60c0d52cba4d30f"}]}]}}}}}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 2.203147245s ago: executing program 1 (id=1368): unshare(0x2a020400) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800802, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@errors_remount}, {@usrjquota}]}, 0x3, 0x7b8, &(0x7f0000000980)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x0, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3a, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20000090}, 0x8084) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r8, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) read$watch_queue(r10, &(0x7f0000000240)=""/173, 0xad) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000180)={0x80000001, 0x2, 0x81e6b76d, 0x10002, 0x9, "aa32b73986bbee6b9231334cbfa0b748261a13"}) 1.750339644s ago: executing program 2 (id=1377): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007a00)=[{{&(0x7f0000000100)=@alg, 0x80, &(0x7f0000000200)=[{0x0}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000002880)=""/251, 0xfb}], 0x4, &(0x7f0000000300)=""/102, 0x66}, 0x588}, {{&(0x7f0000000540)=@qipcrtr, 0x80, &(0x7f0000000440)=[{&(0x7f0000002980)=""/150, 0x96}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/195, 0xc3}], 0x3, &(0x7f00000016c0)=""/90, 0x5a}, 0x1}, {{&(0x7f0000002b40)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002bc0)=[{0x0}], 0x1, &(0x7f0000002c00)=""/104, 0x68}, 0x7}, {{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000003d80)=""/218, 0xda}, {&(0x7f0000003e80)=""/85, 0x55}, {0x0}, {&(0x7f0000004000)=""/166, 0xa6}, {&(0x7f0000002c80)=""/35, 0x23}, {&(0x7f00000040c0)=""/193, 0xc1}, {&(0x7f00000051c0)=""/73, 0x49}, {&(0x7f0000005240)=""/131, 0x83}], 0x8, &(0x7f0000005380)=""/232, 0xe8}, 0x800}, {{&(0x7f0000005480)=@ieee802154, 0x80, &(0x7f0000005640)=[{&(0x7f0000005500)=""/39, 0x27}, {&(0x7f0000005800)=""/4096, 0x1000}], 0x2}, 0x1dd49ea2}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000006800)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f0000007800)=""/136, 0x88}, 0x9}, {{&(0x7f00000078c0)=@l2, 0x80, 0x0, 0x0, &(0x7f0000007980)=""/128, 0x80}, 0x3}], 0x7, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x800, 0x0, 0x0, 0x4, "0062ba7d820000001652bdc5fcbdc8dace6b04"}) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rpc\x00') lseek(r2, 0x4, 0x3) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 1.136012929s ago: executing program 4 (id=1382): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x84000221) 1.087537654s ago: executing program 4 (id=1383): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000200)={0xf97cff8c, 0x8, 'SE Linux', "6f4ae36dfc3bfdf5d3a66f4c8eb7e7be5fae041bbbd41b1826e575fd7684fb8e237c1525c52ef76215b846ed69273265dbaf0a16ded9a02d16d33ffcb41b342779b538e1f1c13d30edc7894f30db74a64c697a0601cf240b34802fe4bce44eee6104ffdb0fb988b5e5f8b93bba6e7ee90c2b463d389d5ce2fed5f3768771c3e1ea266216ace5b8f491848b536c92232c370d6b14ee78e413ddfe49d011904b266766"}, 0xb2) 1.054400606s ago: executing program 0 (id=1385): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x7}, 0x18) r6 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r7 = dup(r6) write$binfmt_elf64(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000020001000500380001000600b1060004030000000b000d00ff000000000000000900000000000000070000000000000009"], 0x178) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 1.021232889s ago: executing program 1 (id=1386): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xd, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000008002b00000000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1022002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) utime(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="cf65789a1afc1e54b9d776d9269ed64f2b5845776c8a3d74678accd4f5decf842f2db7949cd49a14b8ca2e8a746991d15dcc2f890e9e294ac4299699cb46191c2c63fc53decbcb2f05e167f3ffd8732370aa47"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r0, 0x0, 0x40008003}, 0x18) r1 = fsopen(&(0x7f0000000540)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000001c40)=ANY=[@ANYBLOB="18000000000000000000000000008000181100002d8f8d0b909bd8479eda35499fdece7a9a598d132c42a4b453f5aa0974e19fb707b6f53067c5375cb16a4e4e4cf1d56ed409a694c87722fdc1058470f6f2c73ff440349859418add711a3c9c413c576ef761147a17774394a478c5350e2c565398fe75e2df", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa01f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0xfffffffffffffffc, 0x3b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x39}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f00000003c0)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) 994.025862ms ago: executing program 3 (id=1387): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000080)="ab", 0x1}], 0x1}, 0x0) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)='/', 0x1}], 0x1, 0x0, 0x0, 0x800}, 0x2000c011) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) close(r2) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000ac0)={{0x2, 0x0, @multicast2}, {0x1}, 0x2a, {0x2, 0x0, @empty}, 'bond_slave_1\x00'}) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, r6, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x6e}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004814}, 0x4004080) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r8, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) fcntl$setown(r0, 0x8, r4) r9 = dup(r0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r10, 0x0, 0x4}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @empty, 0x5}, 0x1c) sendto$packet(r9, &(0x7f00000003c0)='(', 0xfffffffffffffed1, 0x24004090, 0x0, 0x0) connect$unix(r9, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 958.242855ms ago: executing program 4 (id=1388): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 897.18936ms ago: executing program 0 (id=1389): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000280)="14", 0x1}], 0x1, 0x9, 0xfffffffc, 0xa0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="101000000000000008000d0005000000e4031680a4000180"], 0x40c}}, 0x0) r3 = getuid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000a00)={[{@test_dummy_encryption_v1}, {@bh}, {@delalloc}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}], [{@smackfsroot={'smackfsroot', 0x3d, '[]}!'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@euid_eq={'euid', 0x3d, r3}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/loop-control\x00'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'debug_want_extra_isize'}}]}, 0x3, 0x58d, &(0x7f0000000d80)="$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") ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, &(0x7f00000008c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1c, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x1, 0x0, 0x0, {[@generic={0xfe, 0x6, "7646a26e"}]}}}}}}}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0xfffffffffffff001}, 0x18) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000bc0)=@getchain={0x34, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x6, 0xfff2}, {0x2, 0x1f}, {0xfff3}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8048014}, 0x4000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000060a0b0400000000000000000200000018000412000000800b00010072656a6563740000040002800900020073797a3200000000140000001100010000000000000000000000000a"], 0x60}}, 0x0) sendmsg$nl_netfilter(r9, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x1f8, 0x14, 0x2, 0x101, 0x70bd2d, 0x25dfdbff, {0x2, 0x0, 0x1}, [@nested={0xf8, 0x56, 0x0, 0x1, [@typed={0xf2, 0x14c, 0x0, 0x0, @binary="b3870f4fa15d3cb48d4f8c54f4d5bee824d56f0d01e33eec211ccf64c3a93b6ab12c0d4634bedb4acf19300929711ed555d01e074a167ed303fdaaa99a52ef5a0fd1cb0443d43f1e568d52f5bb62a8c3e26ad63c967fdc337775ed8b6aa990b498f03446eae24887df8d57d0a74d00375f7774bc94c3f71143675141d883bc1ee00a8d998789333984face5a6e5418e67eec3df181049d6d346b39f914ec7378c042b278f7bb21bd0a8d0c62ebade148d1511f3f77ccc6dcf501e80afa2c76c6f1dc253b37c71716d4a2b1caf5e606cdd585b69a39f4bfdeef14bddbe2a702d4ebd9cad51a0f2b39a4a1918aafe2"}]}, @generic="347d5af0e6db79e892b123520c73a6ccbf6f68a44015ca36931258206f68af823887c15bf69fffd541a046f33a5d880aba2ec391546f81b73ec6d1282f54c65b57b95c74dfa37830e2daca635cbf5fce79f47c07", @generic="5f157aeefc65884f0df3489452120b4eb812f921324f5f74f33e4c92fe3ce8f2e474232aa233e7832769bf931b4383df3d1c22c437c388dc3cc62774dff91f972146df5efb844cdea0aef504c6e8b6b99014ead20023faea45b98c1e5e14aa401034817aa2db58faf25579096b697b6e26fc89495f7e78883a1207b8a813d5929643f2", @nested={0x14, 0x62, 0x0, 0x1, [@nested={0x4, 0x1}, @typed={0x4, 0x34}, @nested={0x4, 0xa5}, @typed={0x4, 0x139}]}]}, 0x1f8}}, 0x8810) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000c00)=ANY=[@ANYBLOB="30000000240000022bbd7000ffdbdf250400358008006300050000001b667315cd2d5a3054456a3768aa7832fe1e240044026c5c2a7ab73c4dc331b5ba670cec7de57e1a07f04622d320c99e59a052d52565b9d84a62bbd113fc80be247f6ca397bb25628a25ea9f5e212f12e9ea5979fd0a27220176ce"], 0x30}, {&(0x7f0000002fc0)=ANY=[@ANYBLOB="a01000001e0010002dbd7000ffdbdf254dac22500517925d2092b474138ca4cf2b7e40da7a094b475d1740c785680dc37d28d6dae8869ad8c1372ff6ca44870e15388d1b909d29c45fcc99aff9d737db8915d8ad462cb51ab608000700", @ANYRES32=0x0, @ANYBLOB="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"], 0x10a0}, {&(0x7f00000000c0)=ANY=[@ANYBLOB="1400f2ff310010002abd7000fcdbdf2504002980"], 0x14}, {&(0x7f0000004640)={0x328, 0x23, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x317, 0xd1, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xb6, 0x0, 0x0, @pid}, @nested={0xc, 0x25, 0x0, 0x1, [@typed={0x4, 0x136}, @nested={0x4, 0xd8}]}, @nested={0x184, 0x4, 0x0, 0x1, [@generic="6bb5aa3f898cf17f71012064f7756e994fb3691b4433d02765924c25c011275cb1b85906d31f19d4e8fc5410635606f9131097434c69ab2826808d217d65", @generic="62b791538d7140ae789b7e270e519e8863553636117047a20cdc5ea37b058ca757b094ba532f8f68ca272a1d408e7b958f06ac354f83e4d3c305b42293ba7ebe242780026fb5ccbcd7798e324e0c1be77f14edb7aa4137a1f5c6eaad347201bfd1ade0d588037c82413e1ad35dda61660e9bfd92c9", @typed={0x8, 0x140, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x2b, 0x0, 0x0, @uid=r3}, @generic="3eb2e8505504906af200735cc4123838d60ab5db5846fa87e4d73cd3af331a86bbbd7257756e63a8063a9b09074b64c535e26074f8fe81eba32e571c38abb5a3383cd88bf73b21130e531c2c6117c1b2c0efd480bf04fc120117e962c99d6560b7b0195fe2bb8207566566b43ef3569688c37c91a4fa142c734dcb560e0d3270fb037498dbb2e7393e10f42c9004c595a301694995768b80af8ddd88c7a533669c7ff400c342a91eafb41882f10a9e32fb", @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0xd0, 0x0, 0x0, @ipv4=@empty}]}]}, @generic="331f1a0070e46723649044f88cb4793daa76ac0184cd7917ebbe00a56f775e7837e2bc47080b9cbab85a1070cd730218b74030bdcd5bfad0d8415be27b8a5c537518c857d4780bdaa1da3ba755c10e55019e871ca0e16f94f2bb83b8e0b4a0251b5d7e6ee5f85a3e94340acf2c24388b303719c029929c1abea0e1da8b7f28966b7da53317ad86e2745cdef62e3fb02f13c719", @generic, @typed={0xdf, 0x67, 0x0, 0x0, @binary="d759a0e68f49180a5054395a7176842c235c92e4d9da514b6ec199b4bbebf4789e204c5877a52fc69db601a10848c22dcb70ef73691fa5873ad1621dd28aa51639010b2ccc1866357a38e5e084facc38b7e6f7511337e1c257ab6f1a2b1915d6a600d0bfa10eb4d7f8a3f99eb9d37eddcdb9e7a093a0f2b8c0c6d4929574695970ea356066f81dc9af5122424ae33a2a3d513843144e78a136c19164d974a78542612a4a071ee942f5ebbef13556206b90b444f5d550f7c3ba2831e2b9e91828bae19f6808d7b698e4fba7c4c74f3d60fc6ec5b28bc930520c91e0"}]}]}, 0x328}, {&(0x7f0000001500)={0x200, 0x3b, 0x400, 0x70bd28, 0x25dfdbfe, "", [@generic="19ccd2436bc87a8330fa10b39f359c3628e9020d240690f7e500b43597cb60f795a71b345d674ec9e5fc347ca7a2a7643cc00ec684241128636b81e87172a643544aa58662d5da453cf49a2ef90b6b3dacf4d15ef426ef412102d056184d6d057a3ea7d053b1b489be17baea6259f65308e0f739af123d1f0309633e50e9bf240c4cbdeefd64aff859e486f77e2d8257156de10d9db2a63b9c65563e6f91778caa12d39560e5dc689d875da2cd9d3a8ff57126e5cd95e8edbedb14f53ec6ce07bb5cb5ee44ec527b3fdc9aa14336e1c521f812e1194876f7c01e5c7572d1c5", @typed={0x8, 0x5b, 0x0, 0x0, @u32=0x2d}, @nested={0x8, 0x95, 0x0, 0x1, [@nested={0x4, 0x84}]}, @nested={0x8b, 0x54, 0x0, 0x1, [@typed={0x4, 0x115}, @nested={0x4, 0xb2}, @typed={0x8, 0x84, 0x0, 0x0, @uid=0xee00}, @generic="c1d30d130936cd97c9c058ead20aad96c3a89f075e7b440aacfa65a06b3e254ac8647f2dd978edbb4aa939ac0fb2994c230974", @nested={0x44, 0x24, 0x0, 0x1, [@nested={0x4, 0x3a}, @nested={0x3c, 0x108, 0x0, 0x1, [@typed={0x4, 0x8d}, @generic="2618a099e364fc42f33d561536f4c65f0588586d9f04a789f41225031cc51d4228acc6e5584c7fd8cd0d0e87b83fdfb3611716c4"]}]}]}, @nested={0x73, 0x1b, 0x0, 0x1, [@generic, @nested={0x4, 0x4b}, @generic, @typed={0x4, 0x116}, @generic, @generic="3078dec164589b1539f1f6bf37d70d2b6f3c774841a051d833d8c8b00633d8971e2ca118c4b89f1a90a2993c2e6c411b5cb4fb50ecc6cd9d766a9ebddf0279cfdf454678bff658cc2fd0c7c807c0e617e89f990c548fe9ee00"/103]}]}, 0x200}], 0x5}, 0x4) setfsuid(r3) 827.138066ms ago: executing program 4 (id=1390): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x4004040) (fail_nth: 1) 660.627041ms ago: executing program 3 (id=1391): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r4, &(0x7f0000000740)}, 0x20) listen(r1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0xd) listen(r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) cachestat(0xffffffffffffffff, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) 621.832565ms ago: executing program 2 (id=1392): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast2}}}, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x8000, 0x40, 0x5, 0x1000, {{0x12, 0x4, 0x1, 0x37, 0x48, 0x67, 0x0, 0x35, 0x2d, 0x0, @broadcast, @private=0xa010100, {[@ra={0x94, 0x4}, @cipso={0x86, 0x30, 0xffffffffffffffff, [{0x6, 0xc, "34c9535d9f20003098e0"}, {0x2, 0x8, "4c9a63ed4324"}, {0x7, 0xa, "1bc3ad69ad535512"}, {0x7, 0xc, "5894f60c0d52cba4d30f"}]}]}}}}}) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 596.413757ms ago: executing program 2 (id=1393): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x80) 596.235997ms ago: executing program 4 (id=1394): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)={0x28, r2, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xcb, 0x49}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff7}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x80) 577.618869ms ago: executing program 4 (id=1395): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x256581, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) unshare(0x64000680) 478.698848ms ago: executing program 2 (id=1396): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x42}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5800"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 463.720839ms ago: executing program 0 (id=1397): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000200)={0xf97cff8c, 0x8, 'SE Linux', "6f4ae36dfc3bfdf5d3a66f4c8eb7e7be5fae041bbbd41b1826e575fd7684fb8e237c1525c52ef76215b846ed69273265dbaf0a16ded9a02d16d33ffcb41b342779b538e1f1c13d30edc7894f30db74a64c697a0601cf240b34802fe4bce44eee6104ffdb0fb988b5e5f8b93bba6e7ee90c2b463d389d5ce2fed5f3768771c3e1ea266216ace5b8f491848b536c92232c370d6b14ee78e413ddfe49d011904b266766"}, 0xb2) 437.971281ms ago: executing program 2 (id=1398): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000001080300000000000000000002002b90"], 0x14}, 0x1, 0x0, 0x0, 0x20048840}, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={r7, 0x3}, 0x8) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000000040), 0x4) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x141a82, 0x0) sendfile(r8, r8, 0x0, 0x3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000060000000000000001000084090100000400000042abdcf4a61790eeaec20e84c7ff9b0400000001000000006100305f0064025856a4a078360424b125a7dd38823a476309a4853c4fa3ceacbb045e9b5a95470554bd67f470c0b8eab22bdcdca26a6f"], &(0x7f0000000f40)=""/4079, 0x36, 0xfef, 0x8}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 432.653552ms ago: executing program 3 (id=1399): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x3, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 406.766024ms ago: executing program 0 (id=1400): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 332.773131ms ago: executing program 2 (id=1401): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x40040, 0x11d) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=r1, @ANYBLOB="9af028f8013100937a886e3a6633c8879ffaf1145622564a6ff97b380acb570d212e94fb2d2b58424ba3c0fcab00cd633fb6dba975f8d9ffa92989c134fcad73c37149673e2d401fab731029a01cdb6074dce10153e230af9fe248012f4e5340733b72fa374d50a87d2e6fbb870bad775e3e82d888cb61b4351e562604435323517b985f2f9776639136703ff8b2585f9f88272cc5c4ab213ad752ed2fbefd0199d530898bb4a0114470f510421604c1b725cf44fd22b8767091e8a4e7225e88b433698bc4a7ca367caf3ec77e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000740)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000d40800000000e7057b4f30ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000009574c394052d8e05167e52ce37e9acd9b52e1964b317860d8a6cf86f5fcbfce141a05e4fa0f6a655df6407924b32c2128fcac4bf23c3956ebac3765b86e0bd7124eceaee33d01570f67e061e513a7802c64e94"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x4, &(0x7f0000000940)=ANY=[@ANYRES8=r0], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4d}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="33c6c7525a5aaf6eb8569b33bb4509bcfd6fbf0b", @ANYRES8=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000800)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8}, 0x18) r9 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, 0x0, 0x800) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 248.602348ms ago: executing program 3 (id=1402): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) flock(r0, 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x1204000, 0x1000}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0x8, 0xbac8, 0x31e4, 0x7}, {0x48, 0x1, 0xfcbf, 0xfff7, 0x1ff, 0x5}, 0x4eef, 0x2, 0x19b0}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x3, 0x9, 0x1, 0x800, 0x9c3, 0x4, 0x0, 0x8, 0xffffffff, 0x3, 0x8, 0x8, 0xfffffffd, 0x8, 0x8001, 0x100, 0x3, 0x0, 0x588e, 0x1, 0x1e00, 0x101, 0x7, 0x80000000, 0xf8f1, 0x0, 0x401, 0x10, 0x1, 0xc00000, 0xfffffff7, 0x400, 0x7f, 0x80000000, 0x3, 0x6ade, 0x0, 0x4, 0x77c8, 0x1, 0x5, 0x8, 0x1, 0x7, 0x3, 0x80, 0x7fffffff, 0x2, 0x9, 0x3, 0x80, 0x8, 0xe, 0x6, 0x0, 0x2, 0x4, 0xfffffffa, 0x4, 0x1, 0x4, 0x3, 0x1, 0x8, 0x2, 0xe757, 0xfffffff7, 0x8001, 0x45f, 0x1ff, 0xe, 0xd, 0x7d3, 0x4, 0xb, 0x58c4637b, 0x5, 0x0, 0x1, 0x2, 0x6, 0xb90, 0x203, 0x6, 0x842f, 0x7, 0x10000, 0x4, 0xffffff25, 0xa04, 0x78da, 0x0, 0x0, 0xffffffff, 0x80000001, 0x0, 0x5, 0x465, 0x1000006, 0xcd17, 0x9, 0x6, 0x2, 0xfffffffc, 0xfffffff7, 0x7f, 0x2, 0x6, 0x1, 0x40000, 0x6, 0x6, 0x0, 0x40, 0x8, 0x3, 0x23, 0x0, 0x6, 0x1, 0x2fe, 0x96, 0x0, 0x2, 0x5, 0x2, 0x9, 0x8, 0x0, 0x0, 0x7, 0x6, 0x80, 0x1, 0x7, 0x7f, 0x2, 0x200, 0x8, 0xe330fdc7, 0x9, 0x5, 0x7e, 0x2, 0x0, 0x5, 0xffff0000, 0x2, 0x1, 0x401, 0x7, 0x8, 0xffff669d, 0xffffff94, 0x7, 0x5, 0x10001, 0x7, 0x7, 0x4, 0x5, 0xb2fb, 0x1, 0x7ff, 0x85, 0xffffffff, 0x4ac, 0xfc9, 0x80000000, 0x1, 0xfb, 0x6, 0xb, 0x3, 0x40, 0x5, 0x2, 0x83, 0x6, 0x56a, 0x0, 0x9, 0x9, 0x1, 0x7, 0x9, 0x4, 0xe, 0x6, 0x6, 0x8, 0x0, 0xfffffffe, 0x5, 0x44, 0x4, 0x2, 0x3, 0xfffffff1, 0x6, 0x80000000, 0x4, 0x100, 0xfffffff7, 0x2a8, 0x2, 0x9, 0x7f, 0x4, 0x8, 0xffffffff, 0x6ed916d9, 0xfffffff8, 0x38, 0x3, 0x2, 0xd0, 0x36a0, 0xc, 0x3, 0x2, 0x1, 0x7df0, 0x9, 0x2009, 0x5, 0xfff, 0xc, 0x87, 0x8, 0x8, 0x80000000, 0x5, 0x3, 0x800, 0x1c43, 0x7, 0xa66, 0x6, 0x18000, 0x6, 0x4, 0x86f9, 0x6, 0x80, 0x200, 0x28000, 0x401, 0xffff, 0x4d, 0x2, 0xfc, 0x7, 0x2]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4009c}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="24785466124cebc6c88735f544a9", 0xe, 0x440040c4, &(0x7f00000001c0)={0x11, 0xf8, r7, 0x1, 0xd8, 0x6, @remote}, 0x14) 196.160633ms ago: executing program 0 (id=1403): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000"], 0x50) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0)=0x5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r3}, 0x18) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, r4, 0x308000) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 129.839318ms ago: executing program 3 (id=1404): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast2}}}, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x8000, 0x40, 0x5, 0x1000, {{0x12, 0x4, 0x1, 0x37, 0x48, 0x67, 0x0, 0x35, 0x2d, 0x0, @broadcast, @private=0xa010100, {[@ra={0x94, 0x4}, @cipso={0x86, 0x30, 0xffffffffffffffff, [{0x6, 0xc, "34c9535d9f20003098e0"}, {0x2, 0x8, "4c9a63ed4324"}, {0x7, 0xa, "1bc3ad69ad535512"}, {0x7, 0xc, "5894f60c0d52cba4d30f"}]}]}}}}}) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 49.726326ms ago: executing program 3 (id=1405): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) capget(&(0x7f00000001c0)={0x19980330}, 0x0) 0s ago: executing program 0 (id=1406): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): network [ 101.672641][ T5416] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 101.683739][ T5421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.675'. [ 102.189316][ T5463] loop1: detected capacity change from 0 to 1024 [ 102.331290][ T5466] netlink: 'syz.0.688': attribute type 8 has an invalid length. [ 102.339096][ T5466] netem: change failed [ 102.350052][ T5468] netlink: 'syz.4.687': attribute type 1 has an invalid length. [ 102.357931][ T5468] netlink: 'syz.4.687': attribute type 1 has an invalid length. [ 102.365744][ T5468] netlink: 'syz.4.687': attribute type 1 has an invalid length. [ 102.427658][ T5470] loop4: detected capacity change from 0 to 8192 [ 102.567505][ T5470] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 102.624370][ T3322] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 102.632291][ T3322] FAT-fs (loop4): Filesystem has been set read-only [ 102.775556][ T5480] loop4: detected capacity change from 0 to 8192 [ 102.783596][ T5485] loop2: detected capacity change from 0 to 1024 [ 102.795728][ T5485] EXT4-fs: Ignoring removed oldalloc option [ 102.829807][ T5485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.886806][ T5492] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 102.894357][ T5485] sd 0:0:1:0: device reset [ 102.920098][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.948359][ T5490] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 103.047595][ T5502] __nla_validate_parse: 4 callbacks suppressed [ 103.047611][ T5502] netlink: 172 bytes leftover after parsing attributes in process `syz.1.700'. [ 103.114169][ T3322] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 103.122243][ T3322] FAT-fs (loop4): Filesystem has been set read-only [ 103.188587][ T5506] loop3: detected capacity change from 0 to 8192 [ 103.605117][ T5512] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 103.728332][ T3316] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 103.736299][ T3316] FAT-fs (loop3): Filesystem has been set read-only [ 103.785926][ T5521] loop4: detected capacity change from 0 to 2048 [ 103.814591][ T5521] EXT4-fs (loop4): failed to initialize system zone (-117) [ 103.838652][ T5526] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 103.848206][ T5521] EXT4-fs (loop4): mount failed [ 103.912637][ T5534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.713'. [ 103.921684][ T5534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.713'. [ 103.949400][ T5535] netlink: 172 bytes leftover after parsing attributes in process `syz.2.712'. [ 104.006755][ T5542] random: crng reseeded on system resumption [ 104.033604][ T5543] syzkaller0: entered promiscuous mode [ 104.039357][ T5543] syzkaller0: entered allmulticast mode [ 104.125428][ T5551] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 104.145367][ T5551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.717'. [ 104.154418][ T5551] netlink: 'syz.3.717': attribute type 7 has an invalid length. [ 104.162109][ T5551] netlink: 'syz.3.717': attribute type 8 has an invalid length. [ 104.163805][ T5550] loop0: detected capacity change from 0 to 8192 [ 104.170087][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 104.188867][ T5551] ip6gretap0: entered promiscuous mode [ 104.195105][ T5551] syz_tun: entered promiscuous mode [ 104.200852][ T5551] erspan0: entered promiscuous mode [ 104.206926][ T5551] debugfs: 'hsr1' already exists in 'hsr' [ 104.212719][ T5551] Cannot create hsr debugfs directory [ 104.218400][ T5551] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 104.228736][ T5551] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 104.238825][ T5551] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 104.280492][ T5554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.719'. [ 104.378608][ T5550] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 104.409146][ T3320] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 104.417074][ T3320] FAT-fs (loop0): Filesystem has been set read-only [ 104.912034][ T5576] loop3: detected capacity change from 0 to 2048 [ 104.926535][ T5576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.127467][ T5580] loop4: detected capacity change from 0 to 128 [ 105.520097][ T5576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.637023][ T5587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.731'. [ 105.646873][ T5595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.733'. [ 105.655929][ T5595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.733'. [ 105.678960][ T5587] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 105.686727][ T5587] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 105.694536][ T5587] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 105.703980][ T5595] ªªªªªª: renamed from wg2 [ 105.789653][ T5603] loop4: detected capacity change from 0 to 2048 [ 105.837498][ T5603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.020582][ T5603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.143021][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 106.143042][ T29] audit: type=1326 audit(106.128:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 106.172053][ T29] audit: type=1326 audit(106.128:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 106.194835][ T29] audit: type=1326 audit(106.128:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 106.217677][ T29] audit: type=1326 audit(106.128:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 106.240548][ T29] audit: type=1326 audit(106.128:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 106.263388][ T29] audit: type=1326 audit(106.128:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 106.286205][ T29] audit: type=1326 audit(106.128:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 106.309042][ T29] audit: type=1326 audit(106.128:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 106.331990][ T29] audit: type=1326 audit(106.128:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 106.355112][ T29] audit: type=1326 audit(106.128:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 106.761061][ T5628] netlink: 'syz.2.740': attribute type 2 has an invalid length. [ 107.256457][ T5641] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 107.331252][ T5641] loop3: detected capacity change from 0 to 1024 [ 107.341325][ T5641] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 107.463578][ T5641] netlink: 'syz.3.749': attribute type 1 has an invalid length. [ 107.518178][ T5656] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 107.532441][ T5656] SELinux: failed to load policy [ 107.534351][ T5654] loop2: detected capacity change from 0 to 8192 [ 107.660686][ T5663] netlink: 'syz.3.757': attribute type 8 has an invalid length. [ 107.668468][ T5663] netem: change failed [ 107.730295][ T5654] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 107.780071][ T3323] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 107.788016][ T3323] FAT-fs (loop2): Filesystem has been set read-only [ 107.997354][ T5675] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 108.253377][ T5679] netlink: 'syz.1.760': attribute type 2 has an invalid length. [ 108.480256][ T5686] loop3: detected capacity change from 0 to 2048 [ 108.556606][ T5686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.897451][ T5705] __nla_validate_parse: 7 callbacks suppressed [ 108.897468][ T5705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'. [ 109.160574][ T5686] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.219203][ T5720] loop3: detected capacity change from 0 to 512 [ 109.234463][ T5720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.419765][ T5727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.774'. [ 109.428755][ T5727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.774'. [ 109.867765][ T5732] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 109.957270][ T5736] loop4: detected capacity change from 0 to 2048 [ 110.035701][ T5736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.125579][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.364911][ T5743] netlink: 'syz.1.777': attribute type 2 has an invalid length. [ 110.450127][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 110.653328][ T5751] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 110.676009][ T5751] SELinux: failed to load policy [ 110.685375][ T5755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.782'. [ 110.692871][ T5754] loop3: detected capacity change from 0 to 1024 [ 110.704516][ T5754] EXT4-fs: Ignoring removed nobh option [ 110.723003][ T5755] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 110.730828][ T5755] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 110.738555][ T5755] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 110.751263][ T5754] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.768199][ T5755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'. [ 110.774523][ T5754] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 110.794148][ T5754] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 110.852596][ T5760] SELinux: failed to load policy [ 110.859162][ T5760] ref_ctr_offset mismatch. inode: 0x300 offset: 0x0 ref_ctr_offset(old): 0xc678bc64d30300 ref_ctr_offset(new): 0xffffffff00000000 [ 110.905301][ T5736] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.916293][ T5754] syzkaller0: entered allmulticast mode [ 110.935015][ T5754] syzkaller0 (unregistering): left allmulticast mode [ 110.987777][ T5771] IPVS: length: 101 != 813667928 [ 110.995708][ T5769] netlink: 'syz.4.786': attribute type 8 has an invalid length. [ 111.003479][ T5769] netem: change failed [ 111.008235][ T5775] loop2: detected capacity change from 0 to 512 [ 111.014305][ T5771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.787'. [ 111.023454][ T5771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.787'. [ 111.048975][ T5771] loop0: detected capacity change from 0 to 512 [ 111.062074][ T5775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.099374][ T1795] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 111.111712][ T1795] EXT4-fs (loop3): This should not happen!! Data will be lost [ 111.111712][ T1795] [ 111.121518][ T1795] EXT4-fs (loop3): Total free blocks count 0 [ 111.127668][ T1795] EXT4-fs (loop3): Free/Dirty block details [ 111.133677][ T1795] EXT4-fs (loop3): free_blocks=20480 [ 111.139000][ T1795] EXT4-fs (loop3): dirty_blocks=16 [ 111.144274][ T1795] EXT4-fs (loop3): Block reservation details [ 111.150363][ T1795] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 111.158088][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 111.158106][ T29] audit: type=1326 audit(111.160:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 111.187147][ T29] audit: type=1326 audit(111.160:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 111.209974][ T29] audit: type=1326 audit(111.160:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 111.232757][ T29] audit: type=1326 audit(111.160:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 111.255638][ T29] audit: type=1326 audit(111.160:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 111.279750][ T29] audit: type=1326 audit(111.200:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 111.303299][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.323072][ T29] audit: type=1326 audit(111.330:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 111.346032][ T29] audit: type=1326 audit(111.330:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 111.377192][ T5775] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.788: corrupted xattr block 6: invalid header [ 111.413319][ T5775] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 111.428060][ T5775] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.788: corrupted xattr block 6: invalid header [ 111.441326][ T29] audit: type=1326 audit(111.330:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 111.464111][ T29] audit: type=1326 audit(111.330:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5774 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 111.473538][ T5775] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 111.496129][ T5775] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.788: corrupted xattr block 6: invalid header [ 111.516659][ T5775] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 111.577558][ T5775] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.788: corrupted xattr block 33: invalid header [ 111.597640][ T5775] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 111.619613][ T5795] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 111.701306][ T5803] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 111.722998][ T5806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.796'. [ 111.731984][ T5806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.796'. [ 111.772050][ T2970] hid (null): invalid report_size -150306193 [ 111.778245][ T2970] hid (null): unknown global tag 0xd [ 111.783664][ T2970] hid (null): report_id 26851 is invalid [ 111.789467][ T2970] hid (null): invalid report_count 27747 [ 111.795249][ T2970] hid (null): report_id 0 is invalid [ 111.808798][ T5809] netlink: 'syz.4.797': attribute type 1 has an invalid length. [ 111.816559][ T5809] netlink: 'syz.4.797': attribute type 1 has an invalid length. [ 111.824293][ T5809] netlink: 'syz.4.797': attribute type 1 has an invalid length. [ 111.833218][ T2970] hid-generic 01FF:0000:0003.0001: invalid report_size -150306193 [ 111.841173][ T2970] hid-generic 01FF:0000:0003.0001: item 0 4 1 7 parsing failed [ 111.850664][ T2970] hid-generic 01FF:0000:0003.0001: probe with driver hid-generic failed with error -22 [ 111.935318][ T3323] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 111.977664][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.002271][ T3323] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 112.033975][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.095335][ T3323] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 112.112413][ T5828] IPVS: length: 101 != 813667928 [ 112.136646][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.154346][ T579] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.162920][ T579] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.173058][ T3323] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 112.193540][ T5827] loop1: detected capacity change from 0 to 512 [ 112.199968][ T579] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.213120][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.241497][ T579] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.280261][ T3323] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 112.311408][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.352361][ T3323] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 112.402966][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.433931][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.465853][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.489286][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.517430][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.540621][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.570381][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.594314][ T5856] lo speed is unknown, defaulting to 1000 [ 112.595652][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.634760][ T5856] lo speed is unknown, defaulting to 1000 [ 112.664131][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.675406][ T5856] lo speed is unknown, defaulting to 1000 [ 112.690842][ T5856] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 112.694480][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.742945][ T5856] lo speed is unknown, defaulting to 1000 [ 112.748277][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.779796][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 112.789514][ T3323] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 112.799291][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 112.802888][ T5856] lo speed is unknown, defaulting to 1000 [ 112.814321][ T3323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 112.825068][ T3323] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 112.848998][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.870000][ T5856] lo speed is unknown, defaulting to 1000 [ 112.876453][ T5856] lo speed is unknown, defaulting to 1000 [ 112.887283][ T5856] lo speed is unknown, defaulting to 1000 [ 113.025114][ T5844] loop3: detected capacity change from 0 to 32768 [ 113.037897][ T5863] loop2: detected capacity change from 0 to 8192 [ 113.070434][ T3310] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 113.078095][ T3310] loop3: p1 start 460800 is beyond EOD, truncated [ 113.084622][ T3310] loop3: p2 size 83886080 extends beyond EOD, truncated [ 113.109071][ T3310] loop3: p5 start 460800 is beyond EOD, truncated [ 113.115667][ T3310] loop3: p6 size 83886080 extends beyond EOD, truncated [ 113.150295][ T5873] IPVS: length: 101 != 813667928 [ 113.213597][ T5844] loop_reread_partitions: partition scan of loop3 () failed (rc=-16) [ 113.244997][ T5877] loop0: detected capacity change from 0 to 512 [ 113.271097][ T5878] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 113.305890][ T5880] FAULT_INJECTION: forcing a failure. [ 113.305890][ T5880] name failslab, interval 1, probability 0, space 0, times 0 [ 113.318716][ T5880] CPU: 0 UID: 0 PID: 5880 Comm: syz.4.818 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.318744][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.318757][ T5880] Call Trace: [ 113.318764][ T5880] [ 113.318772][ T5880] __dump_stack+0x1d/0x30 [ 113.318804][ T5880] dump_stack_lvl+0x95/0xd0 [ 113.318855][ T5880] dump_stack+0x15/0x1b [ 113.318943][ T5880] should_fail_ex+0x265/0x280 [ 113.319008][ T5880] should_failslab+0x8c/0xb0 [ 113.319032][ T5880] __kmalloc_cache_noprof+0x65/0x4c0 [ 113.319063][ T5880] ? ftrace_profile_set_filter+0x96/0x1b0 [ 113.319179][ T5880] ftrace_profile_set_filter+0x96/0x1b0 [ 113.319210][ T5880] perf_ioctl+0x7b3/0x12e0 [ 113.319314][ T5880] ? ioctl_has_perm+0x287/0x2a0 [ 113.319348][ T5880] ? do_vfs_ioctl+0x866/0xe10 [ 113.319392][ T5880] ? selinux_file_ioctl+0x308/0x3a0 [ 113.319463][ T5880] ? __fget_files+0x184/0x1c0 [ 113.319495][ T5880] ? __pfx_perf_ioctl+0x10/0x10 [ 113.319534][ T5880] __se_sys_ioctl+0xce/0x140 [ 113.319635][ T5880] __x64_sys_ioctl+0x43/0x50 [ 113.319707][ T5880] x64_sys_call+0x14b0/0x3000 [ 113.319733][ T5880] do_syscall_64+0xca/0x2b0 [ 113.319779][ T5880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.319852][ T5880] RIP: 0033:0x7f1bbc48f749 [ 113.319888][ T5880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.319913][ T5880] RSP: 002b:00007f1bbaeef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.319939][ T5880] RAX: ffffffffffffffda RBX: 00007f1bbc6e5fa0 RCX: 00007f1bbc48f749 [ 113.320026][ T5880] RDX: 0000200000000180 RSI: 0000000040082406 RDI: 0000000000000006 [ 113.320042][ T5880] RBP: 00007f1bbaeef090 R08: 0000000000000000 R09: 0000000000000000 [ 113.320059][ T5880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.320074][ T5880] R13: 00007f1bbc6e6038 R14: 00007f1bbc6e5fa0 R15: 00007fffdbe62848 [ 113.320115][ T5880] [ 113.602470][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 113.623431][ T3323] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 113.631356][ T3323] FAT-fs (loop2): Filesystem has been set read-only [ 113.645771][ T4485] udevd[4485]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 113.657305][ T4484] udevd[4484]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 113.719873][ T3544] udevd[3544]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 113.837622][ T5899] FAULT_INJECTION: forcing a failure. [ 113.837622][ T5899] name failslab, interval 1, probability 0, space 0, times 0 [ 113.851016][ T5899] CPU: 0 UID: 0 PID: 5899 Comm: syz.2.821 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.851051][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.851067][ T5899] Call Trace: [ 113.851082][ T5899] [ 113.851092][ T5899] __dump_stack+0x1d/0x30 [ 113.851121][ T5899] dump_stack_lvl+0x95/0xd0 [ 113.851179][ T5899] dump_stack+0x15/0x1b [ 113.851199][ T5899] should_fail_ex+0x265/0x280 [ 113.851257][ T5899] ? __pfx_sock_alloc_inode+0x10/0x10 [ 113.851284][ T5899] should_failslab+0x8c/0xb0 [ 113.851317][ T5899] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 113.851406][ T5899] ? sock_alloc_inode+0x34/0xa0 [ 113.851437][ T5899] ? __pfx_sock_alloc_inode+0x10/0x10 [ 113.851518][ T5899] sock_alloc_inode+0x34/0xa0 [ 113.851543][ T5899] alloc_inode+0x40/0x170 [ 113.851588][ T5899] __sock_create+0x120/0x580 [ 113.851613][ T5899] __sys_socket+0xb0/0x180 [ 113.851674][ T5899] __x64_sys_socket+0x3f/0x50 [ 113.851745][ T5899] x64_sys_call+0x127b/0x3000 [ 113.851770][ T5899] do_syscall_64+0xca/0x2b0 [ 113.851840][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.851863][ T5899] RIP: 0033:0x7f6c3f081667 [ 113.851879][ T5899] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.851902][ T5899] RSP: 002b:00007f6c3dabcfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 113.851922][ T5899] RAX: ffffffffffffffda RBX: 00007f6c3f2d6090 RCX: 00007f6c3f081667 [ 113.852072][ T5899] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 113.852094][ T5899] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 113.852133][ T5899] R10: 0000200000000180 R11: 0000000000000286 R12: 0000000000000001 [ 113.852145][ T5899] R13: 00007f6c3f2d6128 R14: 00007f6c3f2d6090 R15: 00007ffcd546d648 [ 113.852206][ T5899] [ 113.852268][ T5899] socket: no more sockets [ 114.171229][ T5904] lo speed is unknown, defaulting to 1000 [ 114.382220][ T5906] bond1 (unregistering): Released all slaves [ 114.400139][ T5908] __nla_validate_parse: 13 callbacks suppressed [ 114.400156][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'. [ 114.557744][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'. [ 114.566704][ T5912] bridge_slave_1: left allmulticast mode [ 114.572408][ T5912] bridge_slave_1: left promiscuous mode [ 114.578170][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.618340][ T5912] bridge_slave_0: left allmulticast mode [ 114.624071][ T5912] bridge_slave_0: left promiscuous mode [ 114.629842][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.708282][ T5921] netlink: 52 bytes leftover after parsing attributes in process `syz.1.830'. [ 114.793176][ T5929] FAULT_INJECTION: forcing a failure. [ 114.793176][ T5929] name failslab, interval 1, probability 0, space 0, times 0 [ 114.805964][ T5929] CPU: 0 UID: 0 PID: 5929 Comm: syz.2.833 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.806050][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.806067][ T5929] Call Trace: [ 114.806075][ T5929] [ 114.806085][ T5929] __dump_stack+0x1d/0x30 [ 114.806118][ T5929] dump_stack_lvl+0x95/0xd0 [ 114.806147][ T5929] dump_stack+0x15/0x1b [ 114.806249][ T5929] should_fail_ex+0x265/0x280 [ 114.806341][ T5929] should_failslab+0x8c/0xb0 [ 114.806364][ T5929] __kmalloc_cache_noprof+0x65/0x4c0 [ 114.806392][ T5929] ? assoc_array_insert+0x2e0/0x1990 [ 114.806471][ T5929] assoc_array_insert+0x2e0/0x1990 [ 114.806507][ T5929] ? keyring_compare_object+0xda/0x100 [ 114.806578][ T5929] ? assoc_array_delete+0x348/0x950 [ 114.806619][ T5929] __key_link_begin+0x8a/0x140 [ 114.806648][ T5929] key_move+0x160/0x550 [ 114.806678][ T5929] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 114.806760][ T5929] ? __pfx_keyring_search_iterator+0x10/0x10 [ 114.806859][ T5929] keyctl_keyring_move+0xd6/0x110 [ 114.806899][ T5929] __se_sys_keyctl+0x5f7/0xb80 [ 114.807000][ T5929] ? __rcu_read_unlock+0x4f/0x70 [ 114.807024][ T5929] ? __fget_files+0x184/0x1c0 [ 114.807057][ T5929] ? mutex_unlock+0x4f/0x90 [ 114.807086][ T5929] ? fput+0x8f/0xc0 [ 114.807202][ T5929] __x64_sys_keyctl+0x67/0x80 [ 114.807222][ T5929] x64_sys_call+0x27b8/0x3000 [ 114.807322][ T5929] do_syscall_64+0xca/0x2b0 [ 114.807366][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.807388][ T5929] RIP: 0033:0x7f6c3f07f749 [ 114.807403][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.807446][ T5929] RSP: 002b:00007f6c3dadf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 114.807472][ T5929] RAX: ffffffffffffffda RBX: 00007f6c3f2d5fa0 RCX: 00007f6c3f07f749 [ 114.807486][ T5929] RDX: fffffffffffffffe RSI: 0000000037176cf0 RDI: 000000000000001e [ 114.807502][ T5929] RBP: 00007f6c3dadf090 R08: 0000000000000001 R09: 0000000000000000 [ 114.807518][ T5929] R10: 0000000037176cf0 R11: 0000000000000246 R12: 0000000000000001 [ 114.807534][ T5929] R13: 00007f6c3f2d6038 R14: 00007f6c3f2d5fa0 R15: 00007ffcd546d648 [ 114.807688][ T5929] [ 115.048203][ T5923] loop4: detected capacity change from 0 to 8192 [ 115.287375][ T5938] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 115.357493][ T3322] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 115.365441][ T3322] FAT-fs (loop4): Filesystem has been set read-only [ 115.436614][ T5940] loop3: detected capacity change from 0 to 8192 [ 115.607765][ T5956] lo speed is unknown, defaulting to 1000 [ 115.728066][ T5958] lo speed is unknown, defaulting to 1000 [ 115.988018][ T5962] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 116.081476][ T3316] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 116.089461][ T3316] FAT-fs (loop3): Filesystem has been set read-only [ 116.176685][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 116.176703][ T29] audit: type=1400 audit(116.183:5013): avc: denied { bind } for pid=5969 comm="syz.0.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.350435][ T29] audit: type=1400 audit(116.353:5014): avc: denied { setopt } for pid=5974 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.372647][ T5979] netlink: 'syz.4.851': attribute type 8 has an invalid length. [ 116.380381][ T5979] netem: change failed [ 116.504714][ T5991] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 116.524213][ T5991] SELinux: failed to load policy [ 116.545991][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.854'. [ 116.579880][ T5994] syzkaller0: entered promiscuous mode [ 116.585436][ T5994] syzkaller0: entered allmulticast mode [ 116.637733][ T5996] syzkaller0: entered promiscuous mode [ 116.643313][ T5996] syzkaller0: entered allmulticast mode [ 116.666880][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 116.690530][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.859'. [ 116.699665][ T6000] bridge_slave_1: left allmulticast mode [ 116.705465][ T6000] bridge_slave_1: left promiscuous mode [ 116.711301][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.719611][ T6000] bridge_slave_0: left allmulticast mode [ 116.725311][ T6000] bridge_slave_0: left promiscuous mode [ 116.731095][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.781983][ T29] audit: type=1326 audit(116.793:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ec08f749 code=0x7ffc0000 [ 116.824172][ T29] audit: type=1326 audit(116.823:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f59ec08f749 code=0x7ffc0000 [ 116.846848][ T29] audit: type=1326 audit(116.823:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ec08f749 code=0x7ffc0000 [ 116.870006][ T29] audit: type=1326 audit(116.823:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ec08f749 code=0x7ffc0000 [ 116.892845][ T29] audit: type=1326 audit(116.823:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f59ec08f749 code=0x7ffc0000 [ 116.915871][ T29] audit: type=1326 audit(116.823:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ec08f749 code=0x7ffc0000 [ 116.938683][ T29] audit: type=1326 audit(116.823:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.0.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ec08f749 code=0x7ffc0000 [ 116.961528][ T29] audit: type=1400 audit(116.823:5022): avc: denied { connect } for pid=6004 comm="syz.2.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 117.073904][ T6015] netlink: 160 bytes leftover after parsing attributes in process `syz.2.864'. [ 117.082989][ T6015] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 117.129494][ T6020] loop2: detected capacity change from 0 to 1024 [ 117.143830][ T6020] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 117.159388][ T6015] netlink: 'syz.2.864': attribute type 1 has an invalid length. [ 117.169516][ T6015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.864'. [ 117.197708][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 117.306429][ T6031] syzkaller0: entered promiscuous mode [ 117.312069][ T6031] syzkaller0: entered allmulticast mode [ 117.436304][ T6035] loop1: detected capacity change from 0 to 512 [ 117.441813][ T6029] lo speed is unknown, defaulting to 1000 [ 117.459436][ T6035] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.549990][ T6039] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 117.568096][ T6035] EXT4-fs (loop1): 1 truncate cleaned up [ 117.581385][ T6035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.667218][ T6027] 9p: Bad value for 'rfdno' [ 117.692413][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.897381][ T6049] lo speed is unknown, defaulting to 1000 [ 117.994144][ T6054] loop0: detected capacity change from 0 to 512 [ 118.015962][ T6054] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.049162][ T6054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.067441][ T6060] netlink: 160 bytes leftover after parsing attributes in process `syz.3.879'. [ 118.076574][ T6060] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 118.099385][ T6060] loop3: detected capacity change from 0 to 1024 [ 118.105788][ T6062] syzkaller0: entered promiscuous mode [ 118.106802][ T6060] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 118.111406][ T6062] syzkaller0: entered allmulticast mode [ 118.144258][ T6060] netlink: 'syz.3.879': attribute type 1 has an invalid length. [ 118.167525][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.273485][ T6068] lo speed is unknown, defaulting to 1000 [ 118.599627][ T6067] lo speed is unknown, defaulting to 1000 [ 118.666167][ T6084] loop2: detected capacity change from 0 to 512 [ 118.690643][ T6092] delete_channel: no stack [ 118.708209][ T6084] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 118.810146][ T6094] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 118.818048][ T6094] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 118.825708][ T6094] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 118.905244][ T6101] loop2: detected capacity change from 0 to 512 [ 118.923068][ T6105] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 118.942175][ T6105] SELinux: failed to load policy [ 118.958851][ T6101] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.975502][ T6101] EXT4-fs (loop2): mount failed [ 119.111571][ T6118] lo speed is unknown, defaulting to 1000 [ 119.257993][ T6122] loop4: detected capacity change from 0 to 2048 [ 119.421069][ T6122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.441381][ T6132] __nla_validate_parse: 5 callbacks suppressed [ 119.441401][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'. [ 119.569091][ T6135] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.584696][ T6132] netlink: 'syz.2.907': attribute type 1 has an invalid length. [ 119.592435][ T6132] netlink: 'syz.2.907': attribute type 1 has an invalid length. [ 119.600150][ T6132] netlink: 'syz.2.907': attribute type 1 has an invalid length. [ 119.602081][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'. [ 119.617638][ T6139] FAULT_INJECTION: forcing a failure. [ 119.617638][ T6139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.630936][ T6139] CPU: 0 UID: 0 PID: 6139 Comm: syz.0.910 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.630965][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.630980][ T6139] Call Trace: [ 119.630989][ T6139] [ 119.631000][ T6139] __dump_stack+0x1d/0x30 [ 119.631068][ T6139] dump_stack_lvl+0x95/0xd0 [ 119.631097][ T6139] dump_stack+0x15/0x1b [ 119.631117][ T6139] should_fail_ex+0x265/0x280 [ 119.631141][ T6139] should_fail+0xb/0x20 [ 119.631219][ T6139] should_fail_usercopy+0x1a/0x20 [ 119.631250][ T6139] _copy_from_user+0x1c/0xb0 [ 119.631279][ T6139] __sys_bpf+0x183/0x7c0 [ 119.631316][ T6139] __x64_sys_bpf+0x41/0x50 [ 119.631350][ T6139] x64_sys_call+0x28e1/0x3000 [ 119.631383][ T6139] do_syscall_64+0xca/0x2b0 [ 119.631486][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.631516][ T6139] RIP: 0033:0x7f59ec08f749 [ 119.631537][ T6139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.631561][ T6139] RSP: 002b:00007f59eaaef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.631650][ T6139] RAX: ffffffffffffffda RBX: 00007f59ec2e5fa0 RCX: 00007f59ec08f749 [ 119.631663][ T6139] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 000000000000000f [ 119.631676][ T6139] RBP: 00007f59eaaef090 R08: 0000000000000000 R09: 0000000000000000 [ 119.631688][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.631700][ T6139] R13: 00007f59ec2e6038 R14: 00007f59ec2e5fa0 R15: 00007ffef4698898 [ 119.631751][ T6139] [ 119.815361][ T6145] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 119.824452][ T6145] SELinux: failed to load policy [ 119.824581][ T6142] loop1: detected capacity change from 0 to 1024 [ 119.842064][ T6142] journal_path: Non-blockdev passed as './file1' [ 119.848528][ T6142] EXT4-fs: error: could not find journal device path [ 119.890592][ T6151] loop3: detected capacity change from 0 to 512 [ 119.977867][ T6151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.056596][ T6122] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.159687][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 120.237536][ T6171] netlink: 'syz.0.913': attribute type 2 has an invalid length. [ 120.503457][ T6167] lo speed is unknown, defaulting to 1000 [ 120.538459][ T6162] lo speed is unknown, defaulting to 1000 [ 120.605436][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.644386][ T6178] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 120.745276][ T6186] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 120.828617][ T6193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.927'. [ 120.896245][ T6197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.929'. [ 120.905252][ T6197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.929'. [ 120.919420][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.927'. [ 121.005051][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 121.213297][ T1795] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.345644][ T6228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.940'. [ 121.354682][ T6228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.940'. [ 121.438049][ T6223] lo speed is unknown, defaulting to 1000 [ 121.925481][ T6244] lo speed is unknown, defaulting to 1000 [ 122.255933][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 122.255950][ T29] audit: type=1326 audit(122.276:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 122.325551][ T29] audit: type=1326 audit(122.276:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 122.348597][ T29] audit: type=1326 audit(122.306:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 122.371449][ T29] audit: type=1326 audit(122.306:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 122.394341][ T29] audit: type=1326 audit(122.306:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 122.417257][ T29] audit: type=1326 audit(122.316:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 122.440038][ T29] audit: type=1326 audit(122.316:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 122.463219][ T29] audit: type=1326 audit(122.316:5164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 122.486312][ T29] audit: type=1326 audit(122.326:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 122.509379][ T29] audit: type=1326 audit(122.326:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6242 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 122.897002][ T6268] lo speed is unknown, defaulting to 1000 [ 123.020190][ T6269] bond1 (unregistering): Released all slaves [ 123.224863][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.326946][ T6275] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 123.377107][ T6275] SELinux: failed to load policy [ 123.496146][ T6282] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 123.513126][ T6278] validate_nla: 3 callbacks suppressed [ 123.513147][ T6278] netlink: 'syz.0.955': attribute type 1 has an invalid length. [ 123.526456][ T6278] netlink: 'syz.0.955': attribute type 1 has an invalid length. [ 123.534118][ T6278] netlink: 'syz.0.955': attribute type 1 has an invalid length. [ 123.583347][ T6286] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 123.592464][ T6286] SELinux: failed to load policy [ 123.662514][ T6289] FAULT_INJECTION: forcing a failure. [ 123.662514][ T6289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.675664][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.4.960 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.675731][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.675747][ T6289] Call Trace: [ 123.675756][ T6289] [ 123.675766][ T6289] __dump_stack+0x1d/0x30 [ 123.675800][ T6289] dump_stack_lvl+0x95/0xd0 [ 123.675844][ T6289] dump_stack+0x15/0x1b [ 123.675871][ T6289] should_fail_ex+0x265/0x280 [ 123.675902][ T6289] should_fail+0xb/0x20 [ 123.675928][ T6289] should_fail_usercopy+0x1a/0x20 [ 123.675960][ T6289] _copy_to_user+0x20/0xa0 [ 123.676083][ T6289] simple_read_from_buffer+0xb5/0x130 [ 123.676113][ T6289] proc_fail_nth_read+0x10e/0x150 [ 123.676192][ T6289] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.676229][ T6289] vfs_read+0x1a8/0x770 [ 123.676252][ T6289] ? __rcu_read_unlock+0x4f/0x70 [ 123.676350][ T6289] ? __fget_files+0x184/0x1c0 [ 123.676385][ T6289] ? mutex_lock+0x58/0x90 [ 123.676422][ T6289] ksys_read+0xda/0x1a0 [ 123.676448][ T6289] __x64_sys_read+0x40/0x50 [ 123.676516][ T6289] x64_sys_call+0x2889/0x3000 [ 123.676549][ T6289] do_syscall_64+0xca/0x2b0 [ 123.676593][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.676701][ T6289] RIP: 0033:0x7f1bbc48e15c [ 123.676799][ T6289] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 123.676821][ T6289] RSP: 002b:00007f1bbaeef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.676846][ T6289] RAX: ffffffffffffffda RBX: 00007f1bbc6e5fa0 RCX: 00007f1bbc48e15c [ 123.676862][ T6289] RDX: 000000000000000f RSI: 00007f1bbaeef0a0 RDI: 0000000000000006 [ 123.676877][ T6289] RBP: 00007f1bbaeef090 R08: 0000000000000000 R09: 0000000000000000 [ 123.676936][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.676994][ T6289] R13: 00007f1bbc6e6038 R14: 00007f1bbc6e5fa0 R15: 00007fffdbe62848 [ 123.677065][ T6289] [ 123.807326][ T6291] loop3: detected capacity change from 0 to 8192 [ 123.917013][ T6293] netlink: 'syz.2.962': attribute type 7 has an invalid length. [ 123.924765][ T6293] netlink: 'syz.2.962': attribute type 8 has an invalid length. [ 123.936188][ T6293] syz_tun: entered promiscuous mode [ 123.952093][ T6293] syz_tun: left promiscuous mode [ 123.960243][ T6298] loop4: detected capacity change from 0 to 512 [ 123.968903][ T6273] lo speed is unknown, defaulting to 1000 [ 124.108695][ T6298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.270713][ T6307] lo speed is unknown, defaulting to 1000 [ 124.395186][ T6300] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 124.498322][ T6309] bond1 (unregistering): Released all slaves [ 124.643211][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.665579][ T3316] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 124.673568][ T3316] FAT-fs (loop3): Filesystem has been set read-only [ 124.772384][ T6320] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 124.829979][ T6320] SELinux: failed to load policy [ 124.962328][ T6328] __nla_validate_parse: 6 callbacks suppressed [ 124.962344][ T6328] netlink: 160 bytes leftover after parsing attributes in process `syz.4.972'. [ 124.977653][ T6328] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 125.086942][ T6331] loop0: detected capacity change from 0 to 2048 [ 125.098949][ T6328] loop4: detected capacity change from 0 to 1024 [ 125.124396][ T6331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.134905][ T6328] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 125.188323][ T6328] netlink: 'syz.4.972': attribute type 1 has an invalid length. [ 125.226828][ T6336] loop2: detected capacity change from 0 to 2048 [ 125.236701][ T6328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.972'. [ 125.247844][ T6338] loop1: detected capacity change from 0 to 2048 [ 125.277555][ T6336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.304632][ T6331] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.325594][ T6338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.351850][ T6346] loop4: detected capacity change from 0 to 512 [ 125.414631][ T6346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.509501][ T6345] loop0: detected capacity change from 0 to 8192 [ 125.621324][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.674963][ T6356] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 125.789023][ T3320] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 125.796953][ T3320] FAT-fs (loop0): Filesystem has been set read-only [ 125.896275][ T6368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.983'. [ 125.905310][ T6368] netlink: 'syz.0.983': attribute type 7 has an invalid length. [ 125.912988][ T6368] netlink: 'syz.0.983': attribute type 8 has an invalid length. [ 125.920686][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'. [ 126.033591][ T6336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.072916][ T6338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.133769][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.989'. [ 126.165842][ T6382] netlink: 'syz.0.989': attribute type 1 has an invalid length. [ 126.173575][ T6382] netlink: 'syz.0.989': attribute type 1 has an invalid length. [ 126.181713][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 126.273067][ T6379] loop1: detected capacity change from 0 to 8192 [ 126.462952][ T6387] lo speed is unknown, defaulting to 1000 [ 126.570740][ T6390] loop0: detected capacity change from 0 to 2048 [ 126.590631][ T6391] bond1 (unregistering): Released all slaves [ 126.738133][ T6393] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 126.787783][ T6390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.851379][ T3317] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 126.859362][ T3317] FAT-fs (loop1): Filesystem has been set read-only [ 127.058725][ T6405] netlink: 160 bytes leftover after parsing attributes in process `syz.2.993'. [ 127.067821][ T6405] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 127.124238][ T6409] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 127.177310][ T6405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.993'. [ 127.186150][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 127.262552][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 127.262571][ T29] audit: type=1326 audit(127.258:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbc48f749 code=0x7ffc0000 [ 127.352864][ T29] audit: type=1326 audit(127.318:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbc48f749 code=0x7ffc0000 [ 127.375771][ T29] audit: type=1326 audit(127.318:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbc48f749 code=0x7ffc0000 [ 127.398599][ T29] audit: type=1326 audit(127.318:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbc48f749 code=0x7ffc0000 [ 127.421409][ T29] audit: type=1326 audit(127.318:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bbc48f749 code=0x7ffc0000 [ 127.444217][ T29] audit: type=1326 audit(127.318:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbc48f749 code=0x7ffc0000 [ 127.466983][ T29] audit: type=1326 audit(127.318:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbc48f749 code=0x7ffc0000 [ 127.474327][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.999'. [ 127.489831][ T29] audit: type=1326 audit(127.318:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bbc48f749 code=0x7ffc0000 [ 127.521431][ T29] audit: type=1326 audit(127.318:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbc48f749 code=0x7ffc0000 [ 127.544279][ T29] audit: type=1326 audit(127.318:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6413 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bbc48f749 code=0x7ffc0000 [ 127.568543][ T6390] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.674903][ T6423] lo speed is unknown, defaulting to 1000 [ 127.761242][ T6430] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.784102][ T6436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.817927][ T6430] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 127.835771][ T6441] FAULT_INJECTION: forcing a failure. [ 127.835771][ T6441] name failslab, interval 1, probability 0, space 0, times 0 [ 127.848570][ T6441] CPU: 0 UID: 0 PID: 6441 Comm: syz.4.1004 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.848617][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.848641][ T6441] Call Trace: [ 127.848653][ T6441] [ 127.848738][ T6441] __dump_stack+0x1d/0x30 [ 127.848772][ T6441] dump_stack_lvl+0x95/0xd0 [ 127.848805][ T6441] dump_stack+0x15/0x1b [ 127.848832][ T6441] should_fail_ex+0x265/0x280 [ 127.848930][ T6441] should_failslab+0x8c/0xb0 [ 127.848959][ T6441] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 127.848998][ T6441] ? __alloc_skb+0x2ff/0x4b0 [ 127.849031][ T6441] __alloc_skb+0x2ff/0x4b0 [ 127.849086][ T6441] ? __alloc_skb+0x228/0x4b0 [ 127.849122][ T6441] netlink_alloc_large_skb+0xbf/0xf0 [ 127.849169][ T6441] netlink_sendmsg+0x3cf/0x6b0 [ 127.849229][ T6441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.849271][ T6441] __sock_sendmsg+0x145/0x180 [ 127.849297][ T6441] ____sys_sendmsg+0x31e/0x4a0 [ 127.849389][ T6441] ___sys_sendmsg+0x17b/0x1d0 [ 127.849503][ T6441] __x64_sys_sendmsg+0xd4/0x160 [ 127.849655][ T6441] x64_sys_call+0x17ba/0x3000 [ 127.849692][ T6441] do_syscall_64+0xca/0x2b0 [ 127.849757][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.849845][ T6441] RIP: 0033:0x7f1bbc48f749 [ 127.849873][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.849902][ T6441] RSP: 002b:00007f1bbaeef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.849932][ T6441] RAX: ffffffffffffffda RBX: 00007f1bbc6e5fa0 RCX: 00007f1bbc48f749 [ 127.849990][ T6441] RDX: 00000000040440c0 RSI: 0000200000000080 RDI: 0000000000000003 [ 127.850014][ T6441] RBP: 00007f1bbaeef090 R08: 0000000000000000 R09: 0000000000000000 [ 127.850102][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.850125][ T6441] R13: 00007f1bbc6e6038 R14: 00007f1bbc6e5fa0 R15: 00007fffdbe62848 [ 127.850157][ T6441] [ 128.048265][ T6430] EXT4-fs (loop1): orphan cleanup on readonly fs [ 128.067007][ T6430] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.1003: Invalid inode table block 0 in block_group 0 [ 128.132873][ T6430] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 128.145129][ T6430] EXT4-fs error (device loop1): ext4_quota_write:7375: inode #3: comm syz.1.1003: mark_inode_dirty error [ 128.156654][ T6430] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1003: Failed to acquire dquot type 0 [ 128.216945][ T6446] syz_tun: entered promiscuous mode [ 128.233654][ T6446] syz_tun: left promiscuous mode [ 128.241211][ T6430] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.1003: Invalid inode table block 0 in block_group 0 [ 128.298060][ T6430] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 128.311170][ T6430] EXT4-fs error (device loop1): ext4_ext_truncate:4475: inode #15: comm syz.1.1003: mark_inode_dirty error [ 128.347793][ T6430] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.1003: Invalid inode table block 0 in block_group 0 [ 128.361232][ T6430] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 128.379599][ T6453] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 128.390613][ T6453] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 128.400824][ T6430] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 128.409893][ T6453] JBD2: no valid journal superblock found [ 128.415726][ T6453] EXT4-fs (loop4): Could not load journal inode [ 128.422390][ T6430] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.1003: Invalid inode table block 0 in block_group 0 [ 128.447678][ T6430] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 128.545741][ T6461] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 128.555100][ T6461] SELinux: failed to load policy [ 128.585710][ T6430] EXT4-fs error (device loop1): ext4_truncate:4635: inode #15: comm syz.1.1003: mark_inode_dirty error [ 128.615325][ T6436] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.638032][ T6430] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 128.663940][ T6430] EXT4-fs (loop1): 1 truncate cleaned up [ 128.675665][ T6430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 128.710689][ T6466] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 128.903084][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.948427][ T3323] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 128.956378][ T3323] FAT-fs (loop2): Filesystem has been set read-only [ 129.086884][ T6477] bond1 (unregistering): Released all slaves [ 129.296208][ T6484] set_capacity_and_notify: 5 callbacks suppressed [ 129.296224][ T6484] loop2: detected capacity change from 0 to 512 [ 129.313469][ T6483] ip6gre1: entered promiscuous mode [ 129.318811][ T6483] ip6gre1: entered allmulticast mode [ 129.446343][ T6484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.517555][ T6474] lo speed is unknown, defaulting to 1000 [ 129.549751][ T6469] lo speed is unknown, defaulting to 1000 [ 129.596054][ T6491] validate_nla: 5 callbacks suppressed [ 129.596073][ T6491] netlink: 'syz.1.1017': attribute type 7 has an invalid length. [ 129.609387][ T6491] netlink: 'syz.1.1017': attribute type 8 has an invalid length. [ 129.618611][ T6490] netlink: 'syz.4.1018': attribute type 8 has an invalid length. [ 129.626522][ T6490] netem: change failed [ 129.683915][ T6491] syz_tun: entered promiscuous mode [ 129.734421][ T6491] syz_tun: left promiscuous mode [ 129.870359][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.042618][ T6508] loop3: detected capacity change from 0 to 512 [ 130.053135][ T6508] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 130.198327][ T6518] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 130.223578][ T6518] SELinux: failed to load policy [ 130.305315][ T6524] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 130.491575][ T6538] FAULT_INJECTION: forcing a failure. [ 130.491575][ T6538] name failslab, interval 1, probability 0, space 0, times 0 [ 130.504376][ T6538] CPU: 1 UID: 0 PID: 6538 Comm: syz.0.1032 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.504431][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.504486][ T6538] Call Trace: [ 130.504495][ T6538] [ 130.504506][ T6538] __dump_stack+0x1d/0x30 [ 130.504535][ T6538] dump_stack_lvl+0x95/0xd0 [ 130.504558][ T6538] dump_stack+0x15/0x1b [ 130.504633][ T6538] should_fail_ex+0x265/0x280 [ 130.504683][ T6538] should_failslab+0x8c/0xb0 [ 130.504869][ T6538] kmem_cache_alloc_noprof+0x69/0x4b0 [ 130.504900][ T6538] ? alloc_empty_file+0x76/0x200 [ 130.504941][ T6538] alloc_empty_file+0x76/0x200 [ 130.505034][ T6538] path_openat+0x63/0x23b0 [ 130.505078][ T6538] ? __rcu_read_unlock+0x4f/0x70 [ 130.505109][ T6538] ? path_openat+0x1d88/0x23b0 [ 130.505178][ T6538] ? path_openat+0x1e82/0x23b0 [ 130.505212][ T6538] ? _parse_integer_limit+0x170/0x190 [ 130.505244][ T6538] do_filp_open+0x109/0x230 [ 130.505304][ T6538] do_open_execat+0xd8/0x260 [ 130.505353][ T6538] alloc_bprm+0x25/0x350 [ 130.505398][ T6538] do_execveat_common+0x12e/0x750 [ 130.505490][ T6538] ? getname_flags+0x154/0x3b0 [ 130.505525][ T6538] __x64_sys_execveat+0x73/0x90 [ 130.505586][ T6538] x64_sys_call+0x1c0e/0x3000 [ 130.505683][ T6538] do_syscall_64+0xca/0x2b0 [ 130.505732][ T6538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.505764][ T6538] RIP: 0033:0x7f59ec08f749 [ 130.505829][ T6538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.505913][ T6538] RSP: 002b:00007f59eaaef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 130.505940][ T6538] RAX: ffffffffffffffda RBX: 00007f59ec2e5fa0 RCX: 00007f59ec08f749 [ 130.505958][ T6538] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 130.505975][ T6538] RBP: 00007f59eaaef090 R08: 0000000000001000 R09: 0000000000000000 [ 130.506067][ T6538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.506157][ T6538] R13: 00007f59ec2e6038 R14: 00007f59ec2e5fa0 R15: 00007ffef4698898 [ 130.506186][ T6538] [ 130.900601][ T6544] lo speed is unknown, defaulting to 1000 [ 130.998339][ T6545] bond1 (unregistering): Released all slaves [ 131.195863][ T6551] loop1: detected capacity change from 0 to 512 [ 131.379981][ T6551] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.443409][ T6551] EXT4-fs (loop1): 1 truncate cleaned up [ 131.452729][ T6552] lo speed is unknown, defaulting to 1000 [ 131.462950][ T6555] __nla_validate_parse: 6 callbacks suppressed [ 131.462966][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1037'. [ 131.498413][ T6551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.548402][ T6558] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1038'. [ 131.557696][ T6558] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 131.584312][ T6555] bridge_slave_1: left allmulticast mode [ 131.590087][ T6555] bridge_slave_1: left promiscuous mode [ 131.595869][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.647782][ T6558] loop2: detected capacity change from 0 to 1024 [ 131.695030][ T6558] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 131.750775][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.756264][ T6558] netlink: 'syz.2.1038': attribute type 1 has an invalid length. [ 131.768637][ T6558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1038'. [ 131.822330][ T6565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1040'. [ 131.868870][ T6566] loop1: detected capacity change from 0 to 512 [ 131.878063][ T6565] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 131.885877][ T6565] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 131.893793][ T6565] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 131.922957][ T6564] loop3: detected capacity change from 0 to 8192 [ 131.930272][ T6566] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 131.940280][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 131.960236][ T6566] EXT4-fs (loop1): orphan cleanup on readonly fs [ 131.977025][ T6566] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.1039: corrupted inode contents [ 132.045904][ T6566] EXT4-fs (loop1): Remounting filesystem read-only [ 132.076099][ T6566] EXT4-fs (loop1): 1 truncate cleaned up [ 132.082653][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 132.093406][ T12] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 132.159725][ T12] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 132.190627][ T6566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.263260][ T6572] loop2: detected capacity change from 0 to 512 [ 132.270543][ T6572] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.281466][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 132.281480][ T29] audit: type=1326 audit(132.301:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 132.315110][ T6564] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 132.330585][ T6572] EXT4-fs (loop2): 1 truncate cleaned up [ 132.340463][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.350102][ T6572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.369822][ T29] audit: type=1326 audit(132.321:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 132.392837][ T29] audit: type=1326 audit(132.321:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 132.415909][ T29] audit: type=1326 audit(132.321:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 132.438793][ T29] audit: type=1326 audit(132.321:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 132.461735][ T29] audit: type=1326 audit(132.321:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 132.484636][ T29] audit: type=1326 audit(132.321:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 132.507484][ T29] audit: type=1326 audit(132.321:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 132.530570][ T29] audit: type=1326 audit(132.321:5514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 132.553604][ T29] audit: type=1326 audit(132.321:5515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.3.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2ee1ef749 code=0x7ffc0000 [ 132.576906][ T3316] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 132.584809][ T3316] FAT-fs (loop3): Filesystem has been set read-only [ 132.613221][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.756583][ T6578] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 132.913470][ T6587] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 132.962441][ T6589] loop1: detected capacity change from 0 to 512 [ 133.036804][ T6589] EXT4-fs (loop1): Invalid log cluster size: 184549377 [ 133.103209][ T6593] ip6gre1: entered promiscuous mode [ 133.108578][ T6593] ip6gre1: entered allmulticast mode [ 133.132173][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.140759][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.160833][ T4022] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.457548][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'. [ 133.591666][ T6607] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.661305][ T6616] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.696009][ T6621] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 133.709234][ T4022] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.749198][ T4022] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.024294][ T6630] lo speed is unknown, defaulting to 1000 [ 134.614653][ T6631] bond1 (unregistering): Released all slaves [ 134.700623][ T6632] lo speed is unknown, defaulting to 1000 [ 134.869626][ T6638] 9p: Bad value for 'source' [ 134.936325][ T6643] netlink: 'syz.0.1067': attribute type 8 has an invalid length. [ 134.944269][ T6643] netem: change failed [ 135.066040][ T6638] loop2: detected capacity change from 0 to 8192 [ 135.100934][ T6653] netlink: 'syz.3.1068': attribute type 1 has an invalid length. [ 135.115199][ T3310] loop2: p2 p3 [ 135.131121][ T3310] loop2: p3 start 331777 is beyond EOD, truncated [ 135.150427][ T6638] loop2: p2 p3 [ 135.155600][ T6638] loop2: p3 start 331777 is beyond EOD, truncated [ 135.306006][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 135.371344][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1073'. [ 135.404500][ T6661] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 135.412540][ T6661] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 135.420434][ T6661] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 135.455409][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 135.491981][ T6664] loop3: detected capacity change from 0 to 2048 [ 135.513109][ T6664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.513251][ T6669] ip6gre1: entered promiscuous mode [ 135.530519][ T6669] ip6gre1: entered allmulticast mode [ 135.537787][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.545473][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.558755][ T4022] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 135.619998][ T6667] lo speed is unknown, defaulting to 1000 [ 135.642384][ T6676] loop0: detected capacity change from 0 to 1024 [ 135.652077][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1078'. [ 135.661231][ T6678] netlink: 'syz.4.1078': attribute type 7 has an invalid length. [ 135.669140][ T6678] netlink: 'syz.4.1078': attribute type 8 has an invalid length. [ 135.676953][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 135.698990][ T6672] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 135.711872][ T6676] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 135.722867][ T6676] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 135.730063][ T6672] EXT4-fs (loop3): Remounting filesystem read-only [ 135.742630][ T6678] syz_tun: entered promiscuous mode [ 135.755886][ T6664] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.765398][ T6676] JBD2: no valid journal superblock found [ 135.771247][ T6676] EXT4-fs (loop0): Could not load journal inode [ 135.778298][ T6678] syz_tun: left promiscuous mode [ 135.926143][ T6692] loop1: detected capacity change from 0 to 1024 [ 135.939371][ T6692] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 135.950477][ T6692] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 135.969749][ T6692] JBD2: no valid journal superblock found [ 135.975537][ T6692] EXT4-fs (loop1): Could not load journal inode [ 135.978334][ T3424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.021345][ T6697] loop3: detected capacity change from 0 to 128 [ 136.040931][ T6685] loop0: detected capacity change from 0 to 8192 [ 136.236187][ T3320] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 136.244317][ T3320] FAT-fs (loop0): Filesystem has been set read-only [ 136.319090][ T6702] lo speed is unknown, defaulting to 1000 [ 136.374667][ T6702] netlink: 'syz.1.1087': attribute type 2 has an invalid length. [ 136.410557][ T6709] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 136.438460][ T6709] SELinux: failed to load policy [ 136.491979][ T3424] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.596867][ T6724] netlink: 'syz.0.1095': attribute type 1 has an invalid length. [ 136.762330][ T6727] loop2: detected capacity change from 0 to 1024 [ 136.801188][ T6727] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 136.812195][ T6727] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 136.823971][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1098'. [ 136.838717][ T6729] netlink: 'syz.3.1098': attribute type 1 has an invalid length. [ 136.847047][ T6727] JBD2: no valid journal superblock found [ 136.852890][ T6727] EXT4-fs (loop2): Could not load journal inode [ 136.869632][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1098'. [ 137.101760][ T6746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1104'. [ 137.111047][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'. [ 137.150747][ T6740] loop2: detected capacity change from 0 to 512 [ 137.162632][ T6746] ip6gretap0: entered promiscuous mode [ 137.170204][ T6746] syz_tun: entered promiscuous mode [ 137.176110][ T6746] erspan0: entered promiscuous mode [ 137.181983][ T6740] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 137.192663][ T6746] debugfs: 'hsr1' already exists in 'hsr' [ 137.198619][ T6746] Cannot create hsr debugfs directory [ 137.240464][ T6753] netem: change failed [ 137.286999][ T6759] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 137.296043][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 137.296063][ T29] audit: type=1326 audit(137.313:5783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23213df749 code=0x7ffc0000 [ 137.301685][ T6759] SELinux: failed to load policy [ 137.302587][ T29] audit: type=1326 audit(137.313:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23213df749 code=0x7ffc0000 [ 137.446142][ T29] audit: type=1326 audit(137.353:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23213df749 code=0x7ffc0000 [ 137.469071][ T29] audit: type=1326 audit(137.353:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23213df749 code=0x7ffc0000 [ 137.492022][ T29] audit: type=1326 audit(137.353:5787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23213df749 code=0x7ffc0000 [ 137.514972][ T29] audit: type=1326 audit(137.353:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23213df749 code=0x7ffc0000 [ 137.537910][ T29] audit: type=1326 audit(137.353:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23213df749 code=0x7ffc0000 [ 137.560750][ T29] audit: type=1326 audit(137.353:5790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23213df749 code=0x7ffc0000 [ 137.583660][ T29] audit: type=1326 audit(137.353:5791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23213df749 code=0x7ffc0000 [ 137.606552][ T29] audit: type=1326 audit(137.353:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.1.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f23213df749 code=0x7ffc0000 [ 137.631834][ T6772] syzkaller0: entered promiscuous mode [ 137.637462][ T6772] syzkaller0: entered allmulticast mode [ 137.722146][ T6781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1116'. [ 137.731245][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 137.796623][ T6783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1117'. [ 137.805752][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'. [ 137.887933][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1120'. [ 137.896907][ T6790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1120'. [ 137.918550][ T6791] netem: change failed [ 137.962404][ T6794] loop4: detected capacity change from 0 to 1024 [ 137.981061][ T6787] lo speed is unknown, defaulting to 1000 [ 137.993262][ T6794] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 138.004299][ T6794] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 138.046782][ T6794] JBD2: no valid journal superblock found [ 138.052635][ T6794] EXT4-fs (loop4): Could not load journal inode [ 138.074683][ T6799] loop0: detected capacity change from 0 to 8192 [ 138.203350][ T6805] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 138.214558][ T6805] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 138.256012][ T6799] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 138.287357][ T6805] JBD2: no valid journal superblock found [ 138.293165][ T6805] EXT4-fs (loop4): Could not load journal inode [ 138.357588][ T3320] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 138.365570][ T3320] FAT-fs (loop0): Filesystem has been set read-only [ 138.400363][ T6807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.628884][ T6823] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 138.717788][ T6826] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 139.008510][ T6832] lo speed is unknown, defaulting to 1000 [ 139.085179][ T6833] lo speed is unknown, defaulting to 1000 [ 139.175644][ T6835] bond1 (unregistering): Released all slaves [ 139.188481][ T6807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.302763][ T6841] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.361489][ T6841] EXT4-fs (loop0): 1 truncate cleaned up [ 139.380995][ T6841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.468231][ T6847] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 139.496028][ T6847] SELinux: failed to load policy [ 139.526309][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 139.526333][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.556684][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.602207][ T6850] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 139.613350][ T6850] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 139.748159][ T6853] lo speed is unknown, defaulting to 1000 [ 139.878707][ T6850] JBD2: no valid journal superblock found [ 139.884492][ T6850] EXT4-fs (loop4): Could not load journal inode [ 139.959352][ T6854] bond1 (unregistering): Released all slaves [ 140.128545][ T6852] set_capacity_and_notify: 5 callbacks suppressed [ 140.128610][ T6852] loop0: detected capacity change from 0 to 8192 [ 140.286809][ T6861] validate_nla: 11 callbacks suppressed [ 140.286828][ T6861] netlink: 'syz.4.1142': attribute type 8 has an invalid length. [ 140.300259][ T6861] netem: change failed [ 140.450021][ T6862] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 140.526449][ T6866] loop2: detected capacity change from 0 to 8192 [ 140.596315][ T3320] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 140.604374][ T3320] FAT-fs (loop0): Filesystem has been set read-only [ 140.696024][ T6866] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 140.793656][ T6873] syzkaller0: entered promiscuous mode [ 140.799419][ T6873] syzkaller0: entered allmulticast mode [ 140.868589][ T6878] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 140.896735][ T6769] team0 (unregistering): Port device team_slave_0 removed [ 140.954525][ T3323] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 140.962540][ T3323] FAT-fs (loop2): Filesystem has been set read-only [ 141.389598][ T6912] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 141.526868][ T6920] 9p: Bad value for 'rfdno' [ 141.706865][ T6928] loop1: detected capacity change from 0 to 512 [ 141.750856][ T6928] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 141.796977][ T6935] netlink: 'syz.0.1172': attribute type 1 has an invalid length. [ 141.892028][ T6941] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 141.930182][ T6944] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 142.050773][ T6954] __nla_validate_parse: 3 callbacks suppressed [ 142.050800][ T6954] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1178'. [ 142.066253][ T6954] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 142.104022][ T6954] loop3: detected capacity change from 0 to 1024 [ 142.110626][ T6959] loop2: detected capacity change from 0 to 1024 [ 142.113289][ T6954] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 142.127939][ T6954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1178'. [ 142.141691][ T6960] netlink: 'syz.0.1179': attribute type 1 has an invalid length. [ 142.195708][ T6959] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 142.206769][ T6959] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 142.245676][ T6959] JBD2: no valid journal superblock found [ 142.251564][ T6959] EXT4-fs (loop2): Could not load journal inode [ 142.301495][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 142.301513][ T29] audit: type=1400 audit(142.326:6192): avc: denied { mount } for pid=6958 comm="syz.2.1180" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 142.440826][ T29] audit: type=1400 audit(142.356:6193): avc: denied { unmount } for pid=6958 comm="syz.2.1180" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 142.460076][ T29] audit: type=1400 audit(142.456:6194): avc: denied { ioctl } for pid=6969 comm="syz.1.1184" path="socket:[22501]" dev="sockfs" ino=22501 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.520850][ T6971] loop1: detected capacity change from 0 to 512 [ 142.532846][ T6971] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 142.664369][ T29] audit: type=1400 audit(142.546:6195): avc: denied { write } for pid=6969 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.683593][ T29] audit: type=1400 audit(142.556:6196): avc: denied { mounton } for pid=6969 comm="syz.1.1184" path="/212/file0" dev="tmpfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.705803][ T29] audit: type=1326 audit(142.586:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.2.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 142.728676][ T29] audit: type=1326 audit(142.586:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.2.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 142.751662][ T29] audit: type=1326 audit(142.586:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.2.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 142.773242][ T6979] lo speed is unknown, defaulting to 1000 [ 142.774761][ T29] audit: type=1326 audit(142.586:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.2.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 142.803184][ T29] audit: type=1326 audit(142.596:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.2.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 142.929293][ T6974] loop2: detected capacity change from 0 to 8192 [ 142.980685][ T6980] lo speed is unknown, defaulting to 1000 [ 143.097823][ T6983] bond1 (unregistering): Released all slaves [ 143.109846][ T6982] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 143.293616][ T6991] netlink: 'syz.3.1189': attribute type 1 has an invalid length. [ 143.319822][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1190'. [ 143.352274][ T3323] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 143.360310][ T3323] FAT-fs (loop2): Filesystem has been set read-only [ 143.434397][ T6996] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 143.639315][ T7003] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 143.688219][ T7000] lo speed is unknown, defaulting to 1000 [ 143.728012][ T7008] netlink: 'syz.1.1193': attribute type 2 has an invalid length. [ 143.857391][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 143.925167][ T7019] loop2: detected capacity change from 0 to 512 [ 143.960023][ T7019] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 143.992537][ T7023] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 144.183168][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1202'. [ 144.192336][ T7032] netlink: 'syz.2.1202': attribute type 7 has an invalid length. [ 144.200132][ T7032] netlink: 'syz.2.1202': attribute type 8 has an invalid length. [ 144.207929][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1202'. [ 144.415401][ T7040] loop3: detected capacity change from 0 to 1024 [ 144.428366][ T7040] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 144.439410][ T7040] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 144.449436][ T7038] loop2: detected capacity change from 0 to 8192 [ 144.483588][ T7040] JBD2: no valid journal superblock found [ 144.489547][ T7040] EXT4-fs (loop3): Could not load journal inode [ 144.545447][ T7051] netlink: 'syz.1.1210': attribute type 1 has an invalid length. [ 144.627348][ T7053] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 144.725978][ T3323] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 144.733904][ T3323] FAT-fs (loop2): Filesystem has been set read-only [ 144.806951][ T7061] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 144.833059][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1215'. [ 144.926579][ T7071] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.241075][ T3317] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 145.249080][ T3317] FAT-fs (loop1): Filesystem has been set read-only [ 145.404620][ T7101] set_capacity_and_notify: 2 callbacks suppressed [ 145.404640][ T7101] loop0: detected capacity change from 0 to 1024 [ 145.431548][ T7100] loop1: detected capacity change from 0 to 8192 [ 145.438091][ T7104] loop4: detected capacity change from 0 to 512 [ 145.446150][ T7101] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 145.457292][ T7101] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 145.469737][ T7104] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 145.478354][ T7101] JBD2: no valid journal superblock found [ 145.484159][ T7101] EXT4-fs (loop0): Could not load journal inode [ 145.532799][ T7102] lo speed is unknown, defaulting to 1000 [ 145.644935][ T7102] bond0 (unregistering): Released all slaves [ 145.683218][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.737186][ T7100] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 145.773749][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'. [ 145.820647][ T3317] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 145.828658][ T3317] FAT-fs (loop1): Filesystem has been set read-only [ 145.955201][ T7123] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1231'. [ 145.964396][ T7123] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 146.023004][ T7123] loop1: detected capacity change from 0 to 1024 [ 146.034259][ T7123] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 146.055663][ T7126] netlink: 'syz.0.1232': attribute type 1 has an invalid length. [ 146.067456][ T7123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1231'. [ 146.270493][ T7142] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 146.297832][ T7139] loop1: detected capacity change from 0 to 1024 [ 146.354327][ T7139] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 146.365414][ T7139] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 146.405433][ T7139] JBD2: no valid journal superblock found [ 146.411325][ T7139] EXT4-fs (loop1): Could not load journal inode [ 146.510153][ T7152] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 146.616478][ T7163] syzkaller0: entered promiscuous mode [ 146.622026][ T7163] syzkaller0: entered allmulticast mode [ 146.773674][ T7173] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 146.872164][ T7179] loop2: detected capacity change from 0 to 512 [ 146.916956][ T7179] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 147.008869][ T7180] lo speed is unknown, defaulting to 1000 [ 147.063240][ T7188] __nla_validate_parse: 1 callbacks suppressed [ 147.063348][ T7188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1257'. [ 147.085432][ T7187] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 147.165453][ T7194] netlink: 'syz.1.1252': attribute type 2 has an invalid length. [ 147.216986][ T7196] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1261'. [ 147.226137][ T7196] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 147.279000][ T7196] loop2: detected capacity change from 0 to 1024 [ 147.293247][ T7196] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 147.323719][ T29] kauditd_printk_skb: 617 callbacks suppressed [ 147.323737][ T29] audit: type=1400 audit(147.358:6819): avc: denied { read } for pid=7195 comm="syz.2.1261" dev="nsfs" ino=4026532511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 147.339710][ T7184] lo speed is unknown, defaulting to 1000 [ 147.350575][ T29] audit: type=1400 audit(147.358:6820): avc: denied { open } for pid=7195 comm="syz.2.1261" path="net:[4026532511]" dev="nsfs" ino=4026532511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 147.384846][ T7199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1261'. [ 147.426940][ T29] audit: type=1400 audit(147.448:6821): avc: denied { open } for pid=7201 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 147.445680][ T29] audit: type=1400 audit(147.448:6822): avc: denied { kernel } for pid=7201 comm="syz.3.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 147.464585][ T29] audit: type=1326 audit(147.458:6823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ec08f749 code=0x7ffc0000 [ 147.487416][ T29] audit: type=1326 audit(147.458:6824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ec08f749 code=0x7ffc0000 [ 147.558793][ T29] audit: type=1326 audit(147.468:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59ec08f749 code=0x7ffc0000 [ 147.563910][ T7206] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 147.581943][ T29] audit: type=1326 audit(147.468:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ec08f749 code=0x7ffc0000 [ 147.613571][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.619956][ T7202] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 147.621123][ T29] audit: type=1326 audit(147.478:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59ec08f749 code=0x7ffc0000 [ 147.651261][ T29] audit: type=1326 audit(147.558:6828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7177 comm="syz.0.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59ec08f749 code=0x7ffc0000 [ 147.674370][ T7206] SELinux: failed to load policy [ 147.771902][ T7211] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1265'. [ 147.781070][ T7211] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 147.893064][ T7211] loop3: detected capacity change from 0 to 1024 [ 147.931343][ T7211] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 147.989495][ T7211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1265'. [ 148.081633][ T7212] lo speed is unknown, defaulting to 1000 [ 148.110303][ T7220] netlink: 'syz.0.1269': attribute type 1 has an invalid length. [ 148.190952][ T7218] loop3: detected capacity change from 0 to 8192 [ 148.333080][ T7223] loop2: detected capacity change from 0 to 2048 [ 148.389948][ T7223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.487501][ T3316] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 148.495420][ T3316] FAT-fs (loop3): Filesystem has been set read-only [ 148.777929][ T7237] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 148.788892][ T7237] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 148.892979][ T7238] lo speed is unknown, defaulting to 1000 [ 149.025052][ T7239] bond1 (unregistering): Released all slaves [ 149.129625][ T7243] syzkaller0: entered promiscuous mode [ 149.135275][ T7243] syzkaller0: entered allmulticast mode [ 149.165536][ T7237] JBD2: no valid journal superblock found [ 149.171341][ T7237] EXT4-fs (loop3): Could not load journal inode [ 149.195769][ T7223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.325991][ T7247] netlink: 'syz.2.1276': attribute type 1 has an invalid length. [ 149.409011][ T7253] lo speed is unknown, defaulting to 1000 [ 149.502838][ T7251] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1278'. [ 149.512108][ T7251] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 149.567832][ T7254] lo speed is unknown, defaulting to 1000 [ 149.612114][ T7251] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 149.647778][ T7262] netlink: 'syz.1.1281': attribute type 1 has an invalid length. [ 149.682400][ T7251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1278'. [ 149.771875][ T7265] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 149.804077][ T7265] SELinux: failed to load policy [ 149.967860][ T7271] netlink: 'syz.3.1284': attribute type 1 has an invalid length. [ 149.994356][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1283'. [ 150.153846][ T7276] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 150.384581][ T7278] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 150.462685][ T7280] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 150.477638][ T7280] SELinux: failed to load policy [ 150.611878][ T7286] syzkaller0: entered promiscuous mode [ 150.617482][ T7286] syzkaller0: entered allmulticast mode [ 150.667888][ T7291] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 150.769334][ T7297] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 150.830970][ T7297] SELinux: failed to load policy [ 150.924188][ T7303] set_capacity_and_notify: 3 callbacks suppressed [ 150.924205][ T7303] loop2: detected capacity change from 0 to 1024 [ 150.938082][ T7303] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 150.949055][ T7303] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 150.964699][ T7303] JBD2: no valid journal superblock found [ 150.970576][ T7303] EXT4-fs (loop2): Could not load journal inode [ 150.998829][ T7306] loop3: detected capacity change from 0 to 512 [ 151.034656][ T7311] loop4: detected capacity change from 0 to 512 [ 151.042425][ T7306] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 151.062764][ T7311] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 151.095558][ T7316] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 151.114783][ T7316] SELinux: failed to load policy [ 151.215469][ T7320] netlink: 'syz.2.1302': attribute type 1 has an invalid length. [ 151.252454][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1305'. [ 151.284250][ T7326] netlink: 'syz.3.1305': attribute type 1 has an invalid length. [ 151.292087][ T7326] netlink: 'syz.3.1305': attribute type 1 has an invalid length. [ 151.299864][ T7326] netlink: 'syz.3.1305': attribute type 1 has an invalid length. [ 151.349068][ T7312] lo speed is unknown, defaulting to 1000 [ 151.355456][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1305'. [ 151.407251][ T7331] netlink: 'syz.4.1307': attribute type 1 has an invalid length. [ 151.439104][ T7327] loop0: detected capacity change from 0 to 512 [ 151.446560][ T7327] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 151.459797][ T7327] EXT4-fs (loop0): 1 truncate cleaned up [ 151.466507][ T7327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.493402][ T7329] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 151.742604][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.901506][ T7344] lo speed is unknown, defaulting to 1000 [ 152.030437][ T7345] bond1 (unregistering): Released all slaves [ 152.143738][ T7351] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 152.190841][ T7353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1313'. [ 152.200092][ T7353] netlink: 'syz.4.1313': attribute type 7 has an invalid length. [ 152.207913][ T7353] netlink: 'syz.4.1313': attribute type 8 has an invalid length. [ 152.215808][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 152.335590][ T7360] netlink: 'syz.2.1316': attribute type 1 has an invalid length. [ 152.547664][ T7369] loop3: detected capacity change from 0 to 2048 [ 152.585621][ T7369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.599362][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 152.599377][ T29] audit: type=1400 audit(152.631:7190): avc: denied { create } for pid=7367 comm="syz.2.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.610942][ T7375] FAULT_INJECTION: forcing a failure. [ 152.610942][ T7375] name failslab, interval 1, probability 0, space 0, times 0 [ 152.637234][ T7375] CPU: 0 UID: 0 PID: 7375 Comm: syz.2.1319 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.637271][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.637286][ T7375] Call Trace: [ 152.637293][ T7375] [ 152.637356][ T7375] __dump_stack+0x1d/0x30 [ 152.637389][ T7375] dump_stack_lvl+0x95/0xd0 [ 152.637474][ T7375] dump_stack+0x15/0x1b [ 152.637503][ T7375] should_fail_ex+0x265/0x280 [ 152.637536][ T7375] should_failslab+0x8c/0xb0 [ 152.637574][ T7375] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 152.637622][ T7375] ? __alloc_skb+0x2ff/0x4b0 [ 152.637655][ T7375] __alloc_skb+0x2ff/0x4b0 [ 152.637687][ T7375] ? __alloc_skb+0x228/0x4b0 [ 152.637783][ T7375] netlink_alloc_large_skb+0xbf/0xf0 [ 152.637823][ T7375] netlink_sendmsg+0x3cf/0x6b0 [ 152.637921][ T7375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.637955][ T7375] __sock_sendmsg+0x145/0x180 [ 152.637975][ T7375] ____sys_sendmsg+0x31e/0x4a0 [ 152.638070][ T7375] ___sys_sendmsg+0x17b/0x1d0 [ 152.638119][ T7375] __x64_sys_sendmsg+0xd4/0x160 [ 152.638166][ T7375] x64_sys_call+0x17ba/0x3000 [ 152.638201][ T7375] do_syscall_64+0xca/0x2b0 [ 152.638281][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.638305][ T7375] RIP: 0033:0x7f6c3f07f749 [ 152.638326][ T7375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.638351][ T7375] RSP: 002b:00007f6c3da8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.638377][ T7375] RAX: ffffffffffffffda RBX: 00007f6c3f2d6090 RCX: 00007f6c3f07f749 [ 152.638448][ T7375] RDX: 0000000000044000 RSI: 00002000000003c0 RDI: 0000000000000009 [ 152.638481][ T7375] RBP: 00007f6c3da8b090 R08: 0000000000000000 R09: 0000000000000000 [ 152.638493][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.638526][ T7375] R13: 00007f6c3f2d6128 R14: 00007f6c3f2d6090 R15: 00007ffcd546d648 [ 152.638551][ T7375] [ 152.660744][ T29] audit: type=1400 audit(152.641:7191): avc: denied { ioctl } for pid=7367 comm="syz.2.1319" path="socket:[24706]" dev="sockfs" ino=24706 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.787570][ T7380] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 152.790482][ T29] audit: type=1400 audit(152.641:7192): avc: denied { bind } for pid=7367 comm="syz.2.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.814911][ T7377] loop4: detected capacity change from 0 to 1024 [ 152.823061][ T29] audit: type=1400 audit(152.821:7193): avc: denied { load_policy } for pid=7379 comm="syz.0.1322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 152.837159][ T7373] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 152.858151][ T7380] SELinux: failed to load policy [ 153.005376][ T7373] EXT4-fs (loop3): Remounting filesystem read-only [ 153.006383][ T7377] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 153.023099][ T7377] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 153.054670][ T7377] JBD2: no valid journal superblock found [ 153.060539][ T7377] EXT4-fs (loop4): Could not load journal inode [ 153.102969][ T29] audit: type=1400 audit(153.131:7194): avc: denied { create } for pid=7386 comm="syz.2.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.128010][ T7387] syzkaller0: entered promiscuous mode [ 153.133640][ T7387] syzkaller0: entered allmulticast mode [ 153.167505][ T29] audit: type=1400 audit(153.161:7195): avc: denied { setopt } for pid=7386 comm="syz.2.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 153.186546][ T29] audit: type=1400 audit(153.161:7196): avc: denied { ioctl } for pid=7386 comm="syz.2.1324" path="socket:[24381]" dev="sockfs" ino=24381 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.211941][ T29] audit: type=1400 audit(153.171:7197): avc: denied { mount } for pid=7374 comm="syz.4.1321" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.233520][ T29] audit: type=1400 audit(153.171:7198): avc: denied { unmount } for pid=7374 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.252750][ T29] audit: type=1400 audit(153.181:7199): avc: denied { create } for pid=7386 comm="syz.2.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.384994][ T7369] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.441693][ T7401] loop4: detected capacity change from 0 to 8192 [ 153.458343][ T7413] netlink: 'syz.2.1334': attribute type 1 has an invalid length. [ 153.503649][ T7406] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 153.623259][ T7421] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 153.657628][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 153.715511][ T7431] loop2: detected capacity change from 0 to 1024 [ 153.724816][ T7427] syzkaller0: entered promiscuous mode [ 153.730404][ T7427] syzkaller0: entered allmulticast mode [ 153.747317][ T7431] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 153.758289][ T7431] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 153.770648][ T3322] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 153.778542][ T3322] FAT-fs (loop4): Filesystem has been set read-only [ 153.786088][ T7431] JBD2: no valid journal superblock found [ 153.792925][ T7431] EXT4-fs (loop2): Could not load journal inode [ 153.892952][ T7441] netlink: 'syz.0.1333': attribute type 2 has an invalid length. [ 153.905197][ T7440] loop4: detected capacity change from 0 to 1024 [ 153.920259][ T7440] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 153.931366][ T7440] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 153.943144][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1344'. [ 154.099712][ T7440] JBD2: no valid journal superblock found [ 154.105496][ T7440] EXT4-fs (loop4): Could not load journal inode [ 154.173101][ T7433] lo speed is unknown, defaulting to 1000 [ 154.303208][ T7443] loop2: detected capacity change from 0 to 2048 [ 154.356975][ T7453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1346'. [ 154.366164][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1346'. [ 154.382410][ T3310] Alternate GPT is invalid, using primary GPT. [ 154.388854][ T3310] loop2: p1 p2 p3 [ 154.392615][ T3310] loop2: partition table partially beyond EOD, truncated [ 154.446607][ T7443] Alternate GPT is invalid, using primary GPT. [ 154.452935][ T7443] loop2: p1 p2 p3 [ 154.456691][ T7443] loop2: partition table partially beyond EOD, truncated [ 154.531056][ T7459] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 154.572867][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 154.574203][ T4482] udevd[4482]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 154.592391][ T4485] udevd[4485]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 154.612375][ T7461] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 154.633016][ T7461] SELinux: failed to load policy [ 154.656596][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 154.665273][ T3544] udevd[3544]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 154.668938][ T4485] udevd[4485]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 154.748199][ T7473] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 154.786067][ T7471] syzkaller0: entered promiscuous mode [ 154.791833][ T7471] syzkaller0: entered allmulticast mode [ 154.895138][ T7480] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 154.913574][ T7483] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1358'. [ 154.922774][ T7483] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 154.942013][ T7487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1361'. [ 154.951182][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1361'. [ 154.964006][ T7480] EXT4-fs (loop1): 1 truncate cleaned up [ 154.970194][ T7480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.982721][ T7483] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 155.017053][ T7483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1358'. [ 155.019442][ T7490] EXT4-fs: Ignoring removed orlov option [ 155.034752][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.046421][ T7490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.075353][ T7490] FAULT_INJECTION: forcing a failure. [ 155.075353][ T7490] name failslab, interval 1, probability 0, space 0, times 0 [ 155.088114][ T7490] CPU: 0 UID: 0 PID: 7490 Comm: syz.2.1362 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.088184][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.088202][ T7490] Call Trace: [ 155.088212][ T7490] [ 155.088223][ T7490] __dump_stack+0x1d/0x30 [ 155.088257][ T7490] dump_stack_lvl+0x95/0xd0 [ 155.088292][ T7490] dump_stack+0x15/0x1b [ 155.088379][ T7490] should_fail_ex+0x265/0x280 [ 155.088416][ T7490] should_failslab+0x8c/0xb0 [ 155.088442][ T7490] __kmalloc_cache_noprof+0x65/0x4c0 [ 155.088523][ T7490] ? __iomap_dio_rw+0x143/0x1290 [ 155.088557][ T7490] __iomap_dio_rw+0x143/0x1290 [ 155.088586][ T7490] ? __brelse+0x32/0x60 [ 155.088642][ T7490] iomap_dio_rw+0x40/0x90 [ 155.088673][ T7490] ext4_file_write_iter+0xb3a/0xf60 [ 155.088779][ T7490] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 155.088821][ T7490] vfs_write+0x52a/0x960 [ 155.088932][ T7490] __x64_sys_pwrite64+0xfd/0x150 [ 155.088982][ T7490] x64_sys_call+0x9f7/0x3000 [ 155.089026][ T7490] do_syscall_64+0xca/0x2b0 [ 155.089155][ T7490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.089186][ T7490] RIP: 0033:0x7f6c3f07f749 [ 155.089206][ T7490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.089232][ T7490] RSP: 002b:00007f6c3dadf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 155.089335][ T7490] RAX: ffffffffffffffda RBX: 00007f6c3f2d5fa0 RCX: 00007f6c3f07f749 [ 155.089353][ T7490] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000007 [ 155.089371][ T7490] RBP: 00007f6c3dadf090 R08: 0000000000000000 R09: 0000000000000000 [ 155.089388][ T7490] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001 [ 155.089405][ T7490] R13: 00007f6c3f2d6038 R14: 00007f6c3f2d5fa0 R15: 00007ffcd546d648 [ 155.089491][ T7490] [ 155.277274][ T7493] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 155.338157][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.380853][ T7504] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 155.445477][ T7507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.513108][ T7518] IPVS: Error connecting to the multicast addr [ 155.550191][ T7515] EXT4-fs: Ignoring removed orlov option [ 155.563285][ T7515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.725467][ T7528] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 155.736583][ T7528] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 155.764142][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.774514][ T7528] JBD2: no valid journal superblock found [ 155.780300][ T7528] EXT4-fs (loop4): Could not load journal inode [ 155.878289][ T7530] lo speed is unknown, defaulting to 1000 [ 156.342837][ T7541] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 156.368580][ T7543] validate_nla: 6 callbacks suppressed [ 156.368596][ T7543] netlink: 'syz.4.1380': attribute type 1 has an invalid length. [ 156.481081][ T7550] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 156.515274][ T7507] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.522705][ T7550] SELinux: failed to load policy [ 156.579778][ T7554] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 156.620628][ T7560] set_capacity_and_notify: 6 callbacks suppressed [ 156.620650][ T7560] loop4: detected capacity change from 0 to 1024 [ 156.635451][ T7560] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 156.646431][ T7560] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 156.657959][ T7560] JBD2: no valid journal superblock found [ 156.663754][ T7560] EXT4-fs (loop4): Could not load journal inode [ 156.684623][ T7564] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 156.749792][ T7569] FAULT_INJECTION: forcing a failure. [ 156.749792][ T7569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.762985][ T7569] CPU: 0 UID: 0 PID: 7569 Comm: syz.4.1390 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.763017][ T7569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.763107][ T7564] loop0: detected capacity change from 0 to 1024 [ 156.763113][ T7569] Call Trace: [ 156.763123][ T7569] [ 156.763133][ T7569] __dump_stack+0x1d/0x30 [ 156.763226][ T7569] dump_stack_lvl+0x95/0xd0 [ 156.763317][ T7569] dump_stack+0x15/0x1b [ 156.763402][ T7569] should_fail_ex+0x265/0x280 [ 156.763484][ T7569] should_fail+0xb/0x20 [ 156.763545][ T7569] should_fail_usercopy+0x1a/0x20 [ 156.763687][ T7569] _copy_from_user+0x1c/0xb0 [ 156.763779][ T7569] ___sys_sendmsg+0xc1/0x1d0 [ 156.763925][ T7569] __sys_sendmmsg+0x178/0x300 [ 156.764051][ T7569] __x64_sys_sendmmsg+0x57/0x70 [ 156.764146][ T7569] x64_sys_call+0x1e28/0x3000 [ 156.764238][ T7569] do_syscall_64+0xca/0x2b0 [ 156.764424][ T7569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.764554][ T7569] RIP: 0033:0x7f1bbc48f749 [ 156.764620][ T7569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.764708][ T7569] RSP: 002b:00007f1bbaeef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.764787][ T7569] RAX: ffffffffffffffda RBX: 00007f1bbc6e5fa0 RCX: 00007f1bbc48f749 [ 156.764831][ T7569] RDX: 0000000000000001 RSI: 0000200000000940 RDI: 0000000000000003 [ 156.764875][ T7569] RBP: 00007f1bbaeef090 R08: 0000000000000000 R09: 0000000000000000 [ 156.764917][ T7569] R10: 0000000004004040 R11: 0000000000000246 R12: 0000000000000001 [ 156.764959][ T7569] R13: 00007f1bbc6e6038 R14: 00007f1bbc6e5fa0 R15: 00007fffdbe62848 [ 156.765029][ T7569] [ 156.941899][ T7573] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 157.039471][ T7564] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 157.051210][ T7556] lo speed is unknown, defaulting to 1000 [ 157.110386][ T7584] SELinux: policydb version 1843612271 does not match my version range 15-35 [ 157.119955][ T7584] SELinux: failed to load policy [ 157.144433][ T7587] loop3: detected capacity change from 0 to 1024 [ 157.154552][ T7588] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 157.163515][ T7587] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 157.174515][ T7587] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 157.204856][ T7587] JBD2: no valid journal superblock found [ 157.210708][ T7587] EXT4-fs (loop3): Could not load journal inode [ 157.217264][ T7590] loop0: detected capacity change from 0 to 1024 [ 157.276149][ T7590] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 157.287190][ T7590] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 157.303773][ T7595] syzkaller0: entered promiscuous mode [ 157.309577][ T7595] syzkaller0: entered allmulticast mode [ 157.320485][ T7590] JBD2: no valid journal superblock found [ 157.326285][ T7590] EXT4-fs (loop0): Could not load journal inode [ 157.454316][ T7599] lo speed is unknown, defaulting to 1000 [ 157.483530][ T7601] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 157.500028][ T7592] loop2: detected capacity change from 0 to 8192 [ 157.545511][ T7604] capability: warning: `syz.3.1405' uses 32-bit capabilities (legacy support in use) [ 157.601750][ T2970] ================================================================== [ 157.609902][ T2970] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 157.617835][ T2970] [ 157.620190][ T2970] read-write to 0xffff8881004811f8 of 8 bytes by task 7592 on cpu 0: [ 157.628288][ T2970] __filemap_add_folio+0x5b9/0x7d0 [ 157.633444][ T2970] filemap_add_folio+0x1d9/0x360 [ 157.638433][ T2970] page_cache_ra_unbounded+0x205/0x450 [ 157.643950][ T2970] page_cache_ra_order+0x145/0x220 [ 157.649118][ T2970] page_cache_async_ra+0x383/0x4c0 [ 157.654269][ T2970] filemap_get_pages+0x51e/0x11c0 [ 157.659335][ T2970] filemap_read+0x231/0xa00 [ 157.663881][ T2970] blkdev_read_iter+0x22d/0x2e0 [ 157.668768][ T2970] do_iter_readv_writev+0x4a1/0x540 [ 157.674007][ T2970] vfs_readv+0x1ea/0x690 [ 157.678304][ T2970] __se_sys_preadv2+0xfc/0x1c0 [ 157.683118][ T2970] __x64_sys_preadv2+0x67/0x80 [ 157.687923][ T2970] x64_sys_call+0xc61/0x3000 [ 157.692550][ T2970] do_syscall_64+0xca/0x2b0 [ 157.697112][ T2970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.703040][ T2970] [ 157.705397][ T2970] read to 0xffff8881004811f8 of 8 bytes by task 2970 on cpu 1: [ 157.712969][ T2970] nr_blockdev_pages+0x7e/0xd0 [ 157.717765][ T2970] si_meminfo+0x87/0xd0 [ 157.722007][ T2970] update_defense_level+0x47/0x5c0 [ 157.727175][ T2970] defense_work_handler+0x1f/0x80 [ 157.732257][ T2970] process_scheduled_works+0x4ce/0x9d0 [ 157.737767][ T2970] worker_thread+0x582/0x770 [ 157.742407][ T2970] kthread+0x489/0x510 [ 157.746536][ T2970] ret_from_fork+0x149/0x290 [ 157.751177][ T2970] ret_from_fork_asm+0x1a/0x30 [ 157.755993][ T2970] [ 157.758351][ T2970] value changed: 0x00000000000001f8 -> 0x00000000000001fb [ 157.765491][ T2970] [ 157.767845][ T2970] Reported by Kernel Concurrency Sanitizer on: [ 157.774029][ T2970] CPU: 1 UID: 0 PID: 2970 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.783862][ T2970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.793939][ T2970] Workqueue: events_long defense_work_handler [ 157.800041][ T2970] ================================================================== [ 157.817121][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 157.817202][ T29] audit: type=1326 audit(157.844:7471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 157.846432][ T29] audit: type=1326 audit(157.844:7472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 157.879426][ T29] audit: type=1326 audit(157.854:7473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 157.902496][ T29] audit: type=1326 audit(157.854:7474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 157.925399][ T29] audit: type=1326 audit(157.854:7475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 157.948305][ T29] audit: type=1326 audit(157.854:7476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 157.971237][ T29] audit: type=1326 audit(157.854:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 157.994130][ T29] audit: type=1326 audit(157.854:7478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 158.016989][ T29] audit: type=1326 audit(157.854:7479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 158.039937][ T29] audit: type=1326 audit(157.854:7480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.2.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3f07f749 code=0x7ffc0000 [ 158.040981][ T7592] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 158.149601][ T3323] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 158.157607][ T3323] FAT-fs (loop2): Filesystem has been set read-only [ 161.675298][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.594344][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!