last executing test programs: 8m14.383413054s ago: executing program 1 (id=1345): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x54, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRES8=r4], 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$tty1(0xc, 0x4, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000042000102000000000000000002000000000000bbff8925bef8c6bf"], 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r8, r8, 0x0, 0xb) 8m12.074942002s ago: executing program 1 (id=1350): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x11e0, 0xc8, 0x8, 0x4000000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbc86dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) 8m11.558758829s ago: executing program 1 (id=1353): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x201c448, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRESOCT], 0x1, 0xa80, &(0x7f0000000280)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 8m11.398326475s ago: executing program 1 (id=1354): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) rt_sigqueueinfo(0xffffffffffffffff, 0x28, &(0x7f00000000c0)={0x2, 0x0, 0xfffffff7}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_send_signal(r2, 0x41, &(0x7f0000000040)={0x23}, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', './file1', [], 0xa, "e3cfcd77b166a975b1f2d3c410d23b934bacf8eb15f6047d570f93d29a07b4bedc22708bca9a611ff6b4f4c40bb678a23df710d818be11e743b4fb161cac053358d2"}, 0x4d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x1a4e, 0x0, 0x0, 0x7, 0x0, 0xbfff}, 0x0, 0xffefffffffffffff, r3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x119000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x10, 0x1}, 0x94) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 8m10.575451042s ago: executing program 1 (id=1360): socket$kcm(0x29, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) syz_emit_ethernet(0x1ee, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1b8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8fffff", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0xff}, @hopopts={0x0, 0x2f, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x0, [0xfffffffffffffffe, 0x2, 0x5, 0x9, 0x18a7, 0x73, 0x2]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x72, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cb"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x8000000000000001, 0x0]}}]}]}}}}}}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x4000) statx(0xffffffffffffffff, 0x0, 0x400, 0x404, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r1) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="4c000000000000000800de00", @ANYRES32=0x0, @ANYBLOB="08001b00"], 0x30}}, 0x0) close(0x3) 8m9.095994913s ago: executing program 1 (id=1377): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@journal_ioprio}, {@lazytime}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000000, 0x6, 0x0, 0xfffffffffffffffe, 0x8, 0x1, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)=0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe00000000000000080004000100000e", 0x24) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0xf2}, 0x38) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x42de, &(0x7f0000000040)={0x0, 0x24e6, 0xc000, 0xc, 0xa0002ee}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x80800) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x5, 0xffffffff, 0x200, 0xfffffffffffffffa, 0x7fffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m9.059771154s ago: executing program 32 (id=1377): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@journal_ioprio}, {@lazytime}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000000, 0x6, 0x0, 0xfffffffffffffffe, 0x8, 0x1, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)=0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe00000000000000080004000100000e", 0x24) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0xf2}, 0x38) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x42de, &(0x7f0000000040)={0x0, 0x24e6, 0xc000, 0xc, 0xa0002ee}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$tipc(0x1e, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x80800) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x5, 0xffffffff, 0x200, 0xfffffffffffffffa, 0x7fffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m45.550643268s ago: executing program 0 (id=1535): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x63, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x7e, 0x3, 0x6, 0x0, 0xabe, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x7, 0x7, 0x4, 0x8, 0x2, 0x3bf1, 0x0, 0x3ff, 0x0, 0x489d}, 0x0, 0xe, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x101, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000060a010400000000000000000a0000010900010073797a31000000001c0004801824018008000100666962000c00028008000240000000030900020073797a32"], 0x70}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x800000000000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0x10d}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 7m45.170454391s ago: executing program 0 (id=1540): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000bc0)) unshare(0x4a000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="e6696c7465720000000000000000000000000000009a0000000000000000000004"], &(0x7f0000000040)=0x2c) 7m44.502624663s ago: executing program 0 (id=1545): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 7m42.954412036s ago: executing program 0 (id=1556): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) move_mount(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0/../file0\x00', 0x223) 7m42.53463056s ago: executing program 0 (id=1558): unshare(0x20040600) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x3032, 0xffffffffffffffff, 0xe2d93000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getgroups(0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) statx(0xffffffffffffffff, 0x0, 0x6000, 0x2, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) setregid(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x94) 7m42.266143289s ago: executing program 0 (id=1560): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") 7m42.104419844s ago: executing program 33 (id=1560): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") 2m37.2287181s ago: executing program 4 (id=3769): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) read(r2, &(0x7f0000000000)=""/37, 0x25) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0xffffffffffff0000, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m37.175972372s ago: executing program 4 (id=3770): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f00000001c0)='4', 0x1}, {0x0, 0x180}], 0x2) 2m37.108136894s ago: executing program 4 (id=3771): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffd, 0x10000, @empty, 0xffffffff}, {0xa, 0x1c, 0x2, @empty, 0x9}, r0, 0x73}}, 0x48) 2m36.907415191s ago: executing program 4 (id=3772): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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") syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x2e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x28}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe000ff00, @dev={0xac, 0x14, 0x14, 0x35}}, 0x8) read(r0, &(0x7f0000000080)=""/1, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x8, 0x3) read(r2, &(0x7f0000000080)=""/1, 0x1) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r8}, 0x38) 2m36.32197349s ago: executing program 4 (id=3777): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x10000, &(0x7f0000000000)={[{@nolazytime}]}, 0x1, 0x84d, &(0x7f0000000940)="$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") r2 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_freeze_timeout', 0x0, 0xd0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r0, 0x8001, 0x3, 0x7}) prctl$PR_GET_CHILD_SUBREAPER(0x25) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f00000004c0)=""/237, 0xed, 0x0, &(0x7f0000000640)=""/162, 0xa2}}, 0x10) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xd6, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="009f530ae3565b00000000e06b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m35.714409191s ago: executing program 4 (id=3782): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f00000001c0)='4', 0x1}, {0x0, 0x180}], 0x2) 2m35.713018861s ago: executing program 34 (id=3782): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f00000001c0)='4', 0x1}, {0x0, 0x180}], 0x2) 50.660683239s ago: executing program 2 (id=4404): r0 = socket(0x1d, 0x802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) write$bt_hci(r0, &(0x7f0000000140)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"c7a9df"}}}, 0x7) 50.3307027s ago: executing program 2 (id=4406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4004) 50.257264822s ago: executing program 2 (id=4408): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) 49.875301755s ago: executing program 2 (id=4411): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026408f09"], 0x2c}}, 0x0) 48.328747578s ago: executing program 5 (id=4418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4004) 48.25807695s ago: executing program 2 (id=4420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x30, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 48.090612176s ago: executing program 2 (id=4422): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, 0x0, 0x28000, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0xfffffd51}) 47.678355419s ago: executing program 7 (id=4424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x6c}}, 0x0) 47.65425413s ago: executing program 5 (id=4425): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16, @ANYBLOB="0100000000003fc14d"], 0x134}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) 47.35443581s ago: executing program 7 (id=4426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xf, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004865}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) 46.223749119s ago: executing program 3 (id=4432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf251000000008000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB="08001b000700000008003a"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40) 46.066611434s ago: executing program 3 (id=4433): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000440)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="270502001c001400060000690d6db4f7baba05000700810005008100", 0x1c}, {&(0x7f0000000280)="991b0d9e9def56e4bbdf", 0xa}], 0x2}, 0x30040805) 46.037870405s ago: executing program 5 (id=4434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000680)=ANY=[], 0x68) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x8}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cdd", 0x16}], 0x1}, 0x5) 45.879334211s ago: executing program 3 (id=4435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) 45.730428585s ago: executing program 3 (id=4436): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffea}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xff, 0x2, 0x0, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 45.431982056s ago: executing program 7 (id=4438): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) socket$unix(0x1, 0x1, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0xb, @f={0x5, 0x3, 0x1, 0x2, 0x6, 0x6, 0x6, {0x51, 0x60, "9a92c7b71378f36b1c93eccb273bd90e46eb275e639df27c704a0190f7c575d9a4e19f8f04dae247a786257c6e09ae8e941cdf39760fc1271249c0a72fcad64c62eb82e36fd1ac8b41dc12e780f2853756b6f20d60c10282a944cdd5ac94f1fe"}, 0x70, 0xff, 0x6d, 0x80, 0x27, "32ec951e71d0a07bddff61eb6337e0fdde4942dcbe5b05f5bec7afa579324ab79b5996d30970d4"}}, 0x98) 45.164037885s ago: executing program 6 (id=4440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) 45.049246328s ago: executing program 7 (id=4441): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 44.792827277s ago: executing program 5 (id=4442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x6, 0x8}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 44.781459857s ago: executing program 3 (id=4443): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x80000001, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xe, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x3, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xf}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) 44.204857137s ago: executing program 6 (id=4444): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000800)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0x54}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 44.198998417s ago: executing program 7 (id=4445): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3", 0x3}], 0x1}}], 0x1, 0x20008000) shutdown(r0, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) 42.907676851s ago: executing program 6 (id=4446): r0 = socket(0x2, 0x3, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 40.521349151s ago: executing program 5 (id=4447): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x2c, 0x2c, 0x400, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r0, {0x2, 0x4}, {0x4}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x10, 0x52}}]}, 0x1b}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0xfffffffffffffff2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000000)=0x10, 0x4) 39.529949605s ago: executing program 3 (id=4448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000001c0)=0x8001, 0x4) sendmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)="c76e41fce0d46a50886abddadd0bd294dfc54b06fbc49922d1dbbabce001936bba8b8de16b1cf2e00b02fefb7d97e4c71fd09971", 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000054) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0) socket$inet(0x2, 0x2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 37.91064907s ago: executing program 7 (id=4449): openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe8000000003000000000000000000aaff02000000000000000000000000000104"], 0xfce) 34.665241199s ago: executing program 6 (id=4450): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$tun(r2, 0x0, 0xfdef) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001000)={0x34, r4, 0x9512a398774b421, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x5, 0x6}, {0x4, 0x1}, {0x2, 0x3}, {0x4, 0x4}, {0x1, 0x6}], "d62974a3b7185a54"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048045}, 0x20000054) 31.553120664s ago: executing program 35 (id=4422): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, 0x0, 0x28000, 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0xfffffd51}) 25.809877508s ago: executing program 6 (id=4452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x40}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="078b72ace7d1"}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7fff}, {0x8, 0x0, 0x7}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x8040) 24.939685187s ago: executing program 5 (id=4453): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffea}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xff, 0x2, 0x0, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 23.210126026s ago: executing program 36 (id=4448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000001c0)=0x8001, 0x4) sendmsg$can_j1939(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)="c76e41fce0d46a50886abddadd0bd294dfc54b06fbc49922d1dbbabce001936bba8b8de16b1cf2e00b02fefb7d97e4c71fd09971", 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000054) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0) socket$inet(0x2, 0x2, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 19.881981338s ago: executing program 37 (id=4449): openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0000110000000000000060ec97000f982c00fe8000000003000000000000000000aaff02000000000000000000000000000104"], 0xfce) 16.555095431s ago: executing program 6 (id=4456): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@bridge_dellink={0x34, 0x11, 0x5, 0x3, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x202, 0x12002}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0xa, 0x0, 0x1, [{0x8, 0x18, 0x0, 0x0, 0x2}]}}]}]}, 0x34}}, 0x80) 8.816239822s ago: executing program 38 (id=4453): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffea}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xff, 0x2, 0x0, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 0s ago: executing program 39 (id=4456): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@bridge_dellink={0x34, 0x11, 0x5, 0x3, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x202, 0x12002}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0xa, 0x0, 0x1, [{0x8, 0x18, 0x0, 0x0, 0x2}]}}]}]}, 0x34}}, 0x80) kernel console output (not intermixed with test programs): 3607][T16188] should_fail_ex+0x263/0x280 [ 551.963638][T16188] should_fail+0xb/0x20 [ 551.963700][T16188] should_fail_usercopy+0x1a/0x20 [ 551.963731][T16188] _copy_to_user+0x20/0xa0 [ 551.963825][T16188] simple_read_from_buffer+0xb5/0x130 [ 551.963853][T16188] proc_fail_nth_read+0x10e/0x150 [ 551.963911][T16188] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.963944][T16188] vfs_read+0x1ab/0x7f0 [ 551.963989][T16188] ? mutex_unlock+0x4e/0x90 [ 551.964010][T16188] ? __rcu_read_unlock+0x4e/0x70 [ 551.964033][T16188] ? __fget_files+0x184/0x1c0 [ 551.964062][T16188] ? mutex_lock+0x57/0x90 [ 551.964152][T16188] ksys_read+0xdc/0x1a0 [ 551.964174][T16188] __x64_sys_read+0x40/0x50 [ 551.964195][T16188] x64_sys_call+0x2886/0x3020 [ 551.964261][T16188] do_syscall_64+0x12c/0x370 [ 551.964340][T16188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.964369][T16188] RIP: 0033:0x7f6ad246d04e [ 551.964469][T16188] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 551.964490][T16188] RSP: 002b:00007f6ad0f06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 551.964578][T16188] RAX: ffffffffffffffda RBX: 00007f6ad0f076c0 RCX: 00007f6ad246d04e [ 551.964595][T16188] RDX: 000000000000000f RSI: 00007f6ad0f070a0 RDI: 0000000000000006 [ 551.964608][T16188] RBP: 00007f6ad0f07090 R08: 0000000000000000 R09: 0000000000000000 [ 551.964620][T16188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.964633][T16188] R13: 00007f6ad2726038 R14: 00007f6ad2725fa0 R15: 00007ffc6fca7e28 [ 551.964665][T16188] [ 552.007877][T16182] syz.3.3852: attempt to access beyond end of device [ 552.007877][T16182] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 552.112734][T16192] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3857'. [ 552.222479][T16182] syz.3.3852: attempt to access beyond end of device [ 552.222479][T16182] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 552.272484][T16190] syz.3.3852: attempt to access beyond end of device [ 552.272484][T16190] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 552.317093][T16182] syz.3.3852: attempt to access beyond end of device [ 552.317093][T16182] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 552.385416][T16190] syz.3.3852: attempt to access beyond end of device [ 552.385416][T16190] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 552.445524][T16190] syz.3.3852: attempt to access beyond end of device [ 552.445524][T16190] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 552.461823][T16182] syz.3.3852: attempt to access beyond end of device [ 552.461823][T16182] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 552.479209][T16190] syz.3.3852: attempt to access beyond end of device [ 552.479209][T16190] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 552.494776][T16182] syz.3.3852: attempt to access beyond end of device [ 552.494776][T16182] loop3: rw=2049, sector=289, nr_sectors = 1 limit=128 [ 552.515549][T16193] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 553.492579][T16216] netlink: 'syz.3.3862': attribute type 2 has an invalid length. [ 553.501824][T16216] netlink: 'syz.3.3862': attribute type 1 has an invalid length. [ 553.535945][T16216] loop3: detected capacity change from 0 to 512 [ 553.557943][T16216] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 553.897349][T16218] loop2: detected capacity change from 0 to 7 [ 553.969758][T16216] EXT4-fs (loop3): 1 truncate cleaned up [ 553.979158][T16216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.801764][ T28] kauditd_printk_skb: 194 callbacks suppressed [ 555.801784][ T28] audit: type=1400 audit(1774850529.038:14955): avc: denied { allowed } for pid=16221 comm="syz.7.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 556.053538][ T28] audit: type=1400 audit(1774850529.038:14956): avc: denied { create } for pid=16221 comm="syz.7.3864" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 556.151710][T16227] loop7: detected capacity change from 0 to 128 [ 556.211756][ T28] audit: type=1400 audit(1774850529.038:14957): avc: denied { map } for pid=16221 comm="syz.7.3864" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 556.269080][ T28] audit: type=1400 audit(1774850529.038:14958): avc: denied { read write } for pid=16221 comm="syz.7.3864" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 556.314870][T12878] audit: audit_backlog=65 > audit_backlog_limit=64 [ 556.337739][T16235] audit: audit_backlog=65 > audit_backlog_limit=64 [ 556.353805][ T28] audit: type=1400 audit(1774850529.138:14959): avc: denied { open } for pid=16221 comm="syz.7.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 556.361275][T12878] audit: audit_lost=22 audit_rate_limit=0 audit_backlog_limit=64 [ 556.387845][T16235] audit: audit_lost=23 audit_rate_limit=0 audit_backlog_limit=64 [ 556.431327][T16235] audit: backlog limit exceeded [ 556.505782][T16239] loop2: detected capacity change from 0 to 164 [ 556.561244][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 556.571749][T12686] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.641347][T16239] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3866'. [ 556.720542][T16248] xt_connbytes: Forcing CT accounting to be enabled [ 560.193394][T16284] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3880'. [ 560.813927][ T28] kauditd_printk_skb: 455 callbacks suppressed [ 560.813945][ T28] audit: type=1400 audit(1774850534.210:15375): avc: denied { ioctl } for pid=16306 comm="syz.7.3888" path="socket:[49493]" dev="sockfs" ino=49493 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 560.865502][ T28] audit: type=1400 audit(1774850534.210:15376): avc: denied { create } for pid=16310 comm="syz.2.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 560.888992][ T28] audit: type=1400 audit(1774850534.210:15377): avc: denied { write } for pid=16310 comm="syz.2.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 560.910330][ T28] audit: type=1400 audit(1774850534.210:15378): avc: denied { read } for pid=16310 comm="syz.2.3890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 560.932133][ T28] audit: type=1400 audit(1774850534.220:15379): avc: denied { map_create } for pid=16301 comm="syz.6.3886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 560.952505][ T28] audit: type=1400 audit(1774850534.220:15380): avc: denied { prog_load } for pid=16301 comm="syz.6.3886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 560.982978][ T28] audit: type=1400 audit(1774850534.220:15381): avc: denied { bpf } for pid=16301 comm="syz.6.3886" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 561.005692][ T28] audit: type=1400 audit(1774850534.220:15382): avc: denied { perfmon } for pid=16301 comm="syz.6.3886" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 561.032430][T16318] loop6: detected capacity change from 0 to 8192 [ 561.039569][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 561.056371][ T28] audit: type=1400 audit(1774850534.250:15383): avc: denied { read write } for pid=7698 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 561.091764][T11769] loop6: p1 < > p2 p4 < p5 > [ 561.100461][T11769] loop6: partition table partially beyond EOD, truncated [ 561.112551][ T28] audit: type=1400 audit(1774850534.250:15384): avc: denied { open } for pid=7698 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 561.139033][T11769] loop6: p1 start 134217728 is beyond EOD, truncated [ 561.149240][T11769] loop6: p2 size 591360 extends beyond EOD, truncated [ 561.164160][T11769] loop6: p5 size 591360 extends beyond EOD, truncated [ 561.191104][T16318] loop6: p1 < > p2 p4 < p5 > [ 561.198678][T16318] loop6: partition table partially beyond EOD, truncated [ 561.219307][T16318] loop6: p1 start 134217728 is beyond EOD, truncated [ 561.226990][T16318] loop6: p2 size 591360 extends beyond EOD, truncated [ 561.255045][T16318] loop6: p5 size 591360 extends beyond EOD, truncated [ 561.370850][T16325] loop2: detected capacity change from 0 to 4096 [ 561.528875][T11769] udevd[11769]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 561.535615][T11642] udevd[11642]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 561.562480][T11615] udevd[11615]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 561.818129][T11769] udevd[11769]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 561.843994][T16353] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3904'. [ 561.871132][T11642] udevd[11642]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 561.884324][T12416] udevd[12416]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 561.907542][T16357] FAULT_INJECTION: forcing a failure. [ 561.907542][T16357] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 561.988915][T16357] CPU: 0 UID: 0 PID: 16357 Comm: syz.2.3906 Tainted: G W syzkaller #0 PREEMPT(full) [ 561.988950][T16357] Tainted: [W]=WARN [ 561.988977][T16357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.988988][T16357] Call Trace: [ 561.989021][T16357] [ 561.989031][T16357] __dump_stack+0x1d/0x30 [ 561.989072][T16357] dump_stack_lvl+0x95/0xd0 [ 561.989097][T16357] dump_stack+0x15/0x1b [ 561.989122][T16357] should_fail_ex+0x263/0x280 [ 561.989217][T16357] should_fail_alloc_page+0xf2/0x100 [ 561.989298][T16357] __alloc_frozen_pages_noprof+0x108/0x360 [ 561.989334][T16357] alloc_pages_mpol+0xb3/0x260 [ 561.989412][T16357] folio_alloc_mpol_noprof+0x39/0x80 [ 561.989521][T16357] shmem_get_folio_gfp+0x3da/0xd60 [ 561.989554][T16357] ? simple_xattr_get+0xb5/0x150 [ 561.989671][T16357] shmem_write_begin+0xfc/0x1f0 [ 561.989702][T16357] generic_perform_write+0x183/0x490 [ 561.989736][T16357] ? current_time+0x188/0x240 [ 561.989829][T16357] shmem_file_write_iter+0xc5/0xf0 [ 561.989859][T16357] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 561.989926][T16357] vfs_write+0x5a6/0x9f0 [ 561.989950][T16357] ksys_write+0xdc/0x1a0 [ 561.990023][T16357] __x64_sys_write+0x40/0x50 [ 561.990154][T16357] x64_sys_call+0x27e1/0x3020 [ 561.990180][T16357] do_syscall_64+0x12c/0x370 [ 561.990212][T16357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.990237][T16357] RIP: 0033:0x7f9ba9dfd04e [ 561.990254][T16357] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 561.990272][T16357] RSP: 002b:00007f9ba8896da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 561.990293][T16357] RAX: ffffffffffffffda RBX: 00007f9ba88976c0 RCX: 00007f9ba9dfd04e [ 561.990339][T16357] RDX: 0000000000020000 RSI: 00007f9ba0477000 RDI: 0000000000000004 [ 561.990355][T16357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 561.990377][T16357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 561.990391][T16357] R13: 00007f9ba8896ee0 R14: 00007f9ba8896ea0 R15: 00007f9ba0477000 [ 561.990414][T16357] [ 562.228204][T16364] netlink: 'syz.7.3907': attribute type 1 has an invalid length. [ 562.389341][T16366] netlink: 'syz.3.3909': attribute type 10 has an invalid length. [ 562.449156][T16366] team0: Port device dummy0 added [ 562.468910][T16373] netlink: 'syz.2.3910': attribute type 11 has an invalid length. [ 562.478781][T16373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3910'. [ 562.716551][T16377] xfrm0 speed is unknown, defaulting to 1000 [ 562.824498][T16377] lo speed is unknown, defaulting to 1000 [ 563.302461][T16423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3920'. [ 563.362673][T16427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3920'. [ 563.379602][T16423] macvtap3: entered promiscuous mode [ 563.408509][T16423] macvtap3: entered allmulticast mode [ 563.434607][T16423] erspan0: entered allmulticast mode [ 563.485248][T16427] macvtap3: left promiscuous mode [ 563.510029][T16427] macvtap3: left allmulticast mode [ 563.538995][T16427] erspan0: left allmulticast mode [ 563.609890][T16435] loop6: detected capacity change from 0 to 512 [ 563.658549][T16435] EXT4-fs: Ignoring removed nobh option [ 563.676269][T16435] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 563.728198][T16435] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 563.736964][T16435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 563.750433][T16435] System zones: 1-12 [ 563.768342][T16445] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3926'. [ 563.778382][T16435] EXT4-fs (loop6): orphan cleanup on readonly fs [ 563.799540][T16442] loop7: detected capacity change from 0 to 2048 [ 563.824053][T16435] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3923: bg 0: block 273: padding at end of block bitmap is not set [ 563.885640][T16442] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.914968][T16435] loop6: lost filesystem error report for type 5 error -117 [ 563.915152][T16435] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 563.923492][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 563.923516][ C0] EXT4-fs (loop6): initial error at time 1774850537: ext4_validate_block_bitmap:441 [ 563.923554][ C0] EXT4-fs (loop6): last error at time 1774850537: ext4_validate_block_bitmap:441 [ 564.058211][T16435] loop6: lost filesystem error report for type 5 error -117 [ 564.075280][T16435] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.3923: attempt to clear invalid blocks 1024 len 1 [ 564.128750][T16435] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 564.139666][T16435] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3923: invalid indirect mapped block 1811939328 (level 0) [ 564.194893][T16435] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 564.195125][T16435] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3923: invalid indirect mapped block 2 (level 2) [ 564.297520][T16435] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 564.298696][T16435] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #11: comm syz.6.3923: data will be lost [ 564.352840][T16475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3930'. [ 564.362789][T16435] EXT4-fs (loop6): 1 truncate cleaned up [ 564.370418][T16435] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 564.614405][T16478] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3928'. [ 564.702698][T16475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 564.795105][ T8446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 564.875376][T16477] macvlan2: entered promiscuous mode [ 564.999794][T16477] bond1: entered promiscuous mode [ 565.071590][T16477] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 565.176326][T16477] bond1: left promiscuous mode [ 565.381647][T15829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.655381][T16486] syzkaller0: entered promiscuous mode [ 565.690916][T16494] loop6: detected capacity change from 0 to 512 [ 565.749540][T16496] macvtap0: entered promiscuous mode [ 565.766373][T16494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.805374][T16494] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.856646][ T28] kauditd_printk_skb: 869 callbacks suppressed [ 565.856662][ T28] audit: type=1400 audit(1774850539.242:16252): avc: denied { read write } for pid=16485 comm="syz.6.3931" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 565.946882][ T28] audit: type=1400 audit(1774850539.242:16253): avc: denied { read write open } for pid=16485 comm="syz.6.3931" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 566.007222][T16500] loop3: detected capacity change from 0 to 2048 [ 566.030673][T16500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.047012][ T28] audit: type=1400 audit(1774850539.282:16254): avc: denied { add_name } for pid=16485 comm="syz.6.3931" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 566.099703][ T28] audit: type=1400 audit(1774850539.282:16255): avc: denied { create } for pid=16485 comm="syz.6.3931" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 566.126176][ T28] audit: type=1400 audit(1774850539.282:16256): avc: denied { read write } for pid=16485 comm="syz.6.3931" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 566.223821][ T28] audit: type=1400 audit(1774850539.282:16257): avc: denied { open } for pid=16485 comm="syz.6.3931" path="/449/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 566.298134][ T28] audit: type=1400 audit(1774850539.302:16258): avc: denied { ioctl } for pid=16485 comm="syz.6.3931" path="/449/file0/file1" dev="loop6" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 566.346989][ T28] audit: type=1400 audit(1774850539.302:16259): avc: denied { write } for pid=16485 comm="syz.6.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 566.370046][ T28] audit: type=1400 audit(1774850539.392:16260): avc: denied { read write } for pid=16492 comm="syz.3.3936" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 566.455565][T16512] loop2: detected capacity change from 0 to 512 [ 566.469811][T16511] loop7: detected capacity change from 0 to 164 [ 566.517328][T16512] EXT4-fs error (device loop2): __ext4_fill_super:5588: inode #2: comm syz.2.3939: iget: bogus i_mode (110000) [ 566.526847][ T28] audit: type=1400 audit(1774850539.392:16261): avc: denied { open } for pid=16492 comm="syz.3.3936" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 566.530084][T16512] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 566.557956][T16512] EXT4-fs (loop2): get root inode failed [ 566.567587][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 566.567607][ C0] EXT4-fs (loop2): initial error at time 1774850539: __ext4_fill_super:5588: inode 2 [ 566.567640][ C0] EXT4-fs (loop2): last error at time 1774850539: __ext4_fill_super:5588: inode 2 [ 566.591996][T16512] EXT4-fs (loop2): mount failed [ 566.620482][ T8446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.633856][T12686] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.731788][T16511] rock: directory entry would overflow storage [ 566.772964][T16511] rock: sig=0x4f50, size=4, remaining=3 [ 566.792874][T16511] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 567.568303][T16524] loop6: detected capacity change from 0 to 32768 [ 567.636738][T15862] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 567.644682][T15862] loop6: p1 start 460800 is beyond EOD, truncated [ 567.670802][T15862] loop6: p2 size 83886080 extends beyond EOD, truncated [ 567.710442][T15862] loop6: p5 start 460800 is beyond EOD, truncated [ 567.724754][T15862] loop6: p6 size 83886080 extends beyond EOD, truncated [ 567.749087][T16524] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 567.760047][T16524] loop6: p1 start 460800 is beyond EOD, truncated [ 567.781931][T16524] loop6: p2 size 83886080 extends beyond EOD, truncated [ 567.821597][T16524] loop6: p5 start 460800 is beyond EOD, truncated [ 567.850491][T16524] loop6: p6 size 83886080 extends beyond EOD, truncated [ 568.181339][T16567] loop2: detected capacity change from 0 to 512 [ 568.208166][T16567] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 568.240598][T16567] EXT4-fs (loop2): 1 orphan inode deleted [ 568.251259][T15862] udevd[15862]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 568.270864][T16567] EXT4-fs (loop2): 1 truncate cleaned up [ 568.271659][T11642] udevd[11642]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 568.279904][T11615] udevd[11615]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 568.315392][T16567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.315405][T12416] udevd[12416]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 568.418453][T15862] udevd[15862]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 568.434007][T11615] udevd[11615]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 568.435099][T11769] udevd[11769]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 568.452054][T11642] udevd[11642]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 568.555277][T15862] udevd[15862]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 568.574444][T11769] udevd[11769]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 568.684002][T12878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.921726][T16583] loop2: detected capacity change from 0 to 1024 [ 568.976916][T16583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 568.983617][T16591] netlink: 'syz.3.3967': attribute type 9 has an invalid length. [ 569.004983][T16583] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.024352][T16592] loop6: detected capacity change from 0 to 128 [ 569.032357][T16593] loop7: detected capacity change from 0 to 1024 [ 569.048307][T16593] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 569.078368][T16593] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.097400][T12878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 569.109600][T16593] FAULT_INJECTION: forcing a failure. [ 569.109600][T16593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.121115][T16585] syz.6.3966: attempt to access beyond end of device [ 569.121115][T16585] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 569.146279][T16585] syz.6.3966: attempt to access beyond end of device [ 569.146279][T16585] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 569.168998][T16593] CPU: 0 UID: 0 PID: 16593 Comm: syz.7.3968 Tainted: G W syzkaller #0 PREEMPT(full) [ 569.169034][T16593] Tainted: [W]=WARN [ 569.169041][T16593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 569.169053][T16593] Call Trace: [ 569.169060][T16593] [ 569.169069][T16593] __dump_stack+0x1d/0x30 [ 569.169177][T16593] dump_stack_lvl+0x95/0xd0 [ 569.169199][T16593] dump_stack+0x15/0x1b [ 569.169222][T16593] should_fail_ex+0x263/0x280 [ 569.169256][T16593] should_fail+0xb/0x20 [ 569.169294][T16593] should_fail_usercopy+0x1a/0x20 [ 569.169328][T16593] _copy_to_user+0x20/0xa0 [ 569.169360][T16593] simple_read_from_buffer+0xb5/0x130 [ 569.169448][T16593] proc_fail_nth_read+0x10e/0x150 [ 569.169477][T16593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 569.169512][T16593] vfs_read+0x1ab/0x7f0 [ 569.169570][T16593] ? __rcu_read_unlock+0x4e/0x70 [ 569.169668][T16593] ? __fget_files+0x184/0x1c0 [ 569.169697][T16593] ? ext4_fallocate+0x21a/0x2f0 [ 569.169730][T16593] ? mutex_lock+0x57/0x90 [ 569.169800][T16593] ksys_read+0xdc/0x1a0 [ 569.169823][T16593] __x64_sys_read+0x40/0x50 [ 569.169914][T16593] x64_sys_call+0x2886/0x3020 [ 569.169939][T16593] do_syscall_64+0x12c/0x370 [ 569.169964][T16593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.169985][T16593] RIP: 0033:0x7f6ad246d04e [ 569.170044][T16593] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 569.170062][T16593] RSP: 002b:00007f6ad0f06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 569.170088][T16593] RAX: ffffffffffffffda RBX: 00007f6ad0f076c0 RCX: 00007f6ad246d04e [ 569.170171][T16593] RDX: 000000000000000f RSI: 00007f6ad0f070a0 RDI: 0000000000000005 [ 569.170188][T16593] RBP: 00007f6ad0f07090 R08: 0000000000000000 R09: 0000000000000000 [ 569.170204][T16593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.170299][T16593] R13: 00007f6ad2726038 R14: 00007f6ad2725fa0 R15: 00007ffc6fca7e28 [ 569.170321][T16593] [ 569.210141][T16585] syz.6.3966: attempt to access beyond end of device [ 569.210141][T16585] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 569.406805][T15829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 569.430923][T16598] loop3: detected capacity change from 0 to 8192 [ 569.470759][T16585] syz.6.3966: attempt to access beyond end of device [ 569.470759][T16585] loop6: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 569.532220][T16585] syz.6.3966: attempt to access beyond end of device [ 569.532220][T16585] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 569.599411][T16585] syz.6.3966: attempt to access beyond end of device [ 569.599411][T16585] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 569.815331][T16585] syz.6.3966: attempt to access beyond end of device [ 569.815331][T16585] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 569.875298][T16585] syz.6.3966: attempt to access beyond end of device [ 569.875298][T16585] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 569.918549][T16585] syz.6.3966: attempt to access beyond end of device [ 569.918549][T16585] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 570.010848][T16585] syz.6.3966: attempt to access beyond end of device [ 570.010848][T16585] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 570.029909][T16604] 9p: Bad value for 'rfdno' [ 570.121587][T16615] loop7: detected capacity change from 0 to 512 [ 570.130119][T16615] EXT4-fs: Ignoring removed mblk_io_submit option [ 570.137595][T16615] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 570.163101][T16615] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.177262][T16615] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 570.399357][T16624] FAULT_INJECTION: forcing a failure. [ 570.399357][T16624] name failslab, interval 1, probability 0, space 0, times 0 [ 570.452414][T16624] CPU: 0 UID: 0 PID: 16624 Comm: syz.6.3980 Tainted: G W syzkaller #0 PREEMPT(full) [ 570.452450][T16624] Tainted: [W]=WARN [ 570.452458][T16624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 570.452547][T16624] Call Trace: [ 570.452575][T16624] [ 570.452584][T16624] __dump_stack+0x1d/0x30 [ 570.452615][T16624] dump_stack_lvl+0x95/0xd0 [ 570.452640][T16624] dump_stack+0x15/0x1b [ 570.452666][T16624] should_fail_ex+0x263/0x280 [ 570.452744][T16624] should_failslab+0x8c/0xb0 [ 570.452770][T16624] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 570.452828][T16624] ? sidtab_sid2str_get+0xa0/0x130 [ 570.452852][T16624] ? sidtab_sid2str_put+0x1b5/0x360 [ 570.452927][T16624] kmemdup_noprof+0x2b/0x70 [ 570.452950][T16624] sidtab_sid2str_get+0xa0/0x130 [ 570.452975][T16624] security_sid_to_context_core+0x1eb/0x2e0 [ 570.452999][T16624] security_sid_to_context+0x27/0x40 [ 570.453034][T16624] avc_audit_post_callback+0x10f/0x540 [ 570.453070][T16624] ? audit_log_lsm_data+0xb3e/0xbb0 [ 570.453094][T16624] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 570.453124][T16624] common_lsm_audit+0x1ba/0x230 [ 570.453144][T16624] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 570.453217][T16624] slow_avc_audit+0x14c/0x190 [ 570.453327][T16624] avc_has_perm+0x144/0x190 [ 570.453358][T16624] selinux_socket_sendmsg+0x192/0x1c0 [ 570.453432][T16624] security_socket_sendmsg+0x44/0x80 [ 570.453471][T16624] ____sys_sendmsg+0x361/0x5b0 [ 570.453511][T16624] ___sys_sendmsg+0x195/0x1e0 [ 570.453633][T16624] __x64_sys_sendmsg+0xd4/0x160 [ 570.453658][T16624] x64_sys_call+0x194c/0x3020 [ 570.453701][T16624] do_syscall_64+0x12c/0x370 [ 570.453799][T16624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.453823][T16624] RIP: 0033:0x7ff1c590c819 [ 570.453882][T16624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.453900][T16624] RSP: 002b:00007ff1c435f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.453922][T16624] RAX: ffffffffffffffda RBX: 00007ff1c5b85fa0 RCX: 00007ff1c590c819 [ 570.453955][T16624] RDX: 0000000000000400 RSI: 0000200000000400 RDI: 0000000000000003 [ 570.453971][T16624] RBP: 00007ff1c435f090 R08: 0000000000000000 R09: 0000000000000000 [ 570.453986][T16624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.453999][T16624] R13: 00007ff1c5b86038 R14: 00007ff1c5b85fa0 R15: 00007fff80976e88 [ 570.454017][T16624] [ 570.885530][ T28] kauditd_printk_skb: 590 callbacks suppressed [ 570.885558][ T28] audit: type=1400 audit(1774853104.233:16840): avc: denied { write } for pid=16620 comm="syz.2.3979" name="ptype" dev="proc" ino=4026534139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 571.180415][ T28] audit: type=1400 audit(1774853104.233:16841): avc: denied { write } for pid=16620 comm="syz.2.3979" path="/proc/594/net/ptype" dev="proc" ino=4026534139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 571.216374][T16635] loop6: detected capacity change from 0 to 128 [ 571.274620][ T28] audit: type=1400 audit(1774853104.253:16842): avc: denied { read } for pid=16620 comm="syz.2.3979" dev="nsfs" ino=4026532381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 571.314620][ T28] audit: type=1400 audit(1774853104.253:16843): avc: denied { open } for pid=16620 comm="syz.2.3979" path="net:[4026532381]" dev="nsfs" ino=4026532381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 571.359996][ T28] audit: type=1400 audit(1774853104.253:16844): avc: denied { create } for pid=16620 comm="syz.2.3979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 571.429810][ T28] audit: type=1400 audit(1774853104.263:16845): avc: denied { read } for pid=16620 comm="syz.2.3979" dev="nsfs" ino=4026532381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 571.452040][T16638] vfat: Bad value for 'uni_xlate' [ 571.529841][ T28] audit: type=1400 audit(1774853104.263:16846): avc: denied { open } for pid=16620 comm="syz.2.3979" path="net:[4026532381]" dev="nsfs" ino=4026532381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 571.563660][T16641] audit: audit_backlog=65 > audit_backlog_limit=64 [ 571.570848][T16641] audit: audit_lost=42 audit_rate_limit=0 audit_backlog_limit=64 [ 571.584583][T16641] audit: backlog limit exceeded [ 571.590431][T15829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.731362][T16651] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 572.018865][T16653] set_capacity_and_notify: 1 callbacks suppressed [ 572.018883][T16653] loop2: detected capacity change from 0 to 8192 [ 572.048511][T16666] ip6gre1: entered allmulticast mode [ 572.152142][ T5560] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 572.696867][T16682] loop3: detected capacity change from 0 to 128 [ 575.462690][T16704] netlink: 'syz.6.4001': attribute type 3 has an invalid length. [ 575.644113][T16710] syzkaller0: entered promiscuous mode [ 575.742657][T16713] xfrm0 speed is unknown, defaulting to 1000 [ 575.815189][T16713] lo speed is unknown, defaulting to 1000 [ 576.472059][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 576.871847][ T28] kauditd_printk_skb: 374 callbacks suppressed [ 576.871867][ T28] audit: type=1400 audit(1774853110.266:17194): avc: denied { perfmon } for pid=16693 comm="syz.2.3997" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 576.911950][ T28] audit: type=1400 audit(1774853110.266:17195): avc: denied { perfmon } for pid=16701 comm="syz.7.4000" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 576.944475][ T28] audit: type=1400 audit(1774853110.346:17196): avc: denied { read write } for pid=15829 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 576.989993][ T28] audit: type=1400 audit(1774853110.346:17197): avc: denied { open } for pid=15829 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 577.017849][ T28] audit: type=1400 audit(1774853110.346:17198): avc: denied { ioctl } for pid=15829 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 577.049635][ T28] audit: type=1400 audit(1774853110.386:17199): avc: denied { unmount } for pid=12686 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 577.124010][T16719] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4005'. [ 577.145748][T16717] loop7: detected capacity change from 0 to 4096 [ 577.153564][ T28] audit: type=1400 audit(1774853110.446:17200): avc: denied { read write } for pid=12686 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 577.213366][ T28] audit: type=1400 audit(1774853110.446:17201): avc: denied { open } for pid=12686 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 577.222889][T16717] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.262301][ T28] audit: type=1400 audit(1774853110.446:17202): avc: denied { ioctl } for pid=12686 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 577.294083][ T28] audit: type=1400 audit(1774853110.516:17203): avc: denied { read } for pid=16718 comm="syz.3.4005" dev="nsfs" ino=4026532859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 577.500231][T15829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.861808][T16744] 9p: Bad value for 'rfdno' [ 578.329220][T16748] loop3: detected capacity change from 0 to 128 [ 578.342517][T16748] FAT-fs (loop3): bogus logical sector size 759 [ 578.350041][T16748] FAT-fs (loop3): Can't find a valid FAT filesystem [ 578.482605][T16755] syzkaller0: entered promiscuous mode [ 578.525644][T16740] loop7: detected capacity change from 0 to 128 [ 578.742563][T16761] loop3: detected capacity change from 0 to 128 [ 578.906717][T16761] bio_check_eod: 39 callbacks suppressed [ 578.906737][T16761] syz.3.4020: attempt to access beyond end of device [ 578.906737][T16761] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 578.930346][T16761] syz.3.4020: attempt to access beyond end of device [ 578.930346][T16761] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 578.987401][T16776] loop2: detected capacity change from 0 to 2048 [ 579.001470][T16761] syz.3.4020: attempt to access beyond end of device [ 579.001470][T16761] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 579.018125][T16761] syz.3.4020: attempt to access beyond end of device [ 579.018125][T16761] loop3: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 579.055228][T16761] syz.3.4020: attempt to access beyond end of device [ 579.055228][T16761] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 579.073089][T16761] syz.3.4020: attempt to access beyond end of device [ 579.073089][T16761] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 579.092782][T16761] syz.3.4020: attempt to access beyond end of device [ 579.092782][T16761] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 579.148469][T16776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.177789][T16761] syz.3.4020: attempt to access beyond end of device [ 579.177789][T16761] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 579.206842][T16761] syz.3.4020: attempt to access beyond end of device [ 579.206842][T16761] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 579.217700][T16782] loop7: detected capacity change from 0 to 128 [ 579.268655][T16761] syz.3.4020: attempt to access beyond end of device [ 579.268655][T16761] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 579.328451][T16785] loop6: detected capacity change from 0 to 128 [ 579.582652][T16789] FAULT_INJECTION: forcing a failure. [ 579.582652][T16789] name failslab, interval 1, probability 0, space 0, times 0 [ 579.598822][T16789] CPU: 1 UID: 0 PID: 16789 Comm: syz.5.4027 Tainted: G W syzkaller #0 PREEMPT(full) [ 579.598899][T16789] Tainted: [W]=WARN [ 579.598908][T16789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 579.598921][T16789] Call Trace: [ 579.598928][T16789] [ 579.598937][T16789] __dump_stack+0x1d/0x30 [ 579.599004][T16789] dump_stack_lvl+0x95/0xd0 [ 579.599032][T16789] dump_stack+0x15/0x1b [ 579.599058][T16789] should_fail_ex+0x263/0x280 [ 579.599084][T16789] should_failslab+0x8c/0xb0 [ 579.599175][T16789] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 579.599208][T16789] ? sidtab_sid2str_get+0xa0/0x130 [ 579.599240][T16789] kmemdup_noprof+0x2b/0x70 [ 579.599260][T16789] sidtab_sid2str_get+0xa0/0x130 [ 579.599330][T16789] security_sid_to_context_core+0x1eb/0x2e0 [ 579.599361][T16789] security_sid_to_context+0x27/0x40 [ 579.599389][T16789] avc_audit_post_callback+0x9d/0x540 [ 579.599417][T16789] ? audit_log_lsm_data+0xb3e/0xbb0 [ 579.599519][T16789] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 579.599547][T16789] common_lsm_audit+0x1ba/0x230 [ 579.599583][T16789] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 579.599616][T16789] slow_avc_audit+0x14c/0x190 [ 579.599652][T16789] avc_has_perm+0x144/0x190 [ 579.599709][T16789] selinux_socket_sendmsg+0x192/0x1c0 [ 579.599814][T16789] security_socket_sendmsg+0x44/0x80 [ 579.599851][T16789] ____sys_sendmsg+0x361/0x5b0 [ 579.599917][T16789] ___sys_sendmsg+0x195/0x1e0 [ 579.599956][T16789] __x64_sys_sendmsg+0xd4/0x160 [ 579.599978][T16789] x64_sys_call+0x194c/0x3020 [ 579.600006][T16789] do_syscall_64+0x12c/0x370 [ 579.600090][T16789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.600117][T16789] RIP: 0033:0x7f7cec07c819 [ 579.600136][T16789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.600226][T16789] RSP: 002b:00007f7ceaad7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.600253][T16789] RAX: ffffffffffffffda RBX: 00007f7cec2f5fa0 RCX: 00007f7cec07c819 [ 579.600278][T16789] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 579.600295][T16789] RBP: 00007f7ceaad7090 R08: 0000000000000000 R09: 0000000000000000 [ 579.600381][T16789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.600397][T16789] R13: 00007f7cec2f6038 R14: 00007f7cec2f5fa0 R15: 00007ffc103416a8 [ 579.600469][T16789] [ 580.141084][T16789] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4027'. [ 582.099377][ T28] kauditd_printk_skb: 355 callbacks suppressed [ 582.099477][ T28] audit: type=1400 audit(1774853114.568:17559): avc: denied { create } for pid=16794 comm="syz.3.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 583.088190][ T28] audit: type=1400 audit(1774853114.788:17560): avc: denied { ioctl } for pid=16794 comm="syz.3.4028" path="socket:[51245]" dev="sockfs" ino=51245 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 583.121944][ T28] audit: type=1400 audit(1774853114.948:17561): avc: denied { connect } for pid=16794 comm="syz.3.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 584.124808][ T28] audit: type=1400 audit(1774853115.378:17562): avc: denied { create } for pid=16794 comm="syz.3.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 584.175652][ T28] audit: type=1400 audit(1774853115.618:17563): avc: denied { create } for pid=16794 comm="syz.3.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 584.205867][ T28] audit: type=1400 audit(1774853115.808:17564): avc: denied { bind } for pid=16794 comm="syz.3.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 584.299041][ T28] audit: type=1400 audit(1774853115.959:17565): avc: denied { connect } for pid=16794 comm="syz.3.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 584.400130][ T28] audit: type=1400 audit(1774853116.089:17566): avc: denied { write } for pid=16794 comm="syz.3.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 584.465470][T16804] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4030'. [ 584.487360][T12878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.526555][ T28] audit: type=1400 audit(1774853117.509:17567): avc: denied { read write } for pid=7698 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 584.633377][ T28] audit: type=1400 audit(1774853117.509:17568): avc: denied { open } for pid=7698 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 585.347729][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 586.060966][T16837] FAULT_INJECTION: forcing a failure. [ 586.060966][T16837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.093522][T16837] CPU: 0 UID: 0 PID: 16837 Comm: syz.3.4040 Tainted: G W syzkaller #0 PREEMPT(full) [ 586.093563][T16837] Tainted: [W]=WARN [ 586.093572][T16837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.093586][T16837] Call Trace: [ 586.093636][T16837] [ 586.093645][T16837] __dump_stack+0x1d/0x30 [ 586.093778][T16837] dump_stack_lvl+0x95/0xd0 [ 586.093849][T16837] dump_stack+0x15/0x1b [ 586.093875][T16837] should_fail_ex+0x263/0x280 [ 586.093907][T16837] should_fail+0xb/0x20 [ 586.094031][T16837] should_fail_usercopy+0x1a/0x20 [ 586.094061][T16837] _copy_from_iter+0xcf/0xea0 [ 586.094087][T16837] ? kmem_cache_alloc_node_noprof+0x20a/0x460 [ 586.094118][T16837] ? __alloc_skb+0x362/0x690 [ 586.094150][T16837] ? __alloc_skb+0x4f6/0x690 [ 586.094223][T16837] pfkey_sendmsg+0x126/0x9b0 [ 586.094313][T16837] ? avc_has_perm+0x144/0x190 [ 586.094347][T16837] ? avc_has_perm+0x17b/0x190 [ 586.094383][T16837] ? selinux_socket_sendmsg+0x192/0x1c0 [ 586.094475][T16837] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 586.094499][T16837] ____sys_sendmsg+0x563/0x5b0 [ 586.094585][T16837] ___sys_sendmsg+0x195/0x1e0 [ 586.094631][T16837] __x64_sys_sendmsg+0xd4/0x160 [ 586.094667][T16837] x64_sys_call+0x194c/0x3020 [ 586.094730][T16837] do_syscall_64+0x12c/0x370 [ 586.094831][T16837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.094884][T16837] RIP: 0033:0x7f5631fcc819 [ 586.094905][T16837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.094928][T16837] RSP: 002b:00007f5630a27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.094954][T16837] RAX: ffffffffffffffda RBX: 00007f5632245fa0 RCX: 00007f5631fcc819 [ 586.094973][T16837] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 586.095101][T16837] RBP: 00007f5630a27090 R08: 0000000000000000 R09: 0000000000000000 [ 586.095140][T16837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 586.095156][T16837] R13: 00007f5632246038 R14: 00007f5632245fa0 R15: 00007fff48ec04b8 [ 586.095181][T16837] [ 586.434849][T16842] loop7: detected capacity change from 0 to 256 [ 586.473517][T16845] loop3: detected capacity change from 0 to 764 [ 586.473691][T16842] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 586.499846][T16842] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 586.526595][T16845] rock: directory entry would overflow storage [ 586.541551][T16845] rock: sig=0x4654, size=5, remaining=4 [ 586.578230][T16845] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 586.604812][T16845] gretap1: entered allmulticast mode [ 586.950101][T16863] loop2: detected capacity change from 0 to 764 [ 587.129099][ T28] kauditd_printk_skb: 298 callbacks suppressed [ 587.129118][ T28] audit: type=1400 audit(1774853120.541:17867): avc: denied { create } for pid=16869 comm="syz.7.4055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 587.266728][ T28] audit: type=1400 audit(1774853120.541:17868): avc: denied { write } for pid=16869 comm="syz.7.4055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 587.382285][ T28] audit: type=1400 audit(1774853120.541:17869): avc: denied { open } for pid=16869 comm="syz.7.4055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 587.478592][ T28] audit: type=1400 audit(1774853120.541:17870): avc: denied { perfmon } for pid=16869 comm="syz.7.4055" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 587.503184][ T28] audit: type=1400 audit(1774853120.541:17871): avc: denied { kernel } for pid=16869 comm="syz.7.4055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 587.588171][T16887] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.596408][T16887] audit: audit_lost=52 audit_rate_limit=0 audit_backlog_limit=64 [ 587.605711][T16887] audit: backlog limit exceeded [ 587.612876][T16887] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.619733][T16887] audit: audit_lost=53 audit_rate_limit=0 audit_backlog_limit=64 [ 587.916418][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 588.059883][T16891] loop2: detected capacity change from 0 to 8192 [ 588.259577][T16895] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4062'. [ 588.269952][T16902] loop3: detected capacity change from 0 to 256 [ 588.337634][T16902] vfat: Bad value for 'uni_xlate' [ 588.413072][T16902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.437045][T16902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.783314][T16909] loop6: detected capacity change from 0 to 1024 [ 589.118481][T16909] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 589.509003][T16919] netlink: 'syz.2.4069': attribute type 3 has an invalid length. [ 590.281717][T16939] loop3: detected capacity change from 0 to 128 [ 590.602998][T16929] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 590.675682][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4077'. [ 591.046940][T16959] bond8: entered allmulticast mode [ 591.775334][T16967] loop6: detected capacity change from 0 to 512 [ 591.860521][T16967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.894837][T16967] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.947337][T16969] loop7: detected capacity change from 0 to 2048 [ 591.990918][T16974] loop2: detected capacity change from 0 to 512 [ 592.042584][T16969] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.065023][T16969] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.099285][T16974] EXT4-fs warning (device loop2): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 592.125227][T16969] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.144795][T16974] EXT4-fs (loop2): mount failed [ 592.175247][ T28] kauditd_printk_skb: 489 callbacks suppressed [ 592.175267][ T28] audit: type=1400 audit(1774853125.563:18299): avc: denied { read write } for pid=16968 comm="syz.7.4084" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 592.282934][ T8446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.284495][ T28] audit: type=1400 audit(1774853125.563:18300): avc: denied { open } for pid=16968 comm="syz.7.4084" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 592.404274][ T28] audit: type=1400 audit(1774853125.563:18301): avc: denied { ioctl } for pid=16968 comm="syz.7.4084" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 592.434682][ T28] audit: type=1400 audit(1774853125.573:18302): avc: denied { read write } for pid=16973 comm="syz.2.4085" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 592.466204][ T28] audit: type=1400 audit(1774853125.573:18303): avc: denied { open } for pid=16973 comm="syz.2.4085" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 592.499699][ T28] audit: type=1400 audit(1774853125.573:18304): avc: denied { ioctl } for pid=16973 comm="syz.2.4085" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 592.617390][ T28] audit: type=1400 audit(1774853125.673:18305): avc: denied { unmount } for pid=8446 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 592.779287][T16995] loop7: detected capacity change from 0 to 2048 [ 592.780594][ T28] audit: type=1400 audit(1774853125.673:18306): avc: denied { read write } for pid=12878 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 593.002720][T17002] audit: audit_backlog=65 > audit_backlog_limit=64 [ 593.011645][T17002] audit: audit_lost=74 audit_rate_limit=0 audit_backlog_limit=64 [ 594.779153][T16995] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.796480][T17005] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4094'. [ 595.128401][T17005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17005 comm=syz.5.4094 [ 595.189838][T17018] xfrm0 speed is unknown, defaulting to 1000 [ 595.317466][T17005] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4094'. [ 595.571442][T17026] loop6: detected capacity change from 0 to 128 [ 595.810945][T17018] lo speed is unknown, defaulting to 1000 [ 595.860322][T15829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.940310][T17033] loop7: detected capacity change from 0 to 256 [ 595.960798][T17033] vfat: Bad value for 'uni_xlate' [ 596.834128][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4104'. [ 596.857710][T17051] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4104'. [ 597.007688][T17050] loop7: detected capacity change from 0 to 512 [ 597.118084][T17050] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.240289][ T28] kauditd_printk_skb: 333 callbacks suppressed [ 597.240317][ T28] audit: type=1400 audit(1774853130.646:18579): avc: denied { mount } for pid=17048 comm="syz.7.4106" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 597.493071][T15829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.583330][ T28] audit: type=1400 audit(1774853130.706:18580): avc: denied { read write } for pid=17048 comm="syz.7.4106" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 597.614994][ T28] audit: type=1400 audit(1774853130.706:18581): avc: denied { open } for pid=17048 comm="syz.7.4106" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 597.695247][ T28] audit: type=1400 audit(1774853130.716:18582): avc: denied { read write } for pid=12686 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 597.963789][T17063] loop2: detected capacity change from 0 to 512 [ 597.979263][ T28] audit: type=1400 audit(1774853130.716:18583): avc: denied { open } for pid=12686 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 598.082282][T17063] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 598.139880][T17063] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 598.196559][ T28] audit: type=1400 audit(1774853130.716:18584): avc: denied { ioctl } for pid=12686 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 598.240818][T17063] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.4111: Corrupt directory, running e2fsck is recommended [ 598.327708][ T28] audit: type=1400 audit(1774853130.826:18585): avc: denied { unmount } for pid=15829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 598.351963][ T28] audit: type=1400 audit(1774853130.856:18586): avc: denied { open } for pid=17056 comm="syz.3.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 598.373235][ T28] audit: type=1400 audit(1774853130.856:18587): avc: denied { perfmon } for pid=17056 comm="syz.3.4108" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 598.373417][T17059] tipc: Started in network mode [ 598.399556][ T28] audit: type=1400 audit(1774853130.856:18588): avc: denied { kernel } for pid=17056 comm="syz.3.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 598.469038][T17063] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 598.571287][T17059] tipc: Node identity 67f, cluster identity 4711 [ 598.575903][T17063] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #15: comm syz.2.4111: corrupted in-inode xattr: invalid ea_ino [ 598.580018][T17059] tipc: Node number set to 1663 [ 598.580098][T17059] tipc: Cannot configure node identity twice [ 598.712137][T17063] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 598.712935][T17063] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4111: couldn't read orphan inode 15 (err -117) [ 598.726135][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 598.726176][ C1] EXT4-fs (loop2): initial error at time 1774853132: ext4_iget_extra_inode:5040: inode 15 [ 598.726208][ C1] EXT4-fs (loop2): last error at time 1774853132: ext4_iget_extra_inode:5040: inode 15 [ 598.797770][T17063] loop2: lost filesystem error report for type 5 error -117 [ 598.798994][T17063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.820650][T17077] loop3: detected capacity change from 0 to 128 [ 598.847103][T17063] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #2: comm syz.2.4111: corrupted xattr block 255: invalid header [ 598.873194][T17077] journal_path: Non-blockdev passed as './file0' [ 598.889842][T17063] SELinux: (dev loop2, type ext4) getxattr errno 117 [ 598.904691][T17074] loop6: detected capacity change from 0 to 8192 [ 598.917161][T17063] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.980373][T17077] EXT4-fs: error: could not find journal device path [ 599.154201][T17084] veth0: entered promiscuous mode [ 599.191719][ T5663] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 599.267894][ T5663] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 599.301177][T17087] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4117'. [ 599.521481][T17087] veth0 (unregistering): left promiscuous mode [ 599.812024][T17098] ±ÿA©Ù¨€: renamed from lo (while UP) [ 599.900637][T17099] loop4: detected capacity change from 2048 to 2047 [ 600.419967][T17110] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4123'. [ 600.446490][T17110] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4123'. [ 602.217730][T17096] loop3: detected capacity change from 0 to 512 [ 602.220836][T17124] syzkaller0: entered promiscuous mode [ 602.261190][ T28] kauditd_printk_skb: 337 callbacks suppressed [ 602.261209][ T28] audit: type=1400 audit(1774853135.668:18926): avc: denied { execmem } for pid=17125 comm="syz.6.4127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 602.311943][T17124] syzkaller0: entered allmulticast mode [ 602.361446][T17129] loop2: detected capacity change from 0 to 128 [ 602.422554][ T28] audit: type=1400 audit(1774853135.758:18927): avc: denied { map_create } for pid=17128 comm="syz.7.4128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 602.487035][ T28] audit: type=1400 audit(1774853135.758:18928): avc: denied { create } for pid=17123 comm="syz.2.4126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 602.542511][T17133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 602.553487][T17133] bond0: (slave bond1): Enslaving as an active interface with an up link [ 602.589800][ T28] audit: type=1400 audit(1774853135.768:18929): avc: denied { perfmon } for pid=17128 comm="syz.7.4128" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 602.613570][ T28] audit: type=1400 audit(1774853135.768:18930): avc: denied { map_create } for pid=17128 comm="syz.7.4128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 602.636065][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 602.648464][ T28] audit: type=1400 audit(1774853135.768:18931): avc: denied { map_read map_write } for pid=17128 comm="syz.7.4128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 602.650427][T17143] sg_write: data in/out 751456705/3 bytes for SCSI command 0x6-- guessing data in; [ 602.650427][T17143] program syz.3.4131 not setting count and/or reply_len properly [ 602.672930][ T28] audit: type=1400 audit(1774853135.768:18932): avc: denied { prog_load } for pid=17128 comm="syz.7.4128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 602.716775][ T28] audit: type=1400 audit(1774853135.768:18933): avc: denied { bpf } for pid=17128 comm="syz.7.4128" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 602.752426][ T28] audit: type=1400 audit(1774853135.768:18934): avc: denied { perfmon } for pid=17128 comm="syz.7.4128" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 602.807453][T17137] loop3: detected capacity change from 0 to 1024 [ 602.819175][ T28] audit: type=1400 audit(1774853135.768:18935): avc: denied { read } for pid=17128 comm="syz.7.4128" dev="nsfs" ino=4026532531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 603.822699][T17149] loop2: detected capacity change from 0 to 128 [ 603.835859][T17137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.969557][T17149] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 604.051337][T17149] ext4 filesystem being mounted at /234/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 604.118781][T17153] loop7: detected capacity change from 0 to 2048 [ 604.309407][T17153] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.136896][T17161] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 605.147994][T17161] block device autoloading is deprecated and will be removed. [ 605.420783][T15829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.473022][T12686] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.793618][T17183] xfrm0 speed is unknown, defaulting to 1000 [ 605.981972][T17188] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4136'. [ 606.114447][T12878] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 606.257661][T17196] loop2: detected capacity change from 0 to 1764 [ 606.273952][T17183] lo speed is unknown, defaulting to 1000 [ 606.494331][T17202] loop2: detected capacity change from 0 to 1024 [ 606.539355][T17202] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 606.713259][T17211] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 608.086635][ T28] kauditd_printk_skb: 503 callbacks suppressed [ 608.086664][ T28] audit: type=1400 audit(1774855700.762:19346): avc: denied { prog_load } for pid=17223 comm="syz.3.4155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 608.123085][ T28] audit: type=1400 audit(1774855700.762:19347): avc: denied { bpf } for pid=17223 comm="syz.3.4155" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 608.574038][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4155'. [ 608.587869][T17231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4155'. [ 609.103938][ T28] audit: type=1400 audit(1774855700.762:19348): avc: denied { read } for pid=17225 comm="syz.6.4156" dev="nsfs" ino=4026532965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 609.130604][ T28] audit: type=1400 audit(1774855700.762:19349): avc: denied { read open } for pid=17225 comm="syz.6.4156" path="net:[4026532965]" dev="nsfs" ino=4026532965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 609.289792][T17235] audit: audit_backlog=65 > audit_backlog_limit=64 [ 609.323693][T17236] audit: audit_backlog=65 > audit_backlog_limit=64 [ 609.418786][T17236] audit: audit_lost=126 audit_rate_limit=0 audit_backlog_limit=64 [ 609.439282][T17235] audit: audit_lost=127 audit_rate_limit=0 audit_backlog_limit=64 [ 609.529503][T17234] audit: audit_backlog=65 > audit_backlog_limit=64 [ 609.541423][T17238] audit: audit_backlog=65 > audit_backlog_limit=64 [ 609.648259][T17238] 9p: Bad value for 'wfdno' [ 609.959737][T17242] loop6: detected capacity change from 0 to 512 [ 609.969046][T17242] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 609.999569][T17242] EXT4-fs: error: could not find journal device path [ 610.043689][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4160'. [ 610.411039][T17258] loop6: detected capacity change from 0 to 128 [ 610.472205][T17255] syzkaller0: entered promiscuous mode [ 611.018950][T17271] syzkaller0: entered promiscuous mode [ 611.027895][T17271] syzkaller0: entered allmulticast mode [ 611.050088][T17273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17273 comm=syz.2.4168 [ 611.408698][T17291] loop2: detected capacity change from 0 to 7 [ 611.474750][T17293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 613.096590][T17318] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.4185'. [ 613.107199][ T28] kauditd_printk_skb: 336 callbacks suppressed [ 613.107222][ T28] audit: type=1400 audit(1774855706.515:19671): avc: denied { create } for pid=17317 comm="syz.3.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 613.179102][T17318] 0ªX¹¦Dö»: renamed from gretap0 [ 613.198250][T17318] 0ªX¹¦Dö»: entered allmulticast mode [ 613.231404][ T28] audit: type=1400 audit(1774855706.515:19672): avc: denied { getopt } for pid=17317 comm="syz.3.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 613.350616][ T28] audit: type=1400 audit(1774855706.575:19673): avc: denied { ioctl } for pid=17301 comm="syz.6.4180" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 613.521696][ T28] audit: type=1400 audit(1774855706.595:19674): avc: denied { create } for pid=17319 comm="syz.5.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 613.659054][ T28] audit: type=1400 audit(1774855706.645:19675): avc: denied { ioctl } for pid=17319 comm="syz.5.4186" path="socket:[52339]" dev="sockfs" ino=52339 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 613.859434][ T28] audit: type=1400 audit(1774855706.715:19676): avc: denied { read write } for pid=12686 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 613.925410][T17339] vlan2: entered allmulticast mode [ 613.943205][ T28] audit: type=1400 audit(1774855706.715:19677): avc: denied { read write open } for pid=12686 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 613.953482][T17339] ip6gretap0: entered allmulticast mode [ 614.010885][ T28] audit: type=1400 audit(1774855706.715:19678): avc: denied { ioctl } for pid=12686 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 614.081023][ T28] audit: type=1400 audit(1774855706.805:19679): avc: denied { create } for pid=17324 comm="syz.3.4187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 614.164373][ T28] audit: type=1400 audit(1774855706.815:19680): avc: denied { create } for pid=17324 comm="syz.3.4187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 615.082755][T17360] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 617.522115][T17376] loop3: detected capacity change from 0 to 128 [ 617.580076][T17376] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 617.764628][ T2181] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 617.784185][T17381] loop7: detected capacity change from 0 to 512 [ 617.794793][T17378] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 617.861503][T17381] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.922086][T17381] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.194123][ T28] kauditd_printk_skb: 228 callbacks suppressed [ 618.194142][ T28] audit: type=1400 audit(1774855711.618:19909): avc: denied { prog_load } for pid=17388 comm="syz.5.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 618.300837][ T28] audit: type=1400 audit(1774855711.618:19910): avc: denied { create } for pid=17380 comm="syz.7.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 618.383534][ T28] audit: type=1400 audit(1774855711.618:19911): avc: denied { open } for pid=17388 comm="syz.5.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 618.486209][ T28] audit: type=1400 audit(1774855711.618:19912): avc: denied { perfmon } for pid=17388 comm="syz.5.4205" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 618.587385][ T28] audit: type=1400 audit(1774855711.618:19913): avc: denied { kernel } for pid=17388 comm="syz.5.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 618.771631][ T28] audit: type=1400 audit(1774855711.618:19914): avc: denied { perfmon } for pid=17388 comm="syz.5.4205" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 618.839951][ T28] audit: type=1400 audit(1774855711.658:19915): avc: denied { bpf } for pid=17388 comm="syz.5.4205" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 618.866901][T15829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.869505][ T28] audit: type=1400 audit(1774855711.658:19916): avc: denied { prog_load } for pid=17388 comm="syz.5.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 619.032525][T17399] audit: audit_backlog=65 > audit_backlog_limit=64 [ 619.053961][ T28] audit: type=1400 audit(1774855711.658:19917): avc: denied { module_request } for pid=17380 comm="syz.7.4203" kmod="nft-expr-2-extldr" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 619.398950][T17408] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4209'. [ 619.715261][T17408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 621.104557][T17443] loop2: detected capacity change from 0 to 1024 [ 621.152075][T17443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.172042][T17443] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.297736][T17443] EXT4-fs error (device loop2): ext4_map_blocks:828: inode #15: comm syz.2.4219: lblock 0 mapped to illegal pblock 0 (length 6) [ 621.330856][T17438] loop7: detected capacity change from 0 to 8192 [ 621.509140][T17458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4223'. [ 621.599599][T12878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 621.610169][T17460] netlink: 'syz.3.4223': attribute type 1 has an invalid length. [ 621.873525][T17463] loop2: detected capacity change from 0 to 8192 [ 622.053388][T17471] loop3: detected capacity change from 0 to 256 [ 622.082653][T17471] vfat: Bad value for 'uni_xlate' [ 622.275945][T17476] loop3: detected capacity change from 0 to 1024 [ 622.314561][T17476] ext4: Bad value for 'barrier' [ 622.618059][T17483] program syz.6.4230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.635403][T17483] sctp: [Deprecated]: syz.6.4230 (pid 17483) Use of int in maxseg socket option. [ 622.635403][T17483] Use struct sctp_assoc_value instead [ 623.362446][ T28] kauditd_printk_skb: 571 callbacks suppressed [ 623.362465][ T28] audit: type=1400 audit(1774858276.767:20449): avc: denied { create } for pid=17492 comm="syz.3.4235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 623.370876][ T28] audit: type=1400 audit(1774858276.797:20450): avc: denied { create } for pid=17497 comm="syz.2.4236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 623.429526][ T28] audit: type=1400 audit(1774858276.857:20452): avc: denied { prog_load } for pid=17497 comm="syz.2.4236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 623.534193][T17498] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4236'. [ 623.610814][T17502] loop7: detected capacity change from 0 to 256 [ 623.631167][T17498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=17498 comm=syz.2.4236 [ 623.713675][T17502] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 623.782967][ T28] audit: type=1400 audit(1774858276.837:20451): avc: denied { read write } for pid=15829 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 623.879603][ T28] audit: type=1400 audit(1774858276.877:20453): avc: denied { read write open } for pid=15829 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 623.947458][ T28] audit: type=1400 audit(1774858276.877:20454): avc: denied { ioctl } for pid=15829 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 624.049079][T17506] loop2: detected capacity change from 0 to 1024 [ 624.075159][ T28] audit: type=1400 audit(1774858276.937:20455): avc: denied { bpf } for pid=17497 comm="syz.2.4236" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 624.105256][ T28] audit: type=1400 audit(1774858276.937:20456): avc: denied { perfmon } for pid=17497 comm="syz.2.4236" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 624.134506][ T28] audit: type=1400 audit(1774858276.937:20457): avc: denied { prog_load } for pid=17497 comm="syz.2.4236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 624.148885][T17506] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 624.160947][T17511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.179581][T17511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.205421][ T28] audit: type=1400 audit(1774858276.947:20458): avc: denied { perfmon } for pid=17497 comm="syz.2.4236" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 624.248523][T17511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.281947][T17511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.591519][T17515] loop3: detected capacity change from 0 to 8192 [ 625.301920][T17524] loop2: detected capacity change from 0 to 2048 [ 625.364159][T17524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.507529][T17524] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4245: bg 0: block 234: padding at end of block bitmap is not set [ 625.546716][T17524] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 382 with error 28 [ 625.576750][T17524] EXT4-fs (loop2): This should not happen!! Data will be lost [ 625.576750][T17524] [ 625.600660][T17524] EXT4-fs (loop2): Total free blocks count 0 [ 625.618209][T17524] EXT4-fs (loop2): Free/Dirty block details [ 625.623793][T17539] xfrm0 speed is unknown, defaulting to 1000 [ 625.635276][T17524] EXT4-fs (loop2): free_blocks=0 [ 625.646180][T17524] EXT4-fs (loop2): dirty_blocks=384 [ 625.674971][T17524] EXT4-fs (loop2): Block reservation details [ 625.695760][T17524] EXT4-fs (loop2): i_reserved_data_blocks=24 [ 625.955660][T17539] lo speed is unknown, defaulting to 1000 [ 626.057555][T12878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.300837][T17566] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4255'. [ 626.501125][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4257'. [ 626.928788][T17551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4251'. [ 627.002639][T17577] loop2: detected capacity change from 0 to 7 [ 627.173445][T17584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4260'. [ 627.200473][T17579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17579 comm=syz.5.4260 [ 627.320602][T17586] xt_hashlimit: size too large, truncated to 1048576 [ 627.360008][T17591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 627.382708][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4263'. [ 627.393294][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4263'. [ 627.453979][T17595] loop6: detected capacity change from 0 to 2048 [ 627.538343][T17595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.570338][T17598] loop2: detected capacity change from 0 to 7 [ 627.749248][ T8446] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.907637][T17608] syzkaller0: entered promiscuous mode [ 627.979937][T17345] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz.5.4192: data will be lost [ 628.026664][T17345] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 628.129703][T17345] syz_tun (unregistering): left allmulticast mode [ 628.440591][ T28] kauditd_printk_skb: 450 callbacks suppressed [ 628.440612][ T28] audit: type=1400 audit(1774858281.800:20909): avc: denied { open } for pid=17613 comm="syz.3.4272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 628.603114][ T28] audit: type=1400 audit(1774858281.800:20910): avc: denied { perfmon } for pid=17613 comm="syz.3.4272" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 628.782655][ T28] audit: type=1400 audit(1774858281.800:20911): avc: denied { kernel } for pid=17613 comm="syz.3.4272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 628.980933][T17609] xfrm0 speed is unknown, defaulting to 1000 [ 628.994456][T17633] audit: audit_backlog=65 > audit_backlog_limit=64 [ 629.012185][ T8446] audit: audit_backlog=65 > audit_backlog_limit=64 [ 629.025008][ T28] audit: type=1400 audit(1774858281.800:20912): avc: denied { write } for pid=17613 comm="syz.3.4272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 629.075725][T17633] audit: audit_lost=147 audit_rate_limit=0 audit_backlog_limit=64 [ 629.087152][ T8446] audit: audit_lost=148 audit_rate_limit=0 audit_backlog_limit=64 [ 629.121368][T12878] audit: audit_backlog=65 > audit_backlog_limit=64 [ 629.129878][T17636] audit: audit_backlog=65 > audit_backlog_limit=64 [ 629.235548][T17636] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.408157][T17640] xfrm0 speed is unknown, defaulting to 1000 [ 629.974715][T17609] lo speed is unknown, defaulting to 1000 [ 630.151147][T17636] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.237694][T17640] lo speed is unknown, defaulting to 1000 [ 630.311227][T17649] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 630.323054][T17636] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.393264][T17645] xfrm0 speed is unknown, defaulting to 1000 [ 630.425109][T17636] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.516984][T17645] lo speed is unknown, defaulting to 1000 [ 630.567017][T17652] loop6: detected capacity change from 0 to 128 [ 630.586368][ T5560] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.663286][ T8784] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.723749][ T8784] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.742221][T17652] bio_check_eod: 30 callbacks suppressed [ 630.742243][T17652] syz.6.4283: attempt to access beyond end of device [ 630.742243][T17652] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 630.753611][ T8784] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.786072][T17652] syz.6.4283: attempt to access beyond end of device [ 630.786072][T17652] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 630.885469][T17652] syz.6.4283: attempt to access beyond end of device [ 630.885469][T17652] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 630.927364][T17609] chnl_net:caif_netlink_parms(): no params data found [ 630.947597][T17652] syz.6.4283: attempt to access beyond end of device [ 630.947597][T17652] loop6: rw=2049, sector=193, nr_sectors = 16 limit=128 [ 630.985709][T17652] syz.6.4283: attempt to access beyond end of device [ 630.985709][T17652] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 631.023958][T17652] syz.6.4283: attempt to access beyond end of device [ 631.023958][T17652] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 631.088637][T17652] syz.6.4283: attempt to access beyond end of device [ 631.088637][T17652] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 631.104457][T17652] syz.6.4283: attempt to access beyond end of device [ 631.104457][T17652] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 631.125104][T17652] syz.6.4283: attempt to access beyond end of device [ 631.125104][T17652] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 631.141610][T17652] syz.6.4283: attempt to access beyond end of device [ 631.141610][T17652] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 631.662526][T17609] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.751346][T17609] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.768814][T17609] bridge_slave_0: entered allmulticast mode [ 631.801627][T17609] bridge_slave_0: entered promiscuous mode [ 631.833571][T17609] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.854190][T17609] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.952911][T17609] bridge_slave_1: entered allmulticast mode [ 631.961332][T17609] bridge_slave_1: entered promiscuous mode [ 632.007781][T17681] syzkaller0: entered promiscuous mode [ 632.014419][T17681] syzkaller0: entered allmulticast mode [ 632.127539][T17701] loop7: detected capacity change from 0 to 512 [ 632.247727][T17701] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.284490][T17702] loop2: detected capacity change from 0 to 128 [ 632.312363][T17701] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.434938][T17609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.497434][T17696] loop6: detected capacity change from 0 to 8192 [ 632.498813][T17609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.562806][T17609] team0: Port device team_slave_0 added [ 632.573797][T17609] team0: Port device team_slave_1 added [ 632.671393][T17609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.702938][T17609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.740358][T17609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.757711][T17609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.774681][T17609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.777858][T11615] loop6: p1 < > p2 p4 < p5 > [ 632.809086][T17609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.957078][T17717] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4293'. [ 633.128138][T17716] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 633.138143][T17716] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 633.236735][T17609] hsr_slave_0: entered promiscuous mode [ 633.278221][T17609] hsr_slave_1: entered promiscuous mode [ 633.307712][T17609] debugfs: 'hsr0' already exists in 'hsr' [ 633.310342][T11615] loop6: partition table partially beyond EOD, truncated [ 633.327661][T11615] loop6: p1 start 134217728 is beyond EOD, truncated [ 633.332134][T17609] Cannot create hsr debugfs directory [ 633.335393][T11615] loop6: p2 size 591360 extends beyond EOD, truncated [ 633.356096][T15829] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.402645][T11615] loop6: p5 size 591360 extends beyond EOD, truncated [ 633.411157][T17719] loop7: detected capacity change from 0 to 1764 [ 633.454526][T17696] loop6: p1 < > p2 p4 < p5 > [ 633.454557][T17696] loop6: partition table partially beyond EOD, truncated [ 633.454615][T17696] loop6: p1 start 134217728 is beyond EOD, truncated [ 633.454673][T17696] loop6: p2 size 591360 extends beyond EOD, truncated [ 633.467372][ T28] kauditd_printk_skb: 364 callbacks suppressed [ 633.467392][ T28] audit: type=1400 audit(1774858286.893:21265): avc: denied { mounton } for pid=17718 comm="syz.7.4295" path="/95/file0" dev="tmpfs" ino=519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 633.513380][ T28] audit: type=1400 audit(1774858286.943:21266): avc: denied { create } for pid=17720 comm="syz.3.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 633.589350][T17696] loop6: p5 size 591360 extends beyond EOD, truncated [ 633.719270][ T28] audit: type=1400 audit(1774858286.983:21267): avc: denied { bpf } for pid=17695 comm="syz.6.4292" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 633.848172][ T28] audit: type=1400 audit(1774858287.053:21268): avc: denied { create } for pid=17720 comm="syz.3.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 633.874189][T17727] FAULT_INJECTION: forcing a failure. [ 633.874189][T17727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 633.910136][T17727] CPU: 1 UID: 0 PID: 17727 Comm: syz.7.4297 Tainted: G W syzkaller #0 PREEMPT(full) [ 633.910187][T17727] Tainted: [W]=WARN [ 633.910196][T17727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.910210][T17727] Call Trace: [ 633.910219][T17727] [ 633.910229][T17727] __dump_stack+0x1d/0x30 [ 633.910260][T17727] dump_stack_lvl+0x95/0xd0 [ 633.910301][T17727] dump_stack+0x15/0x1b [ 633.910324][T17727] should_fail_ex+0x263/0x280 [ 633.910418][T17727] should_fail_alloc_page+0xf2/0x100 [ 633.910442][T17727] __alloc_frozen_pages_noprof+0x108/0x360 [ 633.910583][T17727] alloc_pages_mpol+0xb3/0x260 [ 633.910817][T17727] folio_alloc_mpol_noprof+0x39/0x80 [ 633.910853][T17727] shmem_get_folio_gfp+0x3da/0xd60 [ 633.910895][T17727] shmem_write_begin+0xfc/0x1f0 [ 633.910927][T17727] generic_perform_write+0x183/0x490 [ 633.910974][T17727] shmem_file_write_iter+0xc5/0xf0 [ 633.911071][T17727] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 633.911110][T17727] vfs_write+0x5a6/0x9f0 [ 633.911135][T17727] ksys_write+0xdc/0x1a0 [ 633.911155][T17727] __x64_sys_write+0x40/0x50 [ 633.911174][T17727] x64_sys_call+0x27e1/0x3020 [ 633.911213][T17727] do_syscall_64+0x12c/0x370 [ 633.911246][T17727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.911269][T17727] RIP: 0033:0x7f6ad246d04e [ 633.911288][T17727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 633.911310][T17727] RSP: 002b:00007f6ad0f06da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 633.911415][T17727] RAX: ffffffffffffffda RBX: 00007f6ad0f076c0 RCX: 00007f6ad246d04e [ 633.911431][T17727] RDX: 0000000000020000 RSI: 00007f6ac8ae7000 RDI: 0000000000000004 [ 633.911445][T17727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 633.911478][T17727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 633.911493][T17727] R13: 00007f6ad0f06ee0 R14: 00007f6ad0f06ea0 R15: 00007f6ac8ae7000 [ 633.911514][T17727] [ 634.160442][ T28] audit: type=1400 audit(1774858287.053:21269): avc: denied { shutdown } for pid=17720 comm="syz.3.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 634.185223][ T28] audit: type=1400 audit(1774858287.053:21270): avc: denied { execmem } for pid=17720 comm="syz.3.4296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 634.210489][ T28] audit: type=1400 audit(1774858287.113:21272): avc: denied { mount } for pid=17718 comm="syz.7.4295" name="/" dev="loop7" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 634.239695][ T28] audit: type=1400 audit(1774858287.113:21273): avc: denied { read write } for pid=17718 comm="syz.7.4295" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 634.270881][ T28] audit: type=1400 audit(1774858287.113:21274): avc: denied { open } for pid=17718 comm="syz.7.4295" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 634.299430][ T28] audit: type=1400 audit(1774858287.133:21275): avc: denied { unmount } for pid=15829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 634.481063][T17744] loop7: detected capacity change from 0 to 128 [ 634.586636][T17609] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 634.615616][T17609] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 634.652398][T17609] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 634.730877][T17609] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 635.291320][T17609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.359733][T17609] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.403445][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.411498][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.458010][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4314'. [ 635.479861][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.488736][ T8784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.644388][T17791] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4317'. [ 635.912481][T17609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.543557][T17609] veth0_vlan: entered promiscuous mode [ 636.755871][T17609] veth1_vlan: entered promiscuous mode [ 636.787518][T17609] veth0_macvtap: entered promiscuous mode [ 636.810819][T17609] veth1_macvtap: entered promiscuous mode [ 636.846842][T17855] netlink: 19 bytes leftover after parsing attributes in process `syz.7.4335'. [ 636.875023][T17609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.956020][T17609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.032050][ T5560] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.047669][ T5560] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.094091][T17859] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 637.131814][T17859] bond2 (unregistering): Released all slaves [ 637.169114][ T5560] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.188246][ T5560] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.349092][T17877] netlink: 'syz.2.4340': attribute type 1 has an invalid length. [ 637.404550][T17877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 637.465972][T17877] bond2: (slave geneve2): making interface the new active one [ 637.475921][T17877] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 637.486170][ T5560] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.500260][ T5560] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.544675][ T5560] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.600309][ T5560] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.753552][T17894] netlink: 'syz.2.4344': attribute type 1 has an invalid length. [ 637.799313][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 637.862110][T17894] netlink: 'syz.2.4344': attribute type 2 has an invalid length. [ 637.938093][T17907] loop5: detected capacity change from 0 to 128 [ 638.411639][T17923] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4350'. [ 638.474768][ T28] kauditd_printk_skb: 551 callbacks suppressed [ 638.474785][ T28] audit: type=1400 audit(1774858291.906:21826): avc: denied { read write } for pid=12878 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.516572][T17923] syzkaller0: entered promiscuous mode [ 638.564747][T17923] syzkaller0: entered allmulticast mode [ 638.692364][T17923] tc action pedit offset must be on 32 bit boundaries [ 638.725762][ T28] audit: type=1400 audit(1774858291.956:21827): avc: denied { read write open } for pid=12878 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.799182][T17930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4352'. [ 638.811221][ T28] audit: type=1400 audit(1774858291.956:21828): avc: denied { ioctl } for pid=12878 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.842330][ T28] audit: type=1400 audit(1774858292.026:21829): avc: denied { create } for pid=17921 comm="syz.7.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 638.865429][ T28] audit: type=1400 audit(1774858292.046:21830): avc: denied { name_bind } for pid=17926 comm="syz.2.4351" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 638.890508][ T28] audit: type=1400 audit(1774858292.046:21831): avc: denied { node_bind } for pid=17926 comm="syz.2.4351" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 638.916366][ T28] audit: type=1400 audit(1774858292.126:21832): avc: denied { setopt } for pid=17921 comm="syz.7.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 638.941378][ T28] audit: type=1400 audit(1774858292.126:21833): avc: denied { write } for pid=17921 comm="syz.7.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 638.965455][ T28] audit: type=1400 audit(1774858292.146:21834): avc: denied { read write } for pid=12878 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.994663][ T28] audit: type=1400 audit(1774858292.146:21835): avc: denied { open } for pid=12878 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 639.142122][T17914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 639.394815][T17942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.570867][T17942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.680281][T17959] syzkaller0: entered promiscuous mode [ 639.716250][T17942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.808717][T17942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.929932][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.972981][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.003041][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.025314][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.502698][T17976] syzkaller0: entered promiscuous mode [ 640.510692][T17976] syzkaller0: entered allmulticast mode [ 642.352254][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4381'. [ 643.555914][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 643.890660][ T28] kauditd_printk_skb: 335 callbacks suppressed [ 643.890681][ T28] audit: type=1400 audit(1774858297.329:22171): avc: denied { read write } for pid=12878 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 643.972757][ T28] audit: type=1400 audit(1774858297.369:22172): avc: denied { open } for pid=12878 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 644.013099][ T28] audit: type=1400 audit(1774858297.369:22173): avc: denied { ioctl } for pid=12878 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 644.057054][ T28] audit: type=1400 audit(1774858297.499:22174): avc: denied { create } for pid=18051 comm="syz.2.4389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 644.083249][T18052] syzkaller0: entered promiscuous mode [ 644.090191][T18052] syzkaller0: entered allmulticast mode [ 644.098664][ T28] audit: type=1400 audit(1774858297.519:22175): avc: denied { ioctl } for pid=18051 comm="syz.2.4389" path="socket:[55677]" dev="sockfs" ino=55677 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 644.131928][ T28] audit: type=1400 audit(1774858297.569:22176): avc: denied { create } for pid=18051 comm="syz.2.4389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 644.163485][ T28] audit: type=1400 audit(1774858297.599:22177): avc: denied { write } for pid=18051 comm="syz.2.4389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 644.290919][T17996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 644.347562][ T28] audit: type=1400 audit(1774858297.779:22178): avc: denied { read write } for pid=17609 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 644.437871][ T28] audit: type=1400 audit(1774858297.779:22179): avc: denied { open } for pid=8446 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 644.514098][ T28] audit: type=1400 audit(1774858297.779:22180): avc: denied { ioctl } for pid=8446 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 644.812420][T18064] netlink: 'syz.6.4395': attribute type 1 has an invalid length. [ 645.092839][T18064] bond9: entered promiscuous mode [ 645.104000][T18064] 8021q: adding VLAN 0 to HW filter on device bond9 [ 645.115694][T18067] bridge0: Device is already in use. [ 645.123795][T18070] bridge0: Device is already in use. [ 645.338486][T18075] syzkaller0: entered promiscuous mode [ 645.344770][T18075] syzkaller0: entered allmulticast mode [ 645.842651][T18090] erspan0: entered promiscuous mode [ 645.855573][T18090] erspan0: entered allmulticast mode [ 647.070521][T18136] syzkaller1: entered promiscuous mode [ 647.078880][T18136] syzkaller1: entered allmulticast mode [ 647.757271][T18142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4417'. [ 648.173629][T18079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 648.510548][T18151] syzkaller1: entered promiscuous mode [ 648.547827][T18151] syzkaller1: entered allmulticast mode [ 648.605591][T18153] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.894995][ T28] kauditd_printk_skb: 286 callbacks suppressed [ 648.895053][ T28] audit: type=1400 audit(1774858302.332:22467): avc: denied { read write } for pid=17609 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 649.065166][T18168] tipc: Started in network mode [ 649.070394][T18168] tipc: Node identity ae78ea002c3d, cluster identity 4711 [ 649.083472][ T28] audit: type=1400 audit(1774858302.372:22468): avc: denied { read write open } for pid=17609 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 649.163130][T18168] tipc: Enabled bearer , priority 0 [ 649.198066][ T28] audit: type=1400 audit(1774858302.372:22469): avc: denied { ioctl } for pid=17609 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 649.321980][ T28] audit: type=1400 audit(1774858302.472:22470): avc: denied { create } for pid=18167 comm="syz.7.4424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 649.360110][T18170] syzkaller0: entered promiscuous mode [ 649.384029][T18170] syzkaller0: entered allmulticast mode [ 649.390938][T18170] tipc: Resetting bearer [ 649.419562][ T28] audit: type=1400 audit(1774858302.502:22471): avc: denied { write } for pid=18167 comm="syz.7.4424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 649.504815][T18153] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.541839][ T28] audit: type=1400 audit(1774858302.502:22472): avc: denied { create } for pid=18165 comm="syz.5.4425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 649.572708][ T28] audit: type=1400 audit(1774858302.502:22473): avc: denied { write } for pid=18165 comm="syz.5.4425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 649.605727][ T28] audit: type=1400 audit(1774858302.502:22474): avc: denied { read } for pid=18165 comm="syz.5.4425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 649.629551][T18165] tipc: Resetting bearer [ 649.636974][ T28] audit: type=1400 audit(1774858302.562:22475): avc: denied { ioctl } for pid=18165 comm="syz.5.4425" path="socket:[55970]" dev="sockfs" ino=55970 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 649.670059][ T28] audit: type=1400 audit(1774858302.582:22476): avc: denied { read write } for pid=15829 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 649.726572][T18165] tipc: Disabling bearer [ 649.801615][ T3535] IPVS: starting estimator thread 0... [ 649.838501][T18172] syzkaller0: entered promiscuous mode [ 649.848853][T18172] syzkaller0: entered allmulticast mode [ 649.857158][T18173] tipc: Enabled bearer , priority 0 [ 649.889499][T18171] tipc: Resetting bearer [ 649.896916][T18183] IPVS: using max 2112 ests per chain, 105600 per kthread [ 649.940368][T18171] tipc: Disabling bearer [ 650.526925][T18153] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.610459][T18205] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4434'. [ 650.628846][T18205] syzkaller0: entered promiscuous mode [ 650.636242][T18205] syzkaller0: entered allmulticast mode [ 650.861721][T18210] syzkaller0: entered promiscuous mode [ 650.867739][T18210] syzkaller0: entered allmulticast mode [ 651.285197][T18216] bridge2: entered promiscuous mode [ 651.304773][T18216] bridge2: entered allmulticast mode [ 651.474179][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4440'. [ 651.716284][T18153] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.889693][T18230] tipc: Enabled bearer , priority 0 [ 651.908505][T18230] syzkaller0: entered promiscuous mode [ 651.915844][T18230] syzkaller0: entered allmulticast mode [ 652.151292][T18230] tipc: Resetting bearer [ 652.176943][T18228] tipc: Resetting bearer [ 652.195578][T18228] tipc: Disabling bearer [ 653.982231][ T28] kauditd_printk_skb: 150 callbacks suppressed [ 653.982253][ T28] audit: type=1400 audit(1774858307.415:22627): avc: denied { open } for pid=17609 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 654.570033][ T28] audit: type=1400 audit(1774858307.485:22628): avc: denied { read write open } for pid=12686 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 655.300634][ T28] audit: type=1400 audit(1774858307.545:22629): avc: denied { ioctl } for pid=17609 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 657.391620][ T28] audit: type=1400 audit(1774858310.817:22630): avc: denied { read write } for pid=15829 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 657.862588][ T28] audit: type=1400 audit(1774858310.837:22631): avc: denied { open } for pid=15829 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 658.200617][ T28] audit: type=1400 audit(1774858310.987:22632): avc: denied { ioctl } for pid=15829 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 659.881876][ T28] audit: type=1400 audit(1774858313.309:22633): avc: denied { create } for pid=18248 comm="syz.6.4446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 660.069956][T18249] raw_sendmsg: syz.6.4446 forgot to set AF_INET. Fix it! [ 660.207229][ T28] audit: type=1400 audit(1774858313.519:22634): avc: denied { write } for pid=18248 comm="syz.6.4446" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 660.409610][ T28] audit: type=1400 audit(1774858313.639:22635): avc: denied { create } for pid=18251 comm="syz.3.4448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 660.671466][ T28] audit: type=1400 audit(1774858313.839:22636): avc: denied { ioctl } for pid=18251 comm="syz.3.4448" path="socket:[54962]" dev="sockfs" ino=54962 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 661.028116][ T28] audit: type=1400 audit(1774858313.989:22637): avc: denied { bind } for pid=18251 comm="syz.3.4448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 661.418052][ T28] audit: type=1400 audit(1774858314.329:22638): avc: denied { read write } for pid=8446 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 661.836896][ T28] audit: type=1400 audit(1774858314.349:22639): avc: denied { create } for pid=18251 comm="syz.3.4448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 662.185253][ T28] audit: type=1400 audit(1774858314.379:22640): avc: denied { read write open } for pid=8446 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 662.447950][ T28] audit: type=1400 audit(1774858314.439:22641): avc: denied { ioctl } for pid=8446 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 662.748126][ T28] audit: type=1400 audit(1774858314.579:22642): avc: denied { setopt } for pid=18251 comm="syz.3.4448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 663.418722][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4448'. [ 664.136876][T18242] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.316873][T18242] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.820063][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 665.820084][ T28] audit: type=1400 audit(1774858319.262:22652): avc: denied { execmem } for pid=18263 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 666.306095][ T28] audit: type=1400 audit(1774858319.672:22653): avc: denied { read write } for pid=18264 comm="syz.7.4449" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 666.675658][ T28] audit: type=1400 audit(1774858319.853:22654): avc: denied { create } for pid=18266 comm="syz.6.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 667.013516][ T28] audit: type=1400 audit(1774858319.903:22655): avc: denied { read open } for pid=18264 comm="syz.7.4449" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 667.475388][ T28] audit: type=1400 audit(1774858320.093:22656): avc: denied { create } for pid=18266 comm="syz.6.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 667.801998][ T28] audit: type=1400 audit(1774858320.443:22657): avc: denied { ioctl } for pid=18266 comm="syz.6.4450" path="socket:[56202]" dev="sockfs" ino=56202 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 668.218502][ T28] audit: type=1400 audit(1774858320.443:22658): avc: denied { write } for pid=18266 comm="syz.6.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 668.636524][ T28] audit: type=1400 audit(1774858320.503:22659): avc: denied { create } for pid=18266 comm="syz.6.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 668.957728][ T28] audit: type=1400 audit(1774858320.903:22660): avc: denied { create } for pid=18264 comm="syz.7.4449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 669.288639][ T28] audit: type=1400 audit(1774858321.353:22661): avc: denied { read } for pid=18273 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 673.859332][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 673.859356][ T28] audit: type=1400 audit(1774858327.307:22673): avc: denied { execmem } for pid=18279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 674.664583][ T28] audit: type=1400 audit(1774858328.118:22674): avc: denied { read } for pid=18280 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 674.990674][ T28] audit: type=1400 audit(1774858328.148:22675): avc: denied { open } for pid=18280 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 675.347165][ T28] audit: type=1400 audit(1774858328.248:22676): avc: denied { mounton } for pid=18280 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 675.755810][ T28] audit: type=1400 audit(1774858328.438:22677): avc: denied { module_request } for pid=18280 comm="syz-executor" kmod="netdev-nr9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 676.076764][ T28] audit: type=1400 audit(1774858329.008:22678): avc: denied { sys_module } for pid=18280 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 676.407788][ T28] audit: type=1400 audit(1774858329.188:22679): avc: denied { module_request } for pid=18280 comm="syz-executor" kmod="nr9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 676.667299][ T28] audit: type=1400 audit(1774858329.728:22680): avc: denied { create } for pid=18281 comm="syz.6.4452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 677.088815][ T28] audit: type=1400 audit(1774858329.959:22681): avc: denied { create } for pid=18281 comm="syz.6.4452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 677.438222][ T28] audit: type=1400 audit(1774858330.309:22682): avc: denied { write } for pid=18281 comm="syz.6.4452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 678.899235][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 678.899253][ T28] audit: type=1400 audit(1774858332.360:22696): avc: denied { module_request } for pid=18285 comm="syz.5.4453" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 679.417687][ T28] audit: type=1400 audit(1774858332.430:22697): avc: denied { write } for pid=18285 comm="syz.5.4453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 679.676224][ T28] audit: type=1400 audit(1774858332.430:22698): avc: denied { read open } for pid=18298 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 680.016749][ T28] audit: type=1400 audit(1774858332.450:22699): avc: denied { mounton } for pid=18298 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 680.297832][ T28] audit: type=1400 audit(1774858332.500:22700): avc: denied { module_request } for pid=18298 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 680.615296][ T28] audit: type=1400 audit(1774858333.090:22701): avc: denied { read write } for pid=8446 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 680.925339][ T28] audit: type=1400 audit(1774858333.121:22702): avc: denied { sys_module } for pid=18298 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 681.127933][ T28] audit: type=1400 audit(1774858333.131:22703): avc: denied { open } for pid=8446 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 681.374418][ T28] audit: type=1400 audit(1774858333.191:22704): avc: denied { sys_module } for pid=18285 comm="syz.5.4453" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 681.656737][ T28] audit: type=1400 audit(1774858333.211:22705): avc: denied { module_request } for pid=18298 comm="syz-executor" kmod="nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 688.438233][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 688.438255][ T28] audit: type=1400 audit(1774858341.896:22710): avc: denied { execmem } for pid=18309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 689.249010][ T28] audit: type=1400 audit(1774858342.706:22711): avc: denied { read } for pid=18310 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 689.529493][ T28] audit: type=1400 audit(1774858342.776:22712): avc: denied { read open } for pid=18310 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 689.939653][ T28] audit: type=1400 audit(1774858343.036:22713): avc: denied { mounton } for pid=18310 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 690.208933][ T28] audit: type=1400 audit(1774858343.086:22714): avc: denied { module_request } for pid=18310 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 690.479854][ T28] audit: type=1400 audit(1774858343.477:22715): avc: denied { sys_module } for pid=18310 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 690.780882][ T28] audit: type=1400 audit(1774858343.557:22716): avc: denied { module_request } for pid=18310 comm="syz-executor" kmod="nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 697.595940][ T28] audit: type=1400 audit(1774858351.061:22717): avc: denied { execmem } for pid=18314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 698.517006][ T28] audit: type=1400 audit(1774858351.972:22718): avc: denied { read } for pid=18316 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 698.775303][ T28] audit: type=1400 audit(1774858352.122:22719): avc: denied { open } for pid=18316 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 699.046166][ T28] audit: type=1400 audit(1774858352.232:22720): avc: denied { mounton } for pid=18316 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 699.344113][ T28] audit: type=1400 audit(1774858352.342:22721): avc: denied { module_request } for pid=18316 comm="syz-executor" kmod="netdev-nr4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 699.654416][ T28] audit: type=1400 audit(1774858352.642:22722): avc: denied { sys_module } for pid=18316 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 699.955952][ T28] audit: type=1400 audit(1774858352.702:22723): avc: denied { module_request } for pid=18316 comm="syz-executor" kmod="nr4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 710.076374][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 713.507572][ T28] audit: type=1400 audit(1774858366.991:22724): avc: denied { module_request } for pid=18273 comm="syz-executor" kmod="netdev-nr8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 714.075397][ T28] audit: type=1400 audit(1774858367.551:22725): avc: denied { sys_module } for pid=18273 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 714.406980][ T28] audit: type=1400 audit(1774858367.661:22726): avc: denied { module_request } for pid=18273 comm="syz-executor" kmod="nr8" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 716.432340][ C0] ================================================================== [ 716.441190][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 716.449307][ C0] [ 716.451734][ C0] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 1: [ 716.460438][ C0] wq_worker_tick+0x64/0x240 [ 716.465472][ C0] sched_tick+0xda/0x210 [ 716.470110][ C0] update_process_times+0x15e/0x190 [ 716.475526][ C0] tick_nohz_handler+0x275/0x3d0 [ 716.481615][ C0] __hrtimer_run_queues+0x218/0x4f0 [ 716.487466][ C0] hrtimer_interrupt+0x269/0x810 [ 716.492953][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 716.499218][ C0] sysvec_apic_timer_interrupt+0x32/0x80 [ 716.504961][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 716.511639][ C0] __sanitizer_cov_trace_pc+0x27/0x70 [ 716.517447][ C0] ipt_do_table+0x199/0xb20 [ 716.522436][ C0] nf_hook_slow+0x78/0x180 [ 716.528358][ C0] __ip_local_out+0x2fd/0x320 [ 716.533684][ C0] ip_local_out+0x28/0xd0 [ 716.538818][ C0] synproxy_send_tcp+0x293/0x2e0 [ 716.544585][ C0] synproxy_send_client_synack+0x57c/0x5d0 [ 716.550885][ C0] nft_synproxy_eval_v4+0x247/0x2a0 [ 716.556567][ C0] nft_synproxy_do_eval+0x1cf/0x270 [ 716.563207][ C0] nft_synproxy_eval+0x29/0x40 [ 716.569000][ C0] nft_do_chain+0x1e6/0xd10 [ 716.574446][ C0] nft_do_chain_inet+0x251/0x280 [ 716.580292][ C0] nf_hook_slow+0x78/0x180 [ 716.585015][ C0] ip_local_deliver+0x199/0x1e0 [ 716.589897][ C0] ip_rcv_finish+0x188/0x1a0 [ 716.594871][ C0] ip_rcv+0x62/0x160 [ 716.599055][ C0] process_backlog+0x341/0x670 [ 716.604253][ C0] __napi_poll+0x61/0x330 [ 716.609066][ C0] net_rx_action+0x452/0x930 [ 716.613895][ C0] handle_softirqs+0xb9/0x2a0 [ 716.618962][ C0] do_softirq+0x45/0x60 [ 716.623402][ C0] __local_bh_enable_ip+0x70/0x80 [ 716.628823][ C0] __alloc_skb+0x658/0x690 [ 716.633904][ C0] nsim_dev_trap_report_work+0x18a/0x630 [ 716.640017][ C0] process_scheduled_works+0x513/0xa10 [ 716.646061][ C0] worker_thread+0x58a/0x780 [ 716.651118][ C0] kthread+0x22a/0x280 [ 716.655579][ C0] ret_from_fork+0x150/0x360 [ 716.660587][ C0] ret_from_fork_asm+0x1a/0x30 [ 716.665779][ C0] [ 716.668307][ C0] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 0: [ 716.676925][ C0] wq_worker_tick+0x64/0x240 [ 716.681673][ C0] sched_tick+0xda/0x210 [ 716.686023][ C0] update_process_times+0x15e/0x190 [ 716.691619][ C0] tick_nohz_handler+0x275/0x3d0 [ 716.697039][ C0] __hrtimer_run_queues+0x218/0x4f0 [ 716.703012][ C0] hrtimer_interrupt+0x269/0x810 [ 716.708169][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 716.714200][ C0] sysvec_apic_timer_interrupt+0x32/0x80 [ 716.720566][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 716.726717][ C0] __sanitizer_cov_trace_switch+0x96/0x130 [ 716.732731][ C0] nf_hook_slow+0x8d/0x180 [ 716.737344][ C0] __ip_local_out+0x2fd/0x320 [ 716.742703][ C0] ip_local_out+0x28/0xd0 [ 716.747234][ C0] synproxy_send_tcp+0x293/0x2e0 [ 716.752898][ C0] synproxy_send_client_synack+0x57c/0x5d0 [ 716.759798][ C0] nft_synproxy_eval_v4+0x247/0x2a0 [ 716.766158][ C0] nft_synproxy_do_eval+0x1cf/0x270 [ 716.772003][ C0] nft_synproxy_eval+0x29/0x40 [ 716.777063][ C0] nft_do_chain+0x1e6/0xd10 [ 716.782215][ C0] nft_do_chain_inet+0x251/0x280 [ 716.787486][ C0] nf_hook_slow+0x78/0x180 [ 716.792537][ C0] ip_local_deliver+0x199/0x1e0 [ 716.798555][ C0] ip_rcv_finish+0x188/0x1a0 [ 716.803703][ C0] ip_rcv+0x62/0x160 [ 716.808595][ C0] process_backlog+0x341/0x670 [ 716.813585][ C0] __napi_poll+0x61/0x330 [ 716.818043][ C0] net_rx_action+0x452/0x930 [ 716.823019][ C0] handle_softirqs+0xb9/0x2a0 [ 716.828669][ C0] do_softirq+0x45/0x60 [ 716.833387][ C0] __local_bh_enable_ip+0x70/0x80 [ 716.838717][ C0] __alloc_skb+0x658/0x690 [ 716.843466][ C0] nsim_dev_trap_report_work+0x18a/0x630 [ 716.849480][ C0] process_scheduled_works+0x513/0xa10 [ 716.855142][ C0] worker_thread+0x58a/0x780 [ 716.859947][ C0] kthread+0x22a/0x280 [ 716.864300][ C0] ret_from_fork+0x150/0x360 [ 716.869284][ C0] ret_from_fork_asm+0x1a/0x30 [ 716.874282][ C0] [ 716.876726][ C0] value changed: 0x0000000000fab3b0 -> 0x0000000000fadac0 [ 716.884811][ C0] [ 716.887337][ C0] Reported by Kernel Concurrency Sanitizer on: [ 716.894089][ C0] CPU: 0 UID: 0 PID: 30 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(full) [ 716.906138][ C0] Tainted: [W]=WARN [ 716.910132][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 716.921251][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 716.928323][ C0] ================================================================== SYZFAIL: failed to recv rpc [ 717.945089][ T28] audit: type=1400 audit(1774858371.163:22727): avc: denied { write } for pid=3295 comm="syz-executor" path="pipe:[334]" dev="pipefs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 718.224079][ T28] audit: type=1400 audit(1774858371.283:22728): avc: denied { write } for pid=3295 comm="syz-executor" path="pipe:[334]" dev="pipefs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 718.583516][ T28] audit: type=1400 audit(1774858371.403:22729): avc: denied { write } for pid=3295 comm="syz-executor" path="pipe:[334]" dev="pipefs" ino=334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1