last executing test programs: 2m23.096288676s ago: executing program 0 (id=1): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1ff, 0x80000001}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a8000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r1], 0x44}}, 0x8000) 2m22.898121746s ago: executing program 0 (id=6): creat(0x0, 0x80) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) syz_open_dev$vcsa(0x0, 0x7fffffff, 0x400) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x1, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x2e, 0x1e]}}, 0x0, 0x29, 0x0, 0x1, 0x9a3}, 0x28) epoll_create1(0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200840, &(0x7f0000000280)={[{@nobh}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") 2m20.257657404s ago: executing program 0 (id=8): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) unshare(0x62020600) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000100)="0000000001", 0x0, 0x7228, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="40008804140000000a0800c80000000000000000", @ANYRES32=r2, @ANYBLOB="14000200ff02000000000000000000000000000114000100fe8000000000000000000000000000aa"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r5, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000002000010026bd7000fbdbdf2502101000090000060600010008000200ac14142a05001500040008000500160089000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r7 = open$dir(&(0x7f0000000040)='./file0\x00', 0x511000, 0x2) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006800a10800000000fcdbdf2502000000123b80080007407f00000004000b00"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat2(r7, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x84000, 0x22, 0x1}, 0x18) 2m19.701398523s ago: executing program 0 (id=12): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x10040) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0xc2, 0x0, 0x0, 0x5, {[@generic={0x8, 0xa, "e8d0109908fb4223"}, @mptcp=@mp_fclose={0x1e, 0xc, 0x1, 0x0, 0x4}]}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000180)=@nl=@proc, 0x80, &(0x7f0000003740)=[{&(0x7f0000000680)=""/183, 0xb7}, {&(0x7f0000000880)=""/93, 0x5d}, {0x0}, {&(0x7f0000000940)=""/231, 0xe7}, {&(0x7f0000000a40)=""/169, 0xa9}, {0x0}, {&(0x7f0000002340)=""/228, 0xe4}], 0x7}, 0xe2}], 0x1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r2, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)='p', 0x8200, 0x600}]) 2m18.793976131s ago: executing program 32 (id=12): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x10040) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0xc2, 0x0, 0x0, 0x5, {[@generic={0x8, 0xa, "e8d0109908fb4223"}, @mptcp=@mp_fclose={0x1e, 0xc, 0x1, 0x0, 0x4}]}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000180)=@nl=@proc, 0x80, &(0x7f0000003740)=[{&(0x7f0000000680)=""/183, 0xb7}, {&(0x7f0000000880)=""/93, 0x5d}, {0x0}, {&(0x7f0000000940)=""/231, 0xe7}, {&(0x7f0000000a40)=""/169, 0xa9}, {0x0}, {&(0x7f0000002340)=""/228, 0xe4}], 0x7}, 0xe2}], 0x1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r2, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)='p', 0x8200, 0x600}]) 6.597405055s ago: executing program 2 (id=621): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f0000000b40)=""/195, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10b5}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x5a, 0x5, 0xa, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/244, 0xf4}], 0x1}, 0x1}], 0x2, 0x40018022, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) madvise(&(0x7f0000515000/0x3000)=nil, 0x3000, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000006c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000740)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r3, 0x1}}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000037d70000000500000a44000000090a010400000000000000000a0000040900010073797a30000000000909020073797a310000000008000a40fffffffc080005400000002408000340000000447784caf50f00010000000000000000000100"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_emit_ethernet(0x4e, &(0x7f0000002040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x18, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, {[@dstopts={0xff, 0x1, '\x00', [@pad1, @calipso={0x7, 0x8, {0x2, 0x0, 0x8, 0xc}}]}]}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) 5.997366356s ago: executing program 5 (id=624): ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0xc}, 0x17008, 0x0, 0x80, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1b, 0xffffffff, 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r4, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001180)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xb5, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="baa6e8a2a5d0afb0144240cb5746c7ff60ffa2a51949af4c6bac7e8ba4c308532b357767c2872f6d0bf9c1d13e1f6bf1c438cfc699d941e9b317ccb3510198640d74d7406d49b1c589921efa01bd822baee8c0722eddf4df10c21e4299", @ANYRESDEC=r3, @ANYRESHEX=r5, @ANYRES8, @ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r6}, 0x94) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000001c0)={0x18, 0x0, {0x9, @multicast, 'sit0\x00'}}, 0x1e) 5.799720537s ago: executing program 3 (id=626): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a000000000000", 0x25}], 0x1) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 5.74010354s ago: executing program 3 (id=628): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0xc2, 0x0, 0x0, 0x5, {[@generic={0x8, 0xa, "e8d0109908fb4223"}, @mptcp=@mp_fclose={0x1e, 0xc, 0x1, 0x0, 0x4}]}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000180)=@nl=@proc, 0x80, &(0x7f0000003740)=[{&(0x7f0000000680)=""/183, 0xb7}, {&(0x7f0000000880)=""/93, 0x5d}, {0x0}, {&(0x7f0000000940)=""/231, 0xe7}, {&(0x7f0000000a40)=""/169, 0xa9}, {0x0}, {&(0x7f0000002340)=""/228, 0xe4}], 0x7}, 0xe2}], 0x1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(0x0, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='p', 0x8200, 0x600}]) 5.278855293s ago: executing program 2 (id=629): ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0xc}, 0x17008, 0x0, 0x80, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1b, 0xffffffff, 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r4, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001180)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xb5, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="baa6e8a2a5d0afb0144240cb5746c7ff60ffa2a51949af4c6bac7e8ba4c308532b357767c2872f6d0bf9c1d13e1f6bf1c438cfc699d941e9b317ccb3510198640d74d7406d49b1c589921efa01bd822baee8c0722eddf4df10c21e4299", @ANYRESDEC=r3, @ANYRESHEX=r5, @ANYRES8, @ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r6}, 0x94) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000001c0)={0x18, 0x0, {0x9, @multicast, 'sit0\x00'}}, 0x1e) 5.014905118s ago: executing program 5 (id=630): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x7, 0x8000) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000480)={{{0x1, 0x1}}, 0x80, 0x3, &(0x7f0000000380)="3627da4c60166efc07013efc41d8b2bb2414949d64d77b7ca51031e8543024342aac1e3de62e7d7338ffb1974e4c4e93baa127fecc007967599b77d31377842f6c578cda0fbbb31a3dfe0f04d293104369a6ce9ad9794e325228ee656b1554a2f407ce782892b419094acf620ef285b91890540496fa69723b9036b42b40df8d"}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r3], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 4.364414552s ago: executing program 2 (id=632): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000"], 0x50) io_uring_enter(r0, 0x6145, 0x7721, 0x17, 0x0, 0x0) 4.285483856s ago: executing program 4 (id=633): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf250200", @ANYRES32=r2, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) 3.955395633s ago: executing program 5 (id=634): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8, 0x6}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r2 = io_uring_setup(0x4066, &(0x7f00000005c0)={0x0, 0xc4d9, 0x80, 0x1, 0x19f}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xe784}], 0x1}}], 0x1, 0x4000800) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 3.911907986s ago: executing program 4 (id=636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x38}, {[@rr={0x7, 0x3, 0xa8}]}}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x202, 0x1ff}}}}, 0x3e) 3.844198389s ago: executing program 2 (id=637): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x100000, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newsa={0x1cc, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x2}}, @algo_auth_trunc={0xbe, 0x14, {{'hmac(sha1)\x00'}, 0x390, 0x0, "709d795a2ec1c4e0b0890073e1a7c5ae7b5fe2575ca676126044b80b6e3b5c6044c7541e6681c793c28c2c463373f129be35fcff3049178cea158a6b1b354b32ab396874196258563a2cd965f5845c23c200112907bc1bde3860aecc8bd29b1150b6d87902e4e6a288b915fefa3d6750851f"}}]}, 0x1cc}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0xe, &(0x7f0000002ec0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) 3.770395243s ago: executing program 1 (id=638): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0xc2, 0x0, 0x0, 0x5, {[@generic={0x8, 0xa, "e8d0109908fb4223"}, @mptcp=@mp_fclose={0x1e, 0xc, 0x1, 0x0, 0x4}]}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000180)=@nl=@proc, 0x80, &(0x7f0000003740)=[{&(0x7f0000000680)=""/183, 0xb7}, {&(0x7f0000000880)=""/93, 0x5d}, {0x0}, {&(0x7f0000000940)=""/231, 0xe7}, {&(0x7f0000000a40)=""/169, 0xa9}, {0x0}, {&(0x7f0000002340)=""/228, 0xe4}], 0x7}, 0xe2}], 0x1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(0x0, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='p', 0x8200, 0x600}]) 3.286479588s ago: executing program 4 (id=639): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f0000000b40)=""/195, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10b5}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x5a, 0x5, 0xa, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/244, 0xf4}], 0x1}, 0x1}], 0x2, 0x40018022, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) madvise(&(0x7f0000515000/0x3000)=nil, 0x3000, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000006c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000740)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r3, 0x1}}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000037d70000000500000a44000000090a010400000000000000000a0000040900010073797a30000000000909020073797a310000000008000a40fffffffc080005400000002408000340000000447784caf50f00010000000000000000000100"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_emit_ethernet(0x4e, &(0x7f0000002040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x18, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, {[@dstopts={0xff, 0x1, '\x00', [@pad1, @calipso={0x7, 0x8, {0x2, 0x0, 0x8, 0xc}}]}]}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) 3.011991923s ago: executing program 5 (id=640): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 2.783075904s ago: executing program 5 (id=641): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000007c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@dax}, {@init_itable}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r4 = syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x4000, 0x4}, &(0x7f0000000140), &(0x7f0000000480), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5a49, &(0x7f0000000200)={0x0, 0x2000, 0x0, 0x0, 0x357}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e008104df635e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000006c0)={0x1, 0x31, 0x4, 0x300, 0x3f00, 0x81, 0x0}) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x20, 0xa7e, 0x6e}, 0x2c) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2, 0x6}}, 0x20) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'bond_slave_0\x00', 0x200}) 2.782029115s ago: executing program 1 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd", @ANYRES32=r2, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) 2.781569395s ago: executing program 3 (id=643): ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0xc}, 0x17008, 0x0, 0x80, 0x0, 0x6, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1b, 0xffffffff, 0x1}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r4, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001180)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xb5, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="baa6e8a2a5d0afb0144240cb5746c7ff60ffa2a51949af4c6bac7e8ba4c308532b357767c2872f6d0bf9c1d13e1f6bf1c438cfc699d941e9b317ccb3510198640d74d7406d49b1c589921efa01bd822baee8c0722eddf4df10c21e4299", @ANYRESDEC=r3, @ANYRESHEX=r5, @ANYRES8, @ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r6}, 0x94) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000001c0)={0x18, 0x0, {0x9, @multicast, 'sit0\x00'}}, 0x1e) 2.029798234s ago: executing program 1 (id=644): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @short={0x2, 0x0, 0x1555d}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {&(0x7f00000004c0)="7d3ed2ea1f2f23edbb324820e73b5f4b111a03df64a4853ed1b3000073a97e5db2217218e80ed36ab4e7dcda1d3a28b5b4", 0x31}], 0x2}, 0x24000008) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000700)={'icmp\x00'}, &(0x7f00000006c0)=0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="09000000040000004200000009"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x8, r6, 0x800000000000000}, 0x38) read(r4, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10092bbd7065c3c16cfe99000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000040)={'lo\x00'}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x48, r7, 0x1, 0x70bd25, 0x25dfdbfc, {0x4e}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfff0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x4040000) 1.811473285s ago: executing program 2 (id=645): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x7, 0x8000) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000480)={{{0x1, 0x1}}, 0x80, 0x3, &(0x7f0000000380)="3627da4c60166efc07013efc41d8b2bb2414949d64d77b7ca51031e8543024342aac1e3de62e7d7338ffb1974e4c4e93baa127fecc007967599b77d31377842f6c578cda0fbbb31a3dfe0f04d293104369a6ce9ad9794e325228ee656b1554a2f407ce782892b419094acf620ef285b91890540496fa69723b9036b42b40df8d"}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r3], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 1.648325304s ago: executing program 3 (id=646): syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="152f18a66094", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0xa, 0x14, 0x68, 0x0, 0xc, 0x1, 0x0, @remote, @rand_addr=0x64010101}}}}}, 0x0) (fail_nth: 1) 910.707303ms ago: executing program 3 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf250200", @ANYRES32=r2, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) 901.405093ms ago: executing program 4 (id=648): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x4}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x3, 0x78, 0x4, 0x6}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r5, 0x4003e, 0x1f4}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a2", 0x5dc}], 0x1}, 0x4) 852.389436ms ago: executing program 2 (id=649): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40024, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x80000000000000, 0x11000, 0x5, 0x3, 0x90000011, 0x0, 0x0, 0x400, 0x0, 0xc0}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x23) fcntl$notify(r1, 0x402, 0x2) utimensat(r1, 0x0, &(0x7f0000000240)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r5 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 830.898507ms ago: executing program 3 (id=650): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8, 0x6}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r2 = io_uring_setup(0x4066, &(0x7f00000005c0)={0x0, 0xc4d9, 0x80, 0x1, 0x19f}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xe784}], 0x1}}], 0x1, 0x4000800) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 606.900809ms ago: executing program 1 (id=651): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x40, 0x8, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x64b8fed6f21eb9f3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000340)={r1, &(0x7f00000001c0)='{}1(\x00', 0x121000, &(0x7f0000000280)={@align=0x2, {0x2, 0x8000, 0xffffffc0, 0x1}}, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x8001}) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000002900)={@l2tp={0x2, 0x0, @broadcast, 0x3}, {&(0x7f0000000780)=""/22, 0x16}, &(0x7f00000007c0), 0x78}, 0xa0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f00080003400000000008000440000000000800054000000000090002000000000002000000080001"], 0x40}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x5}]}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0x8010) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xfffffffffffffffb) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sched_setscheduler(r2, 0x1, &(0x7f0000000580)=0x5) sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f00000028c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002880)={&(0x7f00000009c0)={0x1e10, r9, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x219, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xa}, @broadcast, @broadcast, @from_mac=@broadcast, {0x3, 0x77}, @value=@ver_80211n={0x0, 0x8, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x0, @random=0x8, 0x81a1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0x9, 0x1}]}, @val={0x3, 0x1, 0x1}, @val={0x4, 0x6, {0x5, 0x1, 0x2, 0x7968}}, @val={0x6, 0x2, 0x3}, @void, @val={0x25, 0x3, {0x0, 0xe770c2a32c01d892, 0x8}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x3, 0x2, 0x0, {0xe4, 0x38f, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x6, 0xfffffff8, 0x2}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x1, 0x10, 0x3, 0x8001}}, [{0xdd, 0x1e, "d624042fa065b502419ed5f68951358d973142382b55b64f5deaedf3bf82"}, {0xdd, 0xfe, "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"}, {0xdd, 0xc, "889fcf98d5673ceba8f4af14"}, {0xdd, 0x6f, "e79b055892eaaa222a3c3f202314e04821b86b470f20cac446b29b9ea8b2b8be551f108269c7c43a348681eeb01b6cc74e4ac85c21a7dbc96eefb061ee46a1f776c6fbcf5380063ee2b09383966048d9ac27db733d3ce21ab9d9308830128a2df3a47499b33e6437b61b785401b7b1"}]}}, @NL80211_ATTR_IE={0x147, 0x2a, [@prep={0x83, 0x1f, {{}, 0x7, 0x6, @device_b, 0xd0ae, @void, 0x1000, 0x0, @device_a, 0x6}}, @supported_rates={0x1, 0x3, [{0xb, 0x1}, {0x60, 0x1}, {0x0, 0x1}]}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x7, @device_a, 0xcc5, @value=@broadcast, 0x9, 0x5, @broadcast, 0x6}}, @cf={0x4, 0x6, {0x2, 0x15, 0x11b4, 0x31}}, @fast_bss_trans={0x37, 0x97, {0x2, 0x2, "8f6bce1127f5ff8a8e80ad856a974133", "86b8466ef82194e2b33e446015b928ef950f0003bf89dcc284c075376b096210", "243eb29d0a86751e127104c6b761ae33622b27cd671569f9fcaeea74a966ebc6", [{0x1, 0x24, "289a866b35dcbf57b87fe5012019fb3069b920c90758a835b114ba42c19d86148a714baf"}, {0x1, 0x1d, "0c8ca9f3888a3f3da6282c76442c73dd76a635a1bdf652e489156832b4"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @erp={0x2a, 0x1, {0x0, 0x1}}, @preq={0x82, 0x36, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x4, 0xffffffff, @device_b, 0xc, @value=@device_b, 0x800, 0x3, 0x2, [{{0x1, 0x0, 0x1}, @broadcast, 0x80000000}, {}]}}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x12, 0x9, @device_a, 0x7, 0x9, 0x40}}]}, @NL80211_ATTR_FTM_RESPONDER={0x154, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x29, 0x2, "aa560ef37aadf06eac10c3f656350e686c6dfce4a6d115b1e9860eda44e0426f58818176c9"}, @NL80211_FTM_RESP_ATTR_LCI={0xd5, 0x2, "4d3f2a8afccfd92247a93c54a07c1f19d48c9155a27091d2bc950c2f8c377679b8eda7043d4ea43b52dae58abc202c8ae9d219eacd049fb3810e8d974fd6bed1cf807fd72e8901e5f2610cbeab4f2fec8b1925b36b57e28a11d8ae555db8b32ae2368daf9bef589d42967837ac7bf3b8e525dcc103d4d041cede129e605a54e08402f23fbdd0d73ad2e34482c58b7b8c5db5c93368afc808d0f42c1f326b0f79de33597588a7f0346a7ec57ebe082c7137c69e8481ab4abb09ba40c1f456818cca3d817d9aa82dce7488ba748e477c5b83"}, @NL80211_FTM_RESP_ATTR_LCI={0x49, 0x2, "56ff280356ad5b9d3d33a2ba9a03807376c383e67c0196a10f4e84d6e294d304ae2f206a5a9b6930f5072ae4c2f6ad9de2962ff1869a063b8b90d61bec0fbc45108d500c4d"}]}, @NL80211_ATTR_FTM_RESPONDER={0xcc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x93, 0x3, "a443c15cc3913b6ad9a5dfba0e19a748a0ea3c4f8ff1a7e691220a8906243f5a9e853fb45b817871443d045c3e2ee709e6e7127a07ef150850b69371cee81c6c9dcdd276346ae729ffd96faee18483c02c44eba205e0a0037ef822cb05ee7919fcb4ac55b9d401174b32688c07a7ef85d40fda731b5eaf5fe3790585c839c43361f8009feec969bae796c3666a516c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x28, 0x3, "85435742e10a68b4a78c627bb8f194f9527042dccb74cd53ca215854d4989440b71fc9b9"}]}, @NL80211_ATTR_IE={0x91, 0x2a, [@ssid={0x0, 0x11, @random="ff24c11fc87c7da8f9d20c385e5de89f22"}, @channel_switch={0x25, 0x3, {0x1, 0x38, 0x5}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x2, @device_b, 0x1ff, @value=@device_b, 0x400, 0x10001, @device_a, 0xaf}}, @peer_mgmt={0x75, 0x16, {0x0, 0x2b, @val=0x2c, @void, @val="1b830e2edddc47e9143f7aef2932d902"}}, @erp={0x2a, 0x1}, @mic={0x8c, 0x10, {0xb8e, "8e2c9a0b4243", @short="e6cbb23fbb91a8d4"}}, @prep={0x83, 0x1f, {{}, 0x5, 0x0, @broadcast, 0x3ff, @void, 0x3, 0x7, @device_a, 0x401}}]}, @NL80211_ATTR_IE={0x19d, 0x2a, [@measure_req={0x26, 0xe0, {0xff, 0x8c, 0x5, "4cf92a51eef7444e4ac386d8f2a4d445c27fe953c3644e76c79a2da771aae08b36f95eeae2f63dfeda937b80d00cdad237be69ed288dc4289a6a1dbc08bd50522a73fe8154da36e10c5595eaa414c5728ccd836a0d0cf87504922955d0b9a9ea05056db36110b24ee505bd82f77f35d34db116ec6aa96dbdebb9c544a6fc89570158a3dd12ff95d9959f549e15531897a19d71e6cbd352866406e3c52cce1f33ea8f9d943ed7ba06c1a68e8c9378c9aa4f56b867060c9f4ef7d91932d8642cb2d9bf9dc41d01d711eb28f16ea29a8fbb8ab022883473de527e6e6da20d"}}, @ht={0x2d, 0x1a, {0x4810, 0x3, 0x3, 0x0, {0x7, 0x526, 0x0, 0x24e, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x1, 0x3}}, @random={0x6, 0x87, "caeb7099f0f09d2018d5c502c891208ce8aeddc15f9d132605fab7d67a39456f2f337c9871b519e2183cad26d83fa6a1382c245ce301f270dec931df37802824a745e52a7fa1c0fcb37b46832225c806565d0e1a55c5849d41e2f46501b871902b7869ed230d88b7e2c45e4fe0a00d352915b65629f853503e249c5a0c363e38e9e0afca091337"}, @mic={0x8c, 0x10, {0xd65, "5144d278d999", @short="cc61ce66c05b787a"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x12cc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xf6, 0x3, "cba6966351ba9a6782ac1cfdb6ecf51bb347a245b268ec7fb9361f452edd78f011125e553c60d75826782b3e8e4ea88bed9909c49cca692449af14c424244551df80169d39d75d0ec1acdbeb6b3f729c5e14304f1b6a09ad305f281e4e3336339b158eca4e55329a087336a13a136877b4a07c159d8eff73dee979b8f172fe2408c4717e94baf2ba548b15895ea5982601e93c8d1d69d25acbce8de27da6d7281cc12ebe27fe3bc065fa8b7c923471e534acb0e9f1a1c07aca221315d6c8b4e076badbee529c800d539138d3fb43b048c85ded98823abc3e0b27e3a23d56439250bb1de88c1def9e31c189480bf2c27c8dc2"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1b, 0x3, "88787462f137eb72fade60634056fbcc1897538f448cbc"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x22, 0x3, "3616b3ab674a196e21032a984b3a691599782c6cbc8a8179e4be1af42550"}, @NL80211_FTM_RESP_ATTR_LCI={0x92, 0x2, "201b094c54d7652c8ceec54a7dd6e854e8008f95ff732145f4c3432e65603b63d3713ab3a1d8ae4c9cd8f1964b9876e66d9a5b00cf77f3ca341a95fe3716627bfce70ca7981efcb0ed4953fc573fd7dce71e317f9c350ead5eb041b289fe91719d15e3e6f9667cba301e1a44bc0a1db6dac403e7526530b17af34390654ff390b3bcf768fd581bddec733a062665"}, @NL80211_FTM_RESP_ATTR_LCI={0xed, 0x2, "f78314d1b3211b9d5a3079708ae7ff0252dc6869bd81650667bd1fd0b651dfa9e4ed8ca9b193da10d0182a0849064926f50af910c137d4e83e930eb6bfc157c3b68fa16a9577373567266f8bea077f88de01256d07cf96f208cf82bff8b78f987faff6fcd87f4acd660bff7dd1ba64de1c481e46367d6476d12a429e84661bca535ccfd4f69443bc75f01fd61e3ac26a93eb48c426dc2cf7aa06ff3940e27b7acba57e27a0e666bd24f121ce76fcfd7d4c1cc0af0bf9ab7acafb179b4372646d3f4bbd070960b2c6d1a77240ec319c10e39e0adf73b1a4e9e75487cb912455504d4cab1576151166b6"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x19a, 0x80, [@random={0xdf, 0x67, "aa426fda690592eef5fe14d519f7158f6f4e05e23b524874805613c7e59aae318417feccb5cb9a6b733f35f9144b8e048c4012ca8551a22cf174cca5f9ada5a62265b9fa6af367373cfe87fb583fcfcba1c000a2b347d5cf86f9a1d738d48f02405eb0c89b2584"}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @tim={0x5, 0x41, {0xb, 0x2b, 0x8, "55b110e36dbad71fa79ebf16aac850eef8e65911363867d5554d80fa620e5db1678459519d7ef53ec96109fc0035505edd59f875e23b6611e60090cabe8e"}}, @rann={0x7e, 0x15, {{0x1, 0x61}, 0x0, 0xf, @device_b, 0x9, 0xf, 0x8}}, @mesh_chsw={0x76, 0x6, {0xff, 0x6, 0x41, 0x7}}, @fast_bss_trans={0x37, 0xbb, {0x6, 0x4, "19f2db41f25653adf6df33c0eeea3af0", "b532e012595737c3146b11654970fcb886b7fc4017ca255307739277fb36cb95", "1c998a60619e8a62111548e0db714325ed6b0497c3bb8bb884b785fbf7ea2454", [{0x4, 0x5, "052d14b3f8"}, {0x4, 0x17, "1c81ff3d15259a520f6835eca6bee8c26e3e66d75af105"}, {0x4, 0x20, "42b41fd5f47dd038dbd90066e1f0375dd5dd24e3730232901daa1f14f2d14d75"}, {0x3, 0x25, "bed6922b5aad476364069be9d08b0e9ed216121514786fde3a8b2020bb90199502e75a87cc"}]}}, @dsss={0x3, 0x1, 0x9}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_TAIL={0xe6, 0xf, [@measure_req={0x26, 0xe0, {0x7, 0x3, 0xd, "8e5281763a94d243658d8f87821191274bde23528d07c4fdc6ede211d0d1d28945d05c629c9e1a349a25e85b1864b85d115ee611caec6eab1736532b445f243ebf6fbbd4a5a811a935d0220ba40d64cc16a836d6da86193ee481940611c06df4d6fff97b4efeec3a6cffdae38f00106758ca6f5545630ec744ab21ebba891218c9f84873730abb1f47f8b58a9aa5a028dc2aa67b655f564a44f21b54d709754d4431113b1876ccb6a5c7dd1a5e17a98b5de19ceb701e704fdabab448cd9ebc431ce0551b9d2efe6b2b6370af619ca0f0a888b0b916d61b35dc253c1f81"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xf2, 0x7f, [@challenge={0x10, 0x1, 0x52}, @random_vendor={0xdd, 0xe3, "c15d21178ad633bce7c1b0e1518f56c498da6f85422b545a1fadfe5404b7999db8ee74521241f922bfce9d44db463b5635a094d4f3fdbda47ef9212d5fd86c55d86d45741341a6e83decf562b4330f8cb5f6584b4ebc27ec9a415cf03732052dc7b43dfed4dcedf603f54aeec65d7f9b3be6098377c830dac635c4b554f5fcfb5edd86f8aeae2e114591a3c3ee4fa06659d75483f50d42a3259269fe295f4d000e4f948eb9f54c2754a9a8595414fdb7b670bc0618bf8a4cc24fdcb5d6df8f8d2cd24028fc606d491d60043edf5d10a4da9040e7ca0023178c6d39342b905f16125f9e"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0x2, 0x9}}]}]}, 0x1e10}, 0x1, 0x0, 0x0, 0x20008004}, 0x8080) 494.354184ms ago: executing program 1 (id=652): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 449.170947ms ago: executing program 4 (id=653): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x0, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 421.899318ms ago: executing program 4 (id=654): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0xc2, 0x0, 0x0, 0x5, {[@generic={0x8, 0x2}, @mptcp=@mp_fclose={0x1e, 0xc, 0x1, 0x0, 0x4}]}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000180)=@nl=@proc, 0x80, &(0x7f0000003740)=[{&(0x7f0000000680)=""/183, 0xb7}, {&(0x7f0000000880)=""/93, 0x5d}, {0x0}, {&(0x7f0000000940)=""/231, 0xe7}, {&(0x7f0000000a40)=""/169, 0xa9}, {0x0}, {&(0x7f0000002340)=""/228, 0xe4}], 0x7}, 0xe2}], 0x1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r3, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)='p', 0x8200, 0x600}]) 56.352417ms ago: executing program 5 (id=655): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f0000000b40)=""/195, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10b5}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x5a, 0x5, 0xa, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) recvmmsg(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/244, 0xf4}], 0x1}, 0x1}], 0x2, 0x40018022, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) madvise(&(0x7f0000515000/0x3000)=nil, 0x3000, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000006c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000740)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r4, 0x1}}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000037d70000000500000a44000000090a010400000000000000000a0000040900010073797a30000000000909020073797a310000000008000a40fffffffc080005400000002408000340000000447784caf50f00010000000000000000000100"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_emit_ethernet(0x4e, &(0x7f0000002040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x18, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @local, {[@dstopts={0xff, 0x1, '\x00', [@pad1, @calipso={0x7, 0x8, {0x2, 0x0, 0x8, 0xc}}]}]}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000001000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) 0s ago: executing program 1 (id=656): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x123841, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$eJzs3U1sHFcdAPD/rO18OAl2AxWlSGBRBJGi+iNGZINAJD0hFaM2BS5FDUuysd2svZZ3LdUuh0SotDdUxKXqCVk58CWlUhEtFKkSoohD4cAJgcK9qqlUviQQWjSzs6kbb+yETTyV/ftJTzPzZnfff/Y/M5k3b+INYNcaiYiTEdEXEUcjYiivL+UlLrZL+rrVySszaUmi1XrkrSSSiHh28spM57OSfHog/4B9EXF6NaL01MZ2G8srFyq1WnUxXx5rzi2MNZZX7p+dq0xXp6vz5XJ5vFw+fmLi9m3ro4f3H37u11/4z89f++6Hv/K93zyZxnswX7d+O26XkRjJv5OB2Luuvj+JOH+7GytIut/0RzvXN+Pu6nd+eYdD4iZ9/geXSkXHAABsv/QC4HBEfCy7/h+KvuxqLuLkoa+9PRT/fLzo+AAAAIDetYaG4nPpFAAAANixStkzsElpNH8W4GCUSqOj7Wd4PxCDpVq90Tx6vr40f679rOxwDJTOz9aq4/mzwsMxkKTLE9n8O8vHrluejIi7IuKZof3Z8ujZeu1c0Tc/AAAAYIc7GHH10W+9/MEDN+j/p/48VHSUAAAAQC/S/v+hq4PZn+r6u34+AAAA7Ehp///tb//1t6H/DwAAADtWp///0NRUPDQ11VrNf/9qvj49e2Fm4cSx8dG5pbOjZ+uLC6PT9fp09j/257b+3Fq9vjBxLJaeGGtWG82xxvLKmbn60nzzTPa7XmeqA9uwbcDWHj55tlp0DAAAwPa566Ov/jGJiIuf2Z+V1J58nb467Gx+ABx2r76iAwAK0190AEBh9PGBZIv1+2604uLtjwUAALgzPvkh4/+wWxn/h93L+D/sXsb/YffSxweM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNZarSRaAAAAwI7WWF65UKnVqotmzJgxc22m6DuTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyXPTt5ZaZTtqvNV36xXS1xI2unImK4nf/VvLTX9Me+bLovBiJi8G9J9K97XxIRfT22/e97IkbisSdfbF1+KS2R74c9fiy34OKliLin2/GfpLtFDOd7wfX5L2V7Rm9+8sM0/6u/W18n/9url/wP9tj2yx9J8//g3evr5H/3uPfhoiOgSL9/pugIKNIf1oqOgCKdfqToCCjSlz5ddAQU6fm3io6AV09FxHi3/l8p7RZe6+Vf3//ry+4Q9ebISNr/e/ro+rqN/b/SGz02wybWTkV8NiJWN9z/K3VeMtyXLx3K7gcMJOdna9XxiHhfmsMY2JsuT2zSxuUzS491q3/wdJr/Kz9d+NMLP+uUtP10+s6rSm/07333+85VmpVet5u2tUsR9/Z3y39y7f5vcoP7v++/yTZmXv/G493qJ3+V5v+V5zfPP3dS6/sRn+h6/CfXXpPOjTXnFsYayyv3z85VpqvT1flyuTxeLh8/MTGWnQ7GOieFLobWDny1W/3XH0jz/98p+S9OevwPbp7/7PzfWF65UKnVqouNW2/jX2++vtqt/vBTaf4f+Ob/c/7fk3w5C3BPXvdEpdlcnIjYk3xxY/2xW495p+p8H53vK83/kfu6//vfuf5rn/9LG+7/D+fTdP3IJm0OHH/h6W71H78vG/+7+mLr8kuO/2Kk+T+3xfGfvOv4v/WZ5/7yjx91a/vHe9P8v/ZmZ/w3LWn7nbHgtvT4/1QWzJG8xvXf1m42QUXHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/0vAAD//wqlOeU=") open(&(0x7f0000000200)='./file1\x00', 0x240002, 0x32) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0xc, 0x6, 0x42, 0x0, 0x1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) kernel console output (not intermixed with test programs): detected capacity change from 0 to 1024 [ 69.543195][ T4080] EXT4-fs: test_dummy_encryption option not supported [ 70.546908][ T4087] loop2: detected capacity change from 0 to 512 [ 70.692609][ T4095] loop1: detected capacity change from 0 to 512 [ 70.779589][ T4087] EXT4-fs: Ignoring removed i_version option [ 70.789815][ T4073] syzkaller0: entered promiscuous mode [ 70.830762][ T4095] EXT4-fs (loop1): 1 orphan inode deleted [ 70.851178][ T4095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.870311][ T30] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 70.888204][ T4095] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.029657][ T4073] syzkaller0: entered allmulticast mode [ 71.056765][ T4087] ext4: Unknown parameter 'nouser_xattr.grpquota' [ 71.225629][ T30] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 71.510369][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.525830][ T4096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 71.641169][ T4106] FAULT_INJECTION: forcing a failure. [ 71.641169][ T4106] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 71.816680][ T4112] loop4: detected capacity change from 0 to 512 [ 71.824591][ T4106] CPU: 0 UID: 0 PID: 4106 Comm: syz.2.97 Tainted: G W syzkaller #0 PREEMPT(full) [ 71.824626][ T4106] Tainted: [W]=WARN [ 71.824633][ T4106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 71.824680][ T4106] Call Trace: [ 71.824687][ T4106] [ 71.824695][ T4106] __dump_stack+0x1d/0x30 [ 71.824779][ T4106] dump_stack_lvl+0x95/0xd0 [ 71.824803][ T4106] dump_stack+0x15/0x1b [ 71.824828][ T4106] should_fail_ex+0x263/0x280 [ 71.824864][ T4106] should_fail+0xb/0x20 [ 71.824941][ T4106] should_fail_usercopy+0x1a/0x20 [ 71.825011][ T4106] _copy_from_iter+0xcf/0xea0 [ 71.825042][ T4106] ? __alloc_skb+0x4f6/0x690 [ 71.825172][ T4106] ? __alloc_skb+0x200/0x690 [ 71.825210][ T4106] netlink_sendmsg+0x4ae/0x6f0 [ 71.825246][ T4106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.825274][ T4106] ____sys_sendmsg+0x563/0x5b0 [ 71.825333][ T4106] ___sys_sendmsg+0x195/0x1e0 [ 71.825418][ T4106] __x64_sys_sendmsg+0xd4/0x160 [ 71.825513][ T4106] x64_sys_call+0x194c/0x3020 [ 71.825538][ T4106] do_syscall_64+0x12c/0x3b0 [ 71.825623][ T4106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.825651][ T4106] RIP: 0033:0x7f36334ccdd9 [ 71.825667][ T4106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.825761][ T4106] RSP: 002b:00007f3631f27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.825843][ T4106] RAX: ffffffffffffffda RBX: 00007f3633745fa0 RCX: 00007f36334ccdd9 [ 71.825860][ T4106] RDX: 0000000024040040 RSI: 0000200000000200 RDI: 0000000000000003 [ 71.825872][ T4106] RBP: 00007f3631f27090 R08: 0000000000000000 R09: 0000000000000000 [ 71.825885][ T4106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.825897][ T4106] R13: 00007f3633746038 R14: 00007f3633745fa0 R15: 00007ffcd569c3d8 [ 71.825921][ T4106] [ 72.092749][ T4112] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 72.217043][ T4112] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.99: bg 0: block 104: invalid block bitmap [ 72.259225][ T4112] loop4: lost filesystem error report for type 5 error -117 [ 72.264041][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.271443][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 72.271483][ C1] EXT4-fs (loop4): initial error at time 1777301426: ext4_validate_block_bitmap:432 [ 72.271522][ C1] EXT4-fs (loop4): last error at time 1777301426: ext4_validate_block_bitmap:432 [ 72.296870][ T4112] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 72.318337][ T4113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.366724][ T4123] loop3: detected capacity change from 0 to 8192 [ 72.373587][ T4112] loop4: lost filesystem error report for type 5 error -117 [ 72.374283][ T4112] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.99: invalid indirect mapped block 1 (level 1) [ 72.394938][ T4112] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 72.395721][ T4112] EXT4-fs (loop4): 1 truncate cleaned up [ 72.416304][ T4112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.457187][ T28] audit: type=1400 audit(1777301426.519:244): avc: denied { write } for pid=4111 comm="syz.4.99" path="/18/file1/file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.513170][ T28] audit: type=1400 audit(1777301426.569:245): avc: denied { ioctl } for pid=4111 comm="syz.4.99" path="/18/file1/file1" dev="loop4" ino=18 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.575270][ T4137] loop1: detected capacity change from 0 to 1024 [ 72.582360][ T4137] EXT4-fs: test_dummy_encryption option not supported [ 72.591148][ T28] audit: type=1400 audit(1777301426.649:246): avc: denied { read } for pid=4138 comm="syz.5.103" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.622143][ T28] audit: type=1400 audit(1777301426.649:247): avc: denied { open } for pid=4138 comm="syz.5.103" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.666045][ T28] audit: type=1400 audit(1777301426.649:248): avc: denied { ioctl } for pid=4138 comm="syz.5.103" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.759001][ T4143] loop5: detected capacity change from 0 to 128 [ 72.766596][ T4143] vfat: Unknown parameter 'nonumtailúÔ»ý' [ 72.930313][ T4145] loop1: detected capacity change from 0 to 512 [ 73.021228][ T4145] EXT4-fs (loop1): 1 orphan inode deleted [ 73.032826][ T4145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.051155][ T4145] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.219778][ T28] audit: type=1400 audit(1777301427.279:249): avc: denied { create } for pid=4142 comm="syz.5.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.354582][ T68] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 73.438524][ T28] audit: type=1400 audit(1777301427.439:250): avc: denied { bind } for pid=4142 comm="syz.5.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.457984][ T68] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 73.500799][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.522856][ T28] audit: type=1400 audit(1777301427.529:251): avc: denied { write } for pid=4142 comm="syz.5.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.633876][ T4143] loop5: detected capacity change from 0 to 1024 [ 73.678931][ T4143] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 74.446891][ T4143] loop5: detected capacity change from 0 to 128 [ 74.474007][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.496986][ T28] audit: type=1400 audit(1777301428.559:252): avc: denied { write } for pid=4160 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.516652][ T28] audit: type=1400 audit(1777301428.559:253): avc: denied { connect } for pid=4160 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.530703][ T4143] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.537140][ T28] audit: type=1400 audit(1777301428.559:254): avc: denied { name_connect } for pid=4160 comm="syz.3.110" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 74.593381][ T4143] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.627179][ T4166] netlink: 56 bytes leftover after parsing attributes in process `syz.4.111'. [ 74.649515][ T4166] blkio.reset_stats is deprecated [ 74.662619][ T28] audit: type=1400 audit(1777301428.719:255): avc: denied { create } for pid=4158 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.689917][ T28] audit: type=1400 audit(1777301428.719:256): avc: denied { connect } for pid=4158 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.725844][ T28] audit: type=1400 audit(1777301428.719:257): avc: denied { map } for pid=4158 comm="syz.4.111" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.807791][ T3558] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.848204][ T4171] Illegal XDP return value 4294967294 on prog (id 26) dev N/A, expect packet loss! [ 74.863415][ T4172] FAULT_INJECTION: forcing a failure. [ 74.863415][ T4172] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 74.887365][ T28] audit: type=1400 audit(1777301428.939:258): avc: denied { kexec_image_load } for pid=4170 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 74.917785][ T4172] CPU: 1 UID: 0 PID: 4172 Comm: syz.2.114 Tainted: G W syzkaller #0 PREEMPT(full) [ 74.917851][ T4172] Tainted: [W]=WARN [ 74.917859][ T4172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 74.917872][ T4172] Call Trace: [ 74.917879][ T4172] [ 74.917888][ T4172] __dump_stack+0x1d/0x30 [ 74.917951][ T4172] dump_stack_lvl+0x95/0xd0 [ 74.917972][ T4172] dump_stack+0x15/0x1b [ 74.918002][ T4172] should_fail_ex+0x263/0x280 [ 74.918037][ T4172] should_fail_alloc_page+0xf2/0x100 [ 74.918070][ T4172] __alloc_frozen_pages_noprof+0x108/0x350 [ 74.918100][ T4172] alloc_pages_mpol+0xb3/0x260 [ 74.918175][ T4172] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 74.918200][ T4172] do_wp_page+0x70e/0x2040 [ 74.918225][ T4172] ? _raw_spin_lock+0x52/0xa0 [ 74.918303][ T4172] ? __rcu_read_lock+0x36/0x50 [ 74.918328][ T4172] handle_mm_fault+0x8b9/0x2e70 [ 74.918355][ T4172] ? vma_start_read+0x1c7/0x2c0 [ 74.918401][ T4172] do_user_addr_fault+0x62f/0x1050 [ 74.918448][ T4172] ? ksys_mmap_pgoff+0xc1/0x310 [ 74.918474][ T4172] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 74.918503][ T4172] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 74.918533][ T4172] ? trace_page_fault_user+0x1f/0xa0 [ 74.918575][ T4172] exc_page_fault+0x62/0xa0 [ 74.918665][ T4172] asm_exc_page_fault+0x26/0x30 [ 74.918741][ T4172] RIP: 0033:0x7f3633383e63 [ 74.918762][ T4172] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 74.918819][ T4172] RSP: 002b:00007f3631f26470 EFLAGS: 00010202 [ 74.918836][ T4172] RAX: 0000000000000400 RBX: 00007f3631f26530 RCX: 00007f3629b07000 [ 74.918919][ T4172] RDX: 00007f3631f266d0 RSI: 0000000000000011 RDI: 00007f3631f265d0 [ 74.918937][ T4172] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a1 [ 74.918953][ T4172] R10: 00000000000000bc R11: 00007f3631f26530 R12: 0000000000000001 [ 74.918969][ T4172] R13: 00007f3633582900 R14: 0000000000000020 R15: 00007f3631f265d0 [ 74.918993][ T4172] [ 74.919281][ T4172] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 75.253715][ T4180] netlink: 'syz.3.117': attribute type 10 has an invalid length. [ 75.301936][ T4172] loop2: detected capacity change from 0 to 512 [ 75.325350][ T4180] team0: Failed to send options change via netlink (err -105) [ 75.417761][ T4181] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.427490][ T4180] team0: Port device dummy0 added [ 75.723131][ T4188] loop2: detected capacity change from 0 to 1024 [ 75.756667][ T4188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.786437][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.816078][ T4190] loop1: detected capacity change from 0 to 8192 [ 75.861727][ T4186] loop4: detected capacity change from 0 to 2048 [ 76.281375][ T4202] loop3: detected capacity change from 0 to 8192 [ 76.346411][ T4202] loop3: p1 < > p2 p4 < p5 > [ 76.360758][ T4202] loop3: partition table partially beyond EOD, truncated [ 76.378358][ T4202] loop3: p1 start 134217728 is beyond EOD, truncated [ 76.394396][ T4202] loop3: p2 size 67072 extends beyond EOD, truncated [ 76.417415][ T4202] loop3: p5 size 67072 extends beyond EOD, truncated [ 77.192130][ T4219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 77.210250][ T4219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.129'. [ 77.237103][ T4219] FAULT_INJECTION: forcing a failure. [ 77.237103][ T4219] name failslab, interval 1, probability 0, space 0, times 0 [ 77.261834][ T4219] CPU: 0 UID: 0 PID: 4219 Comm: syz.1.129 Tainted: G W syzkaller #0 PREEMPT(full) [ 77.261875][ T4219] Tainted: [W]=WARN [ 77.261902][ T4219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 77.261915][ T4219] Call Trace: [ 77.261921][ T4219] [ 77.261928][ T4219] __dump_stack+0x1d/0x30 [ 77.261952][ T4219] dump_stack_lvl+0x95/0xd0 [ 77.261984][ T4219] dump_stack+0x15/0x1b [ 77.262011][ T4219] should_fail_ex+0x263/0x280 [ 77.262055][ T4219] ? __hw_addr_create+0x40/0x150 [ 77.262113][ T4219] should_failslab+0x8c/0xb0 [ 77.262152][ T4219] __kmalloc_cache_noprof+0x5f/0x400 [ 77.262194][ T4219] ? _raw_spin_unlock_irq+0x9/0x30 [ 77.262266][ T4219] __hw_addr_create+0x40/0x150 [ 77.262297][ T4219] ? __hw_addr_add_ex+0x136/0x310 [ 77.262335][ T4219] __hw_addr_add_ex+0x150/0x310 [ 77.262445][ T4219] ? __pfx_macvlan_setup+0x10/0x10 [ 77.262523][ T4219] dev_addr_init+0xb1/0x120 [ 77.262564][ T4219] alloc_netdev_mqs+0x1ca/0xa70 [ 77.262591][ T4219] rtnl_create_link+0x239/0x720 [ 77.262665][ T4219] rtnl_newlink_create+0x174/0x650 [ 77.262706][ T4219] ? security_capable+0x7b/0x90 [ 77.262743][ T4219] ? netlink_ns_capable+0x86/0xa0 [ 77.262771][ T4219] rtnl_newlink+0x1185/0x1400 [ 77.262813][ T4219] ? xas_load+0x413/0x430 [ 77.262835][ T4219] ? __rcu_read_unlock+0x4e/0x70 [ 77.262867][ T4219] ? avc_has_perm_noaudit+0xab/0x130 [ 77.262914][ T4219] ? cred_has_capability+0x224/0x2a0 [ 77.262949][ T4219] ? selinux_capable+0x31/0x40 [ 77.263011][ T4219] ? security_capable+0x7b/0x90 [ 77.263071][ T4219] ? ns_capable+0x7c/0xb0 [ 77.263111][ T4219] ? __pfx_rtnl_newlink+0x10/0x10 [ 77.263145][ T4219] rtnetlink_rcv_msg+0x64b/0x720 [ 77.263211][ T4219] ? avc_has_perm_noaudit+0xab/0x130 [ 77.263252][ T4219] netlink_rcv_skb+0x123/0x220 [ 77.263284][ T4219] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.263380][ T4219] rtnetlink_rcv+0x1c/0x30 [ 77.263428][ T4219] netlink_unicast+0x5a8/0x680 [ 77.263453][ T4219] netlink_sendmsg+0x5c8/0x6f0 [ 77.263484][ T4219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.263519][ T4219] ____sys_sendmsg+0x563/0x5b0 [ 77.263606][ T4219] ___sys_sendmsg+0x195/0x1e0 [ 77.263630][ T4219] ? path_openat+0x1b01/0x2050 [ 77.263679][ T4219] __sys_sendmmsg+0x185/0x320 [ 77.263718][ T4219] __x64_sys_sendmmsg+0x57/0x70 [ 77.263775][ T4219] x64_sys_call+0x27aa/0x3020 [ 77.263799][ T4219] do_syscall_64+0x12c/0x3b0 [ 77.263822][ T4219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.263916][ T4219] RIP: 0033:0x7f2e442ccdd9 [ 77.263945][ T4219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.263964][ T4219] RSP: 002b:00007f2e42d27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 77.263993][ T4219] RAX: ffffffffffffffda RBX: 00007f2e44545fa0 RCX: 00007f2e442ccdd9 [ 77.264010][ T4219] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 77.264028][ T4219] RBP: 00007f2e42d27090 R08: 0000000000000000 R09: 0000000000000000 [ 77.264044][ T4219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.264058][ T4219] R13: 00007f2e44546038 R14: 00007f2e44545fa0 R15: 00007ffc0bc42738 [ 77.264095][ T4219] [ 77.285872][ T4198] loop2: detected capacity change from 0 to 8192 [ 77.503340][ T4222] loop1: detected capacity change from 0 to 1024 [ 77.724287][ T4226] netlink: 'syz.4.132': attribute type 21 has an invalid length. [ 77.759299][ T4226] netlink: 'syz.4.132': attribute type 20 has an invalid length. [ 77.767780][ T4222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.856430][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.944201][ T4239] loop3: detected capacity change from 0 to 256 [ 77.967793][ T4235] loop5: detected capacity change from 0 to 8192 [ 77.977718][ T4239] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.041979][ T4239] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.042543][ T4243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.137'. [ 78.068780][ T4240] netlink: 'syz.1.134': attribute type 1 has an invalid length. [ 78.103950][ T4240] netlink: 256 bytes leftover after parsing attributes in process `syz.1.134'. [ 78.120052][ T4243] netlink: 40 bytes leftover after parsing attributes in process `syz.4.137'. [ 78.435802][ T4248] loop2: detected capacity change from 0 to 512 [ 78.603384][ T4256] loop3: detected capacity change from 0 to 512 [ 78.846772][ T4248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.931584][ T4248] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.032119][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 79.032146][ T28] audit: type=1400 audit(1777301433.089:267): avc: denied { bind } for pid=4245 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.227367][ T28] audit: type=1400 audit(1777301433.119:268): avc: denied { name_bind } for pid=4245 comm="syz.2.138" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 79.442929][ T28] audit: type=1400 audit(1777301433.189:269): avc: denied { node_bind } for pid=4245 comm="syz.2.138" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 79.515475][ T4260] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 79.515475][ T4260] program syz.4.140 not setting count and/or reply_len properly [ 79.661497][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.696392][ T4256] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 79.711583][ T4256] EXT4-fs (loop3): mount failed [ 80.121043][ T4260] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 80.121043][ T4260] program syz.4.140 not setting count and/or reply_len properly [ 80.216034][ T4266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.295855][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.143'. [ 80.329024][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.143'. [ 80.373474][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.143'. [ 80.410848][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.143'. [ 80.434949][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.143'. [ 80.668535][ T28] audit: type=1400 audit(1777301434.729:270): avc: denied { ioctl } for pid=4283 comm="syz.1.148" path="socket:[7268]" dev="sockfs" ino=7268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.719687][ T28] audit: type=1400 audit(1777301434.749:271): avc: denied { accept } for pid=4283 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 81.022884][ T4298] capability: warning: `syz.4.150' uses deprecated v2 capabilities in a way that may be insecure [ 81.041384][ T4299] set_capacity_and_notify: 1 callbacks suppressed [ 81.041442][ T4299] loop5: detected capacity change from 0 to 512 [ 81.078476][ T4299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.101154][ T4299] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.112515][ T4298] loop4: detected capacity change from 0 to 128 [ 81.272412][ T4298] loop4: detected capacity change from 0 to 2048 [ 81.290859][ T4305] loop2: detected capacity change from 0 to 512 [ 81.301446][ T4298] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 81.362531][ T4307] FAULT_INJECTION: forcing a failure. [ 81.362531][ T4307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.387446][ T4307] CPU: 1 UID: 0 PID: 4307 Comm: syz.4.153 Tainted: G W syzkaller #0 PREEMPT(full) [ 81.387483][ T4307] Tainted: [W]=WARN [ 81.387490][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 81.387504][ T4307] Call Trace: [ 81.387511][ T4307] [ 81.387520][ T4307] __dump_stack+0x1d/0x30 [ 81.387587][ T4307] dump_stack_lvl+0x95/0xd0 [ 81.387611][ T4307] dump_stack+0x15/0x1b [ 81.387632][ T4307] should_fail_ex+0x263/0x280 [ 81.387660][ T4307] should_fail+0xb/0x20 [ 81.387725][ T4307] should_fail_usercopy+0x1a/0x20 [ 81.387764][ T4307] _copy_to_user+0x20/0xa0 [ 81.387867][ T4307] simple_read_from_buffer+0xb5/0x130 [ 81.387903][ T4307] proc_fail_nth_read+0x10e/0x150 [ 81.387953][ T4307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.387987][ T4307] vfs_read+0x1ab/0x7f0 [ 81.388042][ T4307] ? __rcu_read_unlock+0x4e/0x70 [ 81.388069][ T4307] ? __fget_files+0x184/0x1c0 [ 81.388107][ T4307] ? mutex_lock+0x57/0x90 [ 81.388148][ T4307] ksys_read+0xdc/0x1a0 [ 81.388230][ T4307] __x64_sys_read+0x40/0x50 [ 81.388292][ T4307] x64_sys_call+0x2886/0x3020 [ 81.388325][ T4307] do_syscall_64+0x12c/0x3b0 [ 81.388354][ T4307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.388376][ T4307] RIP: 0033:0x7f2f271ad60e [ 81.388391][ T4307] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.388472][ T4307] RSP: 002b:00007f2f25c46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.388502][ T4307] RAX: ffffffffffffffda RBX: 00007f2f25c476c0 RCX: 00007f2f271ad60e [ 81.388516][ T4307] RDX: 000000000000000f RSI: 00007f2f25c470a0 RDI: 0000000000000004 [ 81.388532][ T4307] RBP: 00007f2f25c47090 R08: 0000000000000000 R09: 0000000000000000 [ 81.388588][ T4307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.388605][ T4307] R13: 00007f2f27466038 R14: 00007f2f27465fa0 R15: 00007ffc2a4c9278 [ 81.388625][ T4307] [ 81.390821][ T28] audit: type=1400 audit(1777301435.449:272): avc: denied { ioctl } for pid=4308 comm="syz.2.154" path="socket:[7330]" dev="sockfs" ino=7330 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.647745][ T4315] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.699811][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.869596][ T4331] loop4: detected capacity change from 0 to 256 [ 82.016122][ T4318] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.038208][ T28] audit: type=1400 audit(1777301436.099:273): avc: denied { read } for pid=4330 comm="syz.4.162" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.080038][ T28] audit: type=1400 audit(1777301436.099:274): avc: denied { open } for pid=4330 comm="syz.4.162" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.456413][ T4339] loop2: detected capacity change from 0 to 512 [ 82.532416][ T4339] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 82.552642][ T4339] EXT4-fs (loop2): mount failed [ 82.681935][ T4345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4345 comm=syz.5.165 [ 82.700292][ T4345] __nla_validate_parse: 39 callbacks suppressed [ 82.700315][ T4345] netlink: 16 bytes leftover after parsing attributes in process `syz.5.165'. [ 83.150612][ T28] audit: type=1400 audit(1777301437.209:275): avc: denied { ioctl } for pid=4344 comm="syz.5.165" path="socket:[6061]" dev="sockfs" ino=6061 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.211062][ T28] audit: type=1400 audit(1777301437.239:276): avc: denied { shutdown } for pid=4344 comm="syz.5.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.147254][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 84.147272][ T28] audit: type=1400 audit(1777301437.689:278): avc: denied { create } for pid=4346 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.783123][ T28] audit: type=1400 audit(1777301438.839:279): avc: denied { create } for pid=4369 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.863511][ T4359] loop3: detected capacity change from 0 to 8192 [ 84.898756][ T4368] loop1: detected capacity change from 0 to 8192 [ 84.916807][ T4359] loop3: p1 < > p2 p4 < p5 > [ 84.929367][ T4359] loop3: partition table partially beyond EOD, truncated [ 84.940788][ T4368] loop1: p1 < > p2 p4 < p5 > [ 84.945271][ T4359] loop3: p1 start 134217728 is beyond EOD, truncated [ 84.951533][ T4368] loop1: partition table partially beyond EOD, truncated [ 84.957521][ T4359] loop3: p2 size 67072 extends beyond EOD, [ 84.962347][ T4370] loop4: detected capacity change from 0 to 2048 [ 84.966005][ T4359] truncated [ 84.972140][ T4368] loop1: p1 start 134217728 is beyond EOD, truncated [ 84.986499][ T4368] loop1: p2 size 67072 extends beyond EOD, truncated [ 84.995782][ T4359] loop3: p5 size 67072 extends beyond EOD, truncated [ 85.012690][ T4368] loop1: p5 size 67072 extends beyond EOD, truncated [ 85.025020][ T4370] loop4: p3 < > p4 < > [ 85.029912][ T4370] loop4: partition table partially beyond EOD, truncated [ 85.044911][ T4370] loop4: p3 start 4284289 is beyond EOD, truncated [ 85.449392][ T4391] siw: device registration error -23 [ 85.483048][ T4391] loop5: detected capacity change from 0 to 164 [ 85.594379][ T28] audit: type=1400 audit(1777301439.629:280): avc: denied { mount } for pid=4386 comm="syz.5.178" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 86.056112][ T4389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.146740][ T4394] netlink: 436 bytes leftover after parsing attributes in process `syz.3.180'. [ 86.158590][ T4394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.180'. [ 86.218921][ T4396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.413573][ T4372] loop2: detected capacity change from 0 to 8192 [ 86.618512][ T4404] loop4: detected capacity change from 0 to 512 [ 86.733309][ T4404] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 86.751766][ T4404] EXT4-fs (loop4): mount failed [ 87.192515][ T4414] loop3: detected capacity change from 0 to 1024 [ 87.239226][ T4414] EXT4-fs: inline encryption not supported [ 87.299559][ T4414] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 87.606227][ T4414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.610090][ T4402] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.639161][ T28] audit: type=1400 audit(1777301441.699:281): avc: denied { setattr } for pid=4413 comm="syz.3.186" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.661989][ T4414] FAULT_INJECTION: forcing a failure. [ 87.661989][ T4414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.675545][ T4414] CPU: 1 UID: 0 PID: 4414 Comm: syz.3.186 Tainted: G W syzkaller #0 PREEMPT(full) [ 87.675584][ T4414] Tainted: [W]=WARN [ 87.675592][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 87.675605][ T4414] Call Trace: [ 87.675614][ T4414] [ 87.675622][ T4414] __dump_stack+0x1d/0x30 [ 87.675652][ T4414] dump_stack_lvl+0x95/0xd0 [ 87.675745][ T4414] dump_stack+0x15/0x1b [ 87.675763][ T4414] should_fail_ex+0x263/0x280 [ 87.675849][ T4414] should_fail+0xb/0x20 [ 87.675878][ T4414] should_fail_usercopy+0x1a/0x20 [ 87.675917][ T4414] _copy_to_user+0x20/0xa0 [ 87.675958][ T4414] simple_read_from_buffer+0xb5/0x130 [ 87.676028][ T4414] proc_fail_nth_read+0x10e/0x150 [ 87.676066][ T4414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.676102][ T4414] vfs_read+0x1ab/0x7f0 [ 87.676163][ T4414] ? __rcu_read_unlock+0x4e/0x70 [ 87.676183][ T4414] ? __fget_files+0x184/0x1c0 [ 87.676219][ T4414] ? mutex_lock+0x57/0x90 [ 87.676250][ T4414] ksys_read+0xdc/0x1a0 [ 87.676303][ T4414] __x64_sys_read+0x40/0x50 [ 87.676355][ T4414] x64_sys_call+0x2886/0x3020 [ 87.676380][ T4414] do_syscall_64+0x12c/0x3b0 [ 87.676403][ T4414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.676432][ T4414] RIP: 0033:0x7ff2d737d60e [ 87.676462][ T4414] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.676484][ T4414] RSP: 002b:00007ff2d5e16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.676509][ T4414] RAX: ffffffffffffffda RBX: 00007ff2d5e176c0 RCX: 00007ff2d737d60e [ 87.676523][ T4414] RDX: 000000000000000f RSI: 00007ff2d5e170a0 RDI: 0000000000000004 [ 87.676536][ T4414] RBP: 00007ff2d5e17090 R08: 0000000000000000 R09: 0000000000000000 [ 87.676548][ T4414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.676608][ T4414] R13: 00007ff2d7636038 R14: 00007ff2d7635fa0 R15: 00007ffc786e29b8 [ 87.676632][ T4414] [ 87.908544][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.967244][ T28] audit: type=1400 audit(1777301442.029:282): avc: denied { listen } for pid=4422 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.384501][ T4432] loop2: detected capacity change from 0 to 512 [ 88.452767][ T4432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.538214][ T28] audit: type=1400 audit(1777301442.509:283): avc: denied { unmount } for pid=3558 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 88.744206][ T4442] loop5: detected capacity change from 0 to 128 [ 88.886796][ T4442] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.930774][ T28] audit: type=1400 audit(1777301442.549:284): avc: denied { mounton } for pid=4429 comm="syz.2.193" path="/44/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.986651][ T4428] loop1: detected capacity change from 0 to 8192 [ 88.998249][ T4442] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.031872][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.094110][ T4451] netlink: 436 bytes leftover after parsing attributes in process `syz.4.197'. [ 89.120326][ T3558] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.125799][ T4451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.197'. [ 89.141504][ T4428] loop1: p1 < > p2 p4 < p5 > [ 89.182261][ T4428] loop1: partition table partially beyond EOD, truncated [ 89.278385][ T4428] loop1: p1 start 134217728 is beyond EOD, truncated [ 89.417026][ T4428] loop1: p2 size 67072 extends beyond EOD, truncated [ 89.596344][ T4428] loop1: p5 size 67072 extends beyond EOD, truncated [ 90.252654][ T4474] FAULT_INJECTION: forcing a failure. [ 90.252654][ T4474] name failslab, interval 1, probability 0, space 0, times 0 [ 90.269262][ T4474] CPU: 1 UID: 0 PID: 4474 Comm: syz.4.204 Tainted: G W syzkaller #0 PREEMPT(full) [ 90.269299][ T4474] Tainted: [W]=WARN [ 90.269381][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 90.269398][ T4474] Call Trace: [ 90.269405][ T4474] [ 90.269411][ T4474] __dump_stack+0x1d/0x30 [ 90.269436][ T4474] dump_stack_lvl+0x95/0xd0 [ 90.269463][ T4474] dump_stack+0x15/0x1b [ 90.269483][ T4474] should_fail_ex+0x263/0x280 [ 90.269539][ T4474] should_failslab+0x8c/0xb0 [ 90.269581][ T4474] __kvmalloc_node_noprof+0x155/0x640 [ 90.269606][ T4474] ? rhashtable_init_noprof+0x306/0x440 [ 90.269637][ T4474] rhashtable_init_noprof+0x306/0x440 [ 90.269807][ T4474] rhltable_init_noprof+0x1d/0x40 [ 90.269940][ T4474] nf_tables_newtable+0x522/0xea0 [ 90.270012][ T4474] nfnetlink_rcv+0xc15/0x1720 [ 90.270067][ T4474] netlink_unicast+0x5a8/0x680 [ 90.270157][ T4474] netlink_sendmsg+0x5c8/0x6f0 [ 90.270196][ T4474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.270232][ T4474] ____sys_sendmsg+0x563/0x5b0 [ 90.270257][ T4474] ___sys_sendmsg+0x195/0x1e0 [ 90.270296][ T4474] __x64_sys_sendmsg+0xd4/0x160 [ 90.270328][ T4474] x64_sys_call+0x194c/0x3020 [ 90.270354][ T4474] do_syscall_64+0x12c/0x3b0 [ 90.270383][ T4474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.270406][ T4474] RIP: 0033:0x7f2f271ecdd9 [ 90.270426][ T4474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.270446][ T4474] RSP: 002b:00007f2f25c47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.270518][ T4474] RAX: ffffffffffffffda RBX: 00007f2f27465fa0 RCX: 00007f2f271ecdd9 [ 90.270538][ T4474] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 90.270551][ T4474] RBP: 00007f2f25c47090 R08: 0000000000000000 R09: 0000000000000000 [ 90.270564][ T4474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.270576][ T4474] R13: 00007f2f27466038 R14: 00007f2f27465fa0 R15: 00007ffc2a4c9278 [ 90.270594][ T4474] [ 90.521149][ T28] audit: type=1400 audit(1777301444.579:285): avc: denied { bind } for pid=4454 comm="syz.5.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.558283][ T4477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.206'. [ 90.800199][ T4495] loop5: detected capacity change from 0 to 1024 [ 90.834393][ T4495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.012874][ T4499] loop1: detected capacity change from 0 to 512 [ 91.100073][ T4499] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 91.118481][ T4499] EXT4-fs (loop1): mount failed [ 92.433563][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.743639][ T28] audit: type=1400 audit(1777301446.799:286): avc: denied { create } for pid=4509 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.792349][ T28] audit: type=1400 audit(1777301446.849:287): avc: denied { ioctl } for pid=4479 comm="syz.3.208" path="socket:[7585]" dev="sockfs" ino=7585 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.818258][ T28] audit: type=1400 audit(1777301446.849:288): avc: denied { bind } for pid=4509 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.905451][ T28] audit: type=1400 audit(1777301446.849:289): avc: denied { setopt } for pid=4509 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.926947][ T28] audit: type=1400 audit(1777301446.849:290): avc: denied { write } for pid=4509 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.962497][ T3725] IPVS: starting estimator thread 0... [ 92.974866][ T4516] netlink: 'syz.4.219': attribute type 28 has an invalid length. [ 92.989161][ T4516] netlink: 'syz.4.219': attribute type 3 has an invalid length. [ 93.012229][ T4516] netlink: 132 bytes leftover after parsing attributes in process `syz.4.219'. [ 93.054422][ T4517] IPVS: using max 1776 ests per chain, 88800 per kthread [ 93.084630][ T4516] tipc: Started in network mode [ 93.089892][ T4516] tipc: Node identity ac14140f, cluster identity 4711 [ 93.103962][ T4516] tipc: New replicast peer: 255.255.255.255 [ 93.120550][ T4516] tipc: Enabled bearer , priority 10 [ 93.907292][ T28] audit: type=1400 audit(1777301447.339:291): avc: denied { sqpoll } for pid=4518 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.765753][ T3725] tipc: Node number set to 2886997007 [ 95.299978][ T4540] loop4: detected capacity change from 0 to 1024 [ 95.663537][ T4540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.844157][ T4551] loop3: detected capacity change from 0 to 1024 [ 95.852955][ T4551] EXT4-fs: test_dummy_encryption option not supported [ 96.174984][ T4554] loop3: detected capacity change from 0 to 512 [ 96.841624][ T28] audit: type=1400 audit(1777301450.899:292): avc: denied { read } for pid=4555 comm="syz.5.228" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.873015][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.768489][ T4554] EXT4-fs (loop3): 1 orphan inode deleted [ 97.775659][ T4554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.789324][ T4554] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.866028][ T30] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 97.876191][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 98.355852][ T28] audit: type=1400 audit(1777301452.339:293): avc: denied { ioctl } for pid=4557 comm="syz.2.230" path="socket:[8542]" dev="sockfs" ino=8542 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.453883][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.839072][ T28] audit: type=1400 audit(1777301452.899:294): avc: denied { getopt } for pid=4574 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.901110][ T28] audit: type=1400 audit(1777301452.899:295): avc: denied { listen } for pid=4574 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 98.970508][ T4581] loop1: detected capacity change from 0 to 512 [ 99.105572][ T4585] loop4: detected capacity change from 0 to 1024 [ 99.133494][ T4585] EXT4-fs: test_dummy_encryption option not supported [ 99.983961][ T4587] loop4: detected capacity change from 0 to 512 [ 100.085079][ T4587] EXT4-fs (loop4): 1 orphan inode deleted [ 100.102372][ T4587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.117014][ T68] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 100.130604][ T4587] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.380538][ T68] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 100.620849][ T4593] loop3: detected capacity change from 0 to 1024 [ 100.678663][ T4593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.756187][ T4597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 100.802861][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.205010][ T4581] EXT4-fs: Ignoring removed bh option [ 101.213506][ T4581] EXT4-fs: inline encryption not supported [ 101.230916][ T4581] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.275595][ T4581] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 101.316133][ T4581] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.235: bg 0: block 248: padding at end of block bitmap is not set [ 101.371896][ T4581] loop1: lost filesystem error report for type 5 error -117 [ 101.374166][ T4581] Quota error (device loop1): write_blk: dquota write failed [ 101.374191][ T4581] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 101.374273][ T4581] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.235: Failed to acquire dquot type 1 [ 101.374299][ T4581] loop1: lost filesystem error report for type 5 error -28 [ 101.374347][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 101.374367][ C0] EXT4-fs (loop1): last error at time 1777301455: ext4_validate_block_bitmap:441 [ 101.384047][ T4581] EXT4-fs (loop1): 1 truncate cleaned up [ 101.384750][ T4581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 101.604543][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.623051][ T4605] loop3: detected capacity change from 0 to 1024 [ 101.630182][ T4605] EXT4-fs: test_dummy_encryption option not supported [ 101.699823][ T28] audit: type=1400 audit(1777301455.759:296): avc: denied { create } for pid=4606 comm="syz.5.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.753936][ T28] audit: type=1400 audit(1777301455.779:297): avc: denied { connect } for pid=4606 comm="syz.5.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.825011][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 101.849925][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 101.849942][ T28] audit: type=1400 audit(1777301455.899:299): avc: denied { cpu } for pid=4610 comm="syz.5.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 102.001763][ T4616] loop3: detected capacity change from 0 to 512 [ 102.074832][ T4616] EXT4-fs (loop3): 1 orphan inode deleted [ 102.093627][ T4616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.111603][ T4616] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.293842][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 102.375928][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 102.632883][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 102.678309][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 102.722946][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 102.827643][ T30] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 102.882514][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 102.908736][ T4634] loop4: detected capacity change from 0 to 1024 [ 102.962817][ T4634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.049808][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.294945][ T4621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.428676][ T4630] loop5: detected capacity change from 0 to 8192 [ 103.687242][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.713529][ T28] audit: type=1400 audit(1777301457.769:300): avc: denied { create } for pid=4639 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.736447][ T28] audit: type=1400 audit(1777301457.779:301): avc: denied { setopt } for pid=4639 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.767820][ T4640] loop4: detected capacity change from 0 to 1024 [ 103.783463][ T4642] loop3: detected capacity change from 0 to 512 [ 103.809431][ T4640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.858702][ T4649] syz.3.252: attempt to access beyond end of device [ 103.858702][ T4649] loop3: rw=1, sector=560, nr_sectors = 32 limit=512 [ 103.896412][ T28] audit: type=1400 audit(1777301457.959:302): avc: denied { name_bind } for pid=4643 comm="syz.1.253" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 103.904456][ T4644] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.928257][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.934170][ T4649] syz.3.252: attempt to access beyond end of device [ 103.934170][ T4649] loop3: rw=1, sector=624, nr_sectors = 32 limit=512 [ 103.950673][ T4649] syz.3.252: attempt to access beyond end of device [ 103.950673][ T4649] loop3: rw=1, sector=688, nr_sectors = 32 limit=512 [ 103.991064][ T4651] loop1: detected capacity change from 0 to 1024 [ 104.005587][ T4651] EXT4-fs: test_dummy_encryption option not supported [ 104.021459][ T4649] syz.3.252: attempt to access beyond end of device [ 104.021459][ T4649] loop3: rw=1, sector=752, nr_sectors = 32 limit=512 [ 104.091179][ T4656] 9p: Bad value for 'rfdno' [ 104.146928][ T4649] syz.3.252: attempt to access beyond end of device [ 104.146928][ T4649] loop3: rw=1, sector=816, nr_sectors = 32 limit=512 [ 104.164013][ T4649] syz.3.252: attempt to access beyond end of device [ 104.164013][ T4649] loop3: rw=1, sector=880, nr_sectors = 32 limit=512 [ 104.203756][ T4659] loop4: detected capacity change from 0 to 512 [ 104.212277][ T4649] syz.3.252: attempt to access beyond end of device [ 104.212277][ T4649] loop3: rw=1, sector=944, nr_sectors = 32 limit=512 [ 104.235511][ T4659] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 104.373458][ T4660] loop1: detected capacity change from 0 to 512 [ 104.454981][ T4649] syz.3.252: attempt to access beyond end of device [ 104.454981][ T4649] loop3: rw=1, sector=1008, nr_sectors = 32 limit=512 [ 104.496298][ T4649] syz.3.252: attempt to access beyond end of device [ 104.496298][ T4649] loop3: rw=1, sector=1072, nr_sectors = 32 limit=512 [ 104.511410][ T4649] syz.3.252: attempt to access beyond end of device [ 104.511410][ T4649] loop3: rw=1, sector=1136, nr_sectors = 32 limit=512 [ 104.569784][ T4659] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.258: corrupted xattr entries [ 104.607833][ T4660] EXT4-fs (loop1): 1 orphan inode deleted [ 104.626119][ T4660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.643582][ T4660] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.798869][ T36] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 104.830906][ T4659] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.831810][ T4659] EXT4-fs (loop4): 1 truncate cleaned up [ 104.841043][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 104.841060][ C0] EXT4-fs (loop4): initial error at time 1777301458: xattr_find_entry:337: inode 15 [ 104.841100][ C0] EXT4-fs (loop4): last error at time 1777301458: xattr_find_entry:337: inode 15 [ 105.053475][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 105.094582][ T4659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.111604][ T28] audit: type=1400 audit(1777301459.169:303): avc: denied { watch } for pid=4658 comm="syz.4.258" path="/56/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.147771][ T28] audit: type=1400 audit(1777301459.199:304): avc: denied { setattr } for pid=4658 comm="syz.4.258" path="/56/file0/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 105.173839][ T28] audit: type=1400 audit(1777301459.199:305): avc: denied { remove_name } for pid=4658 comm="syz.4.258" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.196760][ T28] audit: type=1400 audit(1777301459.199:306): avc: denied { rename } for pid=4658 comm="syz.4.258" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.227862][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.268791][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 105.668987][ T4689] loop5: detected capacity change from 0 to 512 [ 105.771274][ T4691] FAULT_INJECTION: forcing a failure. [ 105.771274][ T4691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.801548][ T4691] CPU: 0 UID: 0 PID: 4691 Comm: syz.5.268 Tainted: G W syzkaller #0 PREEMPT(full) [ 105.801588][ T4691] Tainted: [W]=WARN [ 105.801597][ T4691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.801682][ T4691] Call Trace: [ 105.801690][ T4691] [ 105.801700][ T4691] __dump_stack+0x1d/0x30 [ 105.801730][ T4691] dump_stack_lvl+0x95/0xd0 [ 105.801755][ T4691] dump_stack+0x15/0x1b [ 105.801826][ T4691] should_fail_ex+0x263/0x280 [ 105.801864][ T4691] should_fail+0xb/0x20 [ 105.801929][ T4691] should_fail_usercopy+0x1a/0x20 [ 105.802011][ T4691] _copy_from_user+0x1c/0xb0 [ 105.802042][ T4691] ipv6_flowlabel_opt+0xa3/0x19c0 [ 105.802086][ T4691] ? lockref_put_return+0xf7/0x130 [ 105.802128][ T4691] ? __rcu_read_unlock+0x4e/0x70 [ 105.802170][ T4691] ? terminate_walk+0x1e6/0x210 [ 105.802236][ T4691] ? path_openat+0x1ab2/0x2050 [ 105.802271][ T4691] ? lock_sock_nested+0x84/0x110 [ 105.802369][ T4691] do_ipv6_setsockopt+0xb4e/0x2130 [ 105.802401][ T4691] ? kstrtoull+0x111/0x140 [ 105.802430][ T4691] ? avc_has_perm_noaudit+0xab/0x130 [ 105.802469][ T4691] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 105.802551][ T4691] ipv6_setsockopt+0x59/0x130 [ 105.802591][ T4691] udpv6_setsockopt+0x89/0xa0 [ 105.802688][ T4691] sock_common_setsockopt+0x69/0x80 [ 105.802720][ T4691] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 105.802758][ T4691] __sys_setsockopt+0x184/0x200 [ 105.802787][ T4691] __x64_sys_setsockopt+0x64/0x80 [ 105.802857][ T4691] x64_sys_call+0x2327/0x3020 [ 105.802882][ T4691] do_syscall_64+0x12c/0x3b0 [ 105.802941][ T4691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.802976][ T4691] RIP: 0033:0x7f21585ecdd9 [ 105.803022][ T4691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.803039][ T4691] RSP: 002b:00007f215703f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.803059][ T4691] RAX: ffffffffffffffda RBX: 00007f2158865fa0 RCX: 00007f21585ecdd9 [ 105.803073][ T4691] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 105.803087][ T4691] RBP: 00007f215703f090 R08: 0000000000000020 R09: 0000000000000000 [ 105.803143][ T4691] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 105.803159][ T4691] R13: 00007f2158866038 R14: 00007f2158865fa0 R15: 00007ffd3325abf8 [ 105.803183][ T4691] [ 106.226252][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.347947][ T4681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.395686][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 106.404810][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 106.413880][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 106.422943][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 106.432006][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 106.441186][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 106.474513][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 106.485461][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 106.532602][ T4699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.269'. [ 106.543957][ T4646] loop2: detected capacity change from 0 to 8192 [ 106.545605][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 106.732910][ T4708] loop1: detected capacity change from 0 to 512 [ 106.865047][ T4709] team0: Port device dummy0 removed [ 106.907571][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.974134][ T4704] bridge_slave_0 (unregistering): left allmulticast mode [ 107.001486][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.101829][ T4745] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.453387][ T4758] loop5: detected capacity change from 0 to 512 [ 108.470710][ T4757] loop3: detected capacity change from 0 to 512 [ 108.535712][ T4758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.662656][ T4757] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 108.682325][ T4757] EXT4-fs (loop3): mount failed [ 110.421851][ T4755] loop4: detected capacity change from 0 to 8192 [ 110.568304][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.614239][ T4755] loop4: p1 < > p2 p4 < p5 > [ 110.795130][ T4755] loop4: partition table partially beyond EOD, truncated [ 110.841664][ T4755] loop4: p1 start 134217728 is beyond EOD, truncated [ 110.854737][ T4755] loop4: p2 size 67072 extends beyond EOD, truncated [ 110.888070][ T4755] loop4: p5 size 67072 extends beyond EOD, truncated [ 110.948517][ T2982] loop4: p1 < > p2 p4 < p5 > [ 110.956868][ T2982] loop4: partition table partially beyond EOD, truncated [ 110.972894][ T2982] loop4: p1 start 134217728 is beyond EOD, truncated [ 110.999184][ T2982] loop4: p2 size 67072 extends beyond EOD, truncated [ 111.021917][ T2982] loop4: p5 size 67072 extends beyond EOD, truncated [ 111.150709][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 111.150729][ T28] audit: type=1400 audit(1777301465.209:308): avc: denied { create } for pid=4784 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 111.212980][ T4790] netlink: 'syz.3.295': attribute type 39 has an invalid length. [ 111.369693][ T4796] loop4: detected capacity change from 0 to 512 [ 111.457081][ T4796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.933911][ T4801] loop1: detected capacity change from 0 to 8192 [ 111.960949][ T4804] __nla_validate_parse: 182 callbacks suppressed [ 111.960971][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.298'. [ 111.992746][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.298'. [ 112.014683][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.298'. [ 112.027229][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.298'. [ 112.037002][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.298'. [ 112.046338][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.298'. [ 112.055814][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.298'. [ 112.065257][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.298'. [ 112.075444][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.298'. [ 112.086010][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.298'. [ 112.144654][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.184951][ T4794] usb usb1: usbfs: process 4794 (syz.3.295) did not claim interface 0 before use [ 112.195294][ T4794] vhci_hcd vhci_hcd.0: default hub control req: 0100 v0004 i0000 l0 [ 112.195452][ T4807] loop2: detected capacity change from 0 to 1024 [ 112.210965][ T4807] EXT4-fs: test_dummy_encryption option not supported [ 112.395751][ T4819] loop5: detected capacity change from 0 to 1024 [ 112.413144][ T4819] EXT4-fs: Ignoring removed bh option [ 112.556674][ T4824] loop2: detected capacity change from 0 to 512 [ 112.637721][ T4824] EXT4-fs (loop2): 1 orphan inode deleted [ 112.659504][ T4824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.678741][ T4824] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.849326][ T4819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.891274][ T28] audit: type=1400 audit(1777301466.919:309): avc: denied { ioctl } for pid=4820 comm="syz.4.304" path="socket:[8822]" dev="sockfs" ino=8822 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.422985][ T36] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 113.437868][ T36] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 113.462359][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.220333][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.569507][ T4842] loop3: detected capacity change from 0 to 1024 [ 114.576845][ T4842] EXT4-fs: test_dummy_encryption option not supported [ 114.814052][ T4854] loop3: detected capacity change from 0 to 512 [ 114.956068][ T4854] EXT4-fs (loop3): 1 orphan inode deleted [ 114.963253][ T4854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.977329][ T4854] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.057517][ T3455] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 115.127406][ T3455] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 115.251929][ T28] audit: type=1400 audit(1777301469.309:310): avc: denied { execmod } for pid=4850 comm="syz.2.313" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 115.378360][ T28] audit: type=1400 audit(1777301469.339:311): avc: denied { execute } for pid=4850 comm="syz.2.313" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 115.491981][ T4861] loop4: detected capacity change from 0 to 8192 [ 116.496482][ T4868] loop1: detected capacity change from 0 to 512 [ 116.534752][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.552657][ T4868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.829753][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.870667][ T4874] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.899070][ T4876] loop1: detected capacity change from 0 to 1024 [ 116.934588][ T4876] EXT4-fs: test_dummy_encryption option not supported [ 117.014872][ T4878] loop2: detected capacity change from 0 to 512 [ 117.190754][ T4878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.342786][ T4883] loop1: detected capacity change from 0 to 512 [ 117.443734][ T4883] EXT4-fs (loop1): 1 orphan inode deleted [ 117.456696][ T4883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.479059][ T36] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 117.493967][ T4883] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.574829][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 118.982997][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.015111][ T4892] loop5: detected capacity change from 0 to 512 [ 119.113828][ T4895] bio_check_eod: 206 callbacks suppressed [ 119.113847][ T4895] syz.5.322: attempt to access beyond end of device [ 119.113847][ T4895] loop5: rw=1, sector=560, nr_sectors = 8 limit=512 [ 119.160633][ T4897] loop2: detected capacity change from 0 to 2048 [ 119.215581][ T4897] loop2: p4 < > [ 119.462539][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 119.477234][ T4903] loop3: detected capacity change from 0 to 8192 [ 119.488495][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.534995][ T4903] loop3: p1 < > p2 p4 < p5 > [ 119.548552][ T4906] __nla_validate_parse: 2 callbacks suppressed [ 119.548647][ T4906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 119.568395][ T4903] loop3: partition table partially beyond EOD, truncated [ 119.576736][ T4906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 119.586309][ T4903] loop3: p1 start 134217728 is beyond EOD, truncated [ 119.600011][ T4903] loop3: p2 size 67072 extends beyond EOD, truncated [ 119.601969][ T4906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 119.611702][ T4903] loop3: p5 size 67072 extends beyond EOD, truncated [ 119.630265][ T4906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 119.639947][ T2982] loop3: p1 < > p2 p4 < p5 > [ 119.647977][ T2982] loop3: partition table partially beyond EOD, truncated [ 119.664927][ T4906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 119.671778][ T2982] loop3: p1 start 134217728 is beyond EOD, truncated [ 119.685728][ T28] audit: type=1400 audit(1777301473.749:312): avc: denied { read } for pid=4916 comm="syz.1.330" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.710594][ T4906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 119.713966][ T2982] loop3: p2 size 67072 extends beyond EOD, truncated [ 119.744566][ T4906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 119.747691][ T2982] loop3: p5 size 67072 extends beyond EOD, [ 119.754436][ T28] audit: type=1400 audit(1777301473.749:313): avc: denied { open } for pid=4916 comm="syz.1.330" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.790452][ T2982] truncated [ 119.796526][ T4906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 119.852484][ T4906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 119.855152][ T28] audit: type=1400 audit(1777301473.749:314): avc: denied { ioctl } for pid=4916 comm="syz.1.330" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 119.897866][ T3455] kworker/u8:8: attempt to access beyond end of device [ 119.897866][ T3455] loop5: rw=1, sector=568, nr_sectors = 24 limit=512 [ 119.907924][ T4906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 119.925653][ T3455] kworker/u8:8: attempt to access beyond end of device [ 119.925653][ T3455] loop5: rw=1, sector=624, nr_sectors = 32 limit=512 [ 119.958668][ T3455] kworker/u8:8: attempt to access beyond end of device [ 119.958668][ T3455] loop5: rw=1, sector=688, nr_sectors = 32 limit=512 [ 120.021332][ T4920] loop4: detected capacity change from 0 to 8192 [ 120.021795][ T3455] kworker/u8:8: attempt to access beyond end of device [ 120.021795][ T3455] loop5: rw=1, sector=752, nr_sectors = 32 limit=512 [ 120.046959][ T3455] kworker/u8:8: attempt to access beyond end of device [ 120.046959][ T3455] loop5: rw=1, sector=816, nr_sectors = 32 limit=512 [ 120.061082][ T3455] kworker/u8:8: attempt to access beyond end of device [ 120.061082][ T3455] loop5: rw=1, sector=880, nr_sectors = 32 limit=512 [ 120.091126][ T4920] loop4: p1 < > p2 p4 < p5 > [ 120.103088][ T3455] kworker/u8:8: attempt to access beyond end of device [ 120.103088][ T3455] loop5: rw=1, sector=944, nr_sectors = 32 limit=512 [ 120.119696][ T4920] loop4: partition table partially beyond EOD, truncated [ 120.159676][ T3455] kworker/u8:8: attempt to access beyond end of device [ 120.159676][ T3455] loop5: rw=1, sector=1008, nr_sectors = 32 limit=512 [ 120.168484][ T4920] loop4: p1 start 134217728 is beyond EOD, truncated [ 120.206942][ T3455] kworker/u8:8: attempt to access beyond end of device [ 120.206942][ T3455] loop5: rw=1, sector=1072, nr_sectors = 32 limit=512 [ 120.239352][ T4925] loop2: detected capacity change from 0 to 8192 [ 120.249334][ T4920] loop4: p2 size 67072 extends beyond EOD, truncated [ 120.305051][ T4925] loop2: p1 < > p2 p4 < p5 > [ 120.311577][ T4925] loop2: partition table partially beyond EOD, truncated [ 120.324447][ T4925] loop2: p1 start 134217728 is beyond EOD, truncated [ 120.336193][ T4920] loop4: p5 size 67072 extends beyond EOD, truncated [ 120.364521][ T4925] loop2: p2 size 67072 extends beyond EOD, truncated [ 120.480940][ T4925] loop2: p5 size 67072 extends beyond EOD, truncated [ 120.694939][ T4944] loop5: detected capacity change from 0 to 512 [ 120.728781][ T4944] EXT4-fs (loop5): 1 truncate cleaned up [ 120.768248][ T4944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.903283][ T4944] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.5.338: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 120.933239][ T4947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.010592][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.101993][ T28] audit: type=1400 audit(1777301475.159:315): avc: denied { read } for pid=4949 comm="syz.5.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 121.145557][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 121.161707][ T4955] EXT4-fs: test_dummy_encryption option not supported [ 121.306115][ T4959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 121.323403][ T4959] EXT4-fs error (device loop3): ext4_find_extent:904: inode #2: comm syz.3.343: inode has invalid extent depth: 7 [ 121.330133][ T28] audit: type=1400 audit(1777301475.389:316): avc: denied { getopt } for pid=4961 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 121.364464][ T4963] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 0, id = 0 [ 121.378764][ T4962] IPVS: stopping backup sync thread 4963 ... [ 121.615502][ T4965] EXT4-fs (loop4): 1 orphan inode deleted [ 121.622129][ T4965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.635528][ T4965] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.715385][ T30] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 121.746168][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.779433][ T30] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 122.264484][ T4975] set_capacity_and_notify: 3 callbacks suppressed [ 122.264559][ T4975] loop1: detected capacity change from 0 to 512 [ 122.365540][ T28] audit: type=1400 audit(1777301476.369:317): avc: denied { connect } for pid=4949 comm="syz.5.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 122.387982][ T4975] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 122.403030][ T4975] EXT4-fs (loop1): mount failed [ 122.498353][ T4971] loop2: detected capacity change from 0 to 8192 [ 123.034737][ T4971] loop2: p1 < > p2 p4 < p5 > [ 123.039651][ T4971] loop2: partition table partially beyond EOD, truncated [ 123.048512][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.057961][ T4971] loop2: p1 start 134217728 is beyond EOD, truncated [ 123.064682][ T4971] loop2: p2 size 67072 extends beyond EOD, truncated [ 123.078419][ T4971] loop2: p5 size 67072 extends beyond EOD, truncated [ 123.172121][ T4983] loop4: detected capacity change from 0 to 8192 [ 123.248715][ T28] audit: type=1400 audit(1777301477.269:318): avc: denied { connect } for pid=4982 comm="syz.4.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.389848][ T4993] loop4: detected capacity change from 0 to 512 [ 123.440808][ T4993] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 123.474556][ T4993] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 123.511997][ T28] audit: type=1400 audit(1777301477.569:319): avc: denied { ioctl } for pid=4990 comm="syz.4.351" path="socket:[9008]" dev="sockfs" ino=9008 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.541657][ T4980] loop3: detected capacity change from 0 to 8192 [ 123.696312][ T5004] Cannot find add_set index 0 as target [ 124.441537][ T5015] loop3: detected capacity change from 0 to 1764 [ 124.812560][ T28] audit: type=1400 audit(1777301478.479:320): avc: denied { create } for pid=5008 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.052075][ T28] audit: type=1400 audit(1777301478.489:321): avc: denied { create } for pid=5008 comm="syz.3.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 126.146762][ T5022] loop5: detected capacity change from 0 to 1024 [ 126.158494][ T5021] __nla_validate_parse: 5 callbacks suppressed [ 126.158566][ T5021] netlink: 36 bytes leftover after parsing attributes in process `syz.1.359'. [ 126.162112][ T5017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.205390][ T5026] loop1: detected capacity change from 0 to 1024 [ 126.212329][ T5026] EXT4-fs: test_dummy_encryption option not supported [ 126.227992][ T5022] EXT4-fs: test_dummy_encryption option not supported [ 126.318584][ T5027] loop4: detected capacity change from 0 to 8192 [ 126.417356][ T5027] loop4: p1 < > p2 p4 < p5 > [ 126.422327][ T5027] loop4: partition table partially beyond EOD, truncated [ 126.439173][ T5027] loop4: p1 start 134217728 is beyond EOD, truncated [ 126.450851][ T5027] loop4: p2 size 67072 extends beyond EOD, truncated [ 126.475376][ T5027] loop4: p5 size 67072 extends beyond EOD, truncated [ 126.606276][ T5031] loop5: detected capacity change from 0 to 512 [ 126.632412][ T2982] loop4: p1 < > p2 p4 < p5 > [ 126.637670][ T2982] loop4: partition table partially beyond EOD, truncated [ 126.661874][ T2982] loop4: p1 start 134217728 is beyond EOD, truncated [ 126.689775][ T2982] loop4: p2 size 67072 extends beyond EOD, truncated [ 127.388221][ T2982] loop4: p5 size 67072 extends beyond EOD, truncated [ 127.574510][ T5033] loop1: detected capacity change from 0 to 512 [ 129.368924][ T5031] EXT4-fs: error -4 creating inode table initialization thread [ 129.379394][ T5031] EXT4-fs (loop5): mount failed [ 129.639094][ T5033] EXT4-fs warning (device loop1): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop1. [ 129.738177][ T5038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.841837][ T28] audit: type=1400 audit(1777301483.899:322): avc: denied { getopt } for pid=5042 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.970172][ T28] audit: type=1400 audit(1777301483.979:323): avc: denied { prog_load } for pid=5044 comm="syz.5.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 130.068823][ T28] audit: type=1400 audit(1777301483.979:324): avc: denied { bpf } for pid=5044 comm="syz.5.365" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 130.089308][ T28] audit: type=1400 audit(1777301484.049:325): avc: denied { map_create } for pid=5052 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 130.108412][ T28] audit: type=1400 audit(1777301484.049:326): avc: denied { execmem } for pid=5052 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 130.134255][ T28] audit: type=1400 audit(1777301484.049:327): avc: denied { read write } for pid=3558 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.159428][ T28] audit: type=1400 audit(1777301484.049:328): avc: denied { open } for pid=3558 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.183786][ T28] audit: type=1400 audit(1777301484.049:329): avc: denied { ioctl } for pid=3558 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.216080][ T28] audit: type=1400 audit(1777301484.079:330): avc: denied { read write } for pid=5053 comm="syz.4.367" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.240201][ T28] audit: type=1400 audit(1777301484.079:331): avc: denied { open } for pid=5053 comm="syz.4.367" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.678903][ T5072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'. [ 131.130027][ T5081] loop2: detected capacity change from 0 to 8192 [ 131.185167][ T5081] loop2: p1 < > p2 p4 < p5 > [ 131.190112][ T5081] loop2: partition table partially beyond EOD, truncated [ 131.198146][ T5081] loop2: p1 start 134217728 is beyond EOD, truncated [ 131.205329][ T5081] loop2: p2 size 67072 extends beyond EOD, truncated [ 131.230963][ T5081] loop2: p5 size 67072 extends beyond EOD, truncated [ 131.335514][ T5085] FAULT_INJECTION: forcing a failure. [ 131.335514][ T5085] name failslab, interval 1, probability 0, space 0, times 0 [ 131.436540][ T5085] CPU: 1 UID: 0 PID: 5085 Comm: syz.1.377 Tainted: G W syzkaller #0 PREEMPT(full) [ 131.436611][ T5085] Tainted: [W]=WARN [ 131.436621][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.436640][ T5085] Call Trace: [ 131.436649][ T5085] [ 131.436659][ T5085] __dump_stack+0x1d/0x30 [ 131.436686][ T5085] dump_stack_lvl+0x95/0xd0 [ 131.436752][ T5085] dump_stack+0x15/0x1b [ 131.436775][ T5085] should_fail_ex+0x263/0x280 [ 131.436804][ T5085] should_failslab+0x8c/0xb0 [ 131.436842][ T5085] __kmalloc_noprof+0xb8/0x4d0 [ 131.436911][ T5085] ? bpf_test_init+0x86/0x130 [ 131.436939][ T5085] bpf_test_init+0x86/0x130 [ 131.436971][ T5085] bpf_prog_test_run_xdp+0x306/0xa10 [ 131.437005][ T5085] ? __rcu_read_unlock+0x4e/0x70 [ 131.437088][ T5085] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 131.437192][ T5085] bpf_prog_test_run+0x204/0x340 [ 131.437229][ T5085] __sys_bpf+0x52e/0x7e0 [ 131.437270][ T5085] __x64_sys_bpf+0x41/0x50 [ 131.437312][ T5085] x64_sys_call+0x10cb/0x3020 [ 131.437342][ T5085] do_syscall_64+0x12c/0x3b0 [ 131.437373][ T5085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.437402][ T5085] RIP: 0033:0x7f2e442ccdd9 [ 131.437427][ T5085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.437485][ T5085] RSP: 002b:00007f2e42d27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 131.437511][ T5085] RAX: ffffffffffffffda RBX: 00007f2e44545fa0 RCX: 00007f2e442ccdd9 [ 131.437526][ T5085] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 131.437539][ T5085] RBP: 00007f2e42d27090 R08: 0000000000000000 R09: 0000000000000000 [ 131.437552][ T5085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.437592][ T5085] R13: 00007f2e44546038 R14: 00007f2e44545fa0 R15: 00007ffc0bc42738 [ 131.437612][ T5085] [ 131.834997][ T5097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.976655][ T5100] SELinux: failed to load policy [ 132.130276][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 132.190465][ T5106] loop4: detected capacity change from 0 to 512 [ 132.204760][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 132.329692][ T5108] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.372345][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 132.391658][ T5106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.808789][ T5116] loop2: detected capacity change from 0 to 8192 [ 133.012800][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.583598][ T5133] syzkaller0: entered promiscuous mode [ 133.589476][ T5133] syzkaller0: entered allmulticast mode [ 133.720201][ T5102] loop3: detected capacity change from 0 to 8192 [ 133.844984][ T5142] loop1: detected capacity change from 0 to 512 [ 134.178211][ T5142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.457541][ T5155] netlink: 36 bytes leftover after parsing attributes in process `syz.3.399'. [ 134.513350][ T5150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.577779][ T5128] loop4: detected capacity change from 0 to 8192 [ 134.667191][ T5161] loop3: detected capacity change from 0 to 512 [ 134.748661][ T5161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.784920][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.309111][ T5168] loop1: detected capacity change from 0 to 512 [ 135.395786][ T5168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.477412][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.615766][ T5174] FAULT_INJECTION: forcing a failure. [ 135.615766][ T5174] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 135.657016][ T5174] CPU: 0 UID: 0 PID: 5174 Comm: syz.2.406 Tainted: G W syzkaller #0 PREEMPT(full) [ 135.657057][ T5174] Tainted: [W]=WARN [ 135.657072][ T5174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.657088][ T5174] Call Trace: [ 135.657096][ T5174] [ 135.657107][ T5174] __dump_stack+0x1d/0x30 [ 135.657190][ T5174] dump_stack_lvl+0x95/0xd0 [ 135.657217][ T5174] dump_stack+0x15/0x1b [ 135.657238][ T5174] should_fail_ex+0x263/0x280 [ 135.657271][ T5174] should_fail_alloc_page+0xf2/0x100 [ 135.657390][ T5174] __alloc_frozen_pages_noprof+0x108/0x350 [ 135.657425][ T5174] alloc_pages_mpol+0xb3/0x260 [ 135.657482][ T5174] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 135.657512][ T5174] do_wp_page+0x70e/0x2040 [ 135.657578][ T5174] ? netlink_recvmsg+0x506/0x550 [ 135.657612][ T5174] ? __rcu_read_lock+0x36/0x50 [ 135.657740][ T5174] handle_mm_fault+0x8b9/0x2e70 [ 135.657776][ T5174] ? vma_start_read+0x1c7/0x2c0 [ 135.657858][ T5174] do_user_addr_fault+0x62f/0x1050 [ 135.657895][ T5174] ? trace_page_fault_user+0x1f/0xa0 [ 135.657930][ T5174] exc_page_fault+0x62/0xa0 [ 135.658046][ T5174] asm_exc_page_fault+0x26/0x30 [ 135.658074][ T5174] RIP: 0033:0x7f363348cbc5 [ 135.658094][ T5174] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 135.658117][ T5174] RSP: 002b:00007f3631f25de0 EFLAGS: 00010293 [ 135.658138][ T5174] RAX: 0000000000000008 RBX: 00007f3634277e20 RCX: 0000000000000000 [ 135.658233][ T5174] RDX: 0000000000000000 RSI: 00007f363358002f RDI: 00007f3634277e20 [ 135.658250][ T5174] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 135.658267][ T5174] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f363357fd47 [ 135.658360][ T5174] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007f363358002f [ 135.658387][ T5174] [ 135.658515][ T5174] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 135.871180][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 135.871245][ T28] audit: type=1400 audit(1777301489.929:391): avc: denied { create } for pid=5176 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 135.926839][ T28] audit: type=1400 audit(1777301489.959:392): avc: denied { getopt } for pid=5176 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 135.994223][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.026969][ T28] audit: type=1400 audit(1777301489.959:393): avc: denied { create } for pid=5176 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 136.067166][ T28] audit: type=1400 audit(1777301489.969:394): avc: denied { write } for pid=5176 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 136.092146][ T5182] loop2: detected capacity change from 0 to 1024 [ 136.110150][ T5182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.245349][ T5191] loop1: detected capacity change from 0 to 512 [ 136.279601][ T5191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.324956][ T28] audit: type=1400 audit(1777301490.319:395): avc: denied { add_name } for pid=5181 comm="syz.2.410" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.345800][ T28] audit: type=1400 audit(1777301490.319:396): avc: denied { create } for pid=5181 comm="syz.2.410" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 136.366066][ T28] audit: type=1400 audit(1777301490.319:397): avc: denied { read write } for pid=5181 comm="syz.2.410" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.388602][ T28] audit: type=1400 audit(1777301490.319:398): avc: denied { open } for pid=5181 comm="syz.2.410" path="/87/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 136.466585][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.656757][ T5172] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 136.664599][ T5172] SELinux: failed to load policy [ 136.773890][ T28] audit: type=1400 audit(1777301490.819:399): avc: denied { connect } for pid=5197 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.805152][ T28] audit: type=1400 audit(1777301490.829:400): avc: denied { create } for pid=5197 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.892057][ T5201] netlink: 36 bytes leftover after parsing attributes in process `syz.5.412'. [ 136.963839][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.078137][ T5215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.105826][ T5214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.190055][ T5217] loop4: detected capacity change from 0 to 512 [ 137.198910][ T5217] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.210289][ T5217] EXT4-fs (loop4): 1 truncate cleaned up [ 137.220789][ T5217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.433009][ T5223] loop5: detected capacity change from 0 to 512 [ 138.447787][ T5223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.460782][ T5225] loop3: detected capacity change from 0 to 512 [ 138.519661][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.541599][ T5225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.545200][ T5234] netlink: 36 bytes leftover after parsing attributes in process `syz.2.423'. [ 138.622780][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.674938][ T5230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 138.684396][ T5230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 138.740465][ T5230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 138.760130][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.784896][ T5247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 138.795579][ T5230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 138.819732][ T5230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 138.828987][ T5230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 138.981492][ T5256] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.197780][ T5265] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.199680][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.405188][ T5243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.416720][ T5243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.586539][ T5269] syzkaller1: entered promiscuous mode [ 139.618267][ T5269] syzkaller1: entered allmulticast mode [ 139.625803][ T3891] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.636457][ T3891] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.645896][ T3891] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.655969][ T3891] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.714677][ T5279] loop5: detected capacity change from 0 to 4096 [ 139.721548][ T5279] EXT4-fs: inline encryption not supported [ 139.731396][ T5279] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.750025][ T5282] IPVS: stopping backup sync thread 5283 ... [ 139.756196][ T5283] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 0, id = 0 [ 139.768956][ T5279] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8856c019, mo2=0003] [ 139.785362][ T5279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.819078][ T5287] loop4: detected capacity change from 0 to 1024 [ 139.830458][ T5287] EXT4-fs: test_dummy_encryption option not supported [ 139.886403][ T5289] loop1: detected capacity change from 0 to 512 [ 139.948199][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.191110][ T5289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.307363][ T5296] loop4: detected capacity change from 0 to 512 [ 140.394436][ T5296] EXT4-fs (loop4): 1 orphan inode deleted [ 140.452298][ T5296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.520895][ T3891] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 1 [ 140.539756][ T5296] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.957768][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 140.957853][ T28] audit: type=1400 audit(1777301495.019:420): avc: denied { read write } for pid=5291 comm="syz.3.439" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.991488][ T5292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.052263][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.067134][ T5292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.075219][ T28] audit: type=1400 audit(1777301495.019:421): avc: denied { open } for pid=5291 comm="syz.3.439" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.112079][ T28] audit: type=1400 audit(1777301495.019:422): avc: denied { ioctl } for pid=5291 comm="syz.3.439" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.139891][ T28] audit: type=1400 audit(1777301495.159:423): avc: denied { create } for pid=5291 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 141.178719][ T28] audit: type=1400 audit(1777301495.239:424): avc: denied { bind } for pid=5299 comm="syz.2.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.225708][ T5300] __nla_validate_parse: 42 callbacks suppressed [ 141.225728][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 141.353238][ T28] audit: type=1400 audit(1777301495.409:425): avc: denied { relabelfrom } for pid=5312 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 141.380856][ T5313] syzkaller0: entered promiscuous mode [ 141.387241][ T5313] syzkaller0: entered allmulticast mode [ 141.410238][ T28] audit: type=1400 audit(1777301495.429:426): avc: denied { relabelto } for pid=5312 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 141.460525][ T28] audit: type=1400 audit(1777301495.499:427): avc: denied { ioctl } for pid=5312 comm="syz.2.444" path="socket:[10167]" dev="sockfs" ino=10167 ioctlcmd=0x891f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 141.498160][ T28] audit: type=1400 audit(1777301495.499:428): avc: denied { write } for pid=5312 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.696436][ T5320] IPVS: stopping backup sync thread 5321 ... [ 141.702669][ T5321] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 0, id = 0 [ 142.296438][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.307975][ T5329] loop2: detected capacity change from 0 to 8192 [ 142.385162][ T5334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.402886][ T5337] loop1: detected capacity change from 0 to 1024 [ 142.409637][ T5337] EXT4-fs: test_dummy_encryption option not supported [ 142.551371][ T5329] loop2: p1 < > p2 p4 < p5 > [ 142.573527][ T5329] loop2: partition table partially beyond EOD, truncated [ 142.591111][ T5329] loop2: p1 start 134217728 is beyond EOD, truncated [ 142.664326][ T5347] loop1: detected capacity change from 0 to 512 [ 142.688872][ T5329] loop2: p2 size 67072 extends beyond EOD, truncated [ 142.706622][ T5329] loop2: p5 size 67072 extends beyond EOD, truncated [ 142.781472][ T5347] EXT4-fs (loop1): 1 orphan inode deleted [ 142.789044][ T5347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.802331][ T5347] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.866834][ T36] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 142.941761][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 143.510651][ T5358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.526976][ T5360] netlink: 'syz.3.458': attribute type 46 has an invalid length. [ 143.664904][ T5368] vlan2: entered allmulticast mode [ 143.686633][ T5368] syz_tun: entered allmulticast mode [ 143.863817][ T5377] loop4: detected capacity change from 0 to 764 [ 143.917571][ T5373] loop3: detected capacity change from 0 to 8192 [ 144.404246][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.437960][ T5373] loop3: p1 < > p2 p4 < p5 > [ 144.456379][ T5373] loop3: partition table partially beyond EOD, truncated [ 144.484807][ T5373] loop3: p1 start 134217728 is beyond EOD, truncated [ 144.511432][ T5373] loop3: p2 size 67072 extends beyond EOD, truncated [ 144.545924][ T5373] loop3: p5 size 67072 extends beyond EOD, truncated [ 144.634814][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 144.646231][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 144.660352][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 144.730880][ T5386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.891155][ T5376] loop5: detected capacity change from 0 to 8192 [ 146.055959][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 146.055975][ T28] audit: type=1400 audit(1777301500.119:438): avc: denied { shutdown } for pid=5402 comm="syz.1.469" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 146.191988][ T28] audit: type=1400 audit(1777301500.139:439): avc: denied { write } for pid=5402 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 146.728067][ T28] audit: type=1400 audit(1777301500.169:440): avc: denied { getopt } for pid=5402 comm="syz.1.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 146.806581][ T5414] loop1: detected capacity change from 0 to 512 [ 146.924365][ T5414] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 146.941487][ T5414] EXT4-fs (loop1): mount failed [ 147.044412][ T28] audit: type=1400 audit(1777301501.099:441): avc: denied { bind } for pid=5406 comm="syz.4.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.802942][ T5431] loop5: detected capacity change from 0 to 512 [ 147.878129][ T5431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.937585][ T28] audit: type=1400 audit(1777301501.999:442): avc: denied { write } for pid=5426 comm="syz.3.476" lport=49959 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 148.014963][ T28] audit: type=1400 audit(1777301502.019:443): avc: denied { setopt } for pid=5426 comm="syz.3.476" lport=49959 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 148.197011][ T28] audit: type=1400 audit(1777301502.019:444): avc: denied { ioctl } for pid=5426 comm="syz.3.476" path="socket:[11466]" dev="sockfs" ino=11466 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.242152][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.384665][ T28] audit: type=1400 audit(1777301502.439:445): avc: denied { ioctl } for pid=5440 comm="syz.1.480" path="socket:[11477]" dev="sockfs" ino=11477 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 148.468454][ T5439] loop2: detected capacity change from 0 to 8192 [ 148.475452][ T28] audit: type=1400 audit(1777301502.439:446): avc: denied { accept } for pid=5440 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 148.511039][ T5456] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 0, id = 0 [ 148.513195][ T5455] IPVS: stopping backup sync thread 5456 ... [ 148.539257][ T5439] loop2: p1 < > p2 p4 < p5 > [ 148.544111][ T5439] loop2: partition table partially beyond EOD, truncated [ 148.561113][ T5439] loop2: p1 start 134217728 is beyond EOD, truncated [ 148.569655][ T5439] loop2: p2 size 67072 extends beyond EOD, truncated [ 148.579809][ T28] audit: type=1400 audit(1777301502.609:447): avc: denied { bind } for pid=5457 comm="syz.5.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.600355][ T5439] loop2: p5 size 67072 extends beyond EOD, truncated [ 148.626094][ T5442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.720645][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.485'. [ 148.874823][ T5458] hsr_slave_1 (unregistering): left promiscuous mode [ 149.000766][ T5472] loop3: detected capacity change from 0 to 8192 [ 149.042934][ T5472] loop3: p1 < > p2 p4 < p5 > [ 149.048892][ T5472] loop3: partition table partially beyond EOD, truncated [ 149.056388][ T5472] loop3: p1 start 134217728 is beyond EOD, truncated [ 149.063355][ T5472] loop3: p2 size 67072 extends beyond EOD, truncated [ 149.071581][ T5472] loop3: p5 size 67072 extends beyond EOD, truncated [ 149.084944][ T2982] loop3: p1 < > p2 p4 < p5 > [ 149.094338][ T2982] loop3: partition table partially beyond EOD, truncated [ 149.114973][ T2982] loop3: p1 start 134217728 is beyond EOD, truncated [ 149.123109][ T2982] loop3: p2 size 67072 extends beyond EOD, truncated [ 149.133335][ T2982] loop3: p5 size 67072 extends beyond EOD, truncated [ 149.327694][ T5491] loop4: detected capacity change from 0 to 1024 [ 149.337759][ T5490] loop2: detected capacity change from 0 to 1024 [ 149.376206][ T5491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.377114][ T5490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.413735][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.425135][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.769528][ T5513] loop1: detected capacity change from 0 to 512 [ 149.864018][ T5513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.706227][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.066327][ T5535] syzkaller0: entered promiscuous mode [ 151.088687][ T5535] syzkaller0: entered allmulticast mode [ 151.109629][ T5537] loop1: detected capacity change from 0 to 512 [ 151.136603][ T5537] EXT4-fs: Ignoring removed mblk_io_submit option [ 151.145105][ T5537] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.209495][ T5537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.244191][ T5537] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.343509][ T5545] syzkaller0: entered promiscuous mode [ 151.343877][ T28] kauditd_printk_skb: 416 callbacks suppressed [ 151.343922][ T28] audit: type=1400 audit(2000000001.750:864): avc: denied { create } for pid=5536 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 151.349419][ T5545] syzkaller0: entered allmulticast mode [ 151.381751][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 151.396514][ T28] audit: type=1400 audit(2000000001.780:865): avc: denied { read } for pid=5536 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 151.453276][ T5550] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.513: iget: bad i_size value: 2533274857506816 [ 151.453493][ T28] audit: type=1400 audit(2000000001.870:866): avc: denied { append open } for pid=5536 comm="syz.1.513" path="/95/bus/blkio.bfq.time" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 151.522345][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 151.563859][ T28] audit: type=1400 audit(2000000001.930:867): avc: denied { mount } for pid=5544 comm="syz.4.516" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 151.607445][ T5547] vlan2: entered promiscuous mode [ 151.612539][ T5547] bridge0: entered promiscuous mode [ 151.721640][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.794855][ T5509] loop2: detected capacity change from 0 to 8192 [ 151.878559][ T5559] loop4: detected capacity change from 0 to 512 [ 151.905406][ T5559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.078527][ T28] audit: type=1400 audit(2000000002.500:868): avc: denied { watch } for pid=5562 comm="syz.1.520" path="/97" dev="tmpfs" ino=564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.768794][ T5525] loop3: detected capacity change from 0 to 8192 [ 152.818849][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.280949][ T5592] syzkaller0: entered promiscuous mode [ 153.286704][ T5592] syzkaller0: entered allmulticast mode [ 153.288151][ T5594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.406841][ T28] audit: type=1400 audit(2000000003.820:869): avc: denied { create } for pid=5596 comm="syz.5.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.470598][ T28] audit: type=1400 audit(2000000003.830:870): avc: denied { connect } for pid=5596 comm="syz.5.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 153.581292][ T5595] loop4: detected capacity change from 0 to 512 [ 153.614125][ T5600] loop3: detected capacity change from 0 to 8192 [ 153.675826][ T5600] loop3: p1 < > p2 p4 < p5 > [ 153.676267][ T5595] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 153.695433][ T5595] EXT4-fs (loop4): mount failed [ 153.701843][ T5600] loop3: partition table partially beyond EOD, truncated [ 153.718366][ T5600] loop3: p1 start 134217728 is beyond EOD, truncated [ 153.748766][ T5600] loop3: p2 size 67072 extends beyond EOD, truncated [ 153.789363][ T5600] loop3: p5 size 67072 extends beyond EOD, truncated [ 154.327462][ T5603] loop2: detected capacity change from 0 to 8192 [ 154.619957][ T5611] loop5: detected capacity change from 0 to 8192 [ 154.647939][ T28] audit: type=1400 audit(2000000005.070:871): avc: denied { accept } for pid=5620 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.758486][ T5622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.538'. [ 154.841196][ T28] audit: type=1400 audit(2000000005.260:872): avc: denied { read } for pid=5620 comm="syz.1.538" path="socket:[10833]" dev="sockfs" ino=10833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 155.150585][ T5631] loop2: detected capacity change from 0 to 512 [ 155.267905][ T5631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.958067][ T5639] loop5: detected capacity change from 0 to 1024 [ 156.013326][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.039497][ T5639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.165006][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.290672][ T5616] loop3: detected capacity change from 0 to 8192 [ 156.457654][ T5647] loop2: detected capacity change from 0 to 512 [ 156.540599][ T5647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.271224][ T5664] loop1: detected capacity change from 0 to 512 [ 157.378136][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.395260][ T5664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.300560][ T5674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.367785][ T5673] loop5: detected capacity change from 0 to 8192 [ 158.854579][ T5673] loop5: p1 < > p2 p4 < p5 > [ 158.863539][ T5673] loop5: partition table partially beyond EOD, truncated [ 158.910853][ T5679] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.919357][ T5673] loop5: p1 start 134217728 is beyond EOD, truncated [ 158.941514][ T5673] loop5: p2 size 67072 extends beyond EOD, truncated [ 158.950528][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.037083][ T5673] loop5: p5 size 67072 extends beyond EOD, truncated [ 159.219291][ T5681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.347442][ T5688] syzkaller1: entered promiscuous mode [ 159.353287][ T5688] syzkaller1: entered allmulticast mode [ 160.119651][ T5705] loop1: detected capacity change from 0 to 512 [ 160.176238][ T5705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.627765][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.745358][ T5718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.835412][ T5722] loop5: detected capacity change from 0 to 512 [ 160.963439][ T5722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.186563][ T5729] IPVS: stopping backup sync thread 5728 ... [ 162.553206][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.634833][ T5733] loop2: detected capacity change from 0 to 1024 [ 162.657579][ T5733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.685690][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.802607][ T28] audit: type=1400 audit(2000000013.220:873): avc: denied { ioctl } for pid=5737 comm="syz.2.567" path="socket:[12139]" dev="sockfs" ino=12139 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.911683][ T5741] loop2: detected capacity change from 0 to 256 [ 162.951945][ T5741] FAT-fs (loop2): bogus logical sector size 768 [ 162.961054][ T28] audit: type=1400 audit(2000000013.320:874): avc: denied { bind } for pid=5737 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.969403][ T5741] FAT-fs (loop2): Can't find a valid FAT filesystem [ 162.990968][ T28] audit: type=1400 audit(2000000013.320:875): avc: denied { setopt } for pid=5737 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.117692][ T5741] program syz.2.567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.159095][ T28] audit: type=1400 audit(2000000013.320:876): avc: denied { write } for pid=5737 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.314045][ T28] audit: type=1400 audit(2000000013.320:877): avc: denied { read } for pid=5737 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.435282][ T28] audit: type=1400 audit(2000000013.330:878): avc: denied { create } for pid=5738 comm="syz.5.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 163.516173][ T28] audit: type=1400 audit(2000000013.340:879): avc: denied { getopt } for pid=5738 comm="syz.5.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 163.770435][ T28] audit: type=1400 audit(2000000014.160:880): avc: denied { setopt } for pid=5759 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.793916][ T28] audit: type=1400 audit(2000000014.210:881): avc: denied { create } for pid=5759 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 163.814905][ T28] audit: type=1400 audit(2000000014.210:882): avc: denied { write } for pid=5759 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 163.893338][ T5758] loop4: detected capacity change from 0 to 8192 [ 164.009977][ T5768] loop1: detected capacity change from 0 to 512 [ 164.111274][ T5768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.277747][ T5758] loop4: p1 < > p2 p4 < p5 > [ 164.389544][ T5758] loop4: partition table partially beyond EOD, truncated [ 164.533090][ T5758] loop4: p1 start 134217728 is beyond EOD, truncated [ 164.540379][ T5758] loop4: p2 size 67072 extends beyond EOD, truncated [ 164.562511][ T5760] infiniband syz1: set active [ 164.567844][ T5760] infiniband syz1: added bridge_slave_0 [ 164.583453][ T5758] loop4: p5 size 67072 extends beyond EOD, truncated [ 164.600767][ T5760] RDS/IB: syz1: added [ 164.604914][ T5760] smc: adding ib device syz1 with port count 1 [ 164.611273][ T5760] smc: ib device syz1 port 1 has no pnetid [ 164.751261][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.794316][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 164.804503][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 164.818341][ T3281] udevd[3281]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 164.883421][ T5776] loop4: detected capacity change from 0 to 512 [ 164.934609][ T5776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.562015][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.642029][ T5784] loop1: detected capacity change from 0 to 512 [ 165.689502][ T5784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.041857][ T5791] loop3: detected capacity change from 0 to 512 [ 166.051692][ T5791] EXT4-fs: Ignoring removed nobh option [ 166.109335][ T5791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.188057][ T5791] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.275744][ T5795] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.336378][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.403933][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.803547][ T5823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.187979][ T5844] loop3: detected capacity change from 0 to 512 [ 168.689155][ T5845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.729122][ T5844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.772664][ T5847] loop4: detected capacity change from 0 to 8192 [ 169.189381][ T5837] loop2: detected capacity change from 0 to 8192 [ 169.221840][ T5847] loop4: p1 < > p2 p4 < p5 > [ 169.228209][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.246099][ T5847] loop4: partition table partially beyond EOD, truncated [ 169.319046][ T5847] loop4: p1 start 134217728 is beyond EOD, truncated [ 169.332197][ T5847] loop4: p2 size 67072 extends beyond EOD, truncated [ 169.359068][ T5847] loop4: p5 size 67072 extends beyond EOD, truncated [ 169.434892][ T5856] syzkaller0: entered promiscuous mode [ 169.440536][ T5856] syzkaller0: entered allmulticast mode [ 169.785107][ T5856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.598'. [ 169.902121][ T5866] loop4: detected capacity change from 0 to 512 [ 169.936637][ T5866] EXT4-fs (loop4): orphan cleanup on readonly fs [ 169.944077][ T5866] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.601: ea_inode with extended attributes [ 169.957124][ T5866] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 169.957833][ T5866] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.601: error while reading EA inode 11 err=-117 [ 169.967097][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 169.967113][ C1] EXT4-fs (loop4): initial error at time 2000000020: ext4_xattr_inode_iget:441: inode 11 [ 169.967156][ C1] EXT4-fs (loop4): last error at time 2000000020: ext4_xattr_inode_iget:441: inode 11 [ 170.006288][ T5866] loop4: lost filesystem error report for type 5 error -117 [ 170.007364][ T5866] EXT4-fs (loop4): 1 orphan inode deleted [ 170.022286][ T5866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 170.411872][ T5870] loop5: detected capacity change from 0 to 1024 [ 170.433597][ T5870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.552736][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.566130][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.756765][ T5891] syzkaller0: entered promiscuous mode [ 170.762459][ T5891] syzkaller0: entered allmulticast mode [ 170.775197][ T5895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 170.789693][ T5894] loop5: detected capacity change from 0 to 4096 [ 170.794271][ T5898] syzkaller1: entered promiscuous mode [ 170.805860][ T5898] syzkaller1: entered allmulticast mode [ 170.817765][ T5894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.833742][ T5894] FAULT_INJECTION: forcing a failure. [ 170.833742][ T5894] name failslab, interval 1, probability 0, space 0, times 0 [ 170.846792][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: syz.5.606 Tainted: G W syzkaller #0 PREEMPT(full) [ 170.846886][ T5894] Tainted: [W]=WARN [ 170.846893][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.846974][ T5894] Call Trace: [ 170.846983][ T5894] [ 170.846994][ T5894] __dump_stack+0x1d/0x30 [ 170.847027][ T5894] dump_stack_lvl+0x95/0xd0 [ 170.847088][ T5894] dump_stack+0x15/0x1b [ 170.847178][ T5894] should_fail_ex+0x263/0x280 [ 170.847230][ T5894] should_failslab+0x8c/0xb0 [ 170.847331][ T5894] __kmalloc_noprof+0xb8/0x4d0 [ 170.847423][ T5894] ? iovec_from_user+0x84/0x200 [ 170.847469][ T5894] iovec_from_user+0x84/0x200 [ 170.847519][ T5894] __import_iovec+0xf3/0x530 [ 170.847569][ T5894] import_iovec+0x60/0x80 [ 170.847613][ T5894] vfs_writev+0xfb/0x900 [ 170.847648][ T5894] __se_sys_pwritev2+0xfc/0x1c0 [ 170.847816][ T5894] __x64_sys_pwritev2+0x67/0x80 [ 170.847952][ T5894] x64_sys_call+0xe07/0x3020 [ 170.847984][ T5894] do_syscall_64+0x12c/0x3b0 [ 170.848015][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.848090][ T5894] RIP: 0033:0x7f21585ecdd9 [ 170.848108][ T5894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.848127][ T5894] RSP: 002b:00007f215701e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 170.848151][ T5894] RAX: ffffffffffffffda RBX: 00007f2158866090 RCX: 00007f21585ecdd9 [ 170.848169][ T5894] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 000000000000000a [ 170.848185][ T5894] RBP: 00007f215701e090 R08: 0000000000000000 R09: 0000000000000003 [ 170.848201][ T5894] R10: 0000000000006400 R11: 0000000000000246 R12: 0000000000000001 [ 170.848292][ T5894] R13: 00007f2158866128 R14: 00007f2158866090 R15: 00007ffd3325abf8 [ 170.848313][ T5894] [ 171.044983][ T5892] loop1: detected capacity change from 0 to 128 [ 171.063140][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 171.063154][ T28] audit: type=1326 audit(2000000021.470:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.1.608" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e442ccdd9 code=0x0 [ 171.122350][ T28] audit: type=1400 audit(2000000021.470:887): avc: denied { associate } for pid=5887 comm="syz.1.608" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 171.341575][ T5912] loop3: detected capacity change from 0 to 512 [ 171.429030][ T5912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.585560][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.107773][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.142541][ T5932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.620'. [ 172.446882][ T5938] netlink: 'syz.3.622': attribute type 46 has an invalid length. [ 172.632267][ T5940] syzkaller1: entered promiscuous mode [ 172.638006][ T5940] syzkaller1: entered allmulticast mode [ 172.699993][ T5934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.327988][ T5949] loop4: detected capacity change from 0 to 512 [ 173.339254][ T5949] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.360716][ T5949] EXT4-fs (loop4): 1 truncate cleaned up [ 173.374510][ T5949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.139735][ T5966] loop1: detected capacity change from 0 to 512 [ 174.177603][ T5966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.430404][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.503739][ T5970] loop2: detected capacity change from 0 to 1024 [ 174.568214][ T5970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.742318][ T5974] netlink: 16 bytes leftover after parsing attributes in process `syz.4.633'. [ 174.790851][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.848176][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.855481][ T5978] syzkaller1: entered promiscuous mode [ 174.867853][ T5978] syzkaller1: entered allmulticast mode [ 175.091971][ T5952] loop3: detected capacity change from 0 to 8192 [ 175.131711][ T5992] loop1: detected capacity change from 0 to 8192 [ 175.591044][ T5999] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.005552][ T6004] loop5: detected capacity change from 0 to 1024 [ 176.042094][ T6004] EXT4-fs: test_dummy_encryption option not supported [ 176.157196][ T6008] netlink: 'syz.1.642': attribute type 5 has an invalid length. [ 176.870694][ T6014] loop5: detected capacity change from 0 to 512 [ 177.138635][ T6016] netlink: 'syz.1.644': attribute type 4 has an invalid length. [ 177.222663][ T6014] EXT4-fs (loop5): 1 orphan inode deleted [ 177.236834][ T6014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.254236][ T6014] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.730886][ T36] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 177.743443][ T6012] netlink: 'syz.1.644': attribute type 4 has an invalid length. [ 177.786636][ T36] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 177.807877][ T6027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.647'. [ 178.113588][ T6043] loop2: detected capacity change from 0 to 4096 [ 178.124557][ T6043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.629058][ T6055] loop4: detected capacity change from 0 to 8192 [ 178.672624][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.712842][ T2982] ================================================================== [ 178.721558][ T2982] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 178.730396][ T2982] [ 178.732966][ T2982] write to 0xffff88810da077b0 of 8 bytes by task 3285 on cpu 1: [ 178.740927][ T2982] dentry_unlink_inode+0x6a/0x290 [ 178.746477][ T2982] d_delete+0xc8/0xe0 [ 178.750782][ T2982] d_delete_notify+0x32/0x100 [ 178.756222][ T2982] vfs_unlink+0x289/0x490 [ 178.760866][ T2982] filename_unlinkat+0x1e2/0x410 [ 178.765965][ T2982] __se_sys_unlink+0x2b/0xe0 [ 178.770611][ T2982] __x64_sys_unlink+0x1f/0x30 [ 178.775427][ T2982] x64_sys_call+0x2eb6/0x3020 [ 178.780264][ T2982] do_syscall_64+0x12c/0x3b0 [ 178.784902][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.790974][ T2982] [ 178.793335][ T2982] read to 0xffff88810da077b0 of 8 bytes by task 2982 on cpu 0: [ 178.801464][ T2982] step_into_slowpath+0x12c/0x4c0 [ 178.806778][ T2982] path_lookupat+0x330/0x500 [ 178.811611][ T2982] filename_lookup+0x190/0x390 [ 178.816941][ T2982] do_readlinkat+0x74/0x2f0 [ 178.821498][ T2982] __x64_sys_readlink+0x47/0x60 [ 178.826601][ T2982] x64_sys_call+0x2b51/0x3020 [ 178.831518][ T2982] do_syscall_64+0x12c/0x3b0 [ 178.836353][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.842588][ T2982] [ 178.845136][ T2982] value changed: 0xffff888124a58078 -> 0x0000000000000000 [ 178.853193][ T2982] [ 178.855559][ T2982] Reported by Kernel Concurrency Sanitizer on: [ 178.862463][ T2982] CPU: 0 UID: 0 PID: 2982 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 178.873577][ T2982] Tainted: [W]=WARN [ 178.877407][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.888369][ T2982] ================================================================== [ 178.900986][ T6060] loop1: detected capacity change from 0 to 512 [ 179.117650][ T6060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.231777][ T6064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.463187][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.589324][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.