last executing test programs: 16.591907022s ago: executing program 3 (id=9180): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, 0x0, 0x38, 0x4855}, 0x24000052) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = socket(0x1e, 0x4, 0x0) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16=r5], 0x14) 15.618778354s ago: executing program 3 (id=9182): socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x4040010) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x900, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000010010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 13.685503787s ago: executing program 3 (id=9184): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x13f, 0x5}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x1, 0x0, 0x1, 0xc, 0x6, @random="3b7513dd4a55"}, 0xffffff42) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x7, 0x0, {}, 0x4, 0x19dff}}}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000900)={&(0x7f00000004c0)="c4a5520041575a9646a5c0d8c17456ab8943fabe86c5dc1086a2566e6fb8ef39757aa1833bdaa3d7d0ae0fa84bec9a4ac5f8094ec6f68082afad22bcb5c2fcdefc3f87fb8b3d3041317ec5cc8e2df11718216f9d4d00dbba8738f0c901aa10179ec5e683213c050f8a05738851e30438cbc5a7b5607e0880f5c0eb5c31d9b8cf9b42d37f515a77fdaf68b0a02ce747e14ea0f38abd31d308", &(0x7f0000000680)=""/254, &(0x7f0000000780)="b562ae1340fb69b7fa661bd42b63ee34208b7686431c2b6a0dd5b46168ac592d2ba6381d419c2a60df9192ef723b1e5c0358d3aa577a2ffa1f3fc21613c28ad988a42e7e93e208d56547c934d73b2b124f4596f4ac4073aaa9735630a453924f9bbbdf1085927c490127ef9fb5b4d6f864f1e5b6f78d9f6306a96a95e4fc401b3d482d285e7d117d6224033254d2f1e25fd1423435860cb74b34533a3cb09f785a41a25655c49825f266214c5771f42c7d7e9b64949ec456267546879e98a0f78c270f26832d09cccd96e3b04460287b07a3e5a7f7a69e836291664a6319ced6b78651719bc3d450f2c95ae109f3740c25b989d3", 0x0, 0x2, r2}, 0x38) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18020b0000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8fffffff702000008000000b70300000000002885000000c700000095"], &(0x7f0000000280)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0xa}, 0xfffffffffffffe49) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000100)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") r5 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, 0x0) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) io_uring_enter(r2, 0x1445, 0xcf94, 0x1, &(0x7f0000000000)={[0x7]}, 0x8) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain) 8.605727077s ago: executing program 0 (id=9196): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) process_vm_writev(r1, &(0x7f0000000940), 0x0, &(0x7f0000000600)=[{&(0x7f0000000a00)=""/222, 0xde}, {&(0x7f0000000b00)=""/78, 0x4e}, {&(0x7f0000000b80)=""/167, 0xa7}, {&(0x7f0000000c40)=""/133, 0x85}, {&(0x7f0000000d00)=""/46, 0x2e}, {&(0x7f0000000d40)=""/79, 0x4f}, {&(0x7f0000000dc0)=""/9, 0x9}, {&(0x7f0000000e00)}, {&(0x7f0000000500)=""/243, 0xf3}], 0x9, 0x0) 8.331632039s ago: executing program 1 (id=9200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.327695119s ago: executing program 3 (id=9201): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x401, 0x3ff, 0x1000, 0x8001, 0x1a, "08400000c38eaad6a4540ad9455fb5031af800"}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000580), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x4, 0x40, 0x6, 0x800, 0x10, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8000, 0x10, 0x7}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b80)={&(0x7f0000000780)={0x13e0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',#/{//\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1270, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x76, 0x4, "91f2a5948dc025df306a43bae3728cf9c477e826c59fb355e301676fb22762462303f035a3f7447e8427aac70e985294221c61293b2349317a52b27236c431147ba0a9c9a4d956f2a2112b7473ee2e5fe9c3e7127f767b2898d80ab749644448877d94fdba175692267e3a1531924a6e478e"}, @ETHTOOL_A_BITSET_MASK={0xc8, 0x5, "81583c2b166083e1fbc08ca2aed4d3133ab3c995e8517a343084e0253b83b5ce01c0b083d7ce933f06bb8f7c5387fdb44930454d5c3b84ff7d2b717d0936d969b919feac6fe208d437081a6936b7b4f9f53da5770c234a80112e673fda342e94e88f461f261fbe4d4c3efea8e9661b73c2b6b9a9050830c1c994cb15793eea847b5d07bcf10a7651249d65c462405f4a4a6066b1bb6af8101ae726312c67131709c20fdfd461c7339db2014c8c7e918af8cf9ad8c56d990dcfa6c4108ff79c69e13169c0"}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%,&.\x93]#,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}]}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xe7, 0x4, "ac589c5d1ea4c39e8db6302f7a249232ff8dc78ee4b0fcc2b3cb38c268cfeb839c1053cde8b8e690cb3a8a9b94dca2760101b50e6f2f440867b578f33645f66023b3c686f1e91005a0e1d5b3a5ae1ca2e14411789e3c5bd989674e0f5d3680923feb073310ca2dc5d2d275cca6f188af05e6c3fb1b12d4387ba6e3b199a92fd691190673c9e62cac6ddc87f886c55220dd51505004bce38ee73fea648523faea58fe25a45e36791ba4267ac8fc95472997ac379d3b69ab3d98d0f080c0a00857b5f6ab111b546cec7a06f7d9ff4a883c45ea383b03f4c20323d6e0daff08b87fc38f87"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd0}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x434}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x5c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x53, 0x5, "14fb6dfc864f01d6d43296ee99d4f21ba164254135c1fe4b445f98d4de5dc18e60190dcbe6267a67269a2a271903f21b9cc3dd6a83a931b44dfcf9eacf2470fe60378e926f8bd023ac75bc644c33bb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x13e0}, 0x1, 0x0, 0x0, 0x48010}, 0x20004004) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r9, 0x4b72, &(0x7f0000000740)={0x3, 0x0, 0xf, 0xc, 0x0, 0x0}) recvmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1}, 0xe2}], 0x1, 0x40012012, 0x0) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3) setpriority(0x1, 0x0, 0x6) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)={0x62, 0x4, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x8000}, @jumbo, @pad1, @ra]}, 0x30) lseek(r0, 0x10000, 0x0) 8.228434843s ago: executing program 1 (id=9202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000d0a01035b74ea9f9b34c2870a000001"], 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 6.326012195s ago: executing program 1 (id=9204): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x8040, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x2}, 0xd) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x8, 0xfff3}, {}, {0xf, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x7, &(0x7f0000000140)={0x8}) setsockopt$inet6_buf(r9, 0x29, 0x20, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41000000000000000290000000b000000", 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x16, 0x2, 0x4, 0x400000, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x24c0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x6216, 0x9, 0x5, 0x6}, {0xff, 0x80, 0xfd, 0x3}, {0x8000, 0x5, 0x8, 0x1}, {0x8, 0x40, 0x9, 0x8}, {0x0, 0x42, 0x80, 0xdf26}, {0xa16, 0xc, 0x4, 0xab17}, {0x3, 0xf, 0x66, 0xed}, {0x7948, 0x65, 0x0, 0x3d58}]}) 6.22970804s ago: executing program 0 (id=9205): getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)={[0x1]}, 0x8) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x8, 0x19, &(0x7f0000000880)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_fd={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x6}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @alu={0x7, 0x0, 0xc, 0x4, 0x2, 0xffffffffffffffff, 0x10}], &(0x7f0000000a00)='syzkaller\x00', 0x6, 0xa3, &(0x7f0000000a40)=""/163, 0x40f00, 0x61, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0x8, 0x7, 0x1}, 0x10}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="0000ea0700", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0x38, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @local, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x4000}}}}}}, 0x0) 6.22815295s ago: executing program 4 (id=9206): ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf271500000008000300", @ANYRES32=r5, @ANYBLOB="20002b800800010000ffffff040002"], 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20008800) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write(r0, &(0x7f0000000000)="28d41527bf02a8dd1950e424cbca65a8cd912d58a33eb7a6dcfd88e763b697bd760ddfc6f67d6f575e49a04cea88a5b7a112f02196b3b076b376df2164ab8afff6f9adcbb35c512d69e06658007c272eb6296c632f169d0eed4affaf76b019b9b494b3054b", 0x65) 6.103866975s ago: executing program 4 (id=9207): socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x4040010) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x900, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000010010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 6.082906716s ago: executing program 4 (id=9208): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r1 = open_tree(r0, 0x0, 0x89901) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004800) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000980)=ANY=[@ANYBLOB='b *:', @ANYRESOCT=r8], 0xe) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04001c00128009000100766c616e000000020c000280faa5ddfb7f3b96167a2eed8b060001000400000008000500", @ANYRES32=r5, @ANYBLOB="0500110001000000"], 0x4c}}, 0x8000002) syz_clone(0x2021c00, &(0x7f0000001180)="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", 0x1000, &(0x7f0000002180), &(0x7f00000021c0), &(0x7f0000002200)="20d3b6987bfe9afbfbd168f487047fca8d1467ea9dfa5a82ede5115e675afc81ce1d3a6c98e69a42b567a4848849dc994ef388a4a014a66e2d10c105563fd5d1f85def3b019f370b8580a03eabc588dcacd1a4887f133f3f913a6dfc832b29a896c289a2f571bcd1bcd10930eb624c332e569405f7302f1ec5692de2333121187a63e4e948ff257b8e9e063e26bea21a05d3756a3e985afc23c41796140d298ea5b41ea19f59a34366119a246fc27147d6d97735ec29b5eeb3") sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) socket$packet(0x11, 0x3, 0x300) 5.689273023s ago: executing program 2 (id=9209): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", 'O\x00', "ecba26893bcdc493"}, 0x28) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000e00)={0x9c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x1, 0xe, 0x7fff, 0x0, 0x6, 0x762c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xd07a, 0x9, 0x8319, 0xfffa, 0x42f, 0xffe3, 0x80]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0xf, 0x48, 0x0, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xff, 0x0, 0x8, 0x5, 0x5, 0x7, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc, 0x8000, 0x1, 0x0, 0x5, 0x7ff, 0x4]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x1, 0xc, 0x2, 0x4, 0x12, 0x24, 0x6, 0x60, 0x1, 0x1, 0x3, 0x2, 0x48, 0x12, 0x16, 0x30, 0x36, 0x16, 0x36, 0x5]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 5.643919465s ago: executing program 4 (id=9210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) prctl$PR_SET_MM_MAP(0x34, 0xe, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000200)=0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r1, &(0x7f0000001400)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x48040) setsockopt(r0, 0x4, 0x2, &(0x7f0000000440)="dd3bd43eb5de4ed1a5fc16e5f6f6b2f7c8627153782b4f5e44d3b0a8f4f1456bb220406e13149dce6f7dccf6a08a9addbce0dd933ab475c730654153ca8ae2aa3c1c2c2cfb1d1b11a9f93ed9596329c1dc2060c78a6757c5b8615fb65f02ec175cfa66878bb92b7de1472d8884fb62b0f16a7e67fb220cc780c0e7a31973f2ef220433b6e08c79d2c1b6ca7d5e14a254e05106dde77f8e4ba55c029d585561717fbf95e86035d8c3ae431844b118f53c1cea45d3ef3a4d356f1ba5215e6d62f9598b271e811c3654411164000d52fb06594ac26f", 0xd4) set_tid_address(0x0) syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32], 0x50) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140400001001010000000000000000000000000a400000001208010200000000000a0000020000f80800020073797a31000000000c00000000000000030900010073567a30000000000800034000000008140000001100012a05000000000000000000000a2a042d94834405673673a45208e37654566c69b691bc586ca3520c18a32dc79abab964ac05aa01501b5dc7a2b98c4cd683a58bd022a9a70e528b7c873326369746b4"], 0x68}, 0x1, 0x0, 0x0, 0x890}, 0x0) 5.430105354s ago: executing program 2 (id=9211): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x9, {{}, {0xb5, 0x400, 0x3, 0x400, 0xab, 0x3ff}}}, 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES16=r4], 0x14) 5.242065762s ago: executing program 2 (id=9212): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 3) 5.213056694s ago: executing program 0 (id=9213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 5.159952056s ago: executing program 2 (id=9214): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e00679a3600ff07730768432ae4b63db4ab10007e", @ANYRES32=r0, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) recvmmsg$unix(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 5.120220167s ago: executing program 2 (id=9215): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000007c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r6 = syz_io_uring_setup(0x63eb, &(0x7f0000000680)={0x0, 0x1200, 0x8, 0x2, 0x16b}, 0x0, 0x0, &(0x7f0000000780)) r7 = syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x801004, 0x400, 0x1, 0x0, 0x0, r6}, &(0x7f0000000100), &(0x7f0000000480), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r9, 0x719, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8044}, 0x880) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.244255556s ago: executing program 1 (id=9216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() fstat(0xffffffffffffffff, 0x0) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) kexec_load(0xf5, 0x0, 0x0, 0x0) bind$unix(r5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000000b0, 0x62338, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x4}, 0x2000, 0x8, 0x0, 0x0, 0x5, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.800335095s ago: executing program 0 (id=9217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x4, @loopback, 0x2}, 0x1c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3d04b63e3ee3755, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x235, 0x0, 0x0, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000480)={0x6, "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"}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000070a010300000000000000000408000a40000200000900020073797a300000000009fd9f57bb0eacbb0628d7b179523886e41150cf55aee1a1831a5673e8388340bdbb8abc02def96e51991cdb57e8adebe933fed626dc787287e319df9a61c40d7812b7ff24e7525fec5dc0176fe32b6817a3c75d07ebf26312e8120c3c24329e425ed343225b350afbeb56dcf3faac30946d953979d3e3df63bc8de73728f4e5176b1f52b63cc7227a2856e7612368b8d21c357baedb94"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xc001) 2.039152611s ago: executing program 3 (id=9218): socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x4040010) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x900, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000010010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 2.004675563s ago: executing program 4 (id=9219): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet(0x2, 0x2, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r5 = socket$packet(0x11, 0x2, 0x300) file_getattr(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x46, 0x1000) bind$packet(r5, &(0x7f0000008680)={0x11, 0xd, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000003940)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r5, @ANYBLOB, @ANYRESDEC, @ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) r7 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000000ac0)="$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") open(0x0, 0x4827e, 0xdc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x8, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) 2.003312683s ago: executing program 2 (id=9220): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x9}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "79d52f0c71eeb59f46407d763398c06afedd262e858725472217df6434a1eee8039f09fa6c64ba69fb1cfb0b82966a852e6b8d0e93529d5b6d0cead6f180eff8", 0x16}, 0x48, 0xfffffffffffffffc) syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000466000/0x3000)=nil, 0x3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) lchown(&(0x7f0000000cc0)='./bus\x00', 0x0, 0xffffffffffffffff) r2 = semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f00000000c0)=[{0x0, 0xc63e, 0x1000}, {0x4, 0x4, 0x1800}], 0x2) semtimedop(r2, &(0x7f0000000000)=[{0x2, 0xf, 0x2800}, {0x3, 0xfff8}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x546, &(0x7f0000000180)="$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") pivot_root(&(0x7f0000000040)='./file2\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000b00)='./file2\x00', 0x0, 0x3800) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000008000000040000000100000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G(\x00\x00\x00\x00\x00\x00'], 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@getae={0x40, 0x1f, 0x1, 0x70bd2b, 0x25dfdbfc, {{@in6=@private2, 0x4d6, 0x2, 0x32}, @in6=@mcast1, 0x8, 0x3500}}, 0x40}}, 0x8854) 1.791806322s ago: executing program 0 (id=9221): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", 'O\x00', "ecba26893bcdc493"}, 0x28) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000e00)={0x9c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x1, 0xe, 0x7fff, 0x0, 0x6, 0x762c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xd07a, 0x9, 0x8319, 0xfffa, 0x42f, 0xffe3, 0x80]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x6c, 0xf, 0x48, 0x0, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xff, 0x0, 0x8, 0x5, 0x5, 0x7, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc, 0x8000, 0x1, 0x0, 0x5, 0x7ff, 0x4]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x1, 0xc, 0x2, 0x4, 0x12, 0x24, 0x6, 0x60, 0x1, 0x1, 0x3, 0x2, 0x48, 0x12, 0x16, 0x30, 0x36, 0x16, 0x36, 0x5]}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 1.60439129s ago: executing program 1 (id=9222): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x9, {{}, {0xb5, 0x400, 0x3, 0x400, 0xab, 0x3ff}}}, 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES16=r4], 0x14) 1.536313793s ago: executing program 0 (id=9223): r0 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x10, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0xcf}, 0x14) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x0, 0x5}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) close(0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000010c0)={0x0, 0xfffffdf5, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x200088c0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) syz_read_part_table(0x104e, &(0x7f0000000000)="$eJzsz7ENwjAQBdBLHCWkQKJlMPbxJlQ0LMYKUB0yWGQChJDeK8722V/WBT81lDnKa7crQ43IzLlfTVMsUcd+2pct815qK+t8ucXSmr37yLhnRBz6++MntrZyznX7fDxdvzgaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyNZwAAAP//P1oNLw==") r7 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket(0x2, 0x80805, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) 1.490588845s ago: executing program 1 (id=9224): getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)={[0x1]}, 0x8) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0x0, 0x2, 0x2, 0x0, @rand_addr=0x64010101, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x8, 0x19, &(0x7f0000000880)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_fd={0x18, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x6}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @alu={0x7, 0x0, 0xc, 0x4, 0x2, 0xffffffffffffffff, 0x10}], &(0x7f0000000a00)='syzkaller\x00', 0x6, 0xa3, &(0x7f0000000a40)=""/163, 0x40f00, 0x61, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0x8, 0x7, 0x1}, 0x10}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="0000ea0700", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0x38, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @local, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x4000}}}}}}, 0x0) 1.489838305s ago: executing program 3 (id=9225): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e00679a3600ff07730768432ae4b63db4ab10007e", @ANYRES32=r3, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9000, &(0x7f0000000000)={0xf5, 0x7a}, 0x20) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000400}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) msgsnd(0x0, 0x0, 0x401, 0x0) r9 = syz_ublk_setup_io_uring(0x71f3, &(0x7f0000000640)={0x0, 0x2a32, 0x2, 0x2, 0x2f}, &(0x7f00000006c0), &(0x7f0000000780), &(0x7f00000007c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xf, &(0x7f00000048c0)={0x8, 0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000000800)=""/196, 0xc4}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/236, 0xec}, {&(0x7f00000034c0)=""/180, 0xb4}, {&(0x7f0000003580)=""/190, 0xbe}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/167, 0xa7}, {&(0x7f0000004700)=""/179, 0xb3}], &(0x7f0000004840)=[0xb48, 0x1, 0x7f, 0xe, 0x4, 0x0, 0x6, 0x8001, 0x3]}, 0x20) msgctl$IPC_RMID(0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 0s ago: executing program 4 (id=9226): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x5, 0x3, &(0x7f0000000340)=ANY=[@ANYRES8=r0], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) unshare(0x60000600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x1, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20008081) setresgid(0x0, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0xb, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r3, &(0x7f0000005600)=[{{&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000000540)=""/50, 0x32}, {&(0x7f0000000c40)=""/72, 0x48}], 0x3, &(0x7f0000000d00)=""/89, 0x59}}, {{&(0x7f0000000d80)=@un=@abs, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000e40)=""/72, 0x48}, {&(0x7f0000000ec0)=""/226, 0xe2}, {&(0x7f0000002040)=""/180, 0xb4}, {&(0x7f0000002100)=""/142, 0x8e}], 0x4, &(0x7f0000002200)=""/210, 0xd2}, 0x101}, {{&(0x7f0000002300)=@isdn, 0x80, &(0x7f0000002580)=[{&(0x7f0000002380)=""/199, 0xc7}, {&(0x7f0000002480)=""/235, 0xeb}], 0x2, &(0x7f00000025c0)=""/153, 0x99}, 0x9}, {{&(0x7f0000002680)=@nfc, 0x80, &(0x7f00000039c0)=[{&(0x7f0000002700)=""/208, 0xd0}, {&(0x7f0000002800)=""/88, 0x58}, {&(0x7f0000002880)=""/222, 0xde}, {&(0x7f0000002980)=""/48, 0x30}, {&(0x7f00000029c0)=""/4096, 0x1000}], 0x5, &(0x7f0000003a40)=""/151, 0x97}, 0x7}, {{&(0x7f0000003b00)=@isdn, 0x80, &(0x7f0000005040)=[{&(0x7f0000003b80)=""/102, 0x66}, {&(0x7f0000003c00)=""/41, 0x29}, {&(0x7f0000003c40)=""/179, 0xb3}, {&(0x7f0000003d00)=""/252, 0xfc}, {&(0x7f0000003e00)=""/57, 0x39}, {&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/254, 0xfe}, {&(0x7f0000004f40)=""/224, 0xe0}], 0x8, &(0x7f00000050c0)=""/189, 0xbd}, 0x8001}, {{&(0x7f0000005180)=@alg, 0x80, &(0x7f0000005540)=[{&(0x7f0000005200)=""/103, 0x67}, {&(0x7f0000005280)=""/41, 0x29}, {&(0x7f00000052c0)=""/220, 0xdc}, {&(0x7f00000053c0)=""/184, 0xb8}, {&(0x7f0000005480)=""/178, 0xb2}], 0x5, &(0x7f00000055c0)=""/60, 0x3c}}], 0x6, 0x60, 0x0) ioctl$KDDELIO(r3, 0x7040, 0x6) sync() sync() sync() bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001040)={{0x0, 0x120000, 0x5, 0x1000, 0x8, 0x7fffffff, 0x7, 0x7, 0x6, 0xd7, 0x200, 0xfffffffffffffff8, 0x1699, 0x5, 0x5}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f00000f2000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8032, r5, 0x1fd12000) getpgrp(0xffffffffffffffff) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x20040090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x3f, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x24000000) kernel console output (not intermixed with test programs): 0 [ 721.576917][T28767] veth0_vlan: entered promiscuous mode [ 721.585432][T28767] veth1_vlan: entered promiscuous mode [ 721.595985][T28954] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8482'. [ 721.620448][T28767] veth0_macvtap: entered promiscuous mode [ 721.629871][T28767] veth1_macvtap: entered promiscuous mode [ 721.646964][T28767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.658578][T28767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.671347][ T4303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.713111][ T4303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.738506][ T4303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.748242][ T28] audit: type=1400 audit(1778628375.330:1534): avc: denied { mounton } for pid=28767 comm="syz-executor" path="/root/syzkaller.Dby4Rd/syz-tmp" dev="sda1" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 721.786085][ T4303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.829714][ T28] audit: type=1400 audit(1778628375.330:1535): avc: denied { mount } for pid=28767 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 721.890832][ T28] audit: type=1400 audit(1778628375.370:1536): avc: denied { mount } for pid=28767 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 721.936332][T28968] loop4: detected capacity change from 0 to 1024 [ 721.956219][ T28] audit: type=1400 audit(1778628375.370:1537): avc: denied { mounton } for pid=28767 comm="syz-executor" path="/root/syzkaller.Dby4Rd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 722.028291][T28968] EXT4-fs: test_dummy_encryption option not supported [ 722.040697][T28966] xt_hashlimit: size too large, truncated to 1048576 [ 722.227684][ T28] audit: type=1400 audit(1778628375.370:1538): avc: denied { mounton } for pid=28767 comm="syz-executor" path="/root/syzkaller.Dby4Rd/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=97534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 722.872526][T28973] loop4: detected capacity change from 0 to 1024 [ 722.879653][T28973] ext4: Unknown parameter 'nouser_xattr' [ 723.205004][T28977] netlink: 'syz.0.8486': attribute type 4 has an invalid length. [ 723.246779][ T28] audit: type=1400 audit(1778628375.380:1539): avc: denied { mounton } for pid=28767 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 723.307137][ T28] audit: type=1400 audit(1778628375.380:1540): avc: denied { mount } for pid=28767 comm="syz-executor" name="/" dev="gadgetfs" ino=3954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 723.939152][T28893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.984448][T29000] tipc: Enabled bearer , priority 0 [ 724.991486][T29000] syzkaller0: entered promiscuous mode [ 724.997177][T29000] syzkaller0: entered allmulticast mode [ 725.011635][T29000] tipc: Resetting bearer [ 725.796343][T28999] tipc: Resetting bearer [ 725.820291][T28999] tipc: Disabling bearer [ 725.865570][ T28] audit: type=1400 audit(1778628379.460:1541): avc: denied { ioctl } for pid=29011 comm="syz.2.8497" path="socket:[97689]" dev="sockfs" ino=97689 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 725.891440][T29012] syzkaller0: entered promiscuous mode [ 725.913067][T29012] syzkaller0: entered allmulticast mode [ 725.939913][T29019] loop4: detected capacity change from 0 to 1024 [ 725.949478][T29019] EXT4-fs: test_dummy_encryption option not supported [ 726.132945][ T28] audit: type=1400 audit(1778628379.730:1542): avc: denied { create } for pid=29032 comm="syz.3.8505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 726.155675][ T28] audit: type=1400 audit(1778628379.730:1543): avc: denied { write } for pid=29032 comm="syz.3.8505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 726.214132][T29043] syzkaller0: entered promiscuous mode [ 726.220514][T29043] syzkaller0: entered allmulticast mode [ 726.600996][T29044] loop4: detected capacity change from 0 to 1024 [ 726.616613][T29044] ext4: Unknown parameter 'nouser_xattr' [ 727.010032][T29049] xt_hashlimit: size too large, truncated to 1048576 [ 727.313266][T29063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.333246][T29063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.777581][T29066] syzkaller0: entered promiscuous mode [ 727.783140][T29066] syzkaller0: entered allmulticast mode [ 727.843644][T29068] syzkaller0: entered promiscuous mode [ 727.849285][T29068] syzkaller0: entered allmulticast mode [ 727.942567][T29075] loop3: detected capacity change from 0 to 1024 [ 727.949262][T29075] EXT4-fs: test_dummy_encryption option not supported [ 729.120200][T29033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.478697][T29072] loop3: detected capacity change from 0 to 1024 [ 730.100064][T29072] ext4: Unknown parameter 'nouser_xattr' [ 733.476992][T29111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.486555][T29111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.608828][T29119] xt_hashlimit: size too large, truncated to 1048576 [ 734.835283][T29127] syzkaller0: entered promiscuous mode [ 734.862229][T29127] syzkaller0: entered allmulticast mode [ 734.973072][T29135] loop4: detected capacity change from 0 to 1024 [ 734.999554][T29135] EXT4-fs: test_dummy_encryption option not supported [ 735.774006][T29143] loop4: detected capacity change from 0 to 1024 [ 735.780611][T29143] ext4: Unknown parameter 'nouser_xattr' [ 736.296731][T29158] syzkaller0: entered promiscuous mode [ 736.312098][T29158] syzkaller0: entered allmulticast mode [ 736.381841][T29161] syzkaller0: entered promiscuous mode [ 736.387550][T29161] syzkaller0: entered allmulticast mode [ 737.078971][T29167] syzkaller0: entered promiscuous mode [ 737.084707][T29167] syzkaller0: entered allmulticast mode [ 737.254855][T29172] syzkaller0: entered promiscuous mode [ 737.260532][T29172] syzkaller0: entered allmulticast mode [ 737.266455][T29173] loop2: detected capacity change from 0 to 1024 [ 737.273236][T29173] EXT4-fs: test_dummy_encryption option not supported [ 738.027063][T29178] loop2: detected capacity change from 0 to 1024 [ 738.044977][T29178] ext4: Unknown parameter 'nouser_xattr' [ 738.925189][T29147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.023769][T29189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.049339][T29189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.134985][T29196] syzkaller0: entered promiscuous mode [ 739.157596][T29196] syzkaller0: entered allmulticast mode [ 740.501835][T29216] syzkaller0: entered promiscuous mode [ 740.507358][T29216] syzkaller0: entered allmulticast mode [ 740.682090][T29221] tipc: Enabled bearer , priority 0 [ 740.711887][T29221] syzkaller0: entered promiscuous mode [ 740.730756][T29221] syzkaller0: entered allmulticast mode [ 740.766875][T29221] tipc: Resetting bearer [ 740.791376][T29220] tipc: Resetting bearer [ 740.811607][T29220] tipc: Disabling bearer [ 741.380915][T29253] syzkaller0: entered promiscuous mode [ 741.397726][T29253] syzkaller0: entered allmulticast mode [ 741.504154][T29263] tipc: Enabled bearer , priority 0 [ 741.516706][T29263] syzkaller0: entered promiscuous mode [ 741.533412][T29263] syzkaller0: entered allmulticast mode [ 741.556034][T29263] tipc: Resetting bearer [ 741.577333][T29262] tipc: Resetting bearer [ 741.589507][T29262] tipc: Disabling bearer [ 741.657375][T29275] tipc: Enabled bearer , priority 0 [ 741.666209][T29275] syzkaller0: entered promiscuous mode [ 741.677263][T29275] syzkaller0: entered allmulticast mode [ 741.705002][T29275] tipc: Resetting bearer [ 741.717426][T29277] syzkaller0: entered promiscuous mode [ 741.723846][T29277] syzkaller0: entered allmulticast mode [ 741.730677][T29274] tipc: Resetting bearer [ 741.739210][T29274] tipc: Disabling bearer [ 742.016915][T29295] syzkaller0: entered promiscuous mode [ 742.029203][T29295] syzkaller0: entered allmulticast mode [ 742.100257][T29305] tipc: Enabled bearer , priority 0 [ 742.113612][T29305] syzkaller0: entered promiscuous mode [ 742.124621][T29305] syzkaller0: entered allmulticast mode [ 742.148195][T29305] tipc: Resetting bearer [ 742.177229][T29304] tipc: Resetting bearer [ 742.194264][T29304] tipc: Disabling bearer [ 742.247144][T29313] syzkaller0: entered promiscuous mode [ 742.260608][T29313] syzkaller0: entered allmulticast mode [ 742.510712][T29334] syzkaller0: entered promiscuous mode [ 742.516282][T29334] syzkaller0: entered allmulticast mode [ 742.848981][T29357] syzkaller0: entered promiscuous mode [ 742.854671][T29357] syzkaller0: entered allmulticast mode [ 743.594973][T29375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.603000][T29375] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.612956][T29375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.642072][T29375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.651468][T29375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.661951][T29375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 743.672918][T29375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 743.685481][T29375] veth1_vlan: left promiscuous mode [ 743.691254][T29375] veth0_vlan: left promiscuous mode [ 743.697034][T29375] veth0_vlan: entered promiscuous mode [ 743.705208][T29375] veth1_vlan: entered promiscuous mode [ 743.712996][T29375] veth1_macvtap: left promiscuous mode [ 743.719399][T29375] veth0_macvtap: left promiscuous mode [ 743.725573][T29375] veth0_macvtap: entered promiscuous mode [ 743.732277][T29375] veth1_macvtap: entered promiscuous mode [ 743.741160][T29375] 8021q: adding VLAN 0 to HW filter on device eth0 [ 743.749653][T29375] 8021q: adding VLAN 0 to HW filter on device eth1 [ 743.757124][T29375] 8021q: adding VLAN 0 to HW filter on device eth2 [ 743.765692][T29375] 8021q: adding VLAN 0 to HW filter on device eth3 [ 743.774850][T29375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 743.784515][T29375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 743.794332][T29375] 8021q: adding VLAN 0 to HW filter on device bond3 [ 743.804464][T29375] 8021q: adding VLAN 0 to HW filter on device bond4 [ 743.812453][T29375] 8021q: adding VLAN 0 to HW filter on device bond5 [ 743.820408][T29375] 8021q: adding VLAN 0 to HW filter on device bond6 [ 743.828362][T29375] 8021q: adding VLAN 0 to HW filter on device bond7 [ 743.836476][T29375] 8021q: adding VLAN 0 to HW filter on device bond8 [ 743.844473][T29375] 8021q: adding VLAN 0 to HW filter on device bond9 [ 743.876235][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.883365][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.900348][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.907448][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.934272][ T3464] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.963528][ T3464] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.975780][ T3464] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.985171][ T3464] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.184931][T29388] syzkaller0: entered promiscuous mode [ 744.190715][T29388] syzkaller0: entered allmulticast mode [ 745.244073][T29408] syzkaller0: entered promiscuous mode [ 745.251252][T29408] syzkaller0: entered allmulticast mode [ 745.352324][T29322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 745.820177][T29440] loop2: detected capacity change from 0 to 1024 [ 745.834674][T29440] EXT4-fs: test_dummy_encryption option not supported [ 746.366791][T29443] loop2: detected capacity change from 0 to 1024 [ 746.382160][T29443] ext4: Unknown parameter 'nouser_xattr' [ 746.824558][T29465] loop3: detected capacity change from 0 to 1024 [ 746.841123][T29465] EXT4-fs: test_dummy_encryption option not supported [ 748.313794][T29467] loop3: detected capacity change from 0 to 1024 [ 748.331966][T29467] ext4: Unknown parameter 'nouser_xattr' [ 749.731087][T29458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 751.120007][T29519] loop2: detected capacity change from 0 to 1024 [ 751.128900][T29519] EXT4-fs: test_dummy_encryption option not supported [ 751.672388][T29521] loop2: detected capacity change from 0 to 1024 [ 751.686922][T29521] ext4: Unknown parameter 'nouser_xattr' [ 752.935498][T29503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 752.997060][ T28] audit: type=1400 audit(1778628406.590:1544): avc: denied { read write } for pid=29551 comm="syz.3.8653" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 753.141572][ T28] audit: type=1400 audit(1778628406.590:1545): avc: denied { open } for pid=29551 comm="syz.3.8653" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 753.178493][ T28] audit: type=1400 audit(1778628406.590:1546): avc: denied { ioctl } for pid=29551 comm="syz.3.8653" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 753.204714][ T28] audit: type=1400 audit(1778628406.720:1547): avc: denied { write } for pid=29551 comm="syz.3.8653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 754.927061][ T28] audit: type=1400 audit(1778628408.510:1548): avc: denied { read } for pid=29588 comm="syz.3.8661" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 755.157013][ T28] audit: type=1400 audit(1778628408.510:1549): avc: denied { open } for pid=29588 comm="syz.3.8661" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 755.281677][T29596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.322056][T29596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.814667][T29609] loop2: detected capacity change from 0 to 1024 [ 755.822780][T29609] EXT4-fs: test_dummy_encryption option not supported [ 757.664228][T29617] loop2: detected capacity change from 0 to 1024 [ 757.673557][T29617] ext4: Unknown parameter 'nouser_xattr' [ 757.832403][ T28] audit: type=1400 audit(1778628411.430:1550): avc: denied { setopt } for pid=29622 comm="syz.3.8671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 758.705014][ T28] audit: type=1400 audit(1778628412.300:1551): avc: denied { read } for pid=29622 comm="syz.3.8671" laddr=fe80::a8aa:aaff:feaa:aa10 lport=55703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 760.182934][ T28] audit: type=1400 audit(1778628412.610:1552): avc: denied { read } for pid=29622 comm="syz.3.8671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 761.957403][T29659] loop4: detected capacity change from 0 to 512 [ 761.972699][T29659] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 761.985802][T29659] EXT4-fs (loop4): orphan cleanup on readonly fs [ 761.992525][T29659] Quota error (device loop4): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 762.017720][T29659] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 762.082505][T29666] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 762.098182][T29659] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 762.116894][T29669] netlink: 'syz.3.8683': attribute type 1 has an invalid length. [ 762.124944][T29669] netlink: 'syz.3.8683': attribute type 2 has an invalid length. [ 762.138262][T29659] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.8679: bg 0: block 15: invalid block bitmap [ 762.173772][T29659] loop4: lost filesystem error report for type 5 error -117 [ 762.174012][T29659] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 762.181377][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 762.181394][ C0] EXT4-fs (loop4): initial error at time 1778628415: ext4_validate_block_bitmap:432 [ 762.181430][ C0] EXT4-fs (loop4): last error at time 1778628415: ext4_validate_block_bitmap:432 [ 762.914870][T29659] loop4: lost filesystem error report for type 5 error -117 [ 762.916068][T29659] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.8679: data will be lost [ 763.207476][T29659] EXT4-fs (loop4): 1 truncate cleaned up [ 763.224422][T29659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 763.282549][T29659] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #16: comm syz.4.8679: corrupted xattr block 31: invalid header [ 763.297511][T29659] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 763.315052][T29659] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #16: comm syz.4.8679: corrupted xattr block 31: invalid header [ 763.383422][T29677] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #16: comm syz.4.8679: corrupted xattr block 31: invalid header [ 763.446647][T29677] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 763.471155][T29679] tipc: Enabled bearer , priority 0 [ 763.480844][T29681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.500389][T29677] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.8679: bad symlink. [ 763.512795][T29679] syzkaller0: entered promiscuous mode [ 763.518420][T29681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.530418][T29679] syzkaller0: entered allmulticast mode [ 763.538899][T29659] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 763.553241][ T28] audit: type=1400 audit(1778628417.100:1553): avc: denied { read } for pid=29658 comm="syz.4.8679" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 763.586212][T29659] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.8679: bad symlink. [ 763.599738][T29679] tipc: Resetting bearer [ 763.612791][T29678] tipc: Resetting bearer [ 763.634593][T29678] tipc: Disabling bearer [ 763.646013][T28767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.865147][T29689] loop2: detected capacity change from 0 to 1024 [ 763.952402][T29689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.976527][ T28] audit: type=1326 audit(1778628417.570:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29694 comm="syz.4.8687" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 764.018430][ T28] audit: type=1326 audit(1778628417.570:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29694 comm="syz.4.8687" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 764.044085][ T28] audit: type=1326 audit(1778628417.570:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29694 comm="syz.4.8687" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 764.069711][ T28] audit: type=1326 audit(1778628417.570:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29694 comm="syz.4.8687" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 764.078640][T29703] tipc: Enabled bearer , priority 0 [ 764.095735][ T28] audit: type=1326 audit(1778628417.570:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29694 comm="syz.4.8687" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 764.127938][ T28] audit: type=1326 audit(1778628417.570:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29694 comm="syz.4.8687" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 764.153648][ T28] audit: type=1326 audit(1778628417.570:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29694 comm="syz.4.8687" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 764.189610][ T28] audit: type=1326 audit(1778628417.600:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29694 comm="syz.4.8687" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 764.218540][ T28] audit: type=1326 audit(1778628417.600:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29694 comm="syz.4.8687" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 764.245172][T29703] syzkaller0: entered promiscuous mode [ 764.245176][T22028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.253025][T29703] syzkaller0: entered allmulticast mode [ 764.287038][ T28] audit: type=1326 audit(1778628417.600:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29694 comm="syz.4.8687" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 764.318518][T29703] tipc: Resetting bearer [ 764.325911][T29702] tipc: Resetting bearer [ 764.332933][T29702] tipc: Disabling bearer [ 764.385097][T29709] FAULT_INJECTION: forcing a failure. [ 764.385097][T29709] name failslab, interval 1, probability 0, space 0, times 0 [ 764.404312][T29709] CPU: 1 UID: 0 PID: 29709 Comm: syz.2.8695 Not tainted syzkaller #0 PREEMPT(full) [ 764.404342][T29709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 764.404427][T29709] Call Trace: [ 764.404434][T29709] [ 764.404442][T29709] __dump_stack+0x1d/0x30 [ 764.404533][T29709] dump_stack_lvl+0x95/0xd0 [ 764.404555][T29709] dump_stack+0x15/0x1b [ 764.404573][T29709] should_fail_ex+0x263/0x280 [ 764.404601][T29709] should_failslab+0x8c/0xb0 [ 764.404712][T29709] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 764.404830][T29709] ? __alloc_skb+0x2d6/0x690 [ 764.404852][T29709] __alloc_skb+0x2d6/0x690 [ 764.404870][T29709] ? __alloc_skb+0x200/0x690 [ 764.404890][T29709] netlink_alloc_large_skb+0xbf/0xf0 [ 764.404918][T29709] netlink_sendmsg+0x40c/0x6f0 [ 764.405023][T29709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.405051][T29709] ____sys_sendmsg+0x563/0x5b0 [ 764.405078][T29709] ___sys_sendmsg+0x195/0x1e0 [ 764.405199][T29709] __x64_sys_sendmsg+0xd4/0x160 [ 764.405228][T29709] x64_sys_call+0x194c/0x3020 [ 764.405288][T29709] do_syscall_64+0x12c/0x3b0 [ 764.405318][T29709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.405398][T29709] RIP: 0033:0x7fd4c52dce59 [ 764.405417][T29709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.405437][T29709] RSP: 002b:00007fd4c3d2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.405461][T29709] RAX: ffffffffffffffda RBX: 00007fd4c5555fa0 RCX: 00007fd4c52dce59 [ 764.405478][T29709] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 764.405530][T29709] RBP: 00007fd4c3d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 764.405542][T29709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.405624][T29709] R13: 00007fd4c5556038 R14: 00007fd4c5555fa0 R15: 00007ffc5d791088 [ 764.405646][T29709] [ 764.409169][T29712] syz_tun: entered allmulticast mode [ 764.629327][ C0] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 764.629726][T29704] syz_tun: left allmulticast mode [ 764.637915][ C0] mroute: pending queue full, dropping entries [ 764.706059][T29722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8700'. [ 764.741977][T29731] syzkaller0: entered promiscuous mode [ 764.759441][T29731] syzkaller0: entered allmulticast mode [ 767.567040][T29779] syzkaller0: entered promiscuous mode [ 767.573133][T29779] syzkaller0: entered allmulticast mode [ 767.799350][T29738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 768.065199][T29809] syzkaller0: entered promiscuous mode [ 768.085730][T29809] syzkaller0: entered allmulticast mode [ 768.128322][T29805] loop4: detected capacity change from 0 to 8192 [ 768.797755][T29838] loop4: detected capacity change from 0 to 512 [ 768.819768][T29838] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 768.837114][T29838] EXT4-fs (loop4): orphan cleanup on readonly fs [ 768.851225][T29838] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 768.882844][T29838] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 768.905403][T29838] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.8736: inode has both inline data and extents flags [ 768.942305][T29838] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 768.942534][T29838] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.8736: couldn't read orphan inode 16 (err -117) [ 768.951931][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 768.951953][ C1] EXT4-fs (loop4): initial error at time 1778628422: ext4_orphan_get:1397: inode 16 [ 768.951986][ C1] EXT4-fs (loop4): last error at time 1778628422: ext4_orphan_get:1397: inode 16 [ 769.031507][T29838] loop4: lost filesystem error report for type 5 error -117 [ 769.032153][T29838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 769.059595][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 769.059613][ T28] audit: type=1400 audit(1778628422.660:1665): avc: denied { listen } for pid=29836 comm="syz.4.8736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 769.385699][T29847] loop2: detected capacity change from 0 to 1024 [ 769.393968][T29847] EXT4-fs: test_dummy_encryption option not supported [ 769.395121][T28767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.926409][T29851] loop2: detected capacity change from 0 to 1024 [ 769.939162][T29851] ext4: Unknown parameter 'nouser_xattr' [ 770.114396][T29855] syzkaller0: entered promiscuous mode [ 770.121508][T29855] syzkaller0: entered allmulticast mode [ 770.294561][ T28] audit: type=1326 audit(1778628423.890:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29856 comm="syz.4.8742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 770.325066][ T28] audit: type=1326 audit(1778628423.890:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29856 comm="syz.4.8742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 770.353113][ T28] audit: type=1326 audit(1778628423.920:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29856 comm="syz.4.8742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 770.379234][ T28] audit: type=1326 audit(1778628423.920:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29856 comm="syz.4.8742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 770.405338][ T28] audit: type=1326 audit(1778628423.920:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29856 comm="syz.4.8742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 770.431135][ T28] audit: type=1326 audit(1778628423.920:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29856 comm="syz.4.8742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 770.457002][ T28] audit: type=1326 audit(1778628423.920:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29856 comm="syz.4.8742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 770.484731][ T28] audit: type=1326 audit(1778628423.920:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29856 comm="syz.4.8742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 770.511552][ T28] audit: type=1326 audit(1778628423.920:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29856 comm="syz.4.8742" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 771.089180][T29866] syzkaller0: entered promiscuous mode [ 771.094705][T29866] syzkaller0: entered allmulticast mode [ 771.127042][T29868] FAULT_INJECTION: forcing a failure. [ 771.127042][T29868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.140576][T29868] CPU: 0 UID: 0 PID: 29868 Comm: syz.4.8745 Not tainted syzkaller #0 PREEMPT(full) [ 771.140642][T29868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.140650][T29868] Call Trace: [ 771.140655][T29868] [ 771.140661][T29868] __dump_stack+0x1d/0x30 [ 771.140678][T29868] dump_stack_lvl+0x95/0xd0 [ 771.140728][T29868] dump_stack+0x15/0x1b [ 771.140740][T29868] should_fail_ex+0x263/0x280 [ 771.140832][T29868] should_fail+0xb/0x20 [ 771.140857][T29868] should_fail_usercopy+0x1a/0x20 [ 771.140954][T29868] _copy_from_user+0x1c/0xb0 [ 771.140995][T29868] kstrtouint_from_user+0x69/0xf0 [ 771.141011][T29868] ? 0xffffffff81000000 [ 771.141021][T29868] ? selinux_file_permission+0x1e1/0x320 [ 771.141051][T29868] proc_fail_nth_write+0x50/0x160 [ 771.141069][T29868] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 771.141087][T29868] vfs_write+0x269/0x9f0 [ 771.141121][T29868] ? __rcu_read_unlock+0x4e/0x70 [ 771.141136][T29868] ? __fget_files+0x184/0x1c0 [ 771.141149][T29868] ? mutex_lock+0x57/0x90 [ 771.141235][T29868] ksys_write+0xdc/0x1a0 [ 771.141253][T29868] __x64_sys_write+0x40/0x50 [ 771.141271][T29868] x64_sys_call+0x27e1/0x3020 [ 771.141287][T29868] do_syscall_64+0x12c/0x3b0 [ 771.141418][T29868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.141474][T29868] RIP: 0033:0x7f34b2add68e [ 771.141485][T29868] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 771.141499][T29868] RSP: 002b:00007f34b1576fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 771.141514][T29868] RAX: ffffffffffffffda RBX: 00007f34b15776c0 RCX: 00007f34b2add68e [ 771.141524][T29868] RDX: 0000000000000001 RSI: 00007f34b15770a0 RDI: 0000000000000019 [ 771.141534][T29868] RBP: 00007f34b1577090 R08: 0000000000000000 R09: 0000000000000000 [ 771.141542][T29868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.141630][T29868] R13: 00007f34b2d96038 R14: 00007f34b2d95fa0 R15: 00007ffe6fab2c68 [ 771.141697][T29868] [ 771.519567][T29825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 772.487151][T29911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8758'. [ 772.603372][T29929] loop2: detected capacity change from 0 to 1024 [ 772.612380][T29929] EXT4-fs: test_dummy_encryption option not supported [ 773.147210][T29935] loop2: detected capacity change from 0 to 1024 [ 773.162855][T29935] ext4: Unknown parameter 'nouser_xattr' [ 774.516278][ T28] kauditd_printk_skb: 117 callbacks suppressed [ 774.516297][ T28] audit: type=1400 audit(1778628428.110:1792): avc: denied { write } for pid=29947 comm="syz.4.8769" path="socket:[99252]" dev="sockfs" ino=99252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 774.559671][T29948] loop4: detected capacity change from 0 to 128 [ 774.568935][ T28] audit: type=1326 audit(1778628428.160:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29947 comm="syz.4.8769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 774.595229][ T28] audit: type=1326 audit(1778628428.160:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29947 comm="syz.4.8769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 774.621138][ T28] audit: type=1326 audit(1778628428.160:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29947 comm="syz.4.8769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 774.646720][ T28] audit: type=1326 audit(1778628428.160:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29947 comm="syz.4.8769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 774.672537][ T28] audit: type=1326 audit(1778628428.160:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29947 comm="syz.4.8769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 774.698615][ T28] audit: type=1326 audit(1778628428.160:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29947 comm="syz.4.8769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 774.724601][ T28] audit: type=1326 audit(1778628428.160:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29947 comm="syz.4.8769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 774.750287][ T28] audit: type=1326 audit(1778628428.160:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29947 comm="syz.4.8769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 774.790420][ T28] audit: type=1326 audit(1778628428.160:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29947 comm="syz.4.8769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 774.851955][T29951] loop4: detected capacity change from 0 to 256 [ 774.991571][T29953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8771'. [ 775.151513][T29959] loop4: detected capacity change from 0 to 512 [ 775.168513][T29959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 775.185062][T29959] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.8774: invalid block [ 775.197656][T29959] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 775.198143][T29959] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.8774: invalid indirect mapped block 4294967295 (level 1) [ 775.207725][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 775.207914][ C0] EXT4-fs (loop4): initial error at time 1778628428: ext4_get_branch:178: inode 11: block 4294967295 [ 775.208174][ C0] EXT4-fs (loop4): last error at time 1778628428: ext4_get_branch:178: inode 11: block 4294967295 [ 775.253116][T29959] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 775.253659][T29959] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.8774: invalid indirect mapped block 4294967295 (level 1) [ 775.277555][T29959] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 775.278467][T29959] EXT4-fs (loop4): 2 truncates cleaned up [ 775.295577][T29959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.371713][T28767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.465829][T29913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 775.816484][T29983] netlink: 'syz.0.8784': attribute type 33 has an invalid length. [ 775.831074][T29983] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8784'. [ 776.143901][ T3565] IPVS: starting estimator thread 0... [ 776.152871][T29997] netlink: 'syz.0.8789': attribute type 4 has an invalid length. [ 776.161001][T29997] netlink: 'syz.0.8789': attribute type 4 has an invalid length. [ 776.239170][T30005] IPVS: using max 2496 ests per chain, 124800 per kthread [ 777.194456][T30027] FAULT_INJECTION: forcing a failure. [ 777.194456][T30027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.208480][T30027] CPU: 1 UID: 0 PID: 30027 Comm: syz.3.8796 Not tainted syzkaller #0 PREEMPT(full) [ 777.208559][T30027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 777.208573][T30027] Call Trace: [ 777.208580][T30027] [ 777.208589][T30027] __dump_stack+0x1d/0x30 [ 777.208618][T30027] dump_stack_lvl+0x95/0xd0 [ 777.208638][T30027] dump_stack+0x15/0x1b [ 777.208700][T30027] should_fail_ex+0x263/0x280 [ 777.208732][T30027] should_fail+0xb/0x20 [ 777.208759][T30027] should_fail_usercopy+0x1a/0x20 [ 777.208866][T30027] _copy_from_user+0x1c/0xb0 [ 777.208971][T30027] ___sys_sendmsg+0xc1/0x1e0 [ 777.209013][T30027] __x64_sys_sendmsg+0xd4/0x160 [ 777.209042][T30027] x64_sys_call+0x194c/0x3020 [ 777.209128][T30027] do_syscall_64+0x12c/0x3b0 [ 777.209154][T30027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.209179][T30027] RIP: 0033:0x7f0befe9ce59 [ 777.209199][T30027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.209239][T30027] RSP: 002b:00007f0bee8f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.209264][T30027] RAX: ffffffffffffffda RBX: 00007f0bf0115fa0 RCX: 00007f0befe9ce59 [ 777.209281][T30027] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 777.209297][T30027] RBP: 00007f0bee8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 777.209312][T30027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.209369][T30027] R13: 00007f0bf0116038 R14: 00007f0bf0115fa0 R15: 00007fff5ec78178 [ 777.209387][T30027] [ 777.435089][T30031] netlink: 'syz.3.8797': attribute type 13 has an invalid length. [ 777.453289][T30031] netlink: 'syz.3.8797': attribute type 17 has an invalid length. [ 777.516541][T30034] loop3: detected capacity change from 0 to 512 [ 777.536568][T30034] EXT4-fs: test_dummy_encryption option not supported [ 777.593098][T30034] loop3: detected capacity change from 0 to 128 [ 777.608400][T30034] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 777.636645][T30034] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 777.670301][T19709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 778.089322][T30043] loop3: detected capacity change from 0 to 512 [ 778.109770][T30043] EXT4-fs: Ignoring removed i_version option [ 778.117281][T30043] EXT4-fs: Ignoring removed bh option [ 778.233026][T30043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.251647][T30043] ext4 filesystem being mounted at /587/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 779.097465][T30048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8801'. [ 779.097642][T30000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 779.212967][T30057] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8805'. [ 779.361289][T30065] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8806'. [ 779.535222][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 779.535241][ T28] audit: type=1400 audit(1778628433.130:1833): avc: denied { setopt } for pid=30072 comm="syz.4.8811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 779.610357][T19709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.620328][T30073] loop4: detected capacity change from 0 to 128 [ 779.675158][T30078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8813'. [ 779.713311][T30079] bio_check_eod: 91 callbacks suppressed [ 779.713327][T30079] syz.4.8811: attempt to access beyond end of device [ 779.713327][T30079] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 779.740046][T30079] syz.4.8811: attempt to access beyond end of device [ 779.740046][T30079] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 779.759195][T30079] syz.4.8811: attempt to access beyond end of device [ 779.759195][T30079] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 779.773814][T30079] syz.4.8811: attempt to access beyond end of device [ 779.773814][T30079] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 779.787669][T30079] syz.4.8811: attempt to access beyond end of device [ 779.787669][T30079] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 779.787826][T30083] loop3: detected capacity change from 0 to 512 [ 779.802775][T30079] syz.4.8811: attempt to access beyond end of device [ 779.802775][T30079] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 779.821357][ T28] audit: type=1400 audit(1778628433.420:1834): avc: denied { write } for pid=30084 comm="syz.1.8815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 779.823033][T30079] syz.4.8811: attempt to access beyond end of device [ 779.823033][T30079] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 779.855531][T30079] syz.4.8811: attempt to access beyond end of device [ 779.855531][T30079] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 779.859208][ T28] audit: type=1400 audit(1778628433.450:1835): avc: denied { read } for pid=30084 comm="syz.1.8815" lport=62739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 779.869535][T30079] syz.4.8811: attempt to access beyond end of device [ 779.869535][T30079] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 779.904436][T30079] syz.4.8811: attempt to access beyond end of device [ 779.904436][T30079] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 779.910644][ T28] audit: type=1400 audit(1778628433.490:1836): avc: denied { read } for pid=30072 comm="syz.4.8811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 779.941512][T30083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.954774][ T28] audit: type=1400 audit(1778628433.550:1837): avc: denied { write } for pid=30082 comm="syz.3.8816" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 779.979980][ T28] audit: type=1400 audit(1778628433.550:1838): avc: denied { append } for pid=30082 comm="syz.3.8816" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 780.010967][ T28] audit: type=1400 audit(1778628433.560:1839): avc: denied { open } for pid=30082 comm="syz.3.8816" path="/591/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 780.041951][ T28] audit: type=1400 audit(1778628433.560:1840): avc: denied { read write } for pid=30082 comm="syz.3.8816" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 780.064747][ T28] audit: type=1400 audit(1778628433.600:1841): avc: denied { create } for pid=30082 comm="syz.3.8816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 780.093476][T19709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.250985][ T3464] Buffer I/O error on dev loop4, logical block 166, lost async page write [ 780.287155][T30100] loop4: detected capacity change from 0 to 1024 [ 780.294352][T30100] EXT4-fs: test_dummy_encryption option not supported [ 780.322414][T30101] tipc: Enabled bearer , priority 0 [ 781.281743][T30113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8824'. [ 781.681685][T19548] tipc: Node number set to 700018541 [ 782.290949][T30111] loop4: detected capacity change from 0 to 1024 [ 782.302834][T30111] ext4: Unknown parameter 'nouser_xattr' [ 783.500797][ T28] audit: type=1326 audit(1778628437.100:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30134 comm="syz.2.8832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4c52dce59 code=0x7ffc0000 [ 784.919140][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 784.919187][ T28] audit: type=1400 audit(1778628438.370:1903): avc: denied { kexec_image_load } for pid=30151 comm="syz.2.8839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 785.334962][ T28] audit: type=1400 audit(1778628438.430:1904): avc: denied { mount } for pid=30151 comm="syz.2.8839" name="/" dev="configfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 785.479000][ T28] audit: type=1400 audit(1778628438.430:1905): avc: denied { search } for pid=30151 comm="syz.2.8839" name="/" dev="configfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 785.579852][ T28] audit: type=1400 audit(1778628438.430:1906): avc: denied { search } for pid=30151 comm="syz.2.8839" name="/" dev="configfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 785.609880][T30150] loop4: detected capacity change from 0 to 512 [ 785.702142][ T28] audit: type=1400 audit(1778628438.430:1907): avc: denied { read } for pid=30151 comm="syz.2.8839" name="/" dev="configfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 785.761425][ T28] audit: type=1400 audit(1778628438.440:1908): avc: denied { read open } for pid=30151 comm="syz.2.8839" path="/" dev="configfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 785.793650][T30150] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 785.814145][ T3464] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.829106][ T3464] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.895963][T30167] syzkaller0: entered promiscuous mode [ 785.903835][T30167] syzkaller0: entered allmulticast mode [ 785.912918][T30150] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.8837: invalid block [ 785.913236][ T3464] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.913272][ T3464] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.946417][T30150] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 785.950473][T30150] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.8837: invalid indirect mapped block 4294967295 (level 1) [ 785.959190][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 785.981089][ C0] EXT4-fs (loop4): initial error at time 1778628439: ext4_get_branch:178: inode 11: block 4294967295 [ 785.983292][T30150] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 785.992040][ C0] EXT4-fs (loop4): last error at time 1778628439: ext4_get_branch:178: inode 11: block 4294967295 [ 786.023088][T30150] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.8837: invalid indirect mapped block 4294967295 (level 1) [ 786.042115][ T3464] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.047243][T30150] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 786.059567][ T3464] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.067381][T30150] EXT4-fs (loop4): 2 truncates cleaned up [ 786.132076][T30150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.132103][ T3464] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.132149][ T3464] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.180796][T30189] syzkaller0: entered promiscuous mode [ 786.186421][T30189] syzkaller0: entered allmulticast mode [ 786.254166][ T28] audit: type=1400 audit(1778628439.840:1909): avc: denied { write } for pid=30148 comm="syz.4.8837" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 786.311535][T28767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.361829][ T3464] bridge_slave_1: left allmulticast mode [ 786.367711][ T3464] bridge_slave_1: left promiscuous mode [ 786.373739][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.382089][ T3464] bridge_slave_0: left allmulticast mode [ 786.387966][ T3464] bridge_slave_0: left promiscuous mode [ 786.393960][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.581201][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.591284][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.600973][ T3464] bond0 (unregistering): Released all slaves [ 786.608667][ T3464] bond1 (unregistering): Released all slaves [ 786.617333][ T3464] bond2 (unregistering): Released all slaves [ 786.626083][ T3464] bond3 (unregistering): Released all slaves [ 786.634772][ T3464] bond4 (unregistering): Released all slaves [ 786.643151][ T3464] bond5 (unregistering): Released all slaves [ 786.653239][ T3464] bond6 (unregistering): (slave veth9): Releasing backup interface [ 786.662331][ T3464] bond6 (unregistering): Released all slaves [ 786.687388][T30168] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.694702][T30168] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.702093][T30168] bridge_slave_0: entered allmulticast mode [ 786.708500][T30168] bridge_slave_0: entered promiscuous mode [ 786.715415][ T3464] tipc: Disabling bearer [ 786.721683][ T3464] tipc: Left network mode [ 786.722012][T30168] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.733207][T30168] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.740500][T30168] bridge_slave_1: entered allmulticast mode [ 786.746892][T30168] bridge_slave_1: entered promiscuous mode [ 786.755013][ T3464] hsr_slave_0: left promiscuous mode [ 786.760809][ T3464] hsr_slave_1: left promiscuous mode [ 786.766466][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.773941][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.781443][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.788840][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.798571][ T3464] veth1_macvtap: left promiscuous mode [ 786.804071][ T3464] veth0_macvtap: left promiscuous mode [ 786.809659][ T3464] veth1_vlan: left promiscuous mode [ 786.814923][ T3464] veth0_vlan: left promiscuous mode [ 786.877011][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 786.886553][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 786.928497][T30168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.939002][T30168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.963835][T30168] team0: Port device team_slave_0 added [ 786.970612][T30168] team0: Port device team_slave_1 added [ 786.985291][T30168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.993305][T30168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.019500][T30168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.030770][T30168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.037743][T30168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.064031][T30168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.088468][T30168] hsr_slave_0: entered promiscuous mode [ 787.095617][T30168] hsr_slave_1: entered promiscuous mode [ 787.101638][T30168] debugfs: 'hsr0' already exists in 'hsr' [ 787.107359][T30168] Cannot create hsr debugfs directory [ 788.893376][T30175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 788.906196][T30202] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 788.912378][T30168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 788.946401][T30168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 788.966031][T30168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 788.984707][T30168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.993556][T30168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 789.002954][T30168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 789.029975][T30168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 789.040124][T30168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 789.154257][ T28] audit: type=1400 audit(1778628442.750:1910): avc: denied { write } for pid=30213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.170670][T30168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.202392][T30168] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.213730][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.220947][ T4288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.343783][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.350973][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.048545][T30274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30274 comm=syz.0.8860 [ 790.113851][T30274] netlink: 'syz.0.8860': attribute type 1 has an invalid length. [ 790.139963][ T28] audit: type=1400 audit(1778628443.000:1911): avc: denied { write } for pid=30242 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.162107][ T28] audit: type=1400 audit(1778628443.460:1912): avc: denied { cpu } for pid=30253 comm="syz.0.8855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 790.181371][ T28] audit: type=1400 audit(1778628443.680:1913): avc: denied { write } for pid=30250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.216085][T30168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.014619][ T28] audit: type=1400 audit(1778628443.780:1914): avc: denied { write } for pid=30290 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.348427][T30168] veth0_vlan: entered promiscuous mode [ 791.358125][T30168] veth1_vlan: entered promiscuous mode [ 791.376061][T30168] veth0_macvtap: entered promiscuous mode [ 791.384890][T30168] veth1_macvtap: entered promiscuous mode [ 791.398476][T30168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.410783][T30168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.510273][T30305] can0: slcan on ttyS3. [ 791.514680][ T28] audit: type=1400 audit(1778628445.100:1915): avc: denied { watch } for pid=30300 comm="syz.1.8865" path="/574" dev="tmpfs" ino=2944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 791.547212][ T98] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.624147][ T98] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.639555][T30300] can0 (unregistered): slcan off ttyS3. [ 791.675773][ T98] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.728801][ T98] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.787632][T30331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8870'. [ 791.812156][ T28] audit: type=1400 audit(1778628445.400:1916): avc: denied { shutdown } for pid=30327 comm="syz.0.8869" lport=45635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 791.845859][T30331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8870'. [ 791.946395][ T28] audit: type=1400 audit(1778628445.540:1917): avc: denied { bind } for pid=30322 comm="syz.3.8843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 792.050539][ T28] audit: type=1400 audit(1778628445.610:1918): avc: denied { write } for pid=30324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.169081][ T28] audit: type=1400 audit(1778628445.740:1919): avc: denied { write } for pid=30357 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.243805][T30366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8876'. [ 792.299891][T30366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=30366 comm=syz.0.8876 [ 792.384192][ T28] audit: type=1400 audit(1778628445.980:1920): avc: denied { write } for pid=30367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.429363][T30381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.482318][T30381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.581536][T30389] FAULT_INJECTION: forcing a failure. [ 792.581536][T30389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.609115][T30389] CPU: 1 UID: 0 PID: 30389 Comm: syz.1.8880 Not tainted syzkaller #0 PREEMPT(full) [ 792.609147][T30389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 792.609162][T30389] Call Trace: [ 792.609170][T30389] [ 792.609178][T30389] __dump_stack+0x1d/0x30 [ 792.609251][T30389] dump_stack_lvl+0x95/0xd0 [ 792.609271][T30389] dump_stack+0x15/0x1b [ 792.609342][T30389] should_fail_ex+0x263/0x280 [ 792.609372][T30389] should_fail+0xb/0x20 [ 792.609398][T30389] should_fail_usercopy+0x1a/0x20 [ 792.609537][T30389] _copy_from_iter+0xcf/0xea0 [ 792.609565][T30389] ? lockref_put_return+0xf7/0x130 [ 792.609654][T30389] ? __rcu_read_unlock+0x4e/0x70 [ 792.609678][T30389] copy_page_from_iter+0x161/0x1f0 [ 792.609721][T30389] tun_get_user+0xbe3/0x27e0 [ 792.609761][T30389] ? ref_tracker_alloc+0x1eb/0x2f0 [ 792.609853][T30389] tun_chr_write_iter+0x15e/0x210 [ 792.609887][T30389] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 792.609919][T30389] vfs_write+0x5a6/0x9f0 [ 792.609955][T30389] ksys_write+0xdc/0x1a0 [ 792.610025][T30389] __x64_sys_write+0x40/0x50 [ 792.610054][T30389] x64_sys_call+0x27e1/0x3020 [ 792.610080][T30389] do_syscall_64+0x12c/0x3b0 [ 792.610228][T30389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.610254][T30389] RIP: 0033:0x7f2a9314d68e [ 792.610274][T30389] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 792.610295][T30389] RSP: 002b:00007f2a91bdefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 792.610328][T30389] RAX: ffffffffffffffda RBX: 00007f2a91bdf6c0 RCX: 00007f2a9314d68e [ 792.610344][T30389] RDX: 0000000000000204 RSI: 00002000000003c0 RDI: 00000000000000c8 [ 792.610373][T30389] RBP: 00007f2a91bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 792.610385][T30389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.610400][T30389] R13: 00007f2a93406038 R14: 00007f2a93405fa0 R15: 00007fff4fa9e228 [ 792.610422][T30389] [ 792.825968][T30399] loop4: detected capacity change from 0 to 1024 [ 792.876508][T30399] ext4: Unknown parameter 'euid' [ 793.043927][T30414] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.8883'. [ 793.070499][T30414] veth0_to_bond: entered promiscuous mode [ 793.084996][T30420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8887'. [ 793.103189][T30420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8887'. [ 793.604486][T30467] sctp: [Deprecated]: syz.4.8900 (pid 30467) Use of int in max_burst socket option. [ 793.604486][T30467] Use struct sctp_assoc_value instead [ 793.618095][T30469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.629614][T30467] netlink: 'syz.4.8900': attribute type 1 has an invalid length. [ 793.665287][T30469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.286421][T30504] loop3: detected capacity change from 0 to 256 [ 794.589000][T30504] FAT-fs (loop3): Directory bread(block 64) failed [ 794.672461][T30504] FAT-fs (loop3): Directory bread(block 65) failed [ 794.785570][T30504] FAT-fs (loop3): Directory bread(block 66) failed [ 794.881097][T30504] FAT-fs (loop3): Directory bread(block 67) failed [ 794.963073][T30504] FAT-fs (loop3): Directory bread(block 68) failed [ 795.012292][T30504] FAT-fs (loop3): Directory bread(block 69) failed [ 795.068838][T30504] FAT-fs (loop3): Directory bread(block 70) failed [ 795.143927][T30504] FAT-fs (loop3): Directory bread(block 71) failed [ 795.165708][T30504] FAT-fs (loop3): Directory bread(block 72) failed [ 795.185990][T30504] FAT-fs (loop3): Directory bread(block 73) failed [ 795.420848][ T28] kauditd_printk_skb: 154 callbacks suppressed [ 795.420868][ T28] audit: type=1400 audit(1778628449.020:2075): avc: denied { mounton } for pid=30503 comm="syz.3.8912" path="/3/file1/file0" dev="loop3" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 795.560896][T30543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 795.568180][T30543] IPv6: NLM_F_CREATE should be set when creating new route [ 795.638650][T30546] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.645917][T30546] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.715454][T30546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.728355][T30546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.983308][T30558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.020000][T30558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.095687][ T28] audit: type=1326 audit(1778628449.690:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30560 comm="syz.4.8927" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 796.125686][ T28] audit: type=1326 audit(1778628449.720:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30560 comm="syz.4.8927" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 796.128125][ T3464] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.151311][ T28] audit: type=1326 audit(1778628449.720:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30560 comm="syz.4.8927" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 796.185343][ T28] audit: type=1326 audit(1778628449.720:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30560 comm="syz.4.8927" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 796.201398][ T3464] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.219887][ T3464] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.228314][ T3464] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.229144][ T28] audit: type=1326 audit(1778628449.720:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30560 comm="syz.4.8927" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 796.266145][ T28] audit: type=1326 audit(1778628449.720:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30560 comm="syz.4.8927" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 796.291824][ T28] audit: type=1326 audit(1778628449.720:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30560 comm="syz.4.8927" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 796.326566][ T28] audit: type=1326 audit(1778628449.720:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30560 comm="syz.4.8927" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 796.362758][ T28] audit: type=1326 audit(1778628449.860:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30560 comm="syz.4.8927" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 796.595825][T30573] loop3: detected capacity change from 0 to 512 [ 796.808941][T30573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 797.965948][T30573] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8931: invalid indirect mapped block 4294967295 (level 1) [ 798.018740][T30573] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 798.030714][T30573] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8931: invalid indirect mapped block 4294967295 (level 1) [ 798.041156][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 798.041285][ C0] EXT4-fs (loop3): initial error at time 1778628451: ext4_free_branches:1023: inode 11 [ 798.041521][ C0] EXT4-fs (loop3): last error at time 1778628451: ext4_free_branches:1023: inode 11 [ 798.113571][T30573] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 798.136678][T30573] EXT4-fs (loop3): 2 truncates cleaned up [ 798.312806][T30573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.359911][T30633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.389289][T30633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.539195][T30168] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.637728][T30664] FAULT_INJECTION: forcing a failure. [ 798.637728][T30664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.655861][T30664] CPU: 1 UID: 0 PID: 30664 Comm: syz.0.8957 Not tainted syzkaller #0 PREEMPT(full) [ 798.655897][T30664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 798.655979][T30664] Call Trace: [ 798.655987][T30664] [ 798.655995][T30664] __dump_stack+0x1d/0x30 [ 798.656047][T30664] dump_stack_lvl+0x95/0xd0 [ 798.656131][T30664] dump_stack+0x15/0x1b [ 798.656198][T30664] should_fail_ex+0x263/0x280 [ 798.656228][T30664] should_fail+0xb/0x20 [ 798.656296][T30664] should_fail_usercopy+0x1a/0x20 [ 798.656337][T30664] _copy_to_user+0x20/0xa0 [ 798.656408][T30664] btf_new_fd+0x43e/0x740 [ 798.656494][T30664] bpf_btf_load+0x112/0x130 [ 798.656576][T30664] __sys_bpf+0x3d8/0x7e0 [ 798.656608][T30664] __x64_sys_bpf+0x41/0x50 [ 798.656712][T30664] x64_sys_call+0x10cb/0x3020 [ 798.656780][T30664] do_syscall_64+0x12c/0x3b0 [ 798.656810][T30664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.656835][T30664] RIP: 0033:0x7ff0d4b6ce59 [ 798.656854][T30664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.656949][T30664] RSP: 002b:00007ff0d35bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 798.656974][T30664] RAX: ffffffffffffffda RBX: 00007ff0d4de5fa0 RCX: 00007ff0d4b6ce59 [ 798.656991][T30664] RDX: 0000000000000028 RSI: 0000200000000480 RDI: 0000000000000012 [ 798.657006][T30664] RBP: 00007ff0d35bf090 R08: 0000000000000000 R09: 0000000000000000 [ 798.657021][T30664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 798.657044][T30664] R13: 00007ff0d4de6038 R14: 00007ff0d4de5fa0 R15: 00007ffdb995fe48 [ 798.657089][T30664] [ 798.885752][T30662] loop3: detected capacity change from 0 to 512 [ 798.893858][T30678] loop4: detected capacity change from 0 to 512 [ 798.962231][T30662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 798.977059][T30678] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 799.036183][T30678] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.8961: invalid indirect mapped block 4294967295 (level 1) [ 799.057839][T30662] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8956: invalid indirect mapped block 4294967295 (level 1) [ 799.075811][T30662] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 799.078122][T30662] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8956: invalid indirect mapped block 4294967295 (level 1) [ 799.102792][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 799.103042][ C0] EXT4-fs (loop3): initial error at time 1778628452: ext4_free_branches:1023: inode 11 [ 799.103474][ C0] EXT4-fs (loop3): last error at time 1778628452: ext4_free_branches:1023: inode 11 [ 799.133654][T30662] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 799.136980][T30678] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 799.149150][T30662] EXT4-fs (loop3): 2 truncates cleaned up [ 799.172191][T30662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.185384][T30678] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.8961: invalid indirect mapped block 4294967295 (level 1) [ 799.199497][T30678] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 799.199867][T30678] EXT4-fs (loop4): 2 truncates cleaned up [ 799.208049][T30698] openvswitch: netlink: Missing key (keys=40, expected=80) [ 799.212796][T30678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.218896][T30698] devpts: Unknown parameter 'smackfstransmute' [ 799.328572][T30701] loop2: detected capacity change from 0 to 1024 [ 799.352496][T30701] EXT4-fs: Ignoring removed bh option [ 799.359241][T30701] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 799.391732][T28767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.402850][T30168] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.446570][T30701] EXT4-fs (loop2): orphan cleanup on readonly fs [ 799.472280][T30701] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.8968: Bad quota inum: 4294934528, type: 0 [ 799.517983][T30701] loop2: lost filesystem error report for type 5 error -117 [ 799.519087][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 799.532870][ C1] EXT4-fs (loop2): initial error at time 1778628453: ext4_quota_enable:7221 [ 799.541591][ C1] EXT4-fs (loop2): last error at time 1778628453: ext4_quota_enable:7221 [ 799.551927][T30701] EXT4-fs (loop2): Remounting filesystem read-only [ 799.560263][T30701] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 799.577002][T30701] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 799.605145][T30701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 799.907204][T30719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8968'. [ 799.968846][T30701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.990457][T30701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.101618][ T4281] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.161655][ T4281] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.249009][ T4281] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.296035][T30739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.322020][ T4281] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.334006][T30739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.429000][T30724] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.437108][T30724] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.444772][T30724] bridge_slave_0: entered allmulticast mode [ 800.451752][T30724] bridge_slave_0: entered promiscuous mode [ 800.461499][ T4281] bridge_slave_1: left promiscuous mode [ 800.468504][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.485306][ T4281] bridge_slave_0: left promiscuous mode [ 800.491212][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.558019][ T4281] bond3 (unregistering): (slave gretap1): Releasing active interface [ 800.567018][ T4281] gretap1 (unregistering): left allmulticast mode [ 800.587852][T22028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.624090][ T28] kauditd_printk_skb: 248 callbacks suppressed [ 800.624108][ T28] audit: type=1400 audit(1778628454.220:2333): avc: denied { write } for pid=30747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 800.675299][ T28] audit: type=1400 audit(1778628454.270:2334): avc: denied { write } for pid=30758 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 800.706233][ T4281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.722201][ T4281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.737361][ T4281] bond0 (unregistering): Released all slaves [ 800.746331][ T4281] bond1 (unregistering): (slave veth5): Releasing backup interface [ 800.755315][ T4281] bond1 (unregistering): Released all slaves [ 800.765273][ T4281] bond2 (unregistering): (slave veth7): Releasing backup interface [ 800.774395][ T4281] bond2 (unregistering): Released all slaves [ 800.785209][ T4281] bond3 (unregistering): Released all slaves [ 800.794512][ T4281] bond4 (unregistering): Released all slaves [ 800.804292][ T4281] bond5 (unregistering): Released all slaves [ 800.815161][ T4281] bond6 (unregistering): Released all slaves [ 800.824543][ T4281] bond7 (unregistering): Released all slaves [ 800.833594][ T4281] bond8 (unregistering): Released all slaves [ 800.843326][ T4281] bond9 (unregistering): Released all slaves [ 800.852892][ T4281] bond10 (unregistering): Released all slaves [ 800.888324][T30724] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.896644][T30761] No such timeout policy "syz0" [ 800.903226][T30724] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.913636][T30764] xt_socket: unknown flags 0x58 [ 800.918826][T30761] loop4: detected capacity change from 0 to 1024 [ 800.929295][T30724] bridge_slave_1: entered allmulticast mode [ 800.939825][T30724] bridge_slave_1: entered promiscuous mode [ 800.948732][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 800.961938][T30761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 800.963060][T30764] vlan2: entered promiscuous mode [ 800.974174][T30761] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.995931][ T28] audit: type=1400 audit(1778628454.590:2335): avc: denied { setopt } for pid=30762 comm="syz.0.8979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 800.998526][T30764] syz_tun: entered promiscuous mode [ 801.022435][ T28] audit: type=1400 audit(1778628454.590:2336): avc: denied { write } for pid=30760 comm="syz.4.8978" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 801.051425][ T4281] tipc: Left network mode [ 801.052885][T30724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.070134][T30724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.089143][ T4281] hsr_slave_0: left promiscuous mode [ 801.112967][ T4281] hsr_slave_1: left promiscuous mode [ 801.138634][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.155714][T30773] loop3: detected capacity change from 0 to 512 [ 801.162417][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.170180][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.177684][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.197208][T30773] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 801.210051][ T4281] veth1_macvtap: left promiscuous mode [ 801.215548][ T4281] veth0_macvtap: left promiscuous mode [ 801.221097][ T4281] veth1_vlan: left promiscuous mode [ 801.226628][ T4281] veth0_vlan: left promiscuous mode [ 801.254799][T30773] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8980: invalid indirect mapped block 4294967295 (level 1) [ 801.273066][T30773] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 801.278711][T30773] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8980: invalid indirect mapped block 4294967295 (level 1) [ 801.289529][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 801.289631][ C0] EXT4-fs (loop3): initial error at time 1778628454: ext4_free_branches:1023: inode 11 [ 801.290121][ C0] EXT4-fs (loop3): last error at time 1778628454: ext4_free_branches:1023: inode 11 [ 801.350551][T30773] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 801.356048][T30773] EXT4-fs (loop3): 2 truncates cleaned up [ 801.398132][ T28] audit: type=1400 audit(1778628454.990:2337): avc: denied { unmount } for pid=22028 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 801.433093][ T4281] team0 (unregistering): Port device team_slave_1 removed [ 801.444056][ T4281] team0 (unregistering): Port device team_slave_0 removed [ 801.448228][T30773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.489560][T30724] team0: Port device team_slave_0 added [ 801.491271][ T28] audit: type=1400 audit(1778628455.090:2338): avc: denied { write } for pid=30772 comm="syz.3.8980" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 801.496358][T30724] team0: Port device team_slave_1 added [ 801.533753][T30782] syzkaller0: entered promiscuous mode [ 801.539538][T30782] syzkaller0: entered allmulticast mode [ 801.565294][T30724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.572447][T30724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.573743][T30168] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.607481][T30724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.631753][T30724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.643669][T30724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.670620][T28767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 801.674065][T30724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.712950][T30790] loop2: detected capacity change from 0 to 2048 [ 801.756364][T30724] hsr_slave_0: entered promiscuous mode [ 801.765891][T30790] loop2: p2 p3 p7 [ 801.766331][T30724] hsr_slave_1: entered promiscuous mode [ 801.795540][T30799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.827025][T30799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.875369][T30803] loop3: detected capacity change from 0 to 1024 [ 801.886344][T30803] EXT4-fs: test_dummy_encryption option not supported [ 801.908528][ T28] audit: type=1400 audit(1778628455.500:2339): avc: denied { write } for pid=30795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.988447][ T28] audit: type=1400 audit(1778628455.530:2340): avc: denied { write } for pid=30813 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 802.083977][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 802.245872][T30827] loop3: detected capacity change from 0 to 512 [ 802.324504][T30827] EXT4-fs (loop3): 1 orphan inode deleted [ 802.331588][T30827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.356794][T30827] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 802.450691][ T310] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 802.716201][ T310] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 803.126108][ T28] audit: type=1400 audit(1778628456.720:2341): avc: denied { write } for pid=30820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.926553][T30843] loop4: detected capacity change from 0 to 512 [ 804.069075][T30843] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.8992: corrupted inode contents [ 804.083264][T30843] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 804.090679][T30843] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.8992: mark_inode_dirty error [ 804.102514][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 804.102555][ C0] EXT4-fs (loop4): initial error at time 1778628457: ext4_do_update_inode:5690: inode 16 [ 804.103123][ C0] EXT4-fs (loop4): last error at time 1778628457: ext4_do_update_inode:5690: inode 16 [ 804.153527][T30168] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.191544][T30843] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 804.197566][T30843] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.8992: corrupted inode contents [ 804.210393][T30839] loop2: detected capacity change from 0 to 512 [ 804.299965][T30843] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 804.306589][T30843] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.8992: mark_inode_dirty error [ 804.330951][T30843] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 804.334280][T30843] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.8992: corrupted inode contents [ 804.358076][T30843] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 804.360111][T30843] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 804.381398][T30843] loop4: lost filesystem error report for type 5 error -117 [ 804.383921][T30843] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.8992: corrupted inode contents [ 804.407377][T30843] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 804.409544][T30843] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.8992: mark_inode_dirty error [ 804.434775][T30843] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 804.437981][T30843] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 804.458327][T30843] loop4: lost filesystem error report for type 5 error -117 [ 804.466082][T30843] EXT4-fs (loop4): 1 truncate cleaned up [ 804.497449][T30843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.514189][T30843] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.552392][T30843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8992'. [ 804.591805][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 804.605202][T30839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 804.787455][T30724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 804.826332][T30724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 804.837963][T30839] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.8993: invalid block [ 804.864456][T30724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 804.877620][T30724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 804.891137][T30839] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 804.899077][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 804.914679][ C0] EXT4-fs (loop2): initial error at time 1778628458: ext4_get_branch:178: inode 11: block 4294967295 [ 804.925611][ C0] EXT4-fs (loop2): last error at time 1778628458: ext4_get_branch:178: inode 11: block 4294967295 [ 804.946908][T30839] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.8993: invalid indirect mapped block 4294967295 (level 1) [ 804.974872][T30839] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 804.980318][T30839] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.8993: invalid indirect mapped block 4294967295 (level 1) [ 805.037051][T30724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 805.064189][T30724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 805.078522][T30839] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 805.098835][T30875] syzkaller0: entered promiscuous mode [ 805.130905][T30839] EXT4-fs (loop2): 2 truncates cleaned up [ 805.145878][T30875] syzkaller0: entered allmulticast mode [ 805.176245][T30724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 805.206929][T30724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.249483][T30884] netlink: 'syz.0.8999': attribute type 10 has an invalid length. [ 805.307845][T30839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.329718][T28767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.337977][T30884] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 805.348256][T30895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9001'. [ 805.357469][T30895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9001'. [ 805.379997][T30895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9001'. [ 805.405446][T22028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.453693][T30724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.515852][T30724] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.565839][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.572957][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.560233][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.567344][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.679345][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 806.679362][ T28] audit: type=1400 audit(1778628460.260:2350): avc: denied { write } for pid=30896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.723742][T30724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 806.735381][T30928] netlink: 'syz.3.9005': attribute type 5 has an invalid length. [ 806.737830][T30922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9006'. [ 806.752184][T30724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 806.754502][T30929] loop4: detected capacity change from 0 to 512 [ 806.775872][T30929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.815165][T30928] netlink: 45 bytes leftover after parsing attributes in process `syz.3.9005'. [ 806.891093][ T28] audit: type=1400 audit(1778628460.490:2351): avc: denied { write } for pid=30933 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.020398][T30724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.057523][T30947] pim6reg: entered allmulticast mode [ 807.095333][T30962] xt_cgroup: invalid path, errno=-2 [ 807.112026][T28767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.175094][T30970] loop3: detected capacity change from 0 to 128 [ 807.239869][T30970] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 807.274453][ T28] audit: type=1400 audit(1778628460.870:2352): avc: denied { write } for pid=30948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.299356][T30970] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 807.320972][ T28] audit: type=1400 audit(1778628460.910:2353): avc: denied { write } for pid=30969 comm="syz.3.9013" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 807.367217][ T28] audit: type=1400 audit(1778628460.950:2354): avc: denied { getopt } for pid=30969 comm="syz.3.9013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 807.457970][ T28] audit: type=1400 audit(1778628460.950:2355): avc: denied { map } for pid=30969 comm="syz.3.9013" path="/17/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 807.511774][T30724] veth0_vlan: entered promiscuous mode [ 807.515720][T30998] netlink: 'syz.2.9014': attribute type 10 has an invalid length. [ 807.530945][ T28] audit: type=1400 audit(1778628460.950:2356): avc: denied { execute } for pid=30969 comm="syz.3.9013" path="/17/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 807.580282][T30998] syz_tun: entered promiscuous mode [ 807.588141][T31003] loop4: detected capacity change from 0 to 512 [ 807.594742][ T28] audit: type=1400 audit(1778628461.000:2357): avc: denied { write } for pid=30990 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.603501][T30998] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 807.644493][T31007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9016'. [ 807.646374][T30724] veth1_vlan: entered promiscuous mode [ 807.672452][T31003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.690806][T31003] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 807.717635][T30724] veth0_macvtap: entered promiscuous mode [ 807.726661][T30724] veth1_macvtap: entered promiscuous mode [ 807.743892][T30724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.771146][T30724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.772312][ T28] audit: type=1400 audit(1778628461.360:2358): avc: denied { write } for pid=31002 comm="syz.4.9015" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 807.806066][ T310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.818742][T31003] hub 9-0:1.0: USB hub found [ 807.824491][T31003] hub 9-0:1.0: 8 ports detected [ 807.834360][ T310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.859716][ T310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.890037][ T310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.903686][ T28] audit: type=1400 audit(1778628461.500:2359): avc: denied { write } for pid=31002 comm="syz.4.9015" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 807.937874][T31028] loop2: detected capacity change from 0 to 512 [ 807.986617][T31028] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9020: bg 0: block 169: padding at end of block bitmap is not set [ 808.087889][T31028] loop2: lost filesystem error report for type 5 error -117 [ 808.088192][T31028] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.9020: Failed to acquire dquot type 0 [ 808.095761][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 808.095783][ C0] EXT4-fs (loop2): initial error at time 1778628461: ext4_validate_block_bitmap:441 [ 808.095810][ C0] EXT4-fs (loop2): last error at time 1778628461: ext4_validate_block_bitmap:441 [ 808.150258][T31028] loop2: lost filesystem error report for type 5 error -117 [ 808.165197][T31028] EXT4-fs (loop2): 1 truncate cleaned up [ 808.179686][T31028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.192697][T31028] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.224273][T31051] hub 9-0:1.0: USB hub found [ 808.235396][T31051] hub 9-0:1.0: 8 ports detected [ 808.242021][T28767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.312734][T30168] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 808.433744][T31061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9028'. [ 808.456387][T31068] loop4: detected capacity change from 0 to 1024 [ 808.457804][T22028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.463570][T31068] EXT4-fs: Ignoring removed bh option [ 808.514501][T31068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.606185][T31087] process 'syz.1.9033' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' with NULL argv: empty string added [ 808.719762][T31090] loop3: detected capacity change from 0 to 1764 [ 808.728747][T28767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.760724][T31090] loop3: detected capacity change from 0 to 512 [ 808.777763][T31090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.783909][T31092] FAULT_INJECTION: forcing a failure. [ 808.783909][T31092] name failslab, interval 1, probability 0, space 0, times 0 [ 808.805405][T31092] CPU: 1 UID: 0 PID: 31092 Comm: syz.2.9036 Not tainted syzkaller #0 PREEMPT(full) [ 808.805437][T31092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 808.805452][T31092] Call Trace: [ 808.805459][T31092] [ 808.805466][T31092] __dump_stack+0x1d/0x30 [ 808.805492][T31092] dump_stack_lvl+0x95/0xd0 [ 808.805573][T31092] dump_stack+0x15/0x1b [ 808.805594][T31092] should_fail_ex+0x263/0x280 [ 808.805651][T31092] ? sctp_association_new+0x71/0x1190 [ 808.805671][T31092] should_failslab+0x8c/0xb0 [ 808.805698][T31092] __kmalloc_cache_noprof+0x5f/0x400 [ 808.805734][T31092] sctp_association_new+0x71/0x1190 [ 808.805797][T31092] ? __ipv6_addr_type+0x122/0x210 [ 808.805821][T31092] sctp_connect_new_asoc+0x1a8/0x3a0 [ 808.805847][T31092] sctp_sendmsg+0xfff/0x1d60 [ 808.805891][T31092] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 808.805997][T31092] ? __pfx_sctp_sendmsg+0x10/0x10 [ 808.806059][T31092] ? __pfx_inet_sendmsg+0x10/0x10 [ 808.806089][T31092] inet_sendmsg+0xc5/0xd0 [ 808.806126][T31092] __sys_sendto+0x3db/0x490 [ 808.806231][T31092] __x64_sys_sendto+0x76/0x90 [ 808.806255][T31092] x64_sys_call+0x2d35/0x3020 [ 808.806279][T31092] do_syscall_64+0x12c/0x3b0 [ 808.806322][T31092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.806348][T31092] RIP: 0033:0x7fd4c52dce59 [ 808.806376][T31092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.806394][T31092] RSP: 002b:00007fd4c3d0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 808.806443][T31092] RAX: ffffffffffffffda RBX: 00007fd4c5556090 RCX: 00007fd4c52dce59 [ 808.806459][T31092] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 808.806472][T31092] RBP: 00007fd4c3d0e090 R08: 0000200000000000 R09: 000000000000001c [ 808.806524][T31092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 808.806539][T31092] R13: 00007fd4c5556128 R14: 00007fd4c5556090 R15: 00007ffc5d791088 [ 808.806559][T31092] [ 809.009398][T30168] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.243425][T31114] syzkaller0: entered promiscuous mode [ 809.249199][T31114] syzkaller0: entered allmulticast mode [ 810.751562][T31150] netlink: 'syz.3.9054': attribute type 8 has an invalid length. [ 810.796862][T31169] syzkaller0: entered promiscuous mode [ 810.804377][T31169] syzkaller0: entered allmulticast mode [ 811.058038][T31184] Invalid ELF header magic: != ELF [ 811.185919][T31184] loop4: detected capacity change from 0 to 1024 [ 811.206469][T31184] EXT4-fs: dax option not supported [ 812.844004][T31183] SELinux: policydb magic number 0x2715d428 does not match expected magic number 0xf97cff8c [ 812.858554][T31183] SELinux: failed to load policy [ 812.986360][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 812.986376][ T28] audit: type=1400 audit(1778628466.580:2395): avc: denied { unmount } for pid=22393 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 813.448617][ T28] audit: type=1326 audit(1778628467.040:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31204 comm="syz.0.9071" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d4b6ce59 code=0x7fc00000 [ 813.534521][ T28] audit: type=1400 audit(1778628467.130:2397): avc: denied { relabelfrom } for pid=31196 comm="syz.2.9068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 813.558490][ T28] audit: type=1400 audit(1778628467.160:2398): avc: denied { relabelto } for pid=31196 comm="syz.2.9068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 813.734945][ T28] audit: type=1400 audit(1778628467.330:2399): avc: denied { getopt } for pid=31218 comm="syz.2.9075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 813.784154][ T28] audit: type=1400 audit(1778628467.330:2400): avc: denied { write } for pid=31218 comm="syz.2.9075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 813.834682][ T28] audit: type=1400 audit(1778628467.330:2401): avc: denied { setopt } for pid=31218 comm="syz.2.9075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 813.859963][T31224] loop2: detected capacity change from 0 to 512 [ 813.869081][T31224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 813.886623][ T28] audit: type=1400 audit(1778628467.330:2402): avc: denied { ioctl } for pid=31218 comm="syz.2.9075" path="socket:[104642]" dev="sockfs" ino=104642 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 813.911693][ T28] audit: type=1400 audit(1778628467.330:2403): avc: denied { read write } for pid=31218 comm="syz.2.9075" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 813.941763][ T28] audit: type=1400 audit(1778628467.330:2404): avc: denied { open } for pid=31218 comm="syz.2.9075" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 814.014011][T31224] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.9077: invalid indirect mapped block 4294967295 (level 1) [ 814.034548][T31224] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 814.034796][T31224] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.9077: invalid indirect mapped block 4294967295 (level 1) [ 814.058053][T31224] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 814.058380][T31224] EXT4-fs (loop2): 2 truncates cleaned up [ 814.073887][T31224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.103019][T22028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.796589][T31269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9090'. [ 815.816585][T31269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9090'. [ 815.942357][T31273] bond0: (slave syz_tun): Releasing backup interface [ 815.958686][T31273] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.966018][T31273] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.025927][T31273] bridge_slave_0: left allmulticast mode [ 816.041174][T31273] bridge_slave_0: left promiscuous mode [ 816.053902][T31273] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.083090][T31273] bridge_slave_1: left allmulticast mode [ 816.096915][T31273] bridge_slave_1: left promiscuous mode [ 816.108822][T31273] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.138495][T31273] bond0: (slave bond_slave_0): Releasing backup interface [ 816.163220][T31273] bond0: (slave bond_slave_1): Releasing backup interface [ 816.193876][T31273] team0: Port device team_slave_0 removed [ 816.220624][T31273] team0: Port device team_slave_1 removed [ 816.238501][T31273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.259789][T31273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.280197][T31273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.299413][T31273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.373761][T31273] bond1: (slave veth3): Releasing backup interface [ 816.418438][ T98] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.428035][ T98] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.460324][ T98] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.478857][ T98] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.497253][ T98] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.514119][ T98] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.527228][ T98] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.536025][ T98] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.777831][T31310] loop2: detected capacity change from 0 to 512 [ 818.802324][T31310] EXT4-fs: Ignoring removed i_version option [ 818.808581][T31310] EXT4-fs: Ignoring removed bh option [ 821.114334][T31310] EXT4-fs: error -4 creating inode table initialization thread [ 821.149536][T31310] EXT4-fs (loop2): mount failed [ 821.403578][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 821.403597][ T28] audit: type=1400 audit(1778628474.900:2415): avc: denied { ioctl } for pid=31341 comm="syz.0.9114" path="socket:[105570]" dev="sockfs" ino=105570 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 821.453586][T31345] syzkaller0: entered promiscuous mode [ 821.481401][T31345] syzkaller0: entered allmulticast mode [ 821.572384][T31352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9117'. [ 821.831157][T31362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9122'. [ 821.893509][T31366] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9122'. [ 822.154485][T31372] syz_tun: entered allmulticast mode [ 822.517609][T31367] syz_tun: left allmulticast mode [ 822.690624][T31382] FAULT_INJECTION: forcing a failure. [ 822.690624][T31382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.713289][T31382] CPU: 1 UID: 0 PID: 31382 Comm: syz.1.9129 Not tainted syzkaller #0 PREEMPT(full) [ 822.713324][T31382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.713412][T31382] Call Trace: [ 822.713422][T31382] [ 822.713431][T31382] __dump_stack+0x1d/0x30 [ 822.713454][T31382] dump_stack_lvl+0x95/0xd0 [ 822.713479][T31382] dump_stack+0x15/0x1b [ 822.713516][T31382] should_fail_ex+0x263/0x280 [ 822.713587][T31382] should_fail+0xb/0x20 [ 822.713616][T31382] should_fail_usercopy+0x1a/0x20 [ 822.713659][T31382] _copy_to_user+0x20/0xa0 [ 822.713742][T31382] simple_read_from_buffer+0xb5/0x130 [ 822.713853][T31382] proc_fail_nth_read+0x10e/0x150 [ 822.713886][T31382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 822.713917][T31382] vfs_read+0x1ab/0x7f0 [ 822.713959][T31382] ? __rcu_read_unlock+0x4e/0x70 [ 822.714047][T31382] ? __fget_files+0x184/0x1c0 [ 822.714144][T31382] ? mutex_lock+0x57/0x90 [ 822.714169][T31382] ksys_read+0xdc/0x1a0 [ 822.714194][T31382] __x64_sys_read+0x40/0x50 [ 822.714224][T31382] x64_sys_call+0x2886/0x3020 [ 822.714284][T31382] do_syscall_64+0x12c/0x3b0 [ 822.714316][T31382] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 822.714352][T31382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.714381][T31382] RIP: 0033:0x7f79d96dd68e [ 822.714397][T31382] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 822.714414][T31382] RSP: 002b:00007f79d816efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 822.714434][T31382] RAX: ffffffffffffffda RBX: 00007f79d816f6c0 RCX: 00007f79d96dd68e [ 822.714451][T31382] RDX: 000000000000000f RSI: 00007f79d816f0a0 RDI: 0000000000000003 [ 822.714467][T31382] RBP: 00007f79d816f090 R08: 0000000000000000 R09: 0000000000000000 [ 822.714543][T31382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.714555][T31382] R13: 00007f79d9996038 R14: 00007f79d9995fa0 R15: 00007fffa7fe5418 [ 822.714573][T31382] [ 823.885824][ T28] audit: type=1400 audit(1778628477.480:2416): avc: denied { read } for pid=31404 comm="syz.2.9135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 823.893808][T31385] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9121'. [ 824.845204][ T28] audit: type=1400 audit(1778628477.690:2417): avc: denied { read write } for pid=31404 comm="syz.2.9135" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 825.829741][ T28] audit: type=1400 audit(1778628477.690:2418): avc: denied { open } for pid=31404 comm="syz.2.9135" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 827.337253][T31443] syzkaller0: entered promiscuous mode [ 827.343076][T31443] syzkaller0: entered allmulticast mode [ 827.418360][T31448] bridge_slave_0: default FDB implementation only supports local addresses [ 827.478971][T31451] loop2: detected capacity change from 0 to 1024 [ 827.487772][T31451] EXT4-fs: test_dummy_encryption option not supported [ 830.004772][T31455] loop2: detected capacity change from 0 to 1024 [ 830.125565][T31455] ext4: Unknown parameter 'nouser_xattr' [ 830.795763][T31461] syzkaller0: entered promiscuous mode [ 830.926829][ T28] audit: type=1400 audit(1778628484.520:2419): avc: denied { create } for pid=31464 comm="syz.1.9153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 830.946825][T31461] syzkaller0: entered allmulticast mode [ 831.244546][T31472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9153'. [ 831.284600][ T28] audit: type=1400 audit(1778628484.880:2420): avc: denied { setopt } for pid=31462 comm="syz.4.9152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 831.339169][T31476] IPVS: Unknown mcast interface: vlan1 [ 831.551585][T31483] loop2: detected capacity change from 0 to 4096 [ 831.590244][T31483] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 831.645686][ T28] audit: type=1400 audit(1778628485.240:2421): avc: denied { read } for pid=31488 comm="syz.0.9159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 831.696550][T31491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9159'. [ 831.869322][ T28] audit: type=1400 audit(1778628485.460:2422): avc: denied { setopt } for pid=31496 comm="syz.0.9161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 831.969262][T31497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.999468][T31497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.179640][ T28] audit: type=1400 audit(1778628485.780:2423): avc: denied { connect } for pid=31496 comm="syz.0.9161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 832.302936][T31508] FAULT_INJECTION: forcing a failure. [ 832.302936][T31508] name failslab, interval 1, probability 0, space 0, times 0 [ 832.842134][T31508] CPU: 0 UID: 0 PID: 31508 Comm: syz.3.9165 Not tainted syzkaller #0 PREEMPT(full) [ 832.842167][T31508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 832.842179][T31508] Call Trace: [ 832.842186][T31508] [ 832.842195][T31508] __dump_stack+0x1d/0x30 [ 832.842260][T31508] dump_stack_lvl+0x95/0xd0 [ 832.842279][T31508] dump_stack+0x15/0x1b [ 832.842324][T31508] should_fail_ex+0x263/0x280 [ 832.842350][T31508] should_failslab+0x8c/0xb0 [ 832.842377][T31508] kmem_cache_alloc_noprof+0x66/0x3f0 [ 832.842436][T31508] ? skb_clone+0x151/0x1f0 [ 832.842465][T31508] skb_clone+0x151/0x1f0 [ 832.842504][T31508] __netlink_deliver_tap+0x2c9/0x500 [ 832.842585][T31508] ? netlink_attachskb+0x2e2/0x660 [ 832.842611][T31508] netlink_sendskb+0x126/0x150 [ 832.842640][T31508] netlink_unicast+0x28a/0x680 [ 832.842682][T31508] netlink_ack+0x4c8/0x500 [ 832.842738][T31508] netlink_rcv_skb+0x192/0x220 [ 832.842767][T31508] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 832.842810][T31508] nfnetlink_rcv+0x167/0x1720 [ 832.842837][T31508] ? __kfree_skb+0x109/0x150 [ 832.842879][T31508] ? nlmon_xmit+0x4f/0x60 [ 832.842906][T31508] ? consume_skb+0x4b/0x130 [ 832.842923][T31508] ? nlmon_xmit+0x4f/0x60 [ 832.842946][T31508] ? dev_hard_start_xmit+0x36c/0x3a0 [ 832.842995][T31508] ? __dev_queue_xmit+0x1396/0x1ec0 [ 832.843026][T31508] ? __dev_queue_xmit+0x165/0x1ec0 [ 832.843119][T31508] ? ref_tracker_free+0x37d/0x3e0 [ 832.843146][T31508] ? __netlink_deliver_tap+0x4dc/0x500 [ 832.843193][T31508] netlink_unicast+0x5a8/0x680 [ 832.843223][T31508] netlink_sendmsg+0x5c8/0x6f0 [ 832.843284][T31508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.843316][T31508] ____sys_sendmsg+0x563/0x5b0 [ 832.843343][T31508] ___sys_sendmsg+0x195/0x1e0 [ 832.843439][T31508] __x64_sys_sendmsg+0xd4/0x160 [ 832.843463][T31508] x64_sys_call+0x194c/0x3020 [ 832.843484][T31508] do_syscall_64+0x12c/0x3b0 [ 832.843518][T31508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.843604][T31508] RIP: 0033:0x7f9ef1d2ce59 [ 832.843623][T31508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.843641][T31508] RSP: 002b:00007f9ef077f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.843662][T31508] RAX: ffffffffffffffda RBX: 00007f9ef1fa5fa0 RCX: 00007f9ef1d2ce59 [ 832.843738][T31508] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 832.843754][T31508] RBP: 00007f9ef077f090 R08: 0000000000000000 R09: 0000000000000000 [ 832.843771][T31508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 832.843786][T31508] R13: 00007f9ef1fa6038 R14: 00007f9ef1fa5fa0 R15: 00007ffd37898058 [ 832.843850][T31508] [ 834.175182][T31525] netlink: 'syz.2.9170': attribute type 13 has an invalid length. [ 834.289208][T31525] netlink: 'syz.2.9170': attribute type 17 has an invalid length. [ 834.351313][T15668] kernel write not supported for file [eventfd] (pid: 15668 comm: kworker/1:8) [ 834.943997][T31546] syzkaller0: entered promiscuous mode [ 834.949902][T31546] syzkaller0: entered allmulticast mode [ 835.051855][T31549] loop2: detected capacity change from 0 to 1024 [ 835.058922][T31549] EXT4-fs: test_dummy_encryption option not supported [ 836.047308][T31563] loop4: detected capacity change from 0 to 1024 [ 836.261875][T31563] EXT4-fs: test_dummy_encryption option not supported [ 836.498267][T31560] loop2: detected capacity change from 0 to 1024 [ 836.519140][T31560] ext4: Unknown parameter 'nouser_xattr' [ 837.016526][T31570] netlink: 'syz.3.9182': attribute type 10 has an invalid length. [ 837.342433][T31570] syz_tun: entered promiscuous mode [ 837.734129][T31569] loop4: detected capacity change from 0 to 512 [ 837.889080][T31570] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 837.960032][T31572] syzkaller0: entered promiscuous mode [ 837.965706][T31572] syzkaller0: entered allmulticast mode [ 838.009939][T31569] EXT4-fs (loop4): 1 orphan inode deleted [ 838.016766][T31569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.029894][T31569] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 838.123339][ T3464] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 838.148433][ T3464] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 838.226940][T31585] loop3: detected capacity change from 0 to 512 [ 839.108410][T31585] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 839.552717][T28767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.580559][T31585] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.9184: invalid block [ 839.592830][T31585] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 839.664068][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 839.679800][ C1] EXT4-fs (loop3): initial error at time 1778628493: ext4_get_branch:178: inode 11: block 4294967295 [ 839.690695][ C1] EXT4-fs (loop3): last error at time 1778628493: ext4_get_branch:178: inode 11: block 4294967295 [ 841.111315][T31585] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.9184: invalid indirect mapped block 4294967295 (level 1) [ 841.821282][T31585] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 841.857456][T31585] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.9184: invalid indirect mapped block 4294967295 (level 1) [ 842.229941][T31585] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 842.245753][T31585] EXT4-fs (loop3): 2 truncates cleaned up [ 843.019527][ T28] audit: type=1400 audit(1778628496.610:2424): avc: denied { remount } for pid=31620 comm="syz.1.9195" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 843.298992][T31585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.339150][T30168] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.352273][T31634] syzkaller0: entered promiscuous mode [ 843.358233][T31634] syzkaller0: entered allmulticast mode [ 845.598596][T31669] tmpfs: Unknown parameter 'grpquota' [ 845.616506][T31669] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9208'. [ 845.678848][T31669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.703743][T31669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.776192][T31669] bond0 (unregistering): Released all slaves [ 846.031662][ T28] audit: type=1326 audit(1778628499.620:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31675 comm="syz.4.9210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 846.269984][ T28] audit: type=1326 audit(1778628499.620:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31675 comm="syz.4.9210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 846.376156][ T28] audit: type=1326 audit(1778628499.620:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31675 comm="syz.4.9210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 846.483266][ T28] audit: type=1326 audit(1778628499.620:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31675 comm="syz.4.9210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 846.592172][T31690] loop2: detected capacity change from 0 to 1024 [ 846.605377][ T28] audit: type=1326 audit(1778628499.620:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31675 comm="syz.4.9210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 846.650383][T31690] EXT4-fs: test_dummy_encryption option not supported [ 846.662665][T31692] syzkaller0: entered promiscuous mode [ 846.832614][T31692] syzkaller0: entered allmulticast mode [ 846.857466][ T28] audit: type=1326 audit(1778628499.620:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31675 comm="syz.4.9210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 847.384835][T31695] loop2: detected capacity change from 0 to 512 [ 848.521086][ T28] audit: type=1326 audit(1778628499.620:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31675 comm="syz.4.9210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 848.753498][T31695] EXT4-fs (loop2): 1 orphan inode deleted [ 848.760373][T31695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 848.792430][T31695] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 848.803838][ T28] audit: type=1326 audit(1778628499.620:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31675 comm="syz.4.9210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 848.844365][ T28] audit: type=1326 audit(1778628499.630:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31675 comm="syz.4.9210" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b2b1ce59 code=0x7ffc0000 [ 848.961802][ T4281] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 848.973328][ T4281] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 1 [ 849.771503][T22028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.842098][T31707] netlink: 'syz.3.9218': attribute type 10 has an invalid length. [ 849.897658][T31714] loop4: detected capacity change from 0 to 512 [ 849.904814][T31714] EXT4-fs: Ignoring removed i_version option [ 849.911005][T31714] EXT4-fs: Ignoring removed bh option [ 850.073503][T31714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.086728][T31714] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 850.390547][T31730] loop3: detected capacity change from 0 to 1024 [ 850.447253][T31730] EXT4-fs: test_dummy_encryption option not supported [ 851.655915][T28767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 851.673425][T28767] ================================================================== [ 851.681553][T28767] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 851.689129][T28767] [ 851.691466][T28767] read-write to 0xffff888237c266e8 of 1 bytes by task 31731 on cpu 0: [ 851.699635][T28767] folio_add_lru+0xa4/0x1e0 [ 851.704171][T28767] shmem_get_folio_gfp+0x7b0/0xd60 [ 851.709294][T28767] shmem_write_begin+0xfc/0x1f0 [ 851.714167][T28767] generic_perform_write+0x183/0x490 [ 851.719469][T28767] shmem_file_write_iter+0xc5/0xf0 [ 851.724603][T28767] vfs_write+0x5a6/0x9f0 [ 851.728880][T28767] ksys_write+0xdc/0x1a0 [ 851.733149][T28767] __x64_sys_write+0x40/0x50 [ 851.737797][T28767] x64_sys_call+0x27e1/0x3020 [ 851.742498][T28767] do_syscall_64+0x12c/0x3b0 [ 851.747119][T28767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.753032][T28767] [ 851.755369][T28767] read to 0xffff888237c266e8 of 1 bytes by task 28767 on cpu 1: [ 851.763010][T28767] __lru_add_drain_all+0x17e/0x450 [ 851.768139][T28767] lru_add_drain_all+0x10/0x20 [ 851.772919][T28767] invalidate_bdev+0x47/0x70 [ 851.777522][T28767] ext4_put_super+0x610/0x7b0 [ 851.782232][T28767] generic_shutdown_super+0xee/0x220 [ 851.787542][T28767] kill_block_super+0x2a/0x70 [ 851.792245][T28767] ext4_kill_sb+0x42/0x80 [ 851.796590][T28767] deactivate_locked_super+0x75/0x1c0 [ 851.801983][T28767] deactivate_super+0x97/0xa0 [ 851.806686][T28767] cleanup_mnt+0x2bb/0x330 [ 851.811118][T28767] __cleanup_mnt+0x19/0x20 [ 851.815640][T28767] task_work_run+0x130/0x1a0 [ 851.820249][T28767] exit_to_user_mode_loop+0x211/0x820 [ 851.825643][T28767] do_syscall_64+0x232/0x3b0 [ 851.830273][T28767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.836186][T28767] [ 851.838524][T28767] value changed: 0x11 -> 0x12 [ 851.843216][T28767] [ 851.845549][T28767] Reported by Kernel Concurrency Sanitizer on: [ 851.851724][T28767] CPU: 1 UID: 0 PID: 28767 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 851.861317][T28767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 851.871366][T28767] ================================================================== [ 852.166395][T31740] loop2: detected capacity change from 0 to 512 [ 852.308643][T31740] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 852.316976][T31740] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 852.325297][T31740] System zones: 0-1, 15-15, 18-18, 34-34 [ 852.331565][T31740] EXT4-fs (loop2): orphan cleanup on readonly fs [ 852.337969][T31740] __quota_error: 75 callbacks suppressed [ 852.338018][T31740] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 852.354462][T31740] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 852.369381][T31740] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 852.376295][T31740] EXT4-fs (loop2): 1 truncate cleaned up [ 852.382866][T31740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 852.396918][ T28] audit: type=1400 audit(1778628506.000:2509): avc: denied { read } for pid=31721 comm="syz.2.9220" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 852.949655][T22028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.992530][ T28] audit: type=1400 audit(1778628506.590:2510): avc: denied { read } for pid=31743 comm="syz.4.9226" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 853.043144][ T28] audit: type=1400 audit(1778628506.590:2511): avc: denied { open } for pid=31743 comm="syz.4.9226" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 853.071068][ T28] audit: type=1400 audit(1778628506.620:2512): avc: denied { ioctl } for pid=31743 comm="syz.4.9226" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 853.125285][T31744] loop4: detected capacity change from 0 to 512 [ 853.216791][T31744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.251154][T28767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.