last executing test programs: 1m5.867464787s ago: executing program 3 (id=268): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xf, 0x80, 0x0, 0x0, 0x0, 0x40000000002, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000, 0x7}, 0x800, 0x1000000, 0xd236, 0xd, 0xfffffffffdf7bbfb, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x4000000000f, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1m5.758700892s ago: executing program 3 (id=271): cachestat(0xffffffffffffffff, &(0x7f0000000040)={0x1000, 0x230}, &(0x7f0000000080), 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) syz_io_uring_setup(0x4000760a, &(0x7f0000001400)={0x0, 0x79e7, 0x40, 0x2, 0x26a}, &(0x7f0000000000), &(0x7f0000000180)) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000002900000005"], 0x18}, 0x40e0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000280), 0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/27], 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./bus/file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x28085, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x8}, 0x1040, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0xfffffff8, 0xffffffdc, 0x400201, 0x0, 0x19, "ff00f7000000000000000020af88008300"}) r4 = inotify_init1(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="3e0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="070000000400000000ec0400000000000000000000000000010800fe"], 0x50) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0xa4000061) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r5, 0x0, 0x54) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r6, 0x0, 0x0) syz_emit_ethernet(0xb9, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000038847aaaac90650c092002051b71d24459852c59032361d5563a477e1ea1a5c02f56169a4fa06f5c1f91fff765b952fc4dde2f89b51aa713829e0e9c1ef0ac8e4d3bafc6a81cd7e73f08db357b742ca3ec11ab20a98dd1e5bb4d09530c3b10fcc86d300d4d9e7231d2a8c74e2b84ca30af10652f401394c6d4d9d626bfd9903ec34b54fa1"], 0x0) mbind(&(0x7f00006dc000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000240)=0xff, 0x603e, 0x0) 1m4.807202619s ago: executing program 3 (id=278): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast2, {0x0, 0x192, 0x6, 0xffff, 0x8051c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x40000, 0x1b, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f00000001c"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000080)={0x8, 0x1}) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1m4.664064536s ago: executing program 3 (id=282): openat(0xffffffffffffff9c, 0x0, 0x8541, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOl0hpYypQVGivD9JGQOc+6h93aG5Nym7dad148LOUvL6RUJxpQERES2RUYkKK6AcwzacVRavZCLg98+/n/r7r0b6UxmckapqfTspZRSanj03ZNncWfY+oBsjjzY+pr6svn35r9bP2cf5S2Vt1SxVFG6mit9ruhzpqEW8lZBU2raNHTLUPmiZZQb+VIjnzNLi4tVpRcXhhKLZcOylF6sqoJRVZWSqpSrKvRQzxeVpmlqKCHoJrsyM6OnD1k87/Nk8JuUy2k9JCLxPZnsSl8mBAAA+qq9/w+K8rP/Xz23URm8vTbs9P/rUa/+//Knxt/a1f/HRMSz/3cf37P/1+v9f1h67f/3dkRny5H6f5wMo9E9pwLNsJ4sp/WE8/9re3l/dcwO6P8BAAAAAAAAAAAAAAAAAAAAAPgTbNdqyVqtlnSP7k89FxOR1t/bhETk6vHPGH7qdP0Hul9/nALND+6Fh0XMV0vZpWzj6AzYEBFTDBmTpPyw7wdHPXY/eaTqRuS9uezULy9lQ3YmnZO8XT8uyYi019dqU9czk+OqYXd9RBKt9SlJyl/e9SnP+qhcON9Sr0lSPsxLSUxZsOfRrH8+rtS1m5m2+rg9DgAAAACA00BTOzz375rWKd+o39lft78+EGrur8c89+dh+S/c37UDAAAAAHBWWNWnBd00jfI+QVy6j2kEkR7GtAfhgww+QOCusNcq970MPk+jt8B98F2pmHPS96clcICnpUMQlMNUjdZXo466Cvdlo05jZHqi51WI+Hkp/3nz9rt/98aVtViXlR4+CO1/A0Sct38BAAAAOEWaTb97ZqK/EwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Aw6ju+36/caAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJPiVwAAAP//FZkC4A==") r0 = syz_clone(0x81208080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) waitid(0x1, r0, 0x0, 0x4, 0x0) 1m4.551230261s ago: executing program 3 (id=284): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2000000000006, 0xa0552, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x10a220, 0x10000, 0x0, 0x1, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000a80)=ANY=[], 0x0) 1m4.330799852s ago: executing program 3 (id=288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000060601010000000000000000010000020900020073797a31000000000900030073797a30000000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 1m4.270590405s ago: executing program 32 (id=288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000060601010000000000000000010000020900020073797a31000000000900030073797a30000000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 5.637289134s ago: executing program 0 (id=704): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000240)={0x7, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880)=0x900, &(0x7f00000008c0)}, 0x20) rename(0x0, 0x0) ioctl$XFS_IOC_FSCOUNTS(r2, 0x80205871, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x8000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r5], 0x78}}, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500002000000000001190780000000000deffffff004e20000c907801000000"], 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') lseek(r9, 0x1000000, 0x0) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x1, 0x4, 0x0, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8000}}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x2}}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8800) sendmsg$FOU_CMD_ADD(r7, 0x0, 0x40010) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fcdbdf250100000008000600ac1414bb08e10700e000000206000a004e2000000500040002000000"], 0x34}, 0x1, 0x0, 0x0, 0x40048021}, 0x40080) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) 5.530550359s ago: executing program 0 (id=708): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x807, 0x4, 0x6, 0x3}) lseek(r0, 0x3ff, 0x4) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, '\a\x00', "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x11a, 0x4, 0x0, 0x0) unshare(0x20040600) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4104, 0x1008}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4.455031472s ago: executing program 0 (id=718): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="b0"], 0xb0}, 0x0, 0x8400, 0x1}) r2 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbe15, 0x10, 0x3, 0x30e}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000040)=@udp=r6}, 0x20) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r6, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f00000009c0)=""/112, 0x70}], 0x1}, 0x9}], 0x1, 0x7, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000003100010027bd7000fddbdf25fe880000000000000000000000000101000004d202003c0014000d0000000000000000000000ffffac1414bb0c0015005907350007000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.178587276s ago: executing program 5 (id=722): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2000000000006, 0xa0552, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x10a220, 0x10000, 0x0, 0x1, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000a80)=ANY=[], 0x0) 4.108727419s ago: executing program 5 (id=725): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x4002000) r2 = socket$inet(0x2, 0x3, 0x30) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, 0x0, &(0x7f0000000080)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x46a, 0xffdfffff, 0x5}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103840) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x38, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000080)="4d9beed49983", 0x0, 0xfffffff9, 0x4, 0x2, 0x0}) 3.739150057s ago: executing program 2 (id=727): unshare(0x24020400) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='task\x00') r1 = memfd_create(&(0x7f00000000c0)='\x02A\xbb\xcc\xeb\x14\x10\xef\xa7\x16\xd7m\x14oG1\xff\xf9\x028\xc6\xc8\xd9\xd5c\xb1E \x06\xa0\xc9\xcf\x17ag\xf7iX\xf2O\x04k\x9c!\x13\xd8y\xd4\xdc\xbf\xc8\x8cWO\xc37\xf7\x83\x90\xce\xefd\x18\x95%\xa1\xa3\x15b\x9cF4>\xbb\x11d\xd9\x9f\x10]\xdc\xe3\x03\xa4\xeb\xb0', 0x5) fallocate(r1, 0x0, 0x800657, 0x40000b7) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) cachestat(r0, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) 3.738733137s ago: executing program 4 (id=728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a010400000000000000000a0000050900020073797a3200000000300004802c000180090001007866726d000000001c0002800800014000000010080002400000000105000304000000000900010073797a31000000001400000000010200000000000000000e00000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 3.67114308s ago: executing program 2 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x7ffffc, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setresuid(0x0, 0x0, 0xee00) r7 = syz_open_procfs(0x0, 0x0) poll(&(0x7f00000003c0)=[{r4, 0x400}, {r4, 0x94}, {r7, 0x504}, {r4}], 0x4, 0x5) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r7, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) r9 = socket(0x10, 0x2, 0x0) syz_io_uring_setup(0x100293f, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}}, 0x0) 3.538099757s ago: executing program 4 (id=730): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x1c, r3, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4) 3.493474799s ago: executing program 4 (id=731): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0xffffffffffff0000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xa3, 0xdd5}, 0x400, 0x3ff, 0xfffd, 0x2, 0x2, 0x8000080}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@i_version}, {@noblock_validity}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x611, &(0x7f0000000c00)="$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") 3.366501995s ago: executing program 0 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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"/4195, @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x64, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc, &(0x7f00000007c0)=""/12, 0x40f00, 0xc}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x7b35477d0633fa59) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000400)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r9, &(0x7f0000000140)='2', 0xfdef, 0xe7c) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x1b) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 2.801129993s ago: executing program 5 (id=735): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x2, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x8, 0x6, 0xa, 0x10, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xffff, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x7, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0x2, 0x1, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0x6, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x10000008, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0xb, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0xbc, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r10 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.614890042s ago: executing program 5 (id=736): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='\x00\x00aP4', 0x5, r0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0), 0x5, 0x557, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) rt_sigqueueinfo(r2, 0x34, &(0x7f00000002c0)={0xe, 0x8001, 0x8}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x9, 0x571100) ioctl$USBDEVFS_GET_CAPABILITIES(r3, 0x8004551a, &(0x7f0000001000)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$netlink(0x10, 0x3, 0xb) epoll_pwait2(r4, &(0x7f00000003c0)=[{}, {}, {}], 0x3, &(0x7f0000000400), &(0x7f0000000440)={[0xffffffffffffffff]}, 0x8) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f00000004c0)={0x8, r1, 'id0\x00'}) close(r6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc6}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)="b5", 0x1}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r7, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 1.84441153s ago: executing program 4 (id=738): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) syz_open_dev$ptys(0xc, 0x3, 0x1) truncate(&(0x7f0000000040)='./file0\x00', 0x3) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=ANY=[], 0x80}}], 0x1, 0x4000004) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cd00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 1.299291557s ago: executing program 1 (id=741): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x1c, r3, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4) 1.286983027s ago: executing program 0 (id=742): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112de000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000340)={{0x40, 0x3}, 'port1\x00', 0x0, 0x3, 0x9, 0x10000, 0x2, 0xfffffffb, 0x1bc00, 0x0, 0x2, 0x7}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x58) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x40004) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="00000400", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @multicast1}, {0x11, 0x0, 0x0, @broadcast}}}}}, 0x0) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") 1.273004927s ago: executing program 5 (id=743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) unshare(0x8040480) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000050000000800000040"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r1, 0x0, 0x11}, 0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x88}}, 0x0) write$tun(r0, &(0x7f0000000640)={@val={0xa, 0x86dd}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="cf3f53f449aa", @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "ee0520", 0x0, 0x32, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x80890a, &(0x7f0000000200)={[{@debug}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x5, 0x7b5, &(0x7f0000000540)="$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") creat(&(0x7f0000000140)='./file2\x00', 0x18) open(&(0x7f0000000080)='./bus\x00', 0x14b145, 0x0) 1.206683861s ago: executing program 1 (id=744): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x58, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x12}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x58}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r3 = memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x2, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x8, 0x6, 0xa, 0x10, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xffff, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x7, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0x2, 0x1, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0x6, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x10000008, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0xb, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0xbc, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r10 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 954.319293ms ago: executing program 1 (id=747): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") sendmsg$sock(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000001c0)="579902df9b75fb36ef04e924b83f541edc38318418e7ca9950111e2056b454357c46261d4d4e34286ca0e5f3d2a21e4103b22db0ae81de38d6c3afc8f919a81322", 0x41}], 0x1}, 0x20008810) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1) 627.084579ms ago: executing program 4 (id=748): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x58, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x12}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x58}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x40, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r3 = memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10x0, &(0x7f0000000140)=0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") open(&(0x7f0000000080)='./file1\x00', 0x80242, 0x0) acct(&(0x7f00000002c0)='./file1\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r5, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) (async) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r5, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x30) 411.54912ms ago: executing program 2 (id=752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0xdfff}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x9, 0x101) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f00000001c0)=[0xe9, 0x80f]) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {0xffff, 0xffff}, {0x2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x80000, 0x0, 0x400, 0x0, 0x0}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x1000, 0x0, 0xd}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a"], 0x1c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f0000000300)="603b010aef8d25897e36f94f6d2b045a1a4fc578068c21ef3de819265c761b9debf752164556539fba89fb0ba7c7faffffffffffffff97d25a2671af015d7bfcc3dc25d5a9f9778681fdcab6f8aeffe69dac1b1a8aefbc632d00"/104, 0xfffffffffffffd64, 0x40) 333.946774ms ago: executing program 0 (id=753): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, 0x0) unshare(0x60000600) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = io_uring_setup(0x7a5c, &(0x7f0000001240)={0x0, 0xc95e, 0x1, 0x3, 0x2cb}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket(0x2, 0x80805, 0x0) open(0x0, 0x64842, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="0000000000d9bd00950000000000200045"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, &(0x7f0000000280)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) sendmsg$inet(r7, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) sendmsg$inet(r6, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 230.041669ms ago: executing program 1 (id=754): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2000000000006, 0xa0552, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x10a220, 0x10000, 0x0, 0x1, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000a80)=ANY=[], 0x0) 227.099849ms ago: executing program 2 (id=755): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x7ffffc, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setresuid(0x0, 0x0, 0xee00) r7 = syz_open_procfs(0x0, 0x0) poll(&(0x7f00000003c0)=[{r4, 0x400}, {r4, 0x94}, {r7, 0x504}, {r4}], 0x4, 0x5) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r7, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) r9 = socket(0x10, 0x2, 0x0) syz_io_uring_setup(0x100293f, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=756): gettimeofday(&(0x7f0000000040), &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x3, 0x3b2, [0x200000000240, 0x0, 0x0, 0x200000000316, 0x200000000346], 0x0, &(0x7f0000000140), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x11, 0x2c, 0x890d, 'pim6reg0\x00', 'hsr0\x00', 'bond_slave_0\x00', 'ip6gre0\x00', @link_local, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @arpreply={'arpreply\x00', 0x10, {{@link_local, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x11, 0x8, 0x9100, 'pimreg0\x00', 'syzkaller1\x00', 'sit0\x00', 'macsec0\x00', @random="0aa40e481d28", [0x0, 0x0, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x101, 0xff, 0x0, 0xff], 0xae, 0x11e, 0x156, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x2, 0x7980, 0x98a6, 0x9602, 0x70000000}}}], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}, @common=@dnat={'dnat\x00', 0x10, {{@random="4e7f68e6f540", 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}}, {0x11, 0x0, 0x8863, 'ip6_vti0\x00', 'gre0\x00', 'ip_vti0\x00', 'veth0_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0x0, 0xff], 0x6e, 0xde, 0x126, [], [@snat={'snat\x00', 0x10, {{@link_local, 0xfffffffffffffffd}}}, @snat={'snat\x00', 0x10, {{@random="29e8d16b7838", 0xfffffffffffffffd}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xee, 0x8, {0x9}}}}}]}]}, 0x42a) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(0xffffffffffffffff, 0x96, 0x2, &(0x7f0000000640)="0000007f968c698b540d580a6f90754fa90003006fca000000", 0x19) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'gre0\x00', &(0x7f0000000800)={'gre0\x00', 0x0, 0x7800, 0x0, 0x996, 0xaf, {{0x2c, 0x4, 0x1, 0x2, 0xb0, 0x64, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0xa6, 0x1, 0xd, [{@multicast2, 0x401}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x5}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x3b, 0x3, 0x8, [{@local, 0x10000}]}, @cipso={0x86, 0x49, 0x3, [{0x2, 0xa, "7c19667d4b547d7f"}, {0x5, 0x6, "8daa2445"}, {0x0, 0x5, "31c0e4"}, {0x7, 0xb, "eaa674bd8ffca9c055"}, {0x1, 0x8, "54bd0d3b3616"}, {0x2, 0x9, "b23eeb5a6090e4"}, {0x5, 0x4, "2a96"}, {0x6, 0x3, '~'}, {0x4, 0xb, "f8dfb1853010fbc387"}]}, @generic={0x82, 0x4, "5bfe"}, @generic={0x7, 0xf, "882f287eb25cfc034fd48ca1c0"}, @rr={0x7, 0xb, 0x4c, [@remote, @multicast2]}, @lsrr={0x83, 0xb, 0xe6, [@multicast2, @remote]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={r4, 0x20, &(0x7f0000000ac0)={&(0x7f0000001a00)=""/4096, 0x1000, 0x0, &(0x7f00000009c0)=""/215, 0xd7}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r7, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x8000000a}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x13, 0x10, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x0, 0xc, 0x4, 0x7, 0xfffffffffffffffc, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x4, 0xe3, &(0x7f0000000700)=""/227, 0x41000, 0x9, '\x00', r5, @fallback=0x1b, r4, 0x8, &(0x7f0000000940)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x1, 0x7, 0x6}, 0x10, r6, r4, 0x2, &(0x7f0000000b40)=[r4, r4], &(0x7f0000000b80)=[{0x5, 0x5, 0xc, 0x7}, {0x0, 0x4, 0x8, 0x5}], 0x10, 0x3}, 0x94) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x20048084) kernel console output (not intermixed with test programs): 60.576141][ T3961] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 60.588081][ T3970] capability: warning: `syz.4.143' uses deprecated v2 capabilities in a way that may be insecure [ 60.608446][ T3967] netlink: 40 bytes leftover after parsing attributes in process `syz.3.142'. [ 60.621656][ T3967] netlink: 20 bytes leftover after parsing attributes in process `syz.3.142'. [ 60.639683][ T3961] SELinux: failed to load policy [ 60.652683][ T3958] loop1: detected capacity change from 0 to 4096 [ 60.710864][ T3958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.729300][ T28] audit: type=1400 audit(1774088547.184:279): avc: denied { remove_name } for pid=3957 comm="syz.1.139" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.752481][ T28] audit: type=1400 audit(1774088547.204:280): avc: denied { rename } for pid=3957 comm="syz.1.139" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.775221][ T28] audit: type=1400 audit(1774088547.204:281): avc: denied { unlink } for pid=3957 comm="syz.1.139" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.803699][ T3983] loop4: detected capacity change from 0 to 1024 [ 60.822871][ T3983] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 60.856016][ T28] audit: type=1400 audit(1774088547.304:282): avc: denied { read } for pid=3986 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.918378][ T3989] loop2: detected capacity change from 0 to 512 [ 60.935993][ T28] audit: type=1400 audit(1774088547.354:283): avc: denied { create } for pid=3988 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.966282][ T3990] loop3: detected capacity change from 0 to 128 [ 61.061402][ T28] audit: type=1400 audit(1774088547.504:284): avc: denied { connect } for pid=3988 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 61.325534][ T3995] loop4: detected capacity change from 0 to 512 [ 61.362259][ T3995] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 61.550214][ T3995] EXT4-fs (loop4): orphan cleanup on readonly fs [ 61.559166][ T3995] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.144: Block bitmap for bg 0 marked uninitialized [ 61.572683][ T3995] loop4: lost filesystem error report for type 5 error -117 [ 61.575155][ T3995] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 61.582938][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 61.583058][ C0] EXT4-fs (loop4): initial error at time 1774088548: ext4_read_block_bitmap_nowait:517 [ 61.583217][ C0] EXT4-fs (loop4): last error at time 1774088548: ext4_read_block_bitmap_nowait:517 [ 61.620037][ T3995] loop4: lost filesystem error report for type 5 error -117 [ 61.622938][ T3995] EXT4-fs (loop4): 1 orphan inode deleted [ 61.656948][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.658164][ T3995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 61.786745][ T28] audit: type=1400 audit(1774088548.244:285): avc: denied { remount } for pid=3981 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.800789][ T3991] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 61.815880][ T3991] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 61.836817][ T4000] netlink: 220 bytes leftover after parsing attributes in process `syz.3.150'. [ 61.847692][ T4000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.150'. [ 61.902457][ T3994] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.144: Block bitmap for bg 0 marked uninitialized [ 62.066505][ T3999] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm ext4lazyinit: Block bitmap for bg 0 marked uninitialized [ 62.083909][ T3999] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm ext4lazyinit: Block bitmap for bg 0 marked uninitialized [ 62.165031][ T4012] netlink: 'syz.0.154': attribute type 11 has an invalid length. [ 62.191832][ T4012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'. [ 62.201170][ T4011] team_slave_0: entered promiscuous mode [ 62.206885][ T4011] team_slave_1: entered promiscuous mode [ 62.217761][ T4011] macvtap1: entered promiscuous mode [ 62.229028][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.247389][ T4011] team0: entered promiscuous mode [ 62.269448][ T4011] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 62.296973][ T4011] team0: Device macvtap1 is already an upper device of the team interface [ 62.365652][ T4011] team0: left promiscuous mode [ 62.370860][ T4011] team_slave_0: left promiscuous mode [ 62.376454][ T4011] team_slave_1: left promiscuous mode [ 62.399497][ T4012] netlink: 'syz.0.154': attribute type 11 has an invalid length. [ 62.407642][ T30] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.418668][ T4012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'. [ 62.428886][ T30] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.446142][ T30] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.473605][ T30] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.577978][ T4034] loop0: detected capacity change from 0 to 128 [ 63.175634][ T4071] loop3: detected capacity change from 0 to 512 [ 63.299428][ T4071] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.171: iget: bogus i_mode (755) [ 63.310885][ T4071] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.312361][ T4071] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.171: couldn't read orphan inode 15 (err -117) [ 63.321539][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 63.321563][ C1] EXT4-fs (loop3): initial error at time 1774088549: ext4_orphan_get:1391: inode 15 [ 63.321618][ C1] EXT4-fs (loop3): last error at time 1774088549: ext4_orphan_get:1391: inode 15 [ 63.358407][ T4071] loop3: lost filesystem error report for type 5 error -117 [ 63.360261][ T4071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.640311][ T4075] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 63.793343][ T4079] FAULT_INJECTION: forcing a failure. [ 63.793343][ T4079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.823982][ T4079] CPU: 1 UID: 0 PID: 4079 Comm: syz.2.175 Tainted: G W syzkaller #0 PREEMPT(full) [ 63.824022][ T4079] Tainted: [W]=WARN [ 63.824030][ T4079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 63.824047][ T4079] Call Trace: [ 63.824056][ T4079] [ 63.824145][ T4079] __dump_stack+0x1d/0x30 [ 63.824220][ T4079] dump_stack_lvl+0x95/0xd0 [ 63.824326][ T4079] dump_stack+0x15/0x1b [ 63.824354][ T4079] should_fail_ex+0x263/0x280 [ 63.824390][ T4079] should_fail+0xb/0x20 [ 63.824417][ T4079] should_fail_usercopy+0x1a/0x20 [ 63.824470][ T4079] _copy_from_user+0x1c/0xb0 [ 63.824508][ T4079] input_event_from_user+0x5e/0x190 [ 63.824558][ T4079] ? input_inject_event+0x104/0x120 [ 63.824609][ T4079] evdev_write+0x1b0/0x2b0 [ 63.824641][ T4079] ? __pfx_evdev_write+0x10/0x10 [ 63.824659][ T4079] vfs_write+0x269/0x9f0 [ 63.824745][ T4079] ? __rcu_read_unlock+0x4e/0x70 [ 63.824771][ T4079] ? __fget_files+0x184/0x1c0 [ 63.824910][ T4079] ksys_write+0xdc/0x1a0 [ 63.824990][ T4079] __x64_sys_write+0x40/0x50 [ 63.825013][ T4079] x64_sys_call+0x27e1/0x3020 [ 63.825090][ T4079] do_syscall_64+0x12c/0x370 [ 63.825117][ T4079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.825141][ T4079] RIP: 0033:0x7fae54cec799 [ 63.825161][ T4079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.825187][ T4079] RSP: 002b:00007fae5373f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.825207][ T4079] RAX: ffffffffffffffda RBX: 00007fae54f65fa0 RCX: 00007fae54cec799 [ 63.825221][ T4079] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000003 [ 63.825233][ T4079] RBP: 00007fae5373f090 R08: 0000000000000000 R09: 0000000000000000 [ 63.825245][ T4079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.825280][ T4079] R13: 00007fae54f66038 R14: 00007fae54f65fa0 R15: 00007ffd8152d9c8 [ 63.825299][ T4079] [ 64.191378][ T4083] __nla_validate_parse: 1 callbacks suppressed [ 64.191451][ T4083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.178'. [ 64.832493][ T4086] loop1: detected capacity change from 0 to 512 [ 64.892938][ T3497] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.900176][ T4086] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.176: iget: bogus i_mode (755) [ 64.912134][ T4086] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.913210][ T4086] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.176: couldn't read orphan inode 15 (err -117) [ 64.922416][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 64.922440][ C1] EXT4-fs (loop1): initial error at time 1774088551: ext4_orphan_get:1391: inode 15 [ 64.922469][ C1] EXT4-fs (loop1): last error at time 1774088551: ext4_orphan_get:1391: inode 15 [ 64.959375][ T4086] loop1: lost filesystem error report for type 5 error -117 [ 64.964085][ T4086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.007011][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.314399][ T4104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'. [ 66.329620][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.623455][ T28] kauditd_printk_skb: 163 callbacks suppressed [ 66.623477][ T28] audit: type=1400 audit(1774088553.054:449): avc: denied { mount } for pid=4112 comm="syz.3.186" name="/" dev="hugetlbfs" ino=6850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 66.654831][ T4116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.185'. [ 66.699651][ T28] audit: type=1400 audit(1774088553.154:450): avc: denied { write } for pid=4110 comm="syz.4.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.731306][ T4122] netlink: 64 bytes leftover after parsing attributes in process `syz.3.189'. [ 66.800423][ T4125] loop3: detected capacity change from 0 to 764 [ 66.810551][ T28] audit: type=1400 audit(1774088553.264:451): avc: denied { write } for pid=4117 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.845599][ T4125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 66.855589][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.867416][ T4114] loop1: detected capacity change from 0 to 8192 [ 66.878535][ T4125] bridge0: entered promiscuous mode [ 66.882653][ T28] audit: type=1400 audit(1774088553.294:452): avc: denied { mount } for pid=4124 comm="syz.3.190" name="/" dev="loop3" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 66.906591][ T4125] bridge0: port 3(macsec1) entered blocking state [ 66.914188][ T4125] bridge0: port 3(macsec1) entered disabled state [ 66.932272][ T4130] loop0: detected capacity change from 0 to 1024 [ 66.958355][ T28] audit: type=1400 audit(1774088553.294:453): avc: denied { ioctl } for pid=4124 comm="syz.3.190" path="socket:[5931]" dev="sockfs" ino=5931 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.978343][ T4125] macsec1: entered allmulticast mode [ 66.993957][ T4125] bridge0: entered allmulticast mode [ 67.009245][ T4125] macsec1: left allmulticast mode [ 67.014541][ T4125] bridge0: left allmulticast mode [ 67.023686][ T4125] bridge0: left promiscuous mode [ 67.048885][ T4130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.075080][ T4119] tipc: Started in network mode [ 67.080430][ T4119] tipc: Node identity ff25, cluster identity 4711 [ 67.089525][ T4119] tipc: Enabling of bearer rejected, failed to enable media [ 67.146467][ T28] audit: type=1400 audit(1774088553.584:454): avc: denied { create } for pid=4129 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 67.234031][ T28] audit: type=1400 audit(1774088553.584:455): avc: denied { bind } for pid=4129 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 67.415662][ T28] audit: type=1400 audit(1774088553.724:456): avc: denied { read } for pid=4144 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 67.508195][ T4154] loop2: detected capacity change from 0 to 2048 [ 67.556698][ T3605] loop2: p2 p3 < > p4 < p5 > [ 67.561497][ T3605] loop2: partition table partially beyond EOD, truncated [ 67.578225][ T3605] loop2: p2 start 53543428 is beyond EOD, truncated [ 67.599107][ T3605] loop2: p3 start 4284289 is beyond EOD, truncated [ 67.618304][ T3605] loop2: p5 start 53543428 is beyond EOD, truncated [ 67.627564][ T4154] loop2: p2 p3 < > p4 < p5 > [ 67.632304][ T4154] loop2: partition table partially beyond EOD, truncated [ 67.656591][ T4154] loop2: p2 start 53543428 is beyond EOD, truncated [ 67.665808][ T4154] loop2: p3 start 4284289 is beyond EOD, truncated [ 67.667936][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.687644][ T4154] loop2: p5 start 53543428 is beyond EOD, truncated [ 67.783064][ T3002] loop2: p2 p3 < > p4 < p5 > [ 67.788424][ T3002] loop2: partition table partially beyond EOD, truncated [ 67.796245][ T3002] loop2: p2 start 53543428 is beyond EOD, truncated [ 67.803726][ T3002] loop2: p3 start 4284289 is beyond EOD, truncated [ 67.813443][ T3002] loop2: p5 start 53543428 is beyond EOD, truncated [ 67.876900][ T3605] udevd[3605]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 67.891146][ T4161] netlink: 'syz.2.201': attribute type 1 has an invalid length. [ 68.032407][ T4165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 68.090124][ T4165] veth3: entered promiscuous mode [ 68.108204][ T4161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.201'. [ 68.122898][ T4164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.202'. [ 68.133314][ T4161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.251397][ T4172] loop4: detected capacity change from 0 to 512 [ 68.914433][ T3497] Bluetooth: hci0: command 0x1003 tx timeout [ 68.920565][ T4056] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.987659][ T28] audit: type=1400 audit(1774088555.444:457): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 69.051572][ T4109] syz.1.183 (4109) used greatest stack depth: 7080 bytes left [ 69.069910][ T4172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.132607][ T4172] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.169768][ T28] audit: type=1400 audit(1774088555.624:458): avc: denied { add_name } for pid=4171 comm="syz.4.204" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.507945][ T4201] loop2: detected capacity change from 0 to 1764 [ 69.515314][ T4201] iso9660: Unknown parameter 'map normaŚ' [ 70.373506][ T4211] loop0: detected capacity change from 0 to 256 [ 70.442492][ T4211] FAT-fs (loop0): Directory bread(block 64) failed [ 70.477374][ T4211] FAT-fs (loop0): Directory bread(block 65) failed [ 70.519040][ T4211] FAT-fs (loop0): Directory bread(block 66) failed [ 70.672897][ T4211] FAT-fs (loop0): Directory bread(block 67) failed [ 70.689815][ T4211] FAT-fs (loop0): Directory bread(block 68) failed [ 71.188393][ T4211] FAT-fs (loop0): Directory bread(block 69) failed [ 71.245650][ T4219] loop3: detected capacity change from 0 to 2048 [ 71.278828][ T4211] FAT-fs (loop0): Directory bread(block 70) failed [ 71.324815][ T3307] loop3: p2 p3 p7 [ 71.337370][ T4211] FAT-fs (loop0): Directory bread(block 71) failed [ 71.393393][ T4211] FAT-fs (loop0): Directory bread(block 72) failed [ 71.478791][ T4211] FAT-fs (loop0): Directory bread(block 73) failed [ 71.528395][ T4219] loop3: p2 p3 p7 [ 71.886601][ T4211] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 71.893329][ T4211] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 71.973429][ T4211] vhci_hcd vhci_hcd.0: Device attached [ 72.098510][ T4221] vhci_hcd: connection closed [ 72.098785][ T118] vhci_hcd vhci_hcd.0: stop threads [ 72.139448][ T118] vhci_hcd vhci_hcd.0: release socket [ 72.159245][ T118] vhci_hcd vhci_hcd.0: disconnect device [ 72.299974][ T4229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.219'. [ 72.310049][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 72.310067][ T28] audit: type=1400 audit(1774088558.754:460): avc: denied { write } for pid=4228 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 72.567765][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 72.592815][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 72.648649][ T4236] loop2: detected capacity change from 0 to 1024 [ 72.655555][ T4236] EXT4-fs: Ignoring removed orlov option [ 72.687392][ T4236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.753576][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.926172][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.988242][ T4254] loop3: detected capacity change from 0 to 256 [ 73.217852][ T4245] loop0: detected capacity change from 0 to 256 [ 73.231883][ T4245] vfat: Unknown parameter '0xffffffffffffffff˙˙˙˙˙˙˙˙˙˙˙˙˙' [ 73.269477][ T4265] SELinux: failed to load policy [ 73.852049][ T28] audit: type=1400 audit(1774088560.304:461): avc: denied { execute } for pid=4288 comm="syz.0.232" name="file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.852120][ T4290] process 'syz.0.232' launched './file0' with NULL argv: empty string added [ 73.892486][ T28] audit: type=1326 audit(1774088560.344:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8767c799 code=0x7ffc0000 [ 73.894695][ T4290] Invalid argument reading file caps for ./file0 [ 73.920038][ T28] audit: type=1400 audit(1774088560.344:463): avc: denied { execute_no_trans } for pid=4288 comm="syz.0.232" path="/51/file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.949869][ T28] audit: type=1326 audit(1774088560.374:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8767c799 code=0x7ffc0000 [ 73.974070][ T28] audit: type=1326 audit(1774088560.374:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d8767c799 code=0x7ffc0000 [ 73.998142][ T28] audit: type=1326 audit(1774088560.374:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8767c799 code=0x7ffc0000 [ 74.022979][ T28] audit: type=1326 audit(1774088560.374:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f8d8767c799 code=0x7ffc0000 [ 74.048492][ T28] audit: type=1326 audit(1774088560.374:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d8767c799 code=0x7ffc0000 [ 74.074110][ T28] audit: type=1326 audit(1774088560.374:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.4.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f8d8767c799 code=0x7ffc0000 [ 74.110808][ T4294] loop0: detected capacity change from 0 to 1024 [ 74.140367][ T4297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 74.154481][ T4294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.242445][ T4309] loop2: detected capacity change from 0 to 256 [ 74.249897][ T4309] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.284215][ T4310] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4310 comm=syz.4.239 [ 74.347541][ T4309] netlink: 'syz.2.240': attribute type 39 has an invalid length. [ 74.348950][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.369564][ T4313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 74.538767][ T4313] erspan0: entered promiscuous mode [ 74.546332][ T4313] erspan0: left promiscuous mode [ 74.639474][ T4332] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 74.662513][ T4332] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 74.671498][ T4336] SELinux: failed to load policy [ 74.935167][ T4357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.256'. [ 74.985529][ T4362] loop2: detected capacity change from 0 to 256 [ 74.992261][ T4362] vfat: Unknown parameter '' [ 75.702823][ T4382] loop0: detected capacity change from 0 to 512 [ 75.725556][ T4382] EXT4-fs: inline encryption not supported [ 75.744573][ T4382] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.771595][ T4382] EXT4-fs (loop0): 1 truncate cleaned up [ 75.795320][ T4382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.087786][ T4402] loop3: detected capacity change from 0 to 128 [ 76.202462][ T4382] x_tables: duplicate underflow at hook 1 [ 76.264790][ T4382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.265'. [ 76.440581][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.478959][ T4408] SELinux: failed to load policy [ 76.614231][ T4410] syzkaller0: entered promiscuous mode [ 76.622472][ T4410] syzkaller0: entered allmulticast mode [ 76.634629][ T4410] netlink: 'syz.0.275': attribute type 4 has an invalid length. [ 76.777888][ T4415] loop0: detected capacity change from 0 to 1024 [ 76.791370][ T4415] EXT4-fs: inline encryption not supported [ 76.797429][ T4415] EXT4-fs: Ignoring removed nobh option [ 76.803223][ T4415] EXT4-fs: Ignoring removed bh option [ 76.837212][ T4415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.888868][ T4418] netlink: 220 bytes leftover after parsing attributes in process `syz.3.278'. [ 76.927477][ T4418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 77.054409][ T4427] loop3: detected capacity change from 0 to 128 [ 77.127403][ T3318] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 77.136553][ T3318] FAT-fs (loop3): Filesystem has been set read-only [ 77.316538][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 77.316556][ T28] audit: type=1400 audit(1774088563.774:545): avc: denied { open } for pid=3327 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.378062][ T28] audit: type=1400 audit(1774088563.804:546): avc: denied { ioctl } for pid=3327 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.411839][ T118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.432600][ T118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.437961][ T28] audit: type=1400 audit(1774088563.864:547): avc: denied { create } for pid=4442 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.475439][ T4443] loop2: detected capacity change from 0 to 512 [ 77.497390][ T28] audit: type=1400 audit(1774088563.864:548): avc: denied { setopt } for pid=4442 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.529730][ T118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.547005][ T118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.547702][ T28] audit: type=1400 audit(1774088563.864:549): avc: denied { getopt } for pid=4442 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.583582][ T4443] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 77.594494][ T4443] FAT-fs (loop2): Filesystem has been set read-only [ 77.616842][ T4443] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 77.631806][ T118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.639481][ T4443] FAT-fs (loop2): error, invalid access to FAT (entry 0x000000c8) [ 77.655171][ T28] audit: type=1400 audit(1774088563.864:550): avc: denied { prog_load } for pid=4442 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.683148][ T118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.695709][ T28] audit: type=1400 audit(1774088563.864:551): avc: denied { bpf } for pid=4442 comm="syz.2.287" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.719150][ T28] audit: type=1400 audit(1774088563.864:552): avc: denied { perfmon } for pid=4442 comm="syz.2.287" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.740175][ T28] audit: type=1400 audit(1774088563.884:553): avc: denied { prog_run } for pid=4442 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.825187][ T28] audit: type=1400 audit(1774088563.924:554): avc: denied { execmem } for pid=4444 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 77.866192][ T118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.011979][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.403036][ T118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.477232][ T4461] netlink: 220 bytes leftover after parsing attributes in process `syz.1.294'. [ 78.540757][ T4461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 78.579447][ T118] bridge_slave_1: left allmulticast mode [ 78.586223][ T118] bridge_slave_1: left promiscuous mode [ 78.601518][ T118] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.618120][ T118] bridge_slave_0: left allmulticast mode [ 78.624007][ T118] bridge_slave_0: left promiscuous mode [ 78.637638][ T118] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.803166][ T4489] SELinux: failed to load policy [ 78.963985][ T4495] loop0: detected capacity change from 0 to 1024 [ 78.972611][ T4495] EXT4-fs: Ignoring removed i_version option [ 78.978828][ T4495] EXT4-fs: Ignoring removed bh option [ 78.984576][ T4495] EXT4-fs: inline encryption not supported [ 79.028844][ T4495] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.043355][ T4495] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 79.058848][ T4495] EXT4-fs (loop0): mount failed [ 79.240277][ T4499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4499 comm=syz.2.300 [ 80.049754][ T4505] delete_channel: no stack [ 80.223524][ T4511] loop4: detected capacity change from 0 to 1024 [ 80.248043][ T4511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.319072][ T118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.329855][ T118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.340079][ T118] bond0 (unregistering): Released all slaves [ 80.401603][ T118] hsr_slave_0: left promiscuous mode [ 80.407598][ T118] hsr_slave_1: left promiscuous mode [ 80.413348][ T118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.421081][ T118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.429067][ T118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.436914][ T118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.448309][ T118] veth1_macvtap: left promiscuous mode [ 80.453930][ T118] veth0_macvtap: left promiscuous mode [ 80.459969][ T118] veth1_vlan: left promiscuous mode [ 80.465431][ T118] veth0_vlan: left promiscuous mode [ 80.550127][ T118] team0 (unregistering): Port device team_slave_1 removed [ 80.560400][ T118] team0 (unregistering): Port device team_slave_0 removed [ 80.807204][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.949882][ T4533] loop2: detected capacity change from 0 to 512 [ 80.995454][ T4445] chnl_net:caif_netlink_parms(): no params data found [ 81.006810][ T4533] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.163571][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.188282][ T4560] SELinux: failed to load policy [ 81.196238][ T4445] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.208368][ T4562] netlink: 'syz.4.313': attribute type 10 has an invalid length. [ 81.231559][ T4445] bridge_slave_0: entered allmulticast mode [ 81.250841][ T4445] bridge_slave_0: entered promiscuous mode [ 81.281774][ T4562] team0: Failed to send options change via netlink (err -105) [ 81.289607][ T4562] team0: Port device dummy0 added [ 81.295263][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.312910][ T4445] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.329072][ T4445] bridge_slave_1: entered allmulticast mode [ 81.337111][ T4445] bridge_slave_1: entered promiscuous mode [ 81.622858][ T4574] loop1: detected capacity change from 0 to 8192 [ 81.864084][ T3605] loop1: p1 < > p2 p4 < p5 > [ 81.872731][ T3605] loop1: partition table partially beyond EOD, truncated [ 82.034087][ T3605] loop1: p1 start 134217728 is beyond EOD, truncated [ 82.056472][ T3605] loop1: p2 size 591360 extends beyond EOD, truncated [ 82.087695][ T3605] loop1: p5 size 591360 extends beyond EOD, truncated [ 82.130187][ T4583] loop4: detected capacity change from 0 to 1024 [ 82.159151][ T4583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.262038][ T4591] loop0: detected capacity change from 0 to 4096 [ 82.289281][ T4591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.330623][ T4445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.341775][ T4445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.379070][ T4445] team0: Port device team_slave_0 added [ 82.385810][ T4445] team0: Port device team_slave_1 added [ 82.392712][ T4574] loop1: p1 < > p2 p4 < p5 > [ 82.397470][ T4574] loop1: partition table partially beyond EOD, truncated [ 82.404691][ T4574] loop1: p1 start 134217728 is beyond EOD, truncated [ 82.407354][ T4591] loop7: detected capacity change from 0 to 16383 [ 82.411578][ T4574] loop1: p2 size 591360 extends beyond EOD, truncated [ 82.425809][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.426148][ T4574] loop1: p5 size 591360 extends beyond EOD, truncated [ 82.505574][ T4445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.512666][ T4445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.570925][ T4591] SET target dimension over the limit! [ 82.609081][ T4445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.661919][ T4445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.681206][ T4445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.718276][ T4445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.731236][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 82.741306][ T4605] tc_dump_action: action bad kind [ 82.747969][ T3605] udevd[3605]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 82.758915][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 82.846785][ T4445] hsr_slave_0: entered promiscuous mode [ 82.864718][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 82.868375][ T4445] hsr_slave_1: entered promiscuous mode [ 82.900005][ T3605] udevd[3605]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 82.918944][ T4445] debugfs: 'hsr0' already exists in 'hsr' [ 82.925481][ T4445] Cannot create hsr debugfs directory [ 82.931191][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 82.931209][ T28] audit: type=1400 audit(1774088569.374:639): avc: denied { create } for pid=4589 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 82.987861][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 83.086648][ T28] audit: type=1400 audit(1774088569.534:640): avc: denied { create } for pid=4632 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 83.118950][ T28] audit: type=1400 audit(1774088569.534:641): avc: denied { ioctl } for pid=4632 comm="syz.2.326" path="socket:[8943]" dev="sockfs" ino=8943 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 83.193737][ T28] audit: type=1400 audit(1774088569.624:642): avc: denied { create } for pid=4634 comm="syz.4.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.638159][ T28] audit: type=1400 audit(1774088570.054:643): avc: denied { getopt } for pid=4632 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.657840][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.778649][ T4645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4645 comm=syz.2.330 [ 83.839854][ T4647] netlink: 'syz.4.331': attribute type 1 has an invalid length. [ 83.858601][ T28] audit: type=1400 audit(1774088570.314:644): avc: denied { shutdown } for pid=4643 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.880487][ T4645] loop2: detected capacity change from 0 to 512 [ 83.915995][ T28] audit: type=1400 audit(1774088570.314:645): avc: denied { connect } for pid=4643 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.957970][ T28] audit: type=1400 audit(1774088570.314:646): avc: denied { name_connect } for pid=4643 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 83.978384][ T28] audit: type=1400 audit(1774088570.314:647): avc: denied { setopt } for pid=4643 comm="syz.2.330" laddr=::7f00:1 lport=36855 faddr=fc02:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.024775][ T28] audit: type=1400 audit(1774088570.474:648): avc: denied { ioctl } for pid=4646 comm="syz.4.331" path="socket:[8036]" dev="sockfs" ino=8036 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.118477][ T4645] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.123201][ T4445] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.153263][ T4445] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.187969][ T4445] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.289893][ T4445] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.466802][ T4445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.490029][ T4445] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.504690][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.511933][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.551528][ T4445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.563521][ T4445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.582954][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.590107][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.694791][ T3327] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 84.756182][ T4679] netlink: 76 bytes leftover after parsing attributes in process `syz.4.335'. [ 84.774742][ T4445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.035440][ T4445] veth0_vlan: entered promiscuous mode [ 85.058031][ T4445] veth1_vlan: entered promiscuous mode [ 85.104920][ T4445] veth0_macvtap: entered promiscuous mode [ 85.117236][ T4445] veth1_macvtap: entered promiscuous mode [ 85.148337][ T4445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.165525][ T4445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.220871][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.238645][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.256573][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.265361][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.301848][ T4710] netlink: 220 bytes leftover after parsing attributes in process `syz.1.340'. [ 85.317986][ T4710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.340'. [ 85.441785][ T4716] netlink: 'syz.5.341': attribute type 4 has an invalid length. [ 85.459743][ T3381] IPVS: starting estimator thread 0... [ 85.474696][ T4719] loop1: detected capacity change from 0 to 1024 [ 85.626899][ T4719] EXT4-fs: test_dummy_encryption option not supported [ 85.686730][ T4718] IPVS: using max 2400 ests per chain, 120000 per kthread [ 86.665792][ T4730] loop1: detected capacity change from 0 to 512 [ 86.822401][ T4742] netlink: 40 bytes leftover after parsing attributes in process `syz.5.349'. [ 86.848492][ T4742] netlink: 20 bytes leftover after parsing attributes in process `syz.5.349'. [ 86.875717][ T4743] SELinux: Context system_u:object_r:v4l_device_t:s0 is not valid (left unmapped). [ 87.044357][ T4751] netlink: 220 bytes leftover after parsing attributes in process `syz.4.352'. [ 87.055287][ T4751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 87.075864][ T4742] loop5: detected capacity change from 0 to 128 [ 87.167126][ T4730] EXT4-fs (loop1): 1 orphan inode deleted [ 87.189727][ T30] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 87.255346][ T30] loop1: lost filesystem error report for type 5 error -117 [ 87.720349][ T4730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.827953][ T4730] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.875254][ T4765] FAULT_INJECTION: forcing a failure. [ 87.875254][ T4765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.931407][ T4765] CPU: 1 UID: 0 PID: 4765 Comm: syz.4.356 Tainted: G W syzkaller #0 PREEMPT(full) [ 87.931465][ T4765] Tainted: [W]=WARN [ 87.931474][ T4765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 87.931560][ T4765] Call Trace: [ 87.931571][ T4765] [ 87.931582][ T4765] __dump_stack+0x1d/0x30 [ 87.931618][ T4765] dump_stack_lvl+0x95/0xd0 [ 87.931692][ T4765] dump_stack+0x15/0x1b [ 87.931721][ T4765] should_fail_ex+0x263/0x280 [ 87.931758][ T4765] should_fail+0xb/0x20 [ 87.931789][ T4765] should_fail_usercopy+0x1a/0x20 [ 87.931825][ T4765] _copy_from_user+0x1c/0xb0 [ 87.931874][ T4765] __sys_bind+0x106/0x290 [ 87.931909][ T4765] __x64_sys_bind+0x3f/0x50 [ 87.931936][ T4765] x64_sys_call+0x2b30/0x3020 [ 87.931988][ T4765] do_syscall_64+0x12c/0x370 [ 87.932018][ T4765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.932043][ T4765] RIP: 0033:0x7f8d8767c799 [ 87.932066][ T4765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.932086][ T4765] RSP: 002b:00007f8d860d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 87.932110][ T4765] RAX: ffffffffffffffda RBX: 00007f8d878f5fa0 RCX: 00007f8d8767c799 [ 87.932125][ T4765] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 87.932140][ T4765] RBP: 00007f8d860d7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.932212][ T4765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.932289][ T4765] R13: 00007f8d878f6038 R14: 00007f8d878f5fa0 R15: 00007ffefe96f458 [ 87.932311][ T4765] [ 88.183209][ T23] IPVS: starting estimator thread 0... [ 88.384700][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 88.384727][ T28] audit: type=1400 audit(1774088574.834:676): avc: denied { ioctl } for pid=4767 comm="syz.0.357" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.536521][ T4770] IPVS: using max 2304 ests per chain, 115200 per kthread [ 88.607986][ T28] audit: type=1400 audit(1774088574.784:675): avc: denied { name_connect } for pid=4767 comm="syz.0.357" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 88.645672][ T4774] loop0: detected capacity change from 0 to 4096 [ 88.666430][ T28] audit: type=1400 audit(1774088574.874:677): avc: denied { remount } for pid=4767 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.722580][ T4780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 88.782078][ T4774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.858709][ T28] audit: type=1400 audit(1774088575.304:678): avc: denied { read } for pid=4785 comm="syz.4.361" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.903332][ T4790] RDS: rds_bind could not find a transport for fe80::9, load rds_tcp or rds_rdma? [ 88.912835][ T4784] loop2: detected capacity change from 0 to 1024 [ 88.915987][ T4788] loop5: detected capacity change from 0 to 512 [ 88.948887][ T4784] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 88.971834][ T28] audit: type=1400 audit(1774088575.304:679): avc: denied { open } for pid=4785 comm="syz.4.361" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.974870][ T4788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.995464][ T28] audit: type=1400 audit(1774088575.364:680): avc: denied { ioctl } for pid=4789 comm="syz.4.363" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 89.040483][ T4771] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.357: corrupted inode contents [ 89.053340][ T4784] System zones: 0-1, 3-36 [ 89.057384][ T4788] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.078269][ T28] audit: type=1400 audit(1774088575.414:681): avc: denied { remove_name } for pid=4767 comm="syz.0.357" name="file3" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.100960][ T28] audit: type=1400 audit(1774088575.414:682): avc: denied { rename } for pid=4767 comm="syz.0.357" name="file3" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.107717][ T4784] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.360: bad orphan inode 134217728 [ 89.123470][ T28] audit: type=1400 audit(1774088575.414:683): avc: denied { unlink } for pid=4767 comm="syz.0.357" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.155368][ T4784] loop2: lost filesystem error report for type 5 error -117 [ 89.156390][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 89.161266][ T4784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.163793][ C0] EXT4-fs (loop2): initial error at time 1774088575: ext4_orphan_get:1417 [ 89.171557][ T4771] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.357: mark_inode_dirty error [ 89.182679][ C0] [ 89.182689][ C0] EXT4-fs (loop2): last error at time 1774088575: ext4_orphan_get:1417 [ 89.250321][ T4784] team0: Device vxcan3 is of different type [ 89.278316][ T4771] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.357: corrupted inode contents [ 89.295381][ T28] audit: type=1400 audit(1774088575.494:684): avc: denied { rename } for pid=4767 comm="syz.0.357" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.324237][ T4771] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.357: mark_inode_dirty error [ 89.355099][ T4771] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.357: corrupted inode contents [ 89.357767][ T4445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.368628][ T4771] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.357: mark_inode_dirty error [ 89.387964][ T4771] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.357: corrupted inode contents [ 89.400476][ T4771] EXT4-fs error (device loop0): ext4_truncate:4587: inode #15: comm syz.0.357: mark_inode_dirty error [ 89.412637][ T4771] EXT4-fs error (device loop0) in ext4_setattr:5983: Corrupt filesystem [ 89.438099][ T4771] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.357: corrupted inode contents [ 89.450742][ T4771] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.450955][ T4771] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.460741][ T4771] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 89.495053][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.535411][ T4804] netlink: 766 bytes leftover after parsing attributes in process `syz.5.369'. [ 89.547718][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.635829][ T4809] syzkaller0: entered promiscuous mode [ 89.641622][ T4809] syzkaller0: entered allmulticast mode [ 89.653290][ T4809] netlink: 'syz.5.370': attribute type 4 has an invalid length. [ 89.706750][ T4816] loop0: detected capacity change from 0 to 512 [ 89.724820][ T4814] loop2: detected capacity change from 0 to 512 [ 89.762020][ T4816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.802810][ T4814] EXT4-fs (loop2): 1 truncate cleaned up [ 89.817009][ T4816] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.844799][ T4814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.868400][ T4816] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.371: corrupted inode contents [ 89.888249][ T4816] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz.0.371: mark_inode_dirty error [ 89.916883][ T4816] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.371: corrupted inode contents [ 89.956844][ T4816] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.371: mark_inode_dirty error [ 89.997259][ T4816] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.371: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 89.997259][ T4816] [ 90.090314][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.137397][ T4824] loop0: detected capacity change from 0 to 512 [ 90.240250][ T4827] geneve2: entered promiscuous mode [ 90.506531][ T4837] netlink: 220 bytes leftover after parsing attributes in process `syz.0.376'. [ 90.597216][ T4842] loop0: detected capacity change from 0 to 256 [ 90.620082][ T4842] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.657810][ T4842] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.882243][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.998470][ T4854] netlink: 'syz.0.379': attribute type 12 has an invalid length. [ 91.118607][ T4862] loop4: detected capacity change from 0 to 512 [ 91.126411][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.140068][ T4862] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.166780][ T4862] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.384: bad orphan inode 131083 [ 91.196696][ T4862] loop4: lost filesystem error report for type 5 error -117 [ 91.198048][ T4862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.298295][ T4873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.356543][ T4880] xt_ecn: cannot match TCP bits for non-tcp packets [ 91.423847][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.478867][ T4900] syzkaller0: entered promiscuous mode [ 91.484554][ T4900] syzkaller0: entered allmulticast mode [ 91.596146][ T4904] FAULT_INJECTION: forcing a failure. [ 91.596146][ T4904] name failslab, interval 1, probability 0, space 0, times 0 [ 91.615835][ T4906] netlink: 'syz.2.392': attribute type 4 has an invalid length. [ 91.642219][ T4904] CPU: 0 UID: 0 PID: 4904 Comm: syz.5.393 Tainted: G W syzkaller #0 PREEMPT(full) [ 91.642256][ T4904] Tainted: [W]=WARN [ 91.642262][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.642276][ T4904] Call Trace: [ 91.642336][ T4904] [ 91.642345][ T4904] __dump_stack+0x1d/0x30 [ 91.642383][ T4904] dump_stack_lvl+0x95/0xd0 [ 91.642413][ T4904] dump_stack+0x15/0x1b [ 91.642464][ T4904] should_fail_ex+0x263/0x280 [ 91.642500][ T4904] should_failslab+0x8c/0xb0 [ 91.642522][ T4904] kmem_cache_alloc_noprof+0x66/0x400 [ 91.642546][ T4904] ? skb_clone+0x151/0x1f0 [ 91.642668][ T4904] skb_clone+0x151/0x1f0 [ 91.642708][ T4904] __netlink_deliver_tap+0x2c9/0x500 [ 91.642753][ T4904] ? netlink_attachskb+0x2e2/0x660 [ 91.642808][ T4904] netlink_sendskb+0x126/0x150 [ 91.642845][ T4904] netlink_unicast+0x2a2/0x690 [ 91.642883][ T4904] netlink_ack+0x4c8/0x500 [ 91.642922][ T4904] netlink_rcv_skb+0x192/0x220 [ 91.643031][ T4904] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.643058][ T4904] rtnetlink_rcv+0x1c/0x30 [ 91.643087][ T4904] netlink_unicast+0x5c0/0x690 [ 91.643182][ T4904] netlink_sendmsg+0x5c8/0x6f0 [ 91.643221][ T4904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.643252][ T4904] ____sys_sendmsg+0x563/0x5b0 [ 91.643325][ T4904] ___sys_sendmsg+0x195/0x1e0 [ 91.643362][ T4904] ? path_openat+0x1b01/0x2050 [ 91.643439][ T4904] __sys_sendmmsg+0x185/0x320 [ 91.643527][ T4904] __x64_sys_sendmmsg+0x57/0x70 [ 91.643572][ T4904] x64_sys_call+0x27aa/0x3020 [ 91.643638][ T4904] do_syscall_64+0x12c/0x370 [ 91.643664][ T4904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.643771][ T4904] RIP: 0033:0x7ffb965bc799 [ 91.643789][ T4904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.643816][ T4904] RSP: 002b:00007ffb9500f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 91.643838][ T4904] RAX: ffffffffffffffda RBX: 00007ffb96835fa0 RCX: 00007ffb965bc799 [ 91.643852][ T4904] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 91.643867][ T4904] RBP: 00007ffb9500f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.643883][ T4904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.643899][ T4904] R13: 00007ffb96836038 R14: 00007ffb96835fa0 R15: 00007ffff7687048 [ 91.643973][ T4904] [ 92.201447][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.328478][ T4969] set_capacity_and_notify: 1 callbacks suppressed [ 92.328501][ T4969] loop7: detected capacity change from 0 to 16384 [ 92.487262][ T4980] loop2: detected capacity change from 0 to 512 [ 92.500712][ T4980] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.403: inode has both inline data and extents flags [ 92.524824][ T4980] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.525086][ T4980] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.403: couldn't read orphan inode 15 (err -117) [ 92.534322][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 92.534382][ C1] EXT4-fs (loop2): initial error at time 1774088578: ext4_orphan_get:1391: inode 15 [ 92.534421][ C1] EXT4-fs (loop2): last error at time 1774088578: ext4_orphan_get:1391: inode 15 [ 92.571500][ T4980] loop2: lost filesystem error report for type 5 error -117 [ 92.591695][ T4980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.683146][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.405'. [ 92.774774][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.398081][ T5006] loop1: detected capacity change from 0 to 1024 [ 93.414694][ T5006] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 93.428736][ T5006] System zones: 0-1, 3-36 [ 93.437149][ T5006] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.411: bad orphan inode 134217728 [ 93.460782][ T5006] loop1: lost filesystem error report for type 5 error -117 [ 93.461530][ T5006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.496598][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 93.496618][ T28] audit: type=1400 audit(1774088579.944:708): avc: denied { kexec_image_load } for pid=5005 comm="syz.1.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 93.498775][ T5006] team0: Device vxcan1 is of different type [ 93.607004][ T5011] syzkaller0: entered promiscuous mode [ 93.612545][ T5011] syzkaller0: entered allmulticast mode [ 93.623211][ T5011] netlink: 'syz.5.413': attribute type 4 has an invalid length. [ 93.640412][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.781475][ T5016] loop2: detected capacity change from 0 to 512 [ 93.807505][ T5016] EXT4-fs (loop2): 1 truncate cleaned up [ 93.818214][ T5016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.891208][ T28] audit: type=1400 audit(1774088580.344:709): avc: denied { create } for pid=5017 comm="syz.5.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.944344][ T5025] loop1: detected capacity change from 0 to 512 [ 93.969751][ T5025] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 93.979898][ T28] audit: type=1400 audit(1774088580.344:710): avc: denied { read } for pid=5017 comm="syz.5.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.000170][ T28] audit: type=1400 audit(1774088580.344:711): avc: denied { listen } for pid=5017 comm="syz.5.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.043117][ T5025] tipc: Started in network mode [ 94.078033][ T5025] tipc: Node identity 4, cluster identity 4711 [ 94.085444][ T28] audit: type=1400 audit(1774088580.344:712): avc: denied { accept } for pid=5017 comm="syz.5.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.107743][ T5025] tipc: Node number set to 4 [ 94.122198][ T28] audit: type=1400 audit(1774088580.464:713): avc: denied { create } for pid=5026 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 94.142052][ T28] audit: type=1400 audit(1774088580.464:714): avc: denied { setopt } for pid=5026 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 94.161804][ T28] audit: type=1400 audit(1774088580.464:715): avc: denied { getopt } for pid=5026 comm="syz.0.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 94.163064][ T5032] loop0: detected capacity change from 0 to 512 [ 94.194932][ T5032] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #11: comm syz.0.420: iget: bad extended attribute block 3153 [ 94.213655][ T5032] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.216431][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 94.232826][ C0] EXT4-fs (loop0): initial error at time 1774088580: ext4_orphan_get:1391: inode 11 [ 94.242274][ C0] EXT4-fs (loop0): last error at time 1774088580: ext4_orphan_get:1391: inode 11 [ 94.253797][ T5032] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.420: couldn't read orphan inode 11 (err -117) [ 94.266202][ T5032] loop0: lost filesystem error report for type 5 error -117 [ 94.267006][ T5032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.319226][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.424084][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.633952][ T5072] loop5: detected capacity change from 0 to 256 [ 94.663012][ T5072] FAT-fs (loop5): Directory bread(block 64) failed [ 94.671030][ T5072] FAT-fs (loop5): Directory bread(block 65) failed [ 94.679856][ T5072] FAT-fs (loop5): Directory bread(block 66) failed [ 94.686825][ T5072] FAT-fs (loop5): Directory bread(block 67) failed [ 94.693650][ T5072] FAT-fs (loop5): Directory bread(block 68) failed [ 94.700378][ T5072] FAT-fs (loop5): Directory bread(block 69) failed [ 94.707148][ T5072] FAT-fs (loop5): Directory bread(block 70) failed [ 94.713963][ T5072] FAT-fs (loop5): Directory bread(block 71) failed [ 94.720785][ T5072] FAT-fs (loop5): Directory bread(block 72) failed [ 94.727599][ T5072] FAT-fs (loop5): Directory bread(block 73) failed [ 94.742915][ T5072] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 94.749539][ T5072] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.757201][ T5072] vhci_hcd vhci_hcd.0: Device attached [ 94.783581][ T5075] vhci_hcd: connection closed [ 94.783775][ T12] vhci_hcd vhci_hcd.5: stop threads [ 94.794320][ T12] vhci_hcd vhci_hcd.5: release socket [ 94.802777][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 95.484085][ T28] audit: type=1400 audit(1774088581.934:716): avc: denied { block_suspend } for pid=5104 comm="syz.4.427" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.611082][ T28] audit: type=1400 audit(1774088582.064:717): avc: denied { write } for pid=5114 comm="syz.2.429" laddr=fe80::13 lport=60 faddr=fe80::aa fport=20132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.767711][ T5138] netlink: 'syz.2.433': attribute type 1 has an invalid length. [ 95.775570][ T5138] netlink: 116 bytes leftover after parsing attributes in process `syz.2.433'. [ 95.899632][ T5138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.964617][ T5150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.009688][ T5155] loop0: detected capacity change from 0 to 256 [ 96.023475][ T5150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.045619][ T5155] FAT-fs (loop0): Directory bread(block 64) failed [ 96.058988][ T5153] syzkaller0: entered promiscuous mode [ 96.061645][ T5155] FAT-fs (loop0): Directory bread(block 65) failed [ 96.072885][ T5153] syzkaller0: entered allmulticast mode [ 96.096036][ T5155] FAT-fs (loop0): Directory bread(block 66) failed [ 96.104579][ T5150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.113569][ T5155] FAT-fs (loop0): Directory bread(block 67) failed [ 96.139523][ T5153] netlink: 'syz.2.437': attribute type 4 has an invalid length. [ 96.181209][ T5150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.190428][ T5155] FAT-fs (loop0): Directory bread(block 68) failed [ 96.203857][ T5155] FAT-fs (loop0): Directory bread(block 69) failed [ 96.210799][ T5155] FAT-fs (loop0): Directory bread(block 70) failed [ 96.217743][ T5155] FAT-fs (loop0): Directory bread(block 71) failed [ 96.224422][ T5155] FAT-fs (loop0): Directory bread(block 72) failed [ 96.261049][ T5155] FAT-fs (loop0): Directory bread(block 73) failed [ 96.286184][ T4939] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.308063][ T4939] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.326566][ T4939] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.406397][ T4939] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.416683][ T5155] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 96.423257][ T5155] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.437253][ T5155] vhci_hcd vhci_hcd.0: Device attached [ 96.458037][ T5158] vhci_hcd: connection closed [ 96.458319][ T4944] vhci_hcd vhci_hcd.0: stop threads [ 96.472236][ T4944] vhci_hcd vhci_hcd.0: release socket [ 96.478759][ T4944] vhci_hcd vhci_hcd.0: disconnect device [ 96.616239][ T5163] loop2: detected capacity change from 0 to 1024 [ 96.623478][ T5163] EXT4-fs: Ignoring removed i_version option [ 96.629729][ T5163] EXT4-fs: Ignoring removed bh option [ 96.635173][ T5163] EXT4-fs: inline encryption not supported [ 96.646795][ T5163] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.715090][ T5163] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 96.730831][ T5163] EXT4-fs (loop2): mount failed [ 97.599320][ T5171] loop5: detected capacity change from 0 to 512 [ 97.782166][ T5169] loop1: detected capacity change from 0 to 1024 [ 97.819141][ T5169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.277810][ T5171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.290702][ T5171] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.361863][ T5171] netlink: 64 bytes leftover after parsing attributes in process `syz.5.440'. [ 98.462051][ T5173] netlink: 220 bytes leftover after parsing attributes in process `syz.4.442'. [ 98.474538][ T5180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.443'. [ 98.483686][ T5180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.443'. [ 98.525451][ T5173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'. [ 98.560820][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.573381][ T5180] loop2: detected capacity change from 0 to 128 [ 98.593279][ T5183] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 98.661152][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 98.661173][ T28] audit: type=1400 audit(1774088585.114:748): avc: denied { create } for pid=5186 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.708969][ T4445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.756433][ T28] audit: type=1400 audit(1774088585.174:749): avc: denied { ioctl } for pid=5186 comm="syz.0.447" path="socket:[11107]" dev="sockfs" ino=11107 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.843689][ T5200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=5200 comm=syz.0.451 [ 98.883686][ T5200] loop0: detected capacity change from 0 to 512 [ 98.903246][ T5200] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.919923][ T5187] netlink: 44 bytes leftover after parsing attributes in process `syz.4.446'. [ 99.032795][ T28] audit: type=1400 audit(1774088585.464:750): avc: denied { read } for pid=5208 comm="syz.1.452" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.078600][ T28] audit: type=1400 audit(1774088585.464:751): avc: denied { open } for pid=5208 comm="syz.1.452" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.142940][ T28] audit: type=1400 audit(1774088585.464:752): avc: denied { ioctl } for pid=5208 comm="syz.1.452" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.201369][ T5187] loop4: detected capacity change from 0 to 128 [ 99.238294][ T3317] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 99.250340][ T5187] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.310193][ T5187] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 99.631140][ T5224] netlink: 220 bytes leftover after parsing attributes in process `syz.0.456'. [ 99.677350][ T5224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.456'. [ 99.896642][ T5227] ip6erspan0: entered allmulticast mode [ 100.002883][ T5227] loop0: detected capacity change from 0 to 512 [ 100.025891][ T28] audit: type=1400 audit(1774088586.474:753): avc: denied { create } for pid=5230 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.069656][ T28] audit: type=1400 audit(1774088586.474:754): avc: denied { ioctl } for pid=5230 comm="syz.2.459" path="socket:[10016]" dev="sockfs" ino=10016 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.097396][ T5227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.102415][ T28] audit: type=1400 audit(1774088586.504:755): avc: denied { connect } for pid=5230 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.117535][ T5236] loop1: detected capacity change from 0 to 512 [ 100.130684][ T28] audit: type=1400 audit(1774088586.554:756): avc: denied { bind } for pid=5185 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.146849][ T5227] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.166713][ T28] audit: type=1400 audit(1774088586.574:757): avc: denied { listen } for pid=5230 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.167445][ T5243] loop5: detected capacity change from 0 to 512 [ 100.248819][ T5236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.278217][ T5236] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.306414][ T5243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.345755][ T5243] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.361110][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.455275][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.593465][ T5256] loop0: detected capacity change from 0 to 512 [ 100.662592][ T5187] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 100.677456][ T5187] FAT-fs (loop4): Filesystem has been set read-only [ 100.716557][ T5257] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 100.867733][ T4445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.906747][ T5263] loop2: detected capacity change from 0 to 512 [ 100.921135][ T5265] netlink: 220 bytes leftover after parsing attributes in process `syz.5.467'. [ 100.944426][ T5263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.977761][ T5263] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 100.986621][ T5263] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 101.005126][ T5265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.467'. [ 101.044215][ T5263] System zones: 0-1, 15-15, 18-18, 34-34 [ 101.077562][ T5263] EXT4-fs (loop2): orphan cleanup on readonly fs [ 101.124810][ T5263] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 101.140045][ T5263] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 101.177788][ T5263] EXT4-fs (loop2): 1 truncate cleaned up [ 101.194300][ T5263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.340660][ T5279] FAT-fs (loop4): Directory bread(block 64) failed [ 101.347423][ T5279] FAT-fs (loop4): Directory bread(block 65) failed [ 101.354132][ T5279] FAT-fs (loop4): Directory bread(block 66) failed [ 101.360911][ T5279] FAT-fs (loop4): Directory bread(block 67) failed [ 101.367613][ T5279] FAT-fs (loop4): Directory bread(block 68) failed [ 101.374226][ T5279] FAT-fs (loop4): Directory bread(block 69) failed [ 101.381009][ T5279] FAT-fs (loop4): Directory bread(block 70) failed [ 101.387595][ T5279] FAT-fs (loop4): Directory bread(block 71) failed [ 101.394153][ T5279] FAT-fs (loop4): Directory bread(block 72) failed [ 101.400935][ T5279] FAT-fs (loop4): Directory bread(block 73) failed [ 103.660313][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.475'. [ 103.680014][ T5287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.475'. [ 103.725633][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 103.725652][ T28] audit: type=1326 audit(1774088590.174:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb965bc799 code=0x7ffc0000 [ 103.757187][ T28] audit: type=1326 audit(1774088590.214:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb965bc799 code=0x7ffc0000 [ 103.811890][ T28] audit: type=1326 audit(1774088590.214:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffb965bc799 code=0x7ffc0000 [ 103.845498][ T28] audit: type=1326 audit(1774088590.214:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb965bc799 code=0x7ffc0000 [ 103.913008][ T28] audit: type=1326 audit(1774088590.214:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb965bc799 code=0x7ffc0000 [ 103.943895][ T5297] netlink: 220 bytes leftover after parsing attributes in process `syz.5.481'. [ 103.967782][ T5297] netlink: 12 bytes leftover after parsing attributes in process `syz.5.481'. [ 103.998184][ T28] audit: type=1326 audit(1774088590.214:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb965bc799 code=0x7ffc0000 [ 104.043663][ T28] audit: type=1326 audit(1774088590.214:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb965bc799 code=0x7ffc0000 [ 104.114482][ T28] audit: type=1326 audit(1774088590.214:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb965bc799 code=0x7ffc0000 [ 104.148900][ T28] audit: type=1326 audit(1774088590.214:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7ffb965bc799 code=0x7ffc0000 [ 104.148969][ T5303] netlink: 128 bytes leftover after parsing attributes in process `syz.4.483'. [ 104.184157][ T28] audit: type=1326 audit(1774088590.214:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5290 comm="syz.5.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb965bc799 code=0x7ffc0000 [ 104.209059][ T5305] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20001 [ 104.217050][ T5303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 104.387223][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.452006][ T5320] set_capacity_and_notify: 1 callbacks suppressed [ 104.452028][ T5320] loop2: detected capacity change from 0 to 512 [ 104.465638][ T5321] netlink: 40 bytes leftover after parsing attributes in process `syz.1.490'. [ 104.477278][ T5321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.490'. [ 104.628281][ T5321] loop1: detected capacity change from 0 to 128 [ 105.543682][ T5350] loop0: detected capacity change from 0 to 128 [ 106.291878][ T5372] loop1: detected capacity change from 0 to 1024 [ 106.316812][ T5372] EXT4-fs: Ignoring removed bh option [ 106.332532][ T5372] EXT4-fs: test_dummy_encryption option not supported [ 106.377805][ T5376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.398269][ T5376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.501837][ T5382] loop0: detected capacity change from 0 to 736 [ 106.558421][ T5382] loop0: detected capacity change from 0 to 4096 [ 106.590593][ T5382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.721882][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.934740][ T5386] __nla_validate_parse: 4 callbacks suppressed [ 106.934760][ T5386] netlink: 220 bytes leftover after parsing attributes in process `syz.2.509'. [ 106.973469][ T5386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.509'. [ 107.200079][ T5394] loop4: detected capacity change from 0 to 1764 [ 108.401833][ T5412] IPv6: sit1: Disabled Multicast RS [ 108.408100][ T5412] sit1: entered allmulticast mode [ 108.678170][ T5423] loop0: detected capacity change from 0 to 512 [ 108.699987][ T5424] syzkaller0: entered promiscuous mode [ 108.725617][ T5424] syzkaller0: entered allmulticast mode [ 108.742285][ T5423] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.519: bg 0: block 248: padding at end of block bitmap is not set [ 108.758536][ T5423] loop0: lost filesystem error report for type 5 error -117 [ 108.758787][ T5423] __quota_error: 11 callbacks suppressed [ 108.758803][ T5423] Quota error (device loop0): write_blk: dquota write failed [ 108.772019][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 108.772053][ C0] EXT4-fs (loop0): last error at time 1774088595: ext4_validate_block_bitmap:441 [ 108.796405][ T5423] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 108.806602][ T5423] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.519: Failed to acquire dquot type 1 [ 108.809831][ T5430] netlink: 'syz.5.520': attribute type 4 has an invalid length. [ 108.818187][ T5423] loop0: lost filesystem error report for type 5 error -117 [ 108.836889][ T5423] EXT4-fs (loop0): 1 truncate cleaned up [ 108.850657][ T5423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.863679][ T5423] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.878246][ T28] audit: type=1400 audit(1774088595.334:789): avc: denied { remount } for pid=5419 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 108.928177][ T5420] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 108.995710][ T5438] netlink: 220 bytes leftover after parsing attributes in process `syz.5.524'. [ 109.017065][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.026966][ T5438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.524'. [ 109.056960][ T5439] SELinux: failed to load policy [ 109.095587][ T5444] loop2: detected capacity change from 0 to 512 [ 109.122002][ T5444] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 109.138343][ T5444] System zones: 0-2, 18-18, 34-34 [ 109.147314][ T5444] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.527: bg 0: block 248: padding at end of block bitmap is not set [ 109.162322][ T5444] loop2: lost filesystem error report for type 5 error -117 [ 109.162634][ T5444] Quota error (device loop2): write_blk: dquota write failed [ 109.170095][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 109.170119][ C1] EXT4-fs (loop2): last error at time 1774088595: ext4_validate_block_bitmap:441 [ 109.194606][ T5444] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 109.207404][ T5444] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.527: Failed to acquire dquot type 1 [ 109.219053][ T5444] loop2: lost filesystem error report for type 5 error -117 [ 109.227382][ T5444] EXT4-fs (loop2): 1 truncate cleaned up [ 109.234271][ T5444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.249342][ T5444] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.262897][ T5444] netlink: 80 bytes leftover after parsing attributes in process `syz.2.527'. [ 109.272498][ T5444] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.527: deleted inode referenced: 12 [ 109.400992][ T5456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.530'. [ 109.820485][ T5467] loop5: detected capacity change from 0 to 256 [ 109.934395][ T28] audit: type=1400 audit(1774088596.264:790): avc: denied { bind } for pid=5462 comm="syz.5.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.061381][ T28] audit: type=1400 audit(1774088596.264:791): avc: denied { listen } for pid=5462 comm="syz.5.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.183746][ T5469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=5469 comm=syz.4.533 [ 110.263717][ T5469] loop4: detected capacity change from 0 to 512 [ 110.291149][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.318027][ T5469] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.371014][ T5473] syzkaller0: entered promiscuous mode [ 110.376703][ T5473] syzkaller0: entered allmulticast mode [ 110.385852][ T5473] netlink: 'syz.1.535': attribute type 4 has an invalid length. [ 110.421740][ T5479] netlink: 220 bytes leftover after parsing attributes in process `syz.2.536'. [ 110.439929][ T3314] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 110.450323][ T5479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.536'. [ 110.609705][ T5490] loop4: detected capacity change from 0 to 128 [ 110.617140][ T5490] msdos: Unknown parameter '' [ 110.628704][ T28] audit: type=1400 audit(1774088597.034:792): avc: denied { write } for pid=5481 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.771815][ T5495] loop0: detected capacity change from 0 to 128 [ 110.807062][ T28] audit: type=1400 audit(1774088597.084:793): avc: denied { watch } for pid=5481 comm="syz.4.538" path="/101/file0" dev="tmpfs" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.024458][ T28] audit: type=1400 audit(1774088597.404:794): avc: denied { ioctl } for pid=5497 comm="syz.1.544" path="socket:[11626]" dev="sockfs" ino=11626 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.313971][ T5509] loop0: detected capacity change from 0 to 736 [ 111.369944][ T5514] netlink: 220 bytes leftover after parsing attributes in process `syz.4.550'. [ 111.405858][ T5515] syzkaller0: entered promiscuous mode [ 111.416704][ T5515] syzkaller0: entered allmulticast mode [ 111.462509][ T5515] netlink: 'syz.5.551': attribute type 4 has an invalid length. [ 111.836447][ T5546] SELinux: failed to load policy [ 112.689682][ T5557] loop4: detected capacity change from 0 to 512 [ 112.762030][ T5558] 8021q: VLANs not supported on ip6_vti0 [ 112.771605][ T5557] EXT4-fs warning (device loop4): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 112.820822][ T5560] syzkaller0: entered promiscuous mode [ 112.840441][ T5560] syzkaller0: entered allmulticast mode [ 112.893351][ T5562] netlink: 'syz.2.567': attribute type 4 has an invalid length. [ 113.475399][ T5574] loop1: detected capacity change from 0 to 1024 [ 113.482298][ T5574] EXT4-fs: Ignoring removed i_version option [ 113.488467][ T5574] EXT4-fs: Ignoring removed bh option [ 113.493879][ T5574] EXT4-fs: inline encryption not supported [ 113.549692][ T5575] loop4: detected capacity change from 0 to 1024 [ 113.556499][ T5575] EXT4-fs: Ignoring removed i_version option [ 113.562590][ T5575] EXT4-fs: Ignoring removed bh option [ 113.568101][ T5575] EXT4-fs: inline encryption not supported [ 113.577806][ T5575] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.590466][ T5575] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 113.605397][ T5575] EXT4-fs (loop4): mount failed [ 113.616054][ T5574] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.636951][ T5574] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 113.651753][ T5574] EXT4-fs (loop1): mount failed [ 113.756587][ T5584] loop2: detected capacity change from 0 to 512 [ 113.781219][ T5584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.806575][ T5584] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.852085][ T5584] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.574: corrupted inode contents [ 113.876020][ T5584] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.574: mark_inode_dirty error [ 113.896910][ T5584] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.574: corrupted inode contents [ 113.924579][ T5584] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.574: mark_inode_dirty error [ 114.007557][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 114.007632][ T28] audit: type=1400 audit(1774088600.414:831): avc: denied { read } for pid=5583 comm="syz.2.574" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 114.064325][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.107023][ T5592] SELinux: failed to load policy [ 114.122488][ T5594] loop2: detected capacity change from 0 to 128 [ 115.229541][ T5612] loop4: detected capacity change from 0 to 128 [ 115.380985][ T5615] loop1: detected capacity change from 0 to 256 [ 115.425363][ T5615] FAT-fs (loop1): Directory bread(block 64) failed [ 115.432158][ T5615] FAT-fs (loop1): Directory bread(block 65) failed [ 115.438826][ T5615] FAT-fs (loop1): Directory bread(block 66) failed [ 115.445483][ T5615] FAT-fs (loop1): Directory bread(block 67) failed [ 115.452261][ T5615] FAT-fs (loop1): Directory bread(block 68) failed [ 115.458898][ T5615] FAT-fs (loop1): Directory bread(block 69) failed [ 115.465607][ T5615] FAT-fs (loop1): Directory bread(block 70) failed [ 115.472820][ T5615] FAT-fs (loop1): Directory bread(block 71) failed [ 115.479728][ T5615] FAT-fs (loop1): Directory bread(block 72) failed [ 115.486543][ T5615] FAT-fs (loop1): Directory bread(block 73) failed [ 116.488863][ T5631] loop5: detected capacity change from 0 to 1024 [ 116.496229][ T5631] EXT4-fs: Ignoring removed i_version option [ 116.502406][ T5631] EXT4-fs: Ignoring removed bh option [ 116.507992][ T5631] EXT4-fs: inline encryption not supported [ 116.517963][ T5631] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.569100][ T5631] Quota error (device loop5): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 116.581304][ T5631] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 116.596492][ T5631] EXT4-fs (loop5): mount failed [ 116.665158][ T28] audit: type=1400 audit(1774088603.114:832): avc: denied { read } for pid=5611 comm="syz.4.584" path="socket:[11869]" dev="sockfs" ino=11869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.875129][ T5636] loop2: detected capacity change from 0 to 512 [ 117.410603][ T5649] loop0: detected capacity change from 0 to 512 [ 117.473159][ T5649] EXT4-fs: Ignoring removed bh option [ 117.487944][ T28] audit: type=1400 audit(1774088603.944:833): avc: denied { connect } for pid=5650 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.530069][ T5649] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.546229][ T28] audit: type=1400 audit(1774088603.944:834): avc: denied { setopt } for pid=5650 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.574772][ T5649] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 118.163001][ T5668] geneve1: entered promiscuous mode [ 118.170683][ T28] audit: type=1400 audit(1774088604.544:835): avc: denied { write } for pid=5667 comm="syz.4.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 118.192691][ T5668] macsec0: entered promiscuous mode [ 118.198335][ T5668] macsec0: entered allmulticast mode [ 118.203780][ T5668] geneve1: entered allmulticast mode [ 118.393718][ T5673] loop1: detected capacity change from 0 to 1024 [ 118.401003][ T5673] EXT4-fs: Ignoring removed i_version option [ 118.407158][ T5673] EXT4-fs: Ignoring removed bh option [ 118.412729][ T5673] EXT4-fs: inline encryption not supported [ 118.422122][ T5673] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.501689][ T5673] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 118.514097][ T5673] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 118.529412][ T5673] EXT4-fs (loop1): mount failed [ 120.771556][ T5692] loop5: detected capacity change from 0 to 1024 [ 120.778745][ T5692] EXT4-fs: inline encryption not supported [ 120.784731][ T5692] EXT4-fs: Ignoring removed bh option [ 120.829605][ T5686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.601'. [ 120.861274][ T5692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.883829][ T28] audit: type=1400 audit(1774088607.334:836): avc: denied { watch_reads } for pid=5691 comm="syz.5.604" path="/62/file1" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.958140][ T5702] syzkaller0: entered promiscuous mode [ 120.963743][ T5702] syzkaller0: entered allmulticast mode [ 120.988753][ T28] audit: type=1400 audit(1774088607.444:837): avc: denied { mounton } for pid=5691 comm="syz.5.604" path="/62/file1/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.017061][ T5702] netlink: 'syz.0.607': attribute type 4 has an invalid length. [ 121.071551][ T4445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.082530][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.090191][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.098264][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.105762][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.115349][ T5711] netlink: 'syz.2.610': attribute type 1 has an invalid length. [ 121.153633][ T5715] FAULT_INJECTION: forcing a failure. [ 121.153633][ T5715] name failslab, interval 1, probability 0, space 0, times 0 [ 121.181022][ T5715] CPU: 0 UID: 0 PID: 5715 Comm: syz.0.611 Tainted: G W syzkaller #0 PREEMPT(full) [ 121.181158][ T5715] Tainted: [W]=WARN [ 121.181166][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 121.181182][ T5715] Call Trace: [ 121.181227][ T5715] [ 121.181295][ T5715] __dump_stack+0x1d/0x30 [ 121.181327][ T5715] dump_stack_lvl+0x95/0xd0 [ 121.181357][ T5715] dump_stack+0x15/0x1b [ 121.181444][ T5715] should_fail_ex+0x263/0x280 [ 121.181475][ T5715] ? l2tp_tunnel_create+0x67/0x1d0 [ 121.181502][ T5715] should_failslab+0x8c/0xb0 [ 121.181608][ T5715] __kmalloc_cache_noprof+0x5f/0x410 [ 121.181641][ T5715] l2tp_tunnel_create+0x67/0x1d0 [ 121.181685][ T5715] ? l2tp_nl_cmd_tunnel_create+0x373/0x5a0 [ 121.181778][ T5715] l2tp_nl_cmd_tunnel_create+0x39a/0x5a0 [ 121.181844][ T5715] genl_family_rcv_msg_doit+0x187/0x1f0 [ 121.181903][ T5715] genl_rcv_msg+0x432/0x470 [ 121.181932][ T5715] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 121.181978][ T5715] netlink_rcv_skb+0x123/0x220 [ 121.182012][ T5715] ? __pfx_genl_rcv_msg+0x10/0x10 [ 121.182113][ T5715] genl_rcv+0x28/0x40 [ 121.182173][ T5715] netlink_unicast+0x5c0/0x690 [ 121.182214][ T5715] netlink_sendmsg+0x5c8/0x6f0 [ 121.182272][ T5715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.182348][ T5715] ____sys_sendmsg+0x563/0x5b0 [ 121.182401][ T5715] ___sys_sendmsg+0x195/0x1e0 [ 121.182512][ T5715] __x64_sys_sendmsg+0xd4/0x160 [ 121.182558][ T5715] x64_sys_call+0x194c/0x3020 [ 121.182593][ T5715] do_syscall_64+0x12c/0x370 [ 121.182618][ T5715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.182657][ T5715] RIP: 0033:0x7fc55401c799 [ 121.182675][ T5715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.182697][ T5715] RSP: 002b:00007fc552a6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.182727][ T5715] RAX: ffffffffffffffda RBX: 00007fc554295fa0 RCX: 00007fc55401c799 [ 121.182742][ T5715] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 121.182759][ T5715] RBP: 00007fc552a6f090 R08: 0000000000000000 R09: 0000000000000000 [ 121.182776][ T5715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.182865][ T5715] R13: 00007fc554296038 R14: 00007fc554295fa0 R15: 00007ffee94bdb78 [ 121.182892][ T5715] [ 121.225015][ T5711] bond2: entered promiscuous mode [ 121.439040][ T5711] bond2: entered allmulticast mode [ 121.444426][ T5711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.456188][ T5709] erspan1: entered allmulticast mode [ 121.468788][ T5709] bond2: (slave erspan1): making interface the new active one [ 121.478655][ T5709] erspan1: entered promiscuous mode [ 121.485742][ T5709] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 121.516889][ T5726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.614'. [ 121.530407][ T5710] tipc: Started in network mode [ 121.535447][ T5710] tipc: Node identity d6ca7b7d40b1, cluster identity 4711 [ 121.551037][ T5727] loop1: detected capacity change from 0 to 256 [ 121.666753][ T5710] tipc: Enabled bearer , priority 0 [ 123.324406][ T5707] syzkaller0: entered promiscuous mode [ 123.365734][ T5727] FAT-fs (loop1): Directory bread(block 64) failed [ 123.372458][ T5727] FAT-fs (loop1): Directory bread(block 65) failed [ 123.379247][ T5727] FAT-fs (loop1): Directory bread(block 66) failed [ 123.385935][ T5727] FAT-fs (loop1): Directory bread(block 67) failed [ 123.392616][ T5727] FAT-fs (loop1): Directory bread(block 68) failed [ 123.399225][ T5727] FAT-fs (loop1): Directory bread(block 69) failed [ 123.405891][ T5727] FAT-fs (loop1): Directory bread(block 70) failed [ 123.412507][ T5727] FAT-fs (loop1): Directory bread(block 71) failed [ 123.419171][ T5727] FAT-fs (loop1): Directory bread(block 72) failed [ 123.425755][ T5727] FAT-fs (loop1): Directory bread(block 73) failed [ 123.485340][ T5707] syzkaller0: entered allmulticast mode [ 123.529763][ T3416] tipc: Node number set to 2524674941 [ 123.617682][ T5716] tipc: Resetting bearer [ 123.701182][ T28] audit: type=1400 audit(1774088610.154:838): avc: denied { create } for pid=5746 comm="syz.0.618" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.733587][ T5747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.618'. [ 123.790426][ T28] audit: type=1400 audit(1774088610.184:839): avc: denied { write } for pid=5746 comm="syz.0.618" name="file0" dev="tmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.817055][ T5750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.618'. [ 123.870361][ T28] audit: type=1400 audit(1774088610.184:840): avc: denied { open } for pid=5746 comm="syz.0.618" path="/131/file0" dev="tmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.193778][ T5706] tipc: Resetting bearer [ 124.201576][ T5706] tipc: Disabling bearer [ 124.263667][ T28] audit: type=1400 audit(1774088610.724:841): avc: denied { unlink } for pid=3317 comm="syz-executor" name="file0" dev="tmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.338116][ T28] audit: type=1400 audit(1774088610.794:842): avc: denied { ioctl } for pid=5757 comm="syz.0.621" path="socket:[12048]" dev="sockfs" ino=12048 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.466645][ T5753] loop7: detected capacity change from 16384 to 0 [ 124.474695][ C1] I/O error, dev loop7, sector 6216 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 1 [ 124.530505][ T5764] syzkaller0: entered promiscuous mode [ 124.536151][ T5764] syzkaller0: entered allmulticast mode [ 124.549538][ T5766] netlink: 48 bytes leftover after parsing attributes in process `syz.1.623'. [ 124.561431][ T5764] netlink: 'syz.4.622': attribute type 4 has an invalid length. [ 124.586533][ T5768] loop0: detected capacity change from 0 to 512 [ 124.595900][ T5766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.623'. [ 124.618238][ T5768] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 124.627665][ T5768] System zones: 0-2, 18-18, 34-34 [ 124.636604][ T28] audit: type=1400 audit(1774088611.084:843): avc: denied { ioctl } for pid=5765 comm="syz.1.623" path="socket:[12895]" dev="sockfs" ino=12895 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.661392][ T5768] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.624: bg 0: block 248: padding at end of block bitmap is not set [ 124.715772][ T5768] loop0: lost filesystem error report for type 5 error -117 [ 124.715980][ T5768] Quota error (device loop0): write_blk: dquota write failed [ 124.723396][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 124.723413][ C0] EXT4-fs (loop0): last error at time 1774088611: ext4_validate_block_bitmap:441 [ 124.781337][ T28] audit: type=1400 audit(1774088611.224:844): avc: denied { accept } for pid=5765 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 124.812643][ T5768] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.624: Failed to acquire dquot type 1 [ 124.824296][ T5768] loop0: lost filesystem error report for type 5 error -117 [ 124.855037][ T5780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.880937][ T5781] loop5: detected capacity change from 0 to 256 [ 124.914165][ T5781] FAT-fs (loop5): Directory bread(block 64) failed [ 124.921028][ T5781] FAT-fs (loop5): Directory bread(block 65) failed [ 124.927758][ T5781] FAT-fs (loop5): Directory bread(block 66) failed [ 124.934302][ T5781] FAT-fs (loop5): Directory bread(block 67) failed [ 124.941493][ T5781] FAT-fs (loop5): Directory bread(block 68) failed [ 124.948096][ T5781] FAT-fs (loop5): Directory bread(block 69) failed [ 124.954669][ T5781] FAT-fs (loop5): Directory bread(block 70) failed [ 124.961464][ T5781] FAT-fs (loop5): Directory bread(block 71) failed [ 124.968140][ T5781] FAT-fs (loop5): Directory bread(block 72) failed [ 124.974750][ T5781] FAT-fs (loop5): Directory bread(block 73) failed [ 125.045701][ T5768] EXT4-fs (loop0): 1 truncate cleaned up [ 125.229239][ T5780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.243729][ T5768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.312795][ T5768] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.498267][ T5768] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.624: deleted inode referenced: 12 [ 126.263244][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.709903][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 126.709945][ T28] audit: type=1326 audit(1774088613.164:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55401c799 code=0x7ffc0000 [ 126.781215][ T28] audit: type=1326 audit(1774088613.164:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55401c799 code=0x7ffc0000 [ 126.905132][ T28] audit: type=1326 audit(1774088613.164:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55401c799 code=0x7ffc0000 [ 127.030697][ T5808] loop5: detected capacity change from 0 to 512 [ 127.072562][ T28] audit: type=1326 audit(1774088613.164:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55401c799 code=0x7ffc0000 [ 128.127698][ T28] audit: type=1326 audit(1774088613.194:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55401c799 code=0x7ffc0000 [ 128.151441][ T28] audit: type=1326 audit(1774088613.194:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55401c799 code=0x7ffc0000 [ 128.174975][ T28] audit: type=1326 audit(1774088613.194:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc55401c799 code=0x7ffc0000 [ 128.179215][ T5808] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 128.206701][ T5808] System zones: 0-2, 18-18, 34-34 [ 128.212915][ T5808] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.634: bg 0: block 248: padding at end of block bitmap is not set [ 128.227413][ T5808] loop5: lost filesystem error report for type 5 error -117 [ 128.227639][ T5808] Quota error (device loop5): write_blk: dquota write failed [ 128.242614][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 128.242638][ C0] EXT4-fs (loop5): last error at time 1774088614: ext4_validate_block_bitmap:441 [ 128.263329][ T5808] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 128.333871][ T5808] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.634: Failed to acquire dquot type 1 [ 128.371196][ T5817] loop4: detected capacity change from 0 to 1024 [ 128.390162][ T5808] loop5: lost filesystem error report for type 5 error -117 [ 128.412847][ T5817] EXT4-fs: dax option not supported [ 128.436547][ T5808] EXT4-fs (loop5): 1 truncate cleaned up [ 128.458397][ T5808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.545805][ T28] audit: type=1326 audit(1774088613.204:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5793 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55401c799 code=0x7ffc0000 [ 128.557488][ T5808] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.711816][ T5808] netlink: 80 bytes leftover after parsing attributes in process `syz.5.634'. [ 128.738285][ T5808] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.634: deleted inode referenced: 12 [ 129.055006][ T5826] loop4: detected capacity change from 0 to 764 [ 129.062783][ T5826] iso9660: Unknown parameter 'unčide' [ 129.094701][ T5826] can0: slcan on ttyS3. [ 129.616584][ T5822] can0 (unregistered): slcan off ttyS3. [ 129.765015][ T5843] loop0: detected capacity change from 0 to 1024 [ 129.837668][ T5843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.112056][ T4445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.214388][ T5863] syzkaller0: entered promiscuous mode [ 130.239078][ T5863] syzkaller0: entered allmulticast mode [ 130.308043][ T5863] netlink: 'syz.5.640': attribute type 4 has an invalid length. [ 130.588481][ T5875] loop2: detected capacity change from 0 to 512 [ 130.626909][ T5875] EXT4-fs: Ignoring removed nobh option [ 130.663055][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.674134][ T5875] EXT4-fs (loop2): 1 orphan inode deleted [ 130.694338][ T5875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.779861][ T5882] loop0: detected capacity change from 0 to 512 [ 130.808828][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.818156][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'. [ 130.854255][ T5882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.924524][ T5882] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.010476][ T5882] netlink: 52 bytes leftover after parsing attributes in process `syz.0.643'. [ 131.029648][ T5882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.643'. [ 131.076788][ T5882] netlink: 52 bytes leftover after parsing attributes in process `syz.0.643'. [ 131.096240][ T5882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.643'. [ 131.116420][ T5882] netlink: 52 bytes leftover after parsing attributes in process `syz.0.643'. [ 131.207725][ T5903] batadv0: entered promiscuous mode [ 131.216889][ T5903] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 131.241925][ T5903] batadv0: left promiscuous mode [ 131.867152][ T5913] syzkaller1: entered promiscuous mode [ 131.874816][ T5913] syzkaller1: entered allmulticast mode [ 131.906233][ T28] kauditd_printk_skb: 212 callbacks suppressed [ 131.906274][ T28] audit: type=1400 audit(1774088874.358:1067): avc: denied { ioctl } for pid=5911 comm="syz.1.654" path="socket:[13341]" dev="sockfs" ino=13341 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.004835][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.042702][ T5915] loop2: detected capacity change from 0 to 8192 [ 132.087300][ T3307] loop2: p1 < > p2 p4 < p5 > [ 132.092051][ T3307] loop2: partition table partially beyond EOD, truncated [ 132.116827][ T3307] loop2: p1 start 134217728 is beyond EOD, truncated [ 132.124753][ T5923] loop0: detected capacity change from 0 to 1024 [ 132.131539][ T3307] loop2: p2 size 591360 extends beyond EOD, truncated [ 132.141717][ T28] audit: type=1400 audit(1774088874.598:1068): avc: denied { map } for pid=5924 comm="syz.4.661" path="socket:[13070]" dev="sockfs" ino=13070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 132.176779][ T3307] loop2: p5 size 591360 extends beyond EOD, truncated [ 132.184412][ T5923] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 132.230581][ T28] audit: type=1400 audit(1774088874.688:1069): avc: denied { setopt } for pid=5920 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.271909][ T5915] loop2: p1 < > p2 p4 < p5 > [ 132.280247][ T28] audit: type=1400 audit(1774088874.688:1070): avc: denied { append } for pid=5920 comm="syz.0.656" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 132.307888][ T5915] loop2: partition table partially beyond EOD, truncated [ 132.315206][ T5915] loop2: p1 start 134217728 is beyond EOD, truncated [ 132.322539][ T28] audit: type=1400 audit(1774088874.728:1071): avc: denied { name_connect } for pid=5929 comm="syz.1.662" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 132.333566][ T5915] loop2: p2 size 591360 extends beyond EOD, truncated [ 132.352960][ T5915] loop2: p5 size 591360 extends beyond EOD, truncated [ 132.456558][ T28] audit: type=1400 audit(1774088874.898:1072): avc: denied { getopt } for pid=5941 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.642796][ T28] audit: type=1400 audit(1774088875.098:1073): avc: denied { connect } for pid=5941 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.685686][ T28] audit: type=1400 audit(1774088875.128:1074): avc: denied { read } for pid=5941 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.850618][ T5955] vlan2: entered promiscuous mode [ 132.856015][ T5955] bridge0: entered promiscuous mode [ 132.981052][ T28] audit: type=1326 audit(1774088875.438:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5914 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae54cec799 code=0x7fc00000 [ 133.007615][ T28] audit: type=1326 audit(1774088875.438:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5914 comm="syz.2.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae54cec799 code=0x7fc00000 [ 133.095402][ T5960] loop0: detected capacity change from 0 to 1024 [ 134.247605][ T5976] netlink: 96 bytes leftover after parsing attributes in process `syz.5.679'. [ 135.208146][ T5996] cgroup: release_agent respecified [ 135.261785][ T5998] loop5: detected capacity change from 0 to 1024 [ 135.347243][ T5998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.530015][ T6014] loop0: detected capacity change from 0 to 136 [ 135.559802][ T6014] iso9660: Unknown parameter 'overridernckperm' [ 135.695868][ T6024] loop0: detected capacity change from 0 to 1024 [ 135.702752][ T6024] EXT4-fs: Ignoring removed i_version option [ 135.708894][ T6024] EXT4-fs: Ignoring removed bh option [ 135.714431][ T6024] EXT4-fs: inline encryption not supported [ 135.720861][ T6024] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.736616][ T6024] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 135.751567][ T6024] EXT4-fs (loop0): mount failed [ 135.756745][ T6025] loop1: detected capacity change from 0 to 1024 [ 135.763552][ T6025] EXT4-fs: Ignoring removed i_version option [ 135.769949][ T6025] EXT4-fs: Ignoring removed bh option [ 135.775407][ T6025] EXT4-fs: inline encryption not supported [ 135.782208][ T6025] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.803138][ T6025] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 135.818145][ T6025] EXT4-fs (loop1): mount failed [ 136.007849][ T6038] loop1: detected capacity change from 0 to 1024 [ 136.067158][ T6042] netlink: 64 bytes leftover after parsing attributes in process `syz.0.704'. [ 136.084312][ T6042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.704'. [ 136.157944][ T6046] loop1: detected capacity change from 0 to 2048 [ 136.214274][ T4445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.226689][ T6046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.261991][ T6055] loop4: detected capacity change from 0 to 512 [ 136.278229][ T6046] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.706: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 136.322376][ T6055] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 136.334594][ T6046] EXT4-fs (loop1): Remounting filesystem read-only [ 136.345470][ T6055] System zones: 0-2, 18-18, 34-34 [ 136.356672][ T6046] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.399452][ T6055] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.710: bg 0: block 248: padding at end of block bitmap is not set [ 136.432217][ T6055] loop4: lost filesystem error report for type 5 error -117 [ 136.432507][ T6055] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.710: Failed to acquire dquot type 1 [ 136.439934][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 136.439958][ C0] EXT4-fs (loop4): last error at time 1774088878: ext4_validate_block_bitmap:441 [ 136.472163][ T6046] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.486719][ T6055] loop4: lost filesystem error report for type 5 error -117 [ 136.508833][ T6055] EXT4-fs (loop4): 1 truncate cleaned up [ 136.515062][ T6055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.528447][ T6055] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.546166][ T6055] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.710: deleted inode referenced: 12 [ 136.559009][ T6046] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.618405][ T6067] syzkaller1: entered promiscuous mode [ 136.634190][ T6067] syzkaller1: entered allmulticast mode [ 136.645891][ T6065] EXT4-fs: Ignoring removed i_version option [ 136.653287][ T6046] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.662546][ T6065] EXT4-fs: Ignoring removed bh option [ 136.686682][ T6065] EXT4-fs: inline encryption not supported [ 136.694393][ T6065] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.717813][ T6065] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 136.803927][ T6065] EXT4-fs (loop5): mount failed [ 136.819099][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.837038][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.845660][ T6071] netlink: 24 bytes leftover after parsing attributes in process `syz.2.713'. [ 136.877612][ T50] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.908180][ T50] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.986954][ T6071] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 137.043659][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.058353][ T28] kauditd_printk_skb: 1047 callbacks suppressed [ 137.058384][ T28] audit: type=1400 audit(1774088879.518:2119): avc: denied { mounton } for pid=6073 comm="syz.2.714" path="/152/file0" dev="tmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.126019][ T28] audit: type=1400 audit(1774088879.578:2120): avc: denied { setattr } for pid=6076 comm="syz.1.715" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 137.209172][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.287911][ T6081] vhci_hcd vhci_hcd.0: invalid port number 0 [ 137.381423][ T6085] set_capacity_and_notify: 2 callbacks suppressed [ 137.381445][ T6085] loop5: detected capacity change from 0 to 8192 [ 137.394990][ T6087] netlink: 'syz.4.720': attribute type 4 has an invalid length. [ 137.410245][ T28] audit: type=1400 audit(1774088879.868:2121): avc: denied { write } for pid=6082 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.663073][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.679925][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.797441][ T6101] loop1: detected capacity change from 0 to 1024 [ 137.829800][ T6101] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 137.858022][ T6101] System zones: 0-1, 3-8 [ 137.865400][ T6101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.877944][ T6101] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.279188][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.475824][ T6126] loop1: detected capacity change from 0 to 256 [ 138.520563][ T6126] FAT-fs (loop1): Directory bread(block 64) failed [ 138.585998][ T6127] loop4: detected capacity change from 0 to 1024 [ 138.608905][ T6128] loop0: detected capacity change from 0 to 128 [ 138.731834][ T6128] syz.0.732: attempt to access beyond end of device [ 138.731834][ T6128] loop0: rw=2049, sector=145, nr_sectors = 95 limit=128 [ 138.775055][ T6127] EXT4-fs: Ignoring removed i_version option [ 138.808051][ T6127] EXT4-fs: Ignoring removed bh option [ 138.823907][ T6127] EXT4-fs: inline encryption not supported [ 138.831323][ T6127] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 138.913416][ T6127] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 138.927177][ T6126] FAT-fs (loop1): Directory bread(block 65) failed [ 138.944938][ T6131] netlink: 'syz.5.735': attribute type 4 has an invalid length. [ 138.961194][ T6126] FAT-fs (loop1): Directory bread(block 66) failed [ 138.961766][ T6127] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 139.001290][ T6126] FAT-fs (loop1): Directory bread(block 67) failed [ 139.026304][ T6126] FAT-fs (loop1): Directory bread(block 68) failed [ 139.118619][ T6127] EXT4-fs (loop4): mount failed [ 139.142904][ T6126] FAT-fs (loop1): Directory bread(block 69) failed [ 139.151314][ T6126] FAT-fs (loop1): Directory bread(block 70) failed [ 139.410234][ T6126] FAT-fs (loop1): Directory bread(block 71) failed [ 139.430395][ T6126] FAT-fs (loop1): Directory bread(block 72) failed [ 139.438369][ T6133] loop5: detected capacity change from 0 to 1024 [ 139.452592][ T6126] FAT-fs (loop1): Directory bread(block 73) failed [ 139.478152][ T6133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.925332][ T6141] can0: slcan on ttyS3. [ 140.010949][ T28] audit: type=1400 audit(1774088882.468:2122): avc: denied { mount } for pid=6142 comm="syz.1.739" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 140.450501][ T4445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.561913][ T6166] netlink: 'syz.0.742': attribute type 9 has an invalid length. [ 140.586498][ T3416] can0 (unregistered): slcan off ttyS3. [ 140.599873][ T6179] netlink: 'syz.0.742': attribute type 2 has an invalid length. [ 140.617230][ T6166] netlink: 'syz.0.742': attribute type 7 has an invalid length. [ 140.626133][ T6179] netlink: 14 bytes leftover after parsing attributes in process `syz.0.742'. [ 140.629914][ T6173] loop5: detected capacity change from 0 to 2048 [ 140.649083][ T6166] netlink: 'syz.0.742': attribute type 8 has an invalid length. [ 140.659698][ T6173] EXT4-fs: Ignoring removed oldalloc option [ 140.669653][ T6179] bridge0: port 3(dummy0) entered disabled state [ 140.679303][ T6173] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 140.701256][ T6173] System zones: 0-7 [ 140.726945][ T6173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.745872][ T6189] loop1: detected capacity change from 0 to 256 [ 140.748693][ T6179] bridge0: port 3(dummy0) entered disabled state [ 140.763147][ T6173] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.743: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 140.781820][ T6173] EXT4-fs (loop5): Remounting filesystem read-only [ 140.809110][ T6189] FAT-fs (loop1): Directory bread(block 64) failed [ 140.815778][ T6189] FAT-fs (loop1): Directory bread(block 65) failed [ 140.822390][ T28] audit: type=1400 audit(1774088883.258:2123): avc: denied { bind } for pid=6165 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.860584][ T6189] FAT-fs (loop1): Directory bread(block 66) failed [ 140.876402][ T28] audit: type=1400 audit(1774088883.258:2124): avc: denied { name_bind } for pid=6165 comm="syz.0.742" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 140.905769][ T6189] FAT-fs (loop1): Directory bread(block 67) failed [ 140.915559][ T6189] FAT-fs (loop1): Directory bread(block 68) failed [ 140.940000][ T6189] FAT-fs (loop1): Directory bread(block 69) failed [ 140.947294][ T6197] loop0: detected capacity change from 0 to 128 [ 140.954076][ T28] audit: type=1400 audit(1774088883.268:2125): avc: denied { node_bind } for pid=6165 comm="syz.0.742" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 140.980731][ T6189] FAT-fs (loop1): Directory bread(block 70) failed [ 140.994350][ T6189] FAT-fs (loop1): Directory bread(block 71) failed [ 141.012066][ T6189] FAT-fs (loop1): Directory bread(block 72) failed [ 141.039710][ T6189] FAT-fs (loop1): Directory bread(block 73) failed [ 141.111824][ T6188] netlink: 'syz.2.746': attribute type 4 has an invalid length. [ 141.172328][ T4445] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.228056][ T6224] loop5: detected capacity change from 0 to 128 [ 141.716674][ T118] ================================================================== [ 141.724963][ T118] BUG: KCSAN: data-race in alloc_pid / copy_process [ 141.731695][ T118] [ 141.734033][ T118] read-write to 0xffffffff86c5ff68 of 4 bytes by task 6248 on cpu 1: [ 141.742116][ T118] alloc_pid+0x651/0x940 [ 141.746390][ T118] copy_process+0xf37/0x20b0 [ 141.751001][ T118] kernel_clone+0x16b/0x5d0 [ 141.755527][ T118] __se_sys_clone3+0x1f5/0x230 [ 141.760336][ T118] __x64_sys_clone3+0x31/0x40 [ 141.765046][ T118] x64_sys_call+0x580/0x3020 [ 141.769693][ T118] do_syscall_64+0x12c/0x370 [ 141.774497][ T118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.780415][ T118] [ 141.782762][ T118] read to 0xffffffff86c5ff68 of 4 bytes by task 118 on cpu 0: [ 141.790232][ T118] copy_process+0x187f/0x20b0 [ 141.794932][ T118] kernel_clone+0x16b/0x5d0 [ 141.799551][ T118] user_mode_thread+0x9c/0xd0 [ 141.804253][ T118] call_usermodehelper_exec_work+0x7a/0x160 [ 141.810260][ T118] process_scheduled_works+0x513/0xa10 [ 141.815752][ T118] worker_thread+0x58a/0x780 [ 141.820474][ T118] kthread+0x22a/0x280 [ 141.824661][ T118] ret_from_fork+0x150/0x360 [ 141.829328][ T118] ret_from_fork_asm+0x1a/0x30 [ 141.834129][ T118] [ 141.836465][ T118] value changed: 0x800000f9 -> 0x800000fa [ 141.842192][ T118] [ 141.844522][ T118] Reported by Kernel Concurrency Sanitizer on: [ 141.850688][ T118] CPU: 0 UID: 0 PID: 118 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(full) [ 141.861655][ T118] Tainted: [W]=WARN [ 141.865504][ T118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.875942][ T118] Workqueue: events_unbound call_usermodehelper_exec_work [ 141.883109][ T118] ================================================================== [ 142.323337][ T6255] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.757: iget: bogus i_mode (755) [ 142.334839][ T6255] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.336346][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 142.352050][ C0] EXT4-fs (loop0): initial error at time 1774088884: ext4_orphan_get:1391: inode 15 [ 142.361602][ C0] EXT4-fs (loop0): last error at time 1774088884: ext4_orphan_get:1391: inode 15 [ 142.370908][ T6255] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.757: couldn't read orphan inode 15 (err -117) [ 142.382828][ T6255] loop0: lost filesystem error report for type 5 error -117 [ 142.385761][ T6255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.721393][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.