last executing test programs: 1m31.212799183s ago: executing program 2 (id=51): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m31.178150164s ago: executing program 2 (id=52): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10010, 0x0, 0x0, 0x7, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165cc) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000006000000000000", 0x58}], 0x1) 1m31.039321969s ago: executing program 2 (id=53): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./bus\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090000008500000075000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) creat(&(0x7f0000000080)='./file0\x00', 0xa1) (async) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) (async) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 1m30.894041303s ago: executing program 2 (id=55): r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18) r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x101902, 0x0) write$selinux_user(r1, 0x0, 0x0) execveat(r1, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)={[&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)='/selinux/policy\x00', &(0x7f00000006c0)='/selinux/policy\x00']}, &(0x7f00000007c0)={[&(0x7f0000000740)='#! ']}, 0x1000) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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") mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) open$dir(&(0x7f0000000080)='\x00', 0x800, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) get_mempolicy(0x0, &(0x7f0000000240), 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x25dfdbf9, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}}, 0x1c}}, 0x4000040) ptrace(0x10, r2) r4 = socket$inet(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e24, @local}, 0x10) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) ptrace$peeksig(0x4212, r2, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) r5 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [], 0xa, "df0fe05c6ea097fd42e29ff9aeeb4400080bf8b790e379e20f0ee9c83d97de4388c01fbee576ad89f47c7beb393d66577f1ca87a1c21f8fac0ee68fb80"}, 0x13a) close(r5) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a3000000000a8000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d640012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c000140000000000000008b340001800a0001006c696d6974000000240002800c000240000000230000d2360c000140000000000000000708000440000000010800034000000110"], 0xf0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) add_key(&(0x7f0000000140)='keyring\x00', 0x0, &(0x7f0000002300)="86fa", 0x2, 0xfffffffffffffffe) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) fcntl$notify(r6, 0x402, 0x1c) 1m29.955564293s ago: executing program 2 (id=60): r0 = open(0x0, 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) sendmsg$AUDIT_USER(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200c0010}, 0x4814) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0xc0, &(0x7f0000000180)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x3ff, @private1, 0x400}, @in6={0xa, 0x4e22, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffa}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x70}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e22, 0xd6dac50e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1ff}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={r3, 0x8}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1m29.671880632s ago: executing program 2 (id=66): perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7ffb, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2, 0x80805, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f00000000c0)=0x84) clock_gettime(0x6, &(0x7f0000000000)) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB="500000001800010000000000000003001d01000008000e00", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB, @ANYRESOCT], 0x50}, 0x1, 0x0, 0x0, 0xa8d0}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x24, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000600), &(0x7f0000000780)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x15, &(0x7f00000002c0)={{r5}, &(0x7f0000000540), 0x0}, 0x20) connect$unix(0xffffffffffffffff, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) getpid() 1m29.642361383s ago: executing program 32 (id=66): perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7ffb, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2, 0x80805, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f00000000c0)=0x84) clock_gettime(0x6, &(0x7f0000000000)) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB="500000001800010000000000000003001d01000008000e00", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB, @ANYRESOCT], 0x50}, 0x1, 0x0, 0x0, 0xa8d0}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x24, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000600), &(0x7f0000000780)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x15, &(0x7f00000002c0)={{r5}, &(0x7f0000000540), 0x0}, 0x20) connect$unix(0xffffffffffffffff, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) getpid() 14.587663363s ago: executing program 0 (id=611): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x840000000002, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x0, 0x3}, 0x884, 0x1, 0x800, 0x4, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000002000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x40) 14.335469662s ago: executing program 0 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r1], 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x10, r4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x4000) 14.255542174s ago: executing program 0 (id=616): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x61, @loopback, 0x1}, r1}}, 0x30) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0xf01}], 0x3) 14.151607417s ago: executing program 0 (id=618): mmap(&(0x7f0000289000/0x2000)=nil, 0x2000, 0xf, 0x10010, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks}, {@noblock_validity}, {@noquota}, {@inlinecrypt}, {@errors_remount}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$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") socket$kcm(0x2, 0x1, 0x84) socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) r1 = io_uring_setup(0x115c, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_clone(0x40200480, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) 13.696535542s ago: executing program 0 (id=620): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000020000000000000001f0000000063010357ae1ce9557bcd4c06680f99000000000000000000fec8516ed6c7f05823a976"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) move_pages(r2, 0x6, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000000140)=[0xfffffffe, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f0000000440)={[{@fat=@errors_remount}, {@nodots}, {@fat=@flush}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@check_strict}, {@fat=@fmask={'fmask', 0x3d, 0x1}}]}, 0x1, 0x1f5, &(0x7f0000000240)="$eJzs3E9LVF0cB/Azj/ro44PiKqhNh9rk5pKu20goSANFOdEfCEYcaZhpxubOYiaCpm2rXkcEbdoF0aKt76KdBOLKlTdqUjNUjHQs/Xw282O+91zO7144XM6Fu3Ll5aPKYposhlwIIQyFEDphPRfGwj9hUyeMv7mz9uLW3XvXpvL56ZsxzkzNTUzGGEfPv7//9PWFD83/b78dfTcYlscerKxOflo+s3x2ZWPuYTmN5TTW6s1YjPP1erM4Xy3FhXJaSWK8US0V01Is19JSY0e+WK0vLbVjsbYwMrzUKKVpLNbasVJqx2Y9NhvtWHwWQohJksSR4cDvKLxaz7KwmmVZNtgJWZbtfejHXs6LXjnw/edE+mFRHwrhc6dVaBW6v918ZjY/fTl+M7Y9aq3VKvRt5RPdPO7MB8Lw93xy1/zfcOliN/+aXb2e3843slar8F9Y6EH/AAAAAABwEiVxy677+0myV96tZmY33xP/vL/fH871h9DXky4AAACA/aTtJ5VitVpqnPJiIIRwKCfM7fhn/ACjNjdQjrTB53/IdVb8LcUxL0wAAMCh237o/8WBj3NHNCMAAAAAAAAAAAAAAAAAAAA4fXrxObHj7hEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYD9fAgAA//8EY2nF") r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x200080, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) socket(0x10, 0x3, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000020000000000000001f0000000063010357ae1ce9557bcd4c06680f99000000000000000000fec8516ed6c7f05823a976"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) (async) move_pages(r2, 0x6, &(0x7f0000000100)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000000140)=[0xfffffffe, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) (async) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f0000000440)={[{@fat=@errors_remount}, {@nodots}, {@fat=@flush}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@check_strict}, {@fat=@fmask={'fmask', 0x3d, 0x1}}]}, 0x1, 0x1f5, &(0x7f0000000240)="$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") (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x200080, 0x0) (async) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x8) (async) 12.81915724s ago: executing program 0 (id=627): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e21, 0x3, 'sh\x00', 0x0, 0x60000000, 0x8000c}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x2, 0x23, 0x44, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x1c, 0x16, 0x1, 0xa, [{@rand_addr=0x64010102}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x8}, {@empty, 0xd9000000}]}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x218, 0x0, 0xfff9}}}}}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) (async) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}}, 0x40090) (async, rerun: 32) io_setup(0x3, &(0x7f0000000000)=0x0) (rerun: 32) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f00000006c0)={0x4, 0x100fdfd, 0x8, 0x10, 0x100, &(0x7f0000000040)="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"}) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x30}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}}, 0x48810) (async) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x103, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) io_destroy(r4) 12.791623561s ago: executing program 33 (id=627): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e21, 0x3, 'sh\x00', 0x0, 0x60000000, 0x8000c}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x2, 0x23, 0x44, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x1c, 0x16, 0x1, 0xa, [{@rand_addr=0x64010102}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x8}, {@empty, 0xd9000000}]}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x218, 0x0, 0xfff9}}}}}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) (async) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x2c}}, 0x40090) (async, rerun: 32) io_setup(0x3, &(0x7f0000000000)=0x0) (rerun: 32) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f00000006c0)={0x4, 0x100fdfd, 0x8, 0x10, 0x100, &(0x7f0000000040)="387ed7626d850509a2d6c1aa38f15cd0c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb34211619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88ae7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90605ff8f3a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88fd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd600000013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829ed0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e88597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a9013923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d000000000000000000000000000000000100"}) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x30}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}}, 0x48810) (async) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x103, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) io_destroy(r4) 5.378391728s ago: executing program 4 (id=714): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.932588802s ago: executing program 4 (id=720): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'veth1_vlan\x00', 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x5bf, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x7, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 4.427313148s ago: executing program 6 (id=725): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x3ff, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xffffffffffffffff}]}}]}, 0x40}}, 0x0) gettid() perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x8a, 0x0, 0x0, 0xa, 0x0, 0x5, 0x8044, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0xd4, 0x2}, 0x100, 0x32, 0x1, 0x5, 0x8, 0xd, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x75) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x7ffffffe) 4.37559647s ago: executing program 6 (id=726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2e, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x6408f157}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) sendmmsg$unix(r4, &(0x7f0000000000), 0x4000000000002f6, 0x24000800) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) (async) r6 = fsopen(&(0x7f0000000540)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r6, 0x1, 0x86) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r8, 0x101, 0x1) 4.316369362s ago: executing program 6 (id=727): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r0], 0x50) 4.243314974s ago: executing program 6 (id=729): perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x80, 0xe}, 0x102300, 0x400001, 0x1ff, 0x2, 0x3ff, 0x3, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0xb, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x2899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x16d}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xfffffffffffffffb) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a", 0x2}], 0x1}}], 0x2, 0x2090) recvfrom$inet(r0, &(0x7f0000004cc0)=""/4096, 0x1000, 0x102, 0x0, 0x0) 3.875523566s ago: executing program 6 (id=731): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xdd5}, 0x0, 0x7, 0x10000, 0xd, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0) stat(0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x40010003, 0x12f6b5ea4826dfde) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3fffff) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000580)='\x00', 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r3) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$eJzs3b1rLFUUAPAzyX6pxW5hJYIDWlg9Xl5rs0HyILiVsoVa6MP3Hkh2ERII+IFrKlsbS/8CQbDzn7CxsBdsBTtTBEZmZya7ibObTHATP36/Jjd3zrn3zOQmYYs9+/6L04PHaTw9+eyX6PWS2BrGME6TGMRWVL6IC4ZfBQDwb3aaZfF7VmiSl0REb3NlAQAb1Pj///cbLwkA2LC33n7njd3RaO/NNO3Fw+mXx+P8lX3+tbi++zQ+jEk8ifvRj7OI7Fwxfphl2ayV5gbxynR2PM4zp+/9WK6/+1vEPH8n+jGYT13M3x/t7aSFpfxZXsez5f7DPP9B9OP5mv33R3sPavJj3IlXX16q/17046cP4qOYxON5EYv8z3fS9PXs6z8+fTcvL89PZsfj7jxuIdu+5R8NAAAAAAAAAAAAAAAAAAAAAAD/YffK3jndmPfvyafK/jvbZ/k37Ugrg4v9eYr8pFroUn+gWRbfVP117qdpmpWBi/xWvNCK1t3cNQAAAAAAAAAAAAAAAAAAAPyzHH38ycGjyeTJ4d8yqLoBVG/rv+k6w6WZl6ImZhDnM93FllvltmtWju0qJolYW0a+YqPi21fvvmLwzKqsb79r+uh6V8e0b1Bhw0F1ug4eJfXPsBvVTK86JD8sx3Timnt1Vl3KGh2/Tu2lfuN77zw3H8zWxESyrrDXfi2eXDmTXL6Lzvyp1qa3y0Hxu1B3Nhqd57/+rUh06wAAAAAAAAAAAAAAAAAAgI1avOm35uLJiqSf94sP+Y/BhqsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNux+Pz/BoNZmXyN4E4cHt3xLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/8GcAAAD//wrtYeE=") r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@grpjquota}, {@dioread_lock}, {@i_version}, {@stripe={'stripe', 0x3d, 0xf0}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000000600)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x4f, 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000600)=0xfffffffe, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x41000, 0x8}, 0x94) 3.479298539s ago: executing program 4 (id=733): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r2, 0x0, 0xff2e) ioctl$TCSETS(r2, 0x40045431, 0x0) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x300, 0x0, 0x41}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30006041) 3.13698428s ago: executing program 6 (id=736): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r0 = socket$packet(0x11, 0x2, 0x300) shutdown(0xffffffffffffffff, 0x1) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) (fail_nth: 1) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271f, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.083170234s ago: executing program 4 (id=742): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000540)='./file7\x00', 0x21) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) mkdirat(r1, &(0x7f0000000540)='./file7\x00', 0x21) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x5) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44040) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) (async) 1.731811205s ago: executing program 4 (id=749): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000500000000000000000000000000000005000000000000000000000000000000050000000000000000000000000000000000000000000000000800000000000000000000000000000002002000000000010001000000000084010500fc010000000000000000000000000001000000003300"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1.694955135s ago: executing program 4 (id=751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15511}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="27030200590214000600002fb96dbcf706e1050344ee21144add66a44a6b1324890200a012eb", 0x26}], 0x1}, 0x20000000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x4090, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1.26251568s ago: executing program 5 (id=757): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') (async) ppoll(&(0x7f0000000380)=[{r1, 0x4}], 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010fc000425bd700000000000000000007b7c043d6e396c87b025f29bf4fc100bd9e507fc5e5843efd854aab2c9c61396aacd64d0d4b749be176e21df90b34c864c03969c3b8ce4589fa89d4fe2a374be61f7934f48691d23380000140000000000464813f608f9f6233a2963b5cf9753419d15c00160f5c711014c4a0b171ff47a94eb057d5debb1d7ed8bb8670c9c7127c17e2f387ddc6a1669d189a777b339974b597c00d51a64e99a75a2c312", @ANYRES32=0x0, @ANYBLOB="c0860000000000001800128008000100677470000c000280050005000000000008000a00", @ANYRES32=r3, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x2404c880}, 0x4054) 1.182610772s ago: executing program 5 (id=759): futex(&(0x7f00000002c0)=0x33b, 0x8, 0x2, 0x0, 0x0, 0x1) r0 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x1000000) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r3, 0xc0109207, 0x0) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000080), 0x0, 0x5eb, &(0x7f0000001000/0x13000)=nil, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x8, 0xf60e}, 0x154b8, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000600), 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) 1.056582896s ago: executing program 5 (id=762): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB="500000001800010000000000000003001d01000008000e", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1500010000000000000000007721f5438b20ffdf03000000080009"], 0x50}, 0x1, 0x0, 0x0, 0xa8d0}, 0x0) 1.031591727s ago: executing program 5 (id=763): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x41}, 0x4e23, 0x4, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) (async) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) r3 = epoll_create1(0x0) r4 = gettid() fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x2, 0x1, 0x5, 0xd305, r4}) (async) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x2, 0x1, 0x5, 0xd305, r4}) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2, 'wrr\x00', 0xd, 0x3, 0x76}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x8, 0x12d59}}, 0x44) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) shutdown(r5, 0x1) r6 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000000)) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000000)) r7 = fsmount(r6, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) fchdir(r7) (async) fchdir(r7) socket$netlink(0x10, 0x3, 0x12) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x44992000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) bind$unix(r8, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 922.38404ms ago: executing program 5 (id=765): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r0 = socket$packet(0x11, 0x2, 0x300) shutdown(0xffffffffffffffff, 0x1) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271f, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f00000001c0)={[{@noload}, {@journal_dev}, {@grpquota}]}, 0xfe, 0x4bb, &(0x7f0000001180)="$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") ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000002640)={0x1, 0x2, 0x1000, &(0x7f0000001640)=""/4096}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000000c0)={0xd270, 0x0, 0x1, 0xd05, 0xd4}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 922.23805ms ago: executing program 1 (id=767): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8", 0x35) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 863.881522ms ago: executing program 1 (id=768): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200280c1}, 0x4000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00"], 0x13c}}, 0x20040880) 863.717513ms ago: executing program 1 (id=769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0}, &(0x7f0000001840), &(0x7f0000001880)='%pI4 \x00'}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendfile(r3, r2, 0x0, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406e050d0100000000000109022400010000e900090400000003010000002100000001220000090581030000000000"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r5, &(0x7f0000000880)=[{}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000019030000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c00148008000140"], 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b87511d0000007ea60864160af3653c000cc0040002020800030003a1ff0007002100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000100)={0x4, 0xc, 0xd0, 0x401}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 643.599629ms ago: executing program 3 (id=773): futex(&(0x7f00000002c0)=0x33b, 0x8, 0x2, 0x0, 0x0, 0x1) r0 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x1000000) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r3, 0xc0109207, 0x0) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000080), 0x0, 0x5eb, &(0x7f0000001000/0x13000)=nil, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x8, 0xf60e}, 0x154b8, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000600), 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) 535.567263ms ago: executing program 3 (id=774): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000080)={0x81, 0x1, 0x1000}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000040) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xc}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808e}, 0x40000100) perf_event_open(0x0, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xb) mount$9p_rdma(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x200800, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}, 0x80000) vmsplice(r1, &(0x7f0000000a00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x7d, &(0x7f0000000000)=@sack_info={0x0, 0xff, 0x10000}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) ioctl$TIOCMBIS(r4, 0x5416, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x10d515, 0x2, 0xfffffffe, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, 0xfffffffc}, &(0x7f0000ffe000), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x2, &(0x7f0000000180)=[0x1, 0x3], 0xfe) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 484.757734ms ago: executing program 3 (id=775): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x82, &(0x7f0000000000)="0004000003000000", 0x8) 470.096895ms ago: executing program 3 (id=776): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10010, 0x0, 0x0, 0x7, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165cc) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c100000000fff00000000", 0x58}], 0x1) 307.67097ms ago: executing program 3 (id=777): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x30978, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x8}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x701}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000000000faffffff850000000700000095000000005f0d18"], 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000000500), 0x80, r3, 0x0, 0x7}, 0x38) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000001bc0)=[{&(0x7f00000000c0)="dc", 0x1}, {&(0x7f0000000100)='v', 0x1}, {&(0x7f0000000180)="8f", 0xfd60}], 0x3, 0x3) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000400)="1e94", 0x2}], 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0486dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES8=r0], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa030490781200183f2500000002000000000100007f0000017f000001"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x20) ftruncate(r7, 0x1) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000100)={0x40000001}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000200)={0x2, 0x8000, 0x800, 0x7ff, 0x4}, 0x14) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0xffa, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 271.423061ms ago: executing program 1 (id=778): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8", 0x35) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 198.122354ms ago: executing program 1 (id=779): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000dbaaf8fff1000000b5080000021000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000040"], &(0x7f0000000600)='GPL\x00', 0x4, 0x500, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 115.800466ms ago: executing program 1 (id=780): futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 14.28182ms ago: executing program 5 (id=781): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000180)={[{@barrier}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) write$selinux_access(r0, 0x0, 0x56) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x324, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_config_ext={0xa424, 0x7}, 0x4, 0x0, 0xfffe, 0x0, 0x26be, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xffe0, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 3 (id=782): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB="500000001800010000000000000003001d01000008000e00", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="1500010000000000000000007721f5438b20ffdf03000000080009"], 0x50}, 0x1, 0x0, 0x0, 0xa8d0}, 0x0) kernel console output (not intermixed with test programs): audit: type=1400 audit(1779637944.116:319): avc: denied { write } for pid=4299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.999399][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.865815][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.892102][ T4248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.930048][ T4321] loop0: detected capacity change from 0 to 1024 [ 66.950237][ T28] audit: type=1400 audit(1779637945.206:320): avc: denied { write } for pid=4320 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.999473][ T4321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 67.020724][ T4321] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.034901][ T4328] loop5: detected capacity change from 0 to 512 [ 67.037413][ T4248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.058975][ T4328] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 67.111192][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 67.154743][ T4328] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.197: invalid indirect mapped block 83886080 (level 1) [ 67.182066][ T4328] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 67.185206][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 67.200801][ C1] EXT4-fs (loop5): initial error at time 1779637945: ext4_free_branches:1023: inode 16 [ 67.210494][ C1] EXT4-fs (loop5): last error at time 1779637945: ext4_free_branches:1023: inode 16 [ 67.221629][ T4328] EXT4-fs (loop5): Remounting filesystem read-only [ 67.228269][ T4328] EXT4-fs (loop5): 1 orphan inode deleted [ 67.234179][ T4328] EXT4-fs (loop5): 1 truncate cleaned up [ 67.240579][ T4328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.253947][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.262264][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.297808][ T55] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.317936][ T28] audit: type=1400 audit(1779637945.586:321): avc: denied { write } for pid=4327 comm="syz.5.197" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.325098][ T55] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.416506][ T4348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.203'. [ 68.500980][ T4349] loop3: detected capacity change from 0 to 512 [ 68.546146][ T4349] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 68.560416][ T4349] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 68.571557][ T4349] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.204: Corrupt directory, running e2fsck is recommended [ 68.636595][ T4351] ------------[ cut here ]------------ [ 68.642205][ T4351] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#1: syz.1.202/4351 [ 68.652032][ T4351] Modules linked in: [ 68.655957][ T4351] CPU: 1 UID: 0 PID: 4351 Comm: syz.1.202 Not tainted syzkaller #0 PREEMPT(full) [ 68.665201][ T4351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 68.675399][ T4351] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 68.681074][ T4351] Code: 8b 05 e1 a8 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 04 48 5f 04 cc e8 3e 1c 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 30 1c 1e 00 90 0f 0b 90 e9 af fa ff ff [ 68.700812][ T4351] RSP: 0018:ffffc900021efdd8 EFLAGS: 00010093 [ 68.706926][ T4351] RAX: ffffffff813b1762 RBX: ffff888104378000 RCX: ffff888104378000 [ 68.715067][ T4351] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 68.723088][ T4351] RBP: 0000000000000080 R08: ffff888104378b00 R09: 0000000000000000 [ 68.731093][ T4351] R10: ffffc900021efdf0 R11: 0001c900021efdf0 R12: ffff888104378000 [ 68.739077][ T4351] R13: ffff888104378828 R14: ffff888104fc4490 R15: 0000000000000080 [ 68.747068][ T4351] FS: 0000000000000000(0000) GS:ffff8882ae9f8000(0000) knlGS:0000000000000000 [ 68.756121][ T4351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.762929][ T4351] CR2: 0000000034747865 CR3: 000000011d98c000 CR4: 00000000003506f0 [ 68.771023][ T4351] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.779162][ T4351] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 68.787150][ T4351] Call Trace: [ 68.790474][ T4351] [ 68.793428][ T4351] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 68.798921][ T4351] ? __list_add_valid_or_report+0x38/0xe0 [ 68.804684][ T4351] do_exit+0xc13/0x1530 [ 68.808863][ T4351] ? switch_fpu_return+0xe7/0x1b0 [ 68.813918][ T4351] __x64_sys_exit+0x1f/0x20 [ 68.818450][ T4351] x64_sys_call+0x301d/0x3020 [ 68.823162][ T4351] do_syscall_64+0x12c/0x3b0 [ 68.827793][ T4351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.833722][ T4351] RIP: 0033:0x7ff73364ce59 [ 68.838158][ T4351] Code: Unable to access opcode bytes at 0x7ff73364ce2f. [ 68.845197][ T4351] RSP: 002b:00007ff7320a6fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 68.853715][ T4351] RAX: ffffffffffffffda RBX: 00007ff7338c5fa0 RCX: 00007ff73364ce59 [ 68.861830][ T4351] RDX: 00007ff7320a79c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.869826][ T4351] RBP: 00007ff7336e2d6f R08: 0000000000000000 R09: 0000000000000000 [ 68.877852][ T4351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.885854][ T4351] R13: 00007ff7338c6038 R14: 00007ff7338c5fa0 R15: 00007ffd2f5e2be8 [ 68.893977][ T4351] [ 68.897009][ T4351] ---[ end trace 0000000000000000 ]--- [ 68.920224][ T4349] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 68.930212][ T4349] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.204: corrupted in-inode xattr: e_name out of bounds [ 68.944547][ T4349] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.945339][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 68.962070][ C1] EXT4-fs (loop3): initial error at time 1779637947: ext4_iget_extra_inode:5128: inode 15 [ 68.973498][ C1] EXT4-fs (loop3): last error at time 1779637947: ext4_iget_extra_inode:5128: inode 15 [ 69.000783][ T4349] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.204: couldn't read orphan inode 15 (err -117) [ 69.014700][ T4349] loop3: lost filesystem error report for type 5 error -117 [ 69.025660][ T4349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.345533][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.368574][ T4361] loop4: detected capacity change from 0 to 512 [ 69.377703][ T4358] loop1: detected capacity change from 0 to 512 [ 69.404962][ T4361] EXT4-fs: Ignoring removed oldalloc option [ 69.426928][ T4358] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 69.447769][ T4361] EXT4-fs (loop4): filesystem is read-only [ 69.460246][ T4358] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 69.471662][ T4361] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 69.489965][ T4358] System zones: 0-1, 15-15, 18-18, 34-34 [ 69.502218][ T4361] EXT4-fs (loop4): filesystem is read-only [ 69.511642][ T4358] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.525244][ T4361] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.531820][ T4358] __quota_error: 2 callbacks suppressed [ 69.531843][ T4358] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 69.553850][ T4361] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.208: bg 0: block 64: padding at end of block bitmap is not set [ 69.578382][ T4358] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 69.595056][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.607221][ T4361] loop4: lost filesystem error report for type 5 error -117 [ 69.615248][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 69.629042][ C1] EXT4-fs (loop4): initial error at time 1779637947: ext4_validate_block_bitmap:441 [ 69.638477][ C1] EXT4-fs (loop4): last error at time 1779637947: ext4_validate_block_bitmap:441 [ 69.648906][ T4361] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 69.665119][ T4361] loop4: lost filesystem error report for type 5 error -117 [ 69.665470][ T4361] EXT4-fs (loop4): 1 orphan inode deleted [ 69.679519][ T4358] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 69.794525][ T4358] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.207: bad orphan inode 16 [ 69.808629][ T4361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.824136][ T4358] loop1: lost filesystem error report for type 5 error -117 [ 69.824436][ T4358] ext4_test_bit(bit=15, block=18) = 1 [ 69.831902][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 69.831937][ C0] EXT4-fs (loop1): initial error at time 1779637948: ext4_orphan_get:1423 [ 69.832000][ C0] EXT4-fs (loop1): last error at time 1779637948: ext4_orphan_get:1423 [ 70.788675][ T4326] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 70.834123][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.875841][ T4358] is_bad_inode(inode)=0 [ 70.880478][ T4358] NEXT_ORPHAN(inode)=0 [ 70.884840][ T4358] max_ino=32 [ 70.888525][ T4358] i_nlink=2 [ 70.894011][ T4358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.834576][ T4358] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.207'. [ 72.178957][ T4358] netlink: zone id is out of range [ 72.199294][ T28] audit: type=1400 audit(1779637950.466:324): avc: denied { write } for pid=4377 comm="syz.3.211" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.225603][ T4358] netlink: zone id is out of range [ 72.300679][ T4358] netlink: zone id is out of range [ 72.315058][ T4358] netlink: zone id is out of range [ 72.343733][ T4358] netlink: zone id is out of range [ 72.368179][ T4358] netlink: zone id is out of range [ 72.387410][ T4358] netlink: zone id is out of range [ 72.419171][ T4358] netlink: zone id is out of range [ 72.438132][ T4382] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 72.447371][ T4358] netlink: zone id is out of range [ 72.462717][ T4358] netlink: zone id is out of range [ 72.490839][ T4382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.509627][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.533212][ T4386] vlan2: entered allmulticast mode [ 72.544186][ T4386] bond1: entered allmulticast mode [ 72.596851][ T3081] IPVS: starting estimator thread 0... [ 72.604340][ T4382] bond1: (slave geneve2): making interface the new active one [ 72.628335][ T28] audit: type=1400 audit(1779637950.886:325): avc: denied { create } for pid=4387 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.660434][ T4382] geneve2: entered allmulticast mode [ 72.693566][ T4382] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 72.735301][ T4389] IPVS: using max 2736 ests per chain, 136800 per kthread [ 72.852646][ T28] audit: type=1400 audit(1779637950.886:326): avc: denied { create } for pid=4387 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 73.350377][ T4395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'. [ 73.375442][ T28] audit: type=1400 audit(1779637950.896:327): avc: denied { connect } for pid=4387 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.395336][ T28] audit: type=1400 audit(1779637950.896:328): avc: denied { write } for pid=4387 comm="syz.1.214" path="socket:[8530]" dev="sockfs" ino=8530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.460998][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.659806][ T4399] loop0: detected capacity change from 0 to 512 [ 73.675692][ T4403] netlink: 'syz.4.217': attribute type 1 has an invalid length. [ 73.689765][ T4399] EXT4-fs: Ignoring removed bh option [ 73.727880][ T4399] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.752448][ T4403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.761904][ T4399] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 73.774057][ T4399] EXT4-fs error (device loop0): __ext4_fill_super:5596: inode #2: comm syz.0.218: iget: bogus i_mode (110000) [ 73.786377][ T4399] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 73.786613][ T4399] EXT4-fs (loop0): get root inode failed [ 73.795681][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 73.795695][ C1] EXT4-fs (loop0): last error at time 1779637952: __ext4_fill_super:5596: inode 2 [ 73.817859][ T4399] EXT4-fs (loop0): mount failed [ 73.848146][ T4406] vlan2: entered allmulticast mode [ 73.881916][ T4406] bond1: entered allmulticast mode [ 73.961043][ T4416] loop3: detected capacity change from 0 to 1024 [ 73.998270][ T4403] bond1: (slave geneve2): making interface the new active one [ 74.006227][ T4403] geneve2: entered allmulticast mode [ 74.013107][ T4403] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 74.024528][ T4416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.036876][ T4416] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.087233][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.682368][ T4435] loop5: detected capacity change from 0 to 512 [ 74.708611][ T4435] EXT4-fs: Ignoring removed oldalloc option [ 74.742687][ T4435] EXT4-fs (loop5): filesystem is read-only [ 74.756747][ T4435] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 74.785542][ T4435] EXT4-fs (loop5): filesystem is read-only [ 74.798254][ T4435] EXT4-fs (loop5): orphan cleanup on readonly fs [ 74.821203][ T4435] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.228: bg 0: block 64: padding at end of block bitmap is not set [ 74.905685][ T4435] loop5: lost filesystem error report for type 5 error -117 [ 74.905858][ T4435] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 74.922046][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 74.922063][ C0] EXT4-fs (loop5): initial error at time 1779637953: ext4_validate_block_bitmap:441 [ 74.922082][ C0] EXT4-fs (loop5): last error at time 1779637953: ext4_validate_block_bitmap:441 [ 74.992626][ T4435] loop5: lost filesystem error report for type 5 error -117 [ 74.997963][ T4435] EXT4-fs (loop5): 1 orphan inode deleted [ 75.019998][ T4435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.018458][ T4446] loop0: detected capacity change from 0 to 512 [ 76.213457][ T4446] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 76.254873][ T4452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.231'. [ 77.146783][ T4455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.230'. [ 77.263124][ T28] audit: type=1400 audit(1779637955.526:329): avc: denied { create } for pid=4451 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.264801][ T28] audit: type=1400 audit(1779637955.526:330): avc: denied { ioctl } for pid=4451 comm="syz.3.231" path="socket:[8667]" dev="sockfs" ino=8667 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.287292][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.534348][ T28] audit: type=1400 audit(1779637955.776:331): avc: denied { getattr } for pid=4460 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.577508][ T28] audit: type=1400 audit(1779637955.836:332): avc: denied { read } for pid=4463 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.640386][ T4467] netlink: 'syz.1.235': attribute type 1 has an invalid length. [ 77.648931][ T4465] loop0: detected capacity change from 0 to 2048 [ 77.660146][ T28] audit: type=1400 audit(1779637955.836:333): avc: denied { open } for pid=4463 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.692237][ T28] audit: type=1400 audit(1779637955.896:334): avc: denied { name_bind } for pid=4466 comm="syz.1.235" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 77.695163][ T4469] netlink: 'syz.5.232': attribute type 10 has an invalid length. [ 77.746189][ T4467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.747315][ T4465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.790368][ T4469] team0: Device wg2 is of different type [ 77.810948][ T4485] vlan2: entered allmulticast mode [ 77.827846][ T4465] nfs: Unknown parameter '' [ 77.834413][ T28] audit: type=1400 audit(1779637956.096:335): avc: denied { mounton } for pid=4464 comm="syz.0.234" path="/39/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.860213][ T4485] bond2: entered allmulticast mode [ 77.883667][ T4467] bond2: (slave geneve2): making interface the new active one [ 77.891315][ T28] audit: type=1400 audit(1779637956.136:336): avc: denied { write } for pid=4458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.915152][ T4467] geneve2: entered allmulticast mode [ 77.922387][ T4467] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 77.933658][ T28] audit: type=1400 audit(1779637956.136:337): avc: denied { create } for pid=4458 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.972493][ T28] audit: type=1400 audit(1779637956.136:338): avc: denied { write } for pid=4458 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb0.link" dev="tmpfs" ino=2240 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.281134][ T4503] loop3: detected capacity change from 0 to 512 [ 78.288074][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.590500][ T4503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 78.757092][ T4503] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.026810][ T4521] loop4: detected capacity change from 0 to 512 [ 79.207041][ T4524] loop5: detected capacity change from 0 to 128 [ 82.272479][ T4533] Driver unsupported XDP return value 0 on prog (id 54) dev N/A, expect packet loss! [ 82.315084][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 82.413229][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 82.413245][ T28] audit: type=1400 audit(1779637960.666:347): avc: denied { write } for pid=4540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.446617][ T28] audit: type=1400 audit(1779637960.716:348): avc: denied { bind } for pid=4547 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.485390][ T28] audit: type=1400 audit(1779637960.746:349): avc: denied { write } for pid=4554 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.050345][ T4561] IPv6: Can't replace route, no match found [ 83.089438][ T4561] loop0: detected capacity change from 0 to 8192 [ 83.136946][ T4561] x_tables: duplicate underflow at hook 3 [ 83.153643][ T4565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.248'. [ 83.216173][ T4568] netlink: 128 bytes leftover after parsing attributes in process `syz.4.249'. [ 83.260897][ T4569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.246'. [ 84.010962][ T28] audit: type=1400 audit(1779637961.466:350): avc: denied { bind } for pid=4567 comm="syz.4.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.140576][ T28] audit: type=1400 audit(1779637961.666:351): avc: denied { setopt } for pid=4571 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.306961][ T28] audit: type=1400 audit(1779637961.666:352): avc: denied { getopt } for pid=4571 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.407503][ T4595] loop0: detected capacity change from 0 to 512 [ 84.467568][ T4595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 84.486852][ T4595] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.506587][ T28] audit: type=1400 audit(1779637962.766:353): avc: denied { bind } for pid=4603 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.573350][ T28] audit: type=1400 audit(1779637962.766:354): avc: denied { connect } for pid=4603 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.616029][ T4611] syzkaller0: entered promiscuous mode [ 84.630012][ T4611] syzkaller0: entered allmulticast mode [ 84.659964][ T4611] tipc: Started in network mode [ 84.664921][ T4611] tipc: Node identity 4e0dfa3ce8f9, cluster identity 4711 [ 84.672422][ T4611] tipc: Enabled bearer , priority 0 [ 84.680599][ T4606] tipc: Resetting bearer [ 84.691613][ T4606] tipc: Disabling bearer [ 84.853512][ T4626] loop1: detected capacity change from 0 to 1024 [ 84.869758][ T4626] EXT4-fs: test_dummy_encryption option not supported [ 85.131863][ T28] audit: type=1400 audit(1779637963.396:355): avc: denied { ioctl } for pid=4627 comm="syz.4.270" path="socket:[8079]" dev="sockfs" ino=8079 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.202721][ T4629] loop3: detected capacity change from 0 to 512 [ 86.225304][ T4629] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 86.291097][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 86.312126][ T4640] loop1: detected capacity change from 0 to 1024 [ 86.334827][ T4640] ext4: Unknown parameter 'nouser_xattr' [ 86.391672][ T28] audit: type=1400 audit(1779637964.656:356): avc: denied { sqpoll } for pid=4625 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.596910][ T4653] netlink: 'syz.4.276': attribute type 1 has an invalid length. [ 86.761062][ T4653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.892219][ T4660] vlan3: entered allmulticast mode [ 86.959399][ T4660] bond2: entered allmulticast mode [ 87.132080][ T4668] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.204882][ T4668] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.274454][ T4668] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.366316][ T4685] syzkaller0: entered promiscuous mode [ 87.378358][ T4685] syzkaller0: entered allmulticast mode [ 87.390031][ T4668] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.410005][ T4685] tipc: Started in network mode [ 87.424987][ T4685] tipc: Node identity 42b6edbcd2df, cluster identity 4711 [ 87.441258][ T4685] tipc: Enabled bearer , priority 0 [ 87.517942][ T55] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.535516][ T4684] tipc: Resetting bearer [ 87.551799][ T4684] tipc: Disabling bearer [ 87.570315][ T55] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.608573][ T55] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.649085][ T28] audit: type=1400 audit(1779637965.916:357): avc: denied { setopt } for pid=4690 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.670911][ T4038] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.738525][ T28] audit: type=1400 audit(1779637965.966:358): avc: denied { write } for pid=4695 comm="syz.0.289" name="ptype" dev="proc" ino=4026532651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.006857][ T4704] loop5: detected capacity change from 0 to 512 [ 88.065176][ T4704] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 88.434608][ T4722] loop0: detected capacity change from 0 to 512 [ 88.450807][ T4722] EXT4-fs: Ignoring removed oldalloc option [ 88.467111][ T4722] EXT4-fs (loop0): filesystem is read-only [ 88.482283][ T4722] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 88.508194][ T4722] EXT4-fs (loop0): filesystem is read-only [ 88.516216][ T4722] EXT4-fs (loop0): orphan cleanup on readonly fs [ 88.529847][ T4722] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.297: bg 0: block 64: padding at end of block bitmap is not set [ 88.559264][ T4722] loop0: lost filesystem error report for type 5 error -117 [ 88.559999][ T4722] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 88.567384][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 88.567397][ C1] EXT4-fs (loop0): initial error at time 1779637966: ext4_validate_block_bitmap:441 [ 88.567419][ C1] EXT4-fs (loop0): last error at time 1779637966: ext4_validate_block_bitmap:441 [ 88.651244][ T4727] loop5: detected capacity change from 0 to 512 [ 88.672350][ T4722] loop0: lost filesystem error report for type 5 error -117 [ 88.672592][ T4722] EXT4-fs (loop0): 1 orphan inode deleted [ 88.690467][ T4727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 88.711183][ T4722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.724079][ T4727] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.747275][ T28] audit: type=1400 audit(1779637967.006:359): avc: denied { write } for pid=4731 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.463860][ T4746] netlink: 'syz.3.304': attribute type 1 has an invalid length. [ 89.508618][ T4746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.543292][ T4748] vlan2: entered allmulticast mode [ 89.561446][ T4748] bond1: entered allmulticast mode [ 89.603269][ T4746] bond1: (slave geneve2): making interface the new active one [ 89.631048][ T4746] geneve2: entered allmulticast mode [ 89.648084][ T4746] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 89.794172][ T4753] loop4: detected capacity change from 0 to 512 [ 89.883889][ T4753] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 90.269178][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 90.332714][ T4757] loop1: detected capacity change from 0 to 512 [ 90.544043][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.577355][ T28] audit: type=1400 audit(1779637968.836:360): avc: denied { read } for pid=4770 comm="syz.5.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.610565][ T28] audit: type=1400 audit(1779637968.876:361): avc: denied { ioctl } for pid=4768 comm="syz.1.310" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9474 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.703469][ T4786] loop4: detected capacity change from 0 to 512 [ 90.736690][ T4790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 90.776223][ T4794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.318'. [ 90.786967][ T4786] EXT4-fs (loop4): 1 truncate cleaned up [ 90.793263][ T4786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.807106][ T28] audit: type=1400 audit(1779637969.076:362): avc: denied { write } for pid=4785 comm="syz.4.315" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.830433][ T28] audit: type=1400 audit(1779637969.076:363): avc: denied { add_name } for pid=4785 comm="syz.4.315" name="hugetlb.1GB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.853338][ T28] audit: type=1400 audit(1779637969.076:364): avc: denied { read append open } for pid=4785 comm="syz.4.315" path="/72/file1/hugetlb.1GB.usage_in_bytes" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.920187][ T28] audit: type=1400 audit(1779637969.186:365): avc: denied { map } for pid=4785 comm="syz.4.315" path="/72/file1/hugetlb.1GB.usage_in_bytes" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.951704][ T28] audit: type=1400 audit(1779637969.186:366): avc: denied { write } for pid=4785 comm="syz.4.315" path="/72/file1/hugetlb.1GB.usage_in_bytes" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 91.011655][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.464503][ T4806] loop1: detected capacity change from 0 to 512 [ 91.507609][ T4806] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.322: bg 0: block 393: padding at end of block bitmap is not set [ 91.722477][ T4806] loop1: lost filesystem error report for type 5 error -117 [ 91.722634][ T4806] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 91.729995][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 91.730009][ C0] EXT4-fs (loop1): initial error at time 1779637969: ext4_validate_block_bitmap:441 [ 91.730043][ C0] EXT4-fs (loop1): last error at time 1779637969: ext4_validate_block_bitmap:441 [ 91.777959][ T4809] syzkaller0: entered promiscuous mode [ 91.783531][ T4809] syzkaller0: entered allmulticast mode [ 91.794675][ T4809] tipc: Enabled bearer , priority 0 [ 91.803465][ T4808] tipc: Resetting bearer [ 91.810315][ T4806] loop1: lost filesystem error report for type 5 error -117 [ 91.810545][ T4806] EXT4-fs (loop1): 2 truncates cleaned up [ 91.828917][ T4808] tipc: Disabling bearer [ 91.835080][ T4806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.861127][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.034631][ T4817] loop3: detected capacity change from 0 to 512 [ 92.061145][ T4817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 92.091059][ T4817] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.976151][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 93.091463][ T4836] loop3: detected capacity change from 0 to 2048 [ 93.113688][ T4836] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 93.197695][ T4844] loop3: detected capacity change from 0 to 1024 [ 93.236110][ T4844] __quota_error: 4 callbacks suppressed [ 93.236124][ T4844] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 93.269671][ T4849] loop5: detected capacity change from 0 to 1024 [ 93.288431][ T4844] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 93.304190][ T28] audit: type=1400 audit(1779637971.566:371): avc: denied { append } for pid=4851 comm="syz.4.339" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.318453][ T4844] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.336: Failed to acquire dquot type 0 [ 93.349159][ T4844] loop3: lost filesystem error report for type 5 error -117 [ 93.352998][ T4849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 93.365226][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 93.378869][ C1] EXT4-fs (loop3): initial error at time 1779637971: ext4_acquire_dquot:7034 [ 93.387759][ C1] EXT4-fs (loop3): last error at time 1779637971: ext4_acquire_dquot:7034 [ 93.402645][ T4844] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 93.417683][ T4844] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #13: comm syz.3.336: corrupted inode contents [ 93.419397][ T4849] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.440328][ T4844] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 93.445925][ T4844] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #13: comm syz.3.336: mark_inode_dirty error [ 93.481577][ T4844] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 93.481936][ T4844] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #13: comm syz.3.336: corrupted inode contents [ 93.483511][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 93.491669][ T4844] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 93.513413][ T4844] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.336: mark_inode_dirty error [ 93.534195][ T4844] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 93.537906][ T4844] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #13: comm syz.3.336: corrupted inode contents [ 93.614544][ T4844] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 93.614891][ T4844] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 93.646453][ T4844] loop3: lost filesystem error report for type 5 error -117 [ 93.647477][ T4844] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #13: comm syz.3.336: corrupted inode contents [ 93.682648][ T4844] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 93.682928][ T4844] EXT4-fs error (device loop3): ext4_truncate:4690: inode #13: comm syz.3.336: mark_inode_dirty error [ 93.728907][ T4844] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 93.729287][ T4844] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 93.762784][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 93.765777][ T4844] loop3: lost filesystem error report for type 5 error -117 [ 93.778164][ T4844] EXT4-fs (loop3): 1 truncate cleaned up [ 93.798160][ T4874] netlink: 'syz.0.346': attribute type 10 has an invalid length. [ 93.807060][ T4844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.830301][ T4874] team0: Device wg2 is of different type [ 93.837684][ T28] audit: type=1400 audit(1779637972.106:372): avc: denied { create } for pid=4841 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 93.838154][ T4844] EXT4-fs (loop3): shut down requested (2) [ 93.897848][ T28] audit: type=1400 audit(1779637972.136:373): avc: denied { read } for pid=2965 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 93.928605][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.939727][ T28] audit: type=1400 audit(1779637972.136:374): avc: denied { search } for pid=2965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.985773][ T28] audit: type=1400 audit(1779637972.136:375): avc: denied { write search } for pid=2965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.053113][ T28] audit: type=1400 audit(1779637972.136:376): avc: denied { add_name } for pid=2965 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.096350][ T28] audit: type=1400 audit(1779637972.136:377): avc: denied { create } for pid=2965 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.134528][ T28] audit: type=1400 audit(1779637972.136:378): avc: denied { append open } for pid=2965 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.175633][ T4869] loop5: detected capacity change from 0 to 8192 [ 94.187461][ T4865] loop1: detected capacity change from 0 to 8192 [ 94.284197][ T4895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 94.314740][ T4895] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.561614][ T4916] netlink: 108 bytes leftover after parsing attributes in process `syz.4.356'. [ 94.574445][ T4916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.356'. [ 94.775996][ T4920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.138598][ T4925] Cannot find del_set index 0 as target [ 95.194662][ T4916] set_capacity_and_notify: 3 callbacks suppressed [ 95.194678][ T4916] loop4: detected capacity change from 0 to 4096 [ 95.227052][ T4916] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.247892][ T4916] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 95.275809][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 95.286911][ T4916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.318923][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.369433][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.410446][ T4934] can0: slcan on ptm0. [ 95.434775][ T4943] loop3: detected capacity change from 0 to 128 [ 95.636768][ T4971] loop3: detected capacity change from 0 to 512 [ 95.686180][ T4934] can0 (unregistered): slcan off ptm0. [ 96.014429][ T5004] netlink: 52 bytes leftover after parsing attributes in process `syz.0.378'. [ 96.622656][ T5032] netlink: 52 bytes leftover after parsing attributes in process `syz.0.389'. [ 96.696859][ T5037] FAULT_INJECTION: forcing a failure. [ 96.696859][ T5037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.728383][ T5037] CPU: 0 UID: 0 PID: 5037 Comm: syz.0.392 Tainted: G W syzkaller #0 PREEMPT(full) [ 96.728474][ T5037] Tainted: [W]=WARN [ 96.728482][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 96.728495][ T5037] Call Trace: [ 96.728500][ T5037] [ 96.728506][ T5037] __dump_stack+0x1d/0x30 [ 96.728565][ T5037] dump_stack_lvl+0x95/0xd0 [ 96.728593][ T5037] dump_stack+0x15/0x1b [ 96.728647][ T5037] should_fail_ex+0x263/0x280 [ 96.728749][ T5037] should_fail+0xb/0x20 [ 96.728793][ T5037] should_fail_usercopy+0x1a/0x20 [ 96.728826][ T5037] _copy_from_iter+0xcf/0xea0 [ 96.728901][ T5037] ? __rcu_read_unlock+0x4e/0x70 [ 96.728940][ T5037] ? avc_has_perm_noaudit+0xab/0x130 [ 96.728971][ T5037] copy_page_from_iter+0x161/0x1f0 [ 96.729054][ T5037] ? anon_pipe_write+0x21/0xb20 [ 96.729093][ T5037] anon_pipe_write+0x53c/0xb20 [ 96.729161][ T5037] ? anon_pipe_write+0x21/0xb20 [ 96.729272][ T5037] ? __pfx_anon_pipe_write+0x10/0x10 [ 96.729309][ T5037] vfs_write+0x5a6/0x9f0 [ 96.729348][ T5037] ksys_write+0xdc/0x1a0 [ 96.729382][ T5037] __x64_sys_write+0x40/0x50 [ 96.729407][ T5037] x64_sys_call+0x27e1/0x3020 [ 96.729427][ T5037] do_syscall_64+0x12c/0x3b0 [ 96.729490][ T5037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.729515][ T5037] RIP: 0033:0x7f2edb1cd68e [ 96.729531][ T5037] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.729547][ T5037] RSP: 002b:00007f2ed9c5ece8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.729564][ T5037] RAX: ffffffffffffffda RBX: 00007f2ed9c5f6c0 RCX: 00007f2edb1cd68e [ 96.729576][ T5037] RDX: 0000000000000029 RSI: 00007f2ed9c5ee90 RDI: 0000000000000002 [ 96.729670][ T5037] RBP: 00007f2ed9c5ee90 R08: 0000000000000000 R09: 0000000000000000 [ 96.729681][ T5037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 96.729691][ T5037] R13: 00007f2edb45d7a0 R14: 00007f2edb4544a0 R15: 0000000000000001 [ 96.729708][ T5037] [ 97.312043][ T5066] program syz.4.401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.326893][ T5052] infiniband syz0: set active [ 97.331861][ T5052] infiniband syz0: added bond_slave_1 [ 97.349179][ T5052] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 97.349604][ T5052] infiniband syz0: Couldn't open port 1 [ 97.392017][ T5052] RDS/IB: syz0: added [ 97.396481][ T5052] smc: adding ib device syz0 with port count 1 [ 97.402791][ T5052] smc: ib device syz0 port 1 has no pnetid [ 97.439138][ T5075] netlink: 52 bytes leftover after parsing attributes in process `syz.4.403'. [ 97.541976][ T5089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5089 comm=syz.4.408 [ 97.653103][ T5096] loop4: detected capacity change from 0 to 512 [ 97.676336][ T5095] loop1: detected capacity change from 0 to 1024 [ 97.698640][ T5096] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.408: Parent and EA inode have the same ino 15 [ 97.748885][ T5096] loop4: lost filesystem error report for type 5 error -117 [ 97.749991][ T5096] EXT4-fs (loop4): Remounting filesystem read-only [ 97.757527][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 97.757560][ C0] EXT4-fs (loop4): initial error at time 1779637976: ext4_xattr_inode_iget:437 [ 97.757577][ C0] EXT4-fs (loop4): last error at time 1779637976: ext4_xattr_inode_iget:437 [ 97.796100][ T5101] netlink: 52 bytes leftover after parsing attributes in process `syz.3.407'. [ 97.926737][ T5095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 98.031464][ T5095] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.198688][ T5096] EXT4-fs (loop4): 1 orphan inode deleted [ 98.213150][ T5096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.237664][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 98.300246][ T5109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.411'. [ 98.348194][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.473529][ T28] kauditd_printk_skb: 113 callbacks suppressed [ 98.473545][ T28] audit: type=1326 audit(1779637976.736:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.4.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6b15ce59 code=0x7ffc0000 [ 98.535554][ T28] audit: type=1326 audit(1779637976.776:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.4.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6b15ce59 code=0x7ffc0000 [ 98.564609][ T5122] loop1: detected capacity change from 0 to 2048 [ 98.590460][ T28] audit: type=1326 audit(1779637976.776:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.4.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6b15ce59 code=0x7ffc0000 [ 98.616167][ T28] audit: type=1326 audit(1779637976.776:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.4.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fed6b15ce59 code=0x7ffc0000 [ 98.629398][ T5119] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 98.642542][ T28] audit: type=1326 audit(1779637976.776:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.4.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6b15ce59 code=0x7ffc0000 [ 98.664692][ T5122] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000802) [ 98.688258][ T5122] FAT-fs (loop1): Filesystem has been set read-only [ 98.708309][ T28] audit: type=1326 audit(1779637976.776:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.4.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6b15ce59 code=0x7ffc0000 [ 98.735290][ T28] audit: type=1326 audit(1779637976.776:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.4.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6b15ce59 code=0x7ffc0000 [ 98.745483][ T5127] loop5: detected capacity change from 0 to 128 [ 98.763498][ T28] audit: type=1326 audit(1779637976.776:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.4.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed6b15ce59 code=0x7ffc0000 [ 98.835935][ T5128] syzkaller0: entered promiscuous mode [ 98.841661][ T5128] syzkaller0: entered allmulticast mode [ 98.848896][ T28] audit: type=1326 audit(1779637976.776:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.4.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6b15ce59 code=0x7ffc0000 [ 98.878022][ T28] audit: type=1326 audit(1779637976.786:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz.4.413" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6b15ce59 code=0x7ffc0000 [ 99.176006][ T5141] loop5: detected capacity change from 0 to 1024 [ 99.182885][ T5141] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.193667][ T5141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.212991][ T5141] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.231824][ T5141] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.424: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 99.254210][ T5141] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 99.254365][ T5141] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.424: couldn't read orphan inode 11 (err -117) [ 99.263595][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 99.263610][ C0] EXT4-fs (loop5): initial error at time 1779637977: ext4_ext_check_inode:521: inode 11 [ 99.263690][ C0] EXT4-fs (loop5): last error at time 1779637977: ext4_ext_check_inode:521: inode 11 [ 99.302295][ T5141] loop5: lost filesystem error report for type 5 error -117 [ 99.302962][ T5141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.336331][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.336703][ T5052] syz.0.397 (5052) used greatest stack depth: 9216 bytes left [ 99.488458][ T5160] 9p: Bad value for 'rfdno' [ 99.552757][ T5170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 99.568918][ T5170] netlink: 59 bytes leftover after parsing attributes in process `syz.0.435'. [ 99.655103][ T5179] loop5: detected capacity change from 0 to 1024 [ 99.680360][ T5179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.695552][ T5179] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.719597][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 99.766840][ T5162] loop1: detected capacity change from 0 to 8192 [ 100.366492][ T5195] set_capacity_and_notify: 1 callbacks suppressed [ 100.366517][ T5195] loop1: detected capacity change from 0 to 8192 [ 100.383146][ T5205] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.406793][ T5205] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.477797][ T5205] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.497585][ T5205] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.446: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 100.533203][ T5205] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 100.535225][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 100.547953][ T5205] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.446: couldn't read orphan inode 11 (err -117) [ 100.550951][ C0] EXT4-fs (loop4): initial error at time 1779637978: ext4_ext_check_inode:521: inode 11 [ 100.572534][ C0] EXT4-fs (loop4): last error at time 1779637978: ext4_ext_check_inode:521: inode 11 [ 100.582778][ T5205] loop4: lost filesystem error report for type 5 error -117 [ 100.587866][ T5205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.626466][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.678938][ T5216] netlink: 256 bytes leftover after parsing attributes in process `syz.4.449'. [ 100.990517][ T5244] loop4: detected capacity change from 0 to 512 [ 101.088073][ T5244] ------------[ cut here ]------------ [ 101.094126][ T5244] EA inode 11 i_nlink=2 [ 101.094366][ T5244] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.4.457/5244 [ 101.110606][ T5244] Modules linked in: [ 101.115504][ T5244] CPU: 1 UID: 0 PID: 5244 Comm: syz.4.457 Tainted: G W syzkaller #0 PREEMPT(full) [ 101.127406][ T5244] Tainted: [W]=WARN [ 101.131983][ T5244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.142394][ T5244] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 101.149686][ T5244] Code: 44 58 98 ff 4c 8d 2d 7d 66 5c 05 49 8d 7e 40 e8 e4 17 b6 ff 49 8b 6e 40 4c 89 e7 e8 18 13 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 cf 2b d8 03 66 66 66 66 66 66 2e [ 101.170084][ T5244] RSP: 0018:ffffc90003b9f778 EFLAGS: 00010246 [ 101.176936][ T5244] RAX: ffff888104378b00 RBX: ffff8881006caab8 RCX: ffffffff81c0db78 [ 101.185707][ T5244] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d41e0 [ 101.193786][ T5244] RBP: 000000000000000b R08: 00018881006caa6b R09: 0000000000000000 [ 101.202386][ T5244] R10: ffffc90003b9f6a8 R11: 0001c90003b9f6a8 R12: ffff8881006caa68 [ 101.211045][ T5244] R13: ffffffff871d41e0 R14: ffff8881006caa20 R15: 0000000000000001 [ 101.219895][ T5244] FS: 00007fed69b6d6c0(0000) GS:ffff8882ae9f8000(0000) knlGS:0000000000000000 [ 101.229506][ T5244] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.236706][ T5244] CR2: 0000000034747865 CR3: 0000000113bc8000 CR4: 00000000003506f0 [ 101.245486][ T5244] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.254356][ T5244] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 101.262806][ T5244] Call Trace: [ 101.267434][ T5244] [ 101.271045][ T5244] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 101.277992][ T5244] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 101.284486][ T5244] ext4_evict_inode+0xb16/0xe30 [ 101.290385][ T5244] ? __pfx_ext4_evict_inode+0x10/0x10 [ 101.296516][ T5244] evict+0x2af/0x510 [ 101.301079][ T5244] ? __dquot_initialize+0x146/0x7c0 [ 101.306926][ T5244] iput+0x41a/0x580 [ 101.311526][ T5244] ext4_process_orphan+0x1a9/0x1c0 [ 101.317274][ T5244] ext4_orphan_cleanup+0x69c/0x9f0 [ 101.323583][ T5244] ext4_fill_super+0x3408/0x37c0 [ 101.329806][ T5244] ? set_blocksize+0x14c/0x270 [ 101.335475][ T5244] ? setup_bdev_super+0x30e/0x370 [ 101.341086][ T5244] ? __pfx_ext4_fill_super+0x10/0x10 [ 101.347325][ T5244] get_tree_bdev_flags+0x291/0x300 [ 101.353399][ T5244] ? __pfx_ext4_fill_super+0x10/0x10 [ 101.359374][ T5244] get_tree_bdev+0x1f/0x30 [ 101.364375][ T5244] ext4_get_tree+0x1c/0x30 [ 101.369336][ T5244] vfs_get_tree+0x57/0x1d0 [ 101.374464][ T5244] do_new_mount+0x288/0x8d0 [ 101.379513][ T5244] ? __tsan_read_write4+0x10c/0x180 [ 101.385583][ T5244] path_mount+0x4d0/0xbc0 [ 101.390775][ T5244] __se_sys_mount+0x28c/0x2e0 [ 101.396063][ T5244] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 101.402116][ T5244] __x64_sys_mount+0x67/0x80 [ 101.407513][ T5244] x64_sys_call+0x2d61/0x3020 [ 101.412723][ T5244] do_syscall_64+0x12c/0x3b0 [ 101.418665][ T5244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.425032][ T5244] RIP: 0033:0x7fed6b15e0ca [ 101.430265][ T5244] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.450685][ T5244] RSP: 002b:00007fed69b6ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 101.460069][ T5244] RAX: ffffffffffffffda RBX: 00007fed69b6cee0 RCX: 00007fed6b15e0ca [ 101.469066][ T5244] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fed69b6cea0 [ 101.477396][ T5244] RBP: 00002000000009c0 R08: 00007fed69b6cee0 R09: 0000000000800718 [ 101.486085][ T5244] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 101.494394][ T5244] R13: 00007fed69b6cea0 R14: 000000000000048d R15: 0000200000000200 [ 101.503886][ T5244] [ 101.507602][ T5244] ---[ end trace 0000000000000000 ]--- [ 101.516097][ T5244] EXT4-fs (loop4): 1 orphan inode deleted [ 101.532809][ T5244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.750837][ T5244] bond3: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 101.770262][ T5244] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.926358][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.064555][ T5261] loop4: detected capacity change from 0 to 1024 [ 102.088765][ T5261] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.106701][ T5261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.266456][ T5261] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 102.312972][ T5261] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #11: comm syz.4.464: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 102.413856][ T5261] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 102.414607][ T5261] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.464: couldn't read orphan inode 11 (err -117) [ 102.424027][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 102.424056][ C1] EXT4-fs (loop4): initial error at time 1779637980: ext4_ext_check_inode:521: inode 11 [ 102.424091][ C1] EXT4-fs (loop4): last error at time 1779637980: ext4_ext_check_inode:521: inode 11 [ 102.465328][ T5270] netlink: 'syz.3.467': attribute type 1 has an invalid length. [ 102.543566][ T5270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.584802][ T5272] vlan3: entered allmulticast mode [ 102.608270][ T5272] bond2: entered allmulticast mode [ 102.635374][ T5261] loop4: lost filesystem error report for type 5 error -117 [ 102.636299][ T5261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.691562][ T5274] netlink: 'syz.3.468': attribute type 4 has an invalid length. [ 102.724229][ T5274] netlink: 'syz.3.468': attribute type 4 has an invalid length. [ 102.747234][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.766773][ T5256] loop0: detected capacity change from 0 to 8192 [ 102.867423][ T5287] loop5: detected capacity change from 0 to 1024 [ 102.905271][ T5290] loop1: detected capacity change from 0 to 512 [ 102.919590][ T5287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.937490][ T5287] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.969105][ T5290] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.993416][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.007256][ T5290] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.475: bad orphan inode 131083 [ 103.051117][ T5290] loop1: lost filesystem error report for type 5 error -117 [ 103.051735][ T5290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.077379][ T5290] EXT4-fs error (device loop1): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.1.475: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 103.155149][ T5290] EXT4-fs error (device loop1) in ext4_delete_entry:2744: Corrupt filesystem [ 103.204277][ T5316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.214546][ T5316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.236861][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.308943][ T5331] netlink: 44 bytes leftover after parsing attributes in process `syz.0.488'. [ 103.401743][ T5333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.411103][ T5333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.436844][ T5333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.457755][ T5333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.505451][ T28] kauditd_printk_skb: 116 callbacks suppressed [ 103.505492][ T28] audit: type=1400 audit(1779637981.766:618): avc: denied { setopt } for pid=5338 comm="syz.5.492" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.086960][ T5349] loop0: detected capacity change from 0 to 1024 [ 104.119325][ T5326] loop1: detected capacity change from 0 to 8192 [ 104.137905][ T5349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.166601][ T5349] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.195873][ T5357] netlink: 100 bytes leftover after parsing attributes in process `syz.4.498'. [ 104.212162][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.222259][ T5357] netlink: 'syz.4.498': attribute type 10 has an invalid length. [ 104.230473][ T5357] netlink: 55 bytes leftover after parsing attributes in process `syz.4.498'. [ 104.272501][ T5361] netlink: 'syz.4.498': attribute type 1 has an invalid length. [ 104.301515][ T28] audit: type=1400 audit(1779637982.566:619): avc: denied { write } for pid=5356 comm="syz.4.498" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.350154][ T5357] loop4: detected capacity change from 0 to 512 [ 104.384083][ T5357] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 104.393082][ T5357] EXT4-fs (loop4): orphan cleanup on readonly fs [ 104.404024][ T5357] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.417603][ T118] Bluetooth: hci0: Frame reassembly failed (-84) [ 104.421467][ T28] audit: type=1400 audit(1779637982.676:620): avc: denied { bind } for pid=5366 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 104.433928][ T5357] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 104.583566][ T5357] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #16: comm syz.4.498: corrupted xattr block 31: invalid header [ 104.601169][ T5357] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 104.601717][ T5357] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 104.611186][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 104.611265][ C0] EXT4-fs (loop4): initial error at time 1779637982: ext4_xattr_delete_inode:2972: inode 16 [ 104.611381][ C0] EXT4-fs (loop4): last error at time 1779637982: ext4_xattr_delete_inode:2972: inode 16 [ 104.687141][ T5357] EXT4-fs (loop4): 1 orphan inode deleted [ 104.768787][ T5357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.880871][ T5381] syzkaller0: entered promiscuous mode [ 104.920420][ T5381] syzkaller0: entered allmulticast mode [ 104.958384][ T5381] tipc: Enabled bearer , priority 0 [ 104.989493][ T5380] tipc: Resetting bearer [ 105.028442][ T5380] tipc: Disabling bearer [ 105.217006][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.226894][ T5394] netlink: 48 bytes leftover after parsing attributes in process `syz.5.512'. [ 105.284425][ T28] audit: type=1400 audit(1779637983.546:621): avc: denied { ioctl } for pid=5398 comm="syz.5.515" path="socket:[11399]" dev="sockfs" ino=11399 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.389767][ T5402] netlink: 52 bytes leftover after parsing attributes in process `syz.0.510'. [ 105.472115][ T5399] loop5: detected capacity change from 0 to 256 [ 106.220177][ T5405] net_ratelimit: 90 callbacks suppressed [ 106.220343][ T5405] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 106.346703][ T5411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 106.365513][ T5412] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 106.406785][ T5411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.518'. [ 106.443556][ T5411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 106.452464][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 106.455393][ T4336] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 106.465690][ T5412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.503578][ T5413] vlan3: entered allmulticast mode [ 106.548786][ T5411] loop3: detected capacity change from 0 to 128 [ 106.572283][ T5411] msdos: Bad value for 'gid' [ 106.578985][ T5413] bond2: entered allmulticast mode [ 106.590792][ T5399] loop5: detected capacity change from 0 to 512 [ 106.599437][ T5411] msdos: Bad value for 'gid' [ 106.764474][ T28] audit: type=1400 audit(1779637985.026:622): avc: denied { ioctl } for pid=5429 comm="syz.0.525" path="socket:[11447]" dev="sockfs" ino=11447 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 106.806631][ T5432] netlink: 'syz.3.526': attribute type 1 has an invalid length. [ 106.824312][ T5432] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.840871][ T28] audit: type=1400 audit(1779637985.086:623): avc: denied { associate } for pid=5398 comm="syz.5.515" name=2020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202065787434 scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 106.894006][ T5437] loop4: detected capacity change from 0 to 512 [ 106.911137][ T5432] vlan4: entered allmulticast mode [ 106.921596][ T5437] EXT4-fs: Ignoring removed oldalloc option [ 106.929953][ T5432] bond3: entered allmulticast mode [ 106.943932][ T5437] EXT4-fs (loop4): filesystem is read-only [ 106.955354][ T5437] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 107.112718][ T5445] loop5: detected capacity change from 0 to 1024 [ 107.130501][ T5437] EXT4-fs (loop4): filesystem is read-only [ 107.194769][ T5450] netlink: 52 bytes leftover after parsing attributes in process `syz.1.528'. [ 108.017064][ T5437] EXT4-fs (loop4): orphan cleanup on readonly fs [ 108.024946][ T5452] mmap: syz.0.532 (5452) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.038969][ T5437] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.527: bg 0: block 64: padding at end of block bitmap is not set [ 108.102883][ T5437] loop4: lost filesystem error report for type 5 error -117 [ 108.103203][ T5437] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 108.110570][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 108.110593][ C1] EXT4-fs (loop4): initial error at time 1779637986: ext4_validate_block_bitmap:441 [ 108.110621][ C1] EXT4-fs (loop4): last error at time 1779637986: ext4_validate_block_bitmap:441 [ 108.171638][ T5437] loop4: lost filesystem error report for type 5 error -117 [ 108.172180][ T5437] EXT4-fs (loop4): 1 orphan inode deleted [ 108.186595][ T5437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.219372][ T28] audit: type=1400 audit(1779637986.466:624): avc: denied { ioctl } for pid=5447 comm="syz.0.532" path="socket:[12683]" dev="sockfs" ino=12683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.257684][ T5445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 108.377420][ T5445] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.390811][ T28] audit: type=1400 audit(1779637986.466:625): avc: denied { bind } for pid=5447 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.508780][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 108.533567][ T5464] loop3: detected capacity change from 0 to 256 [ 108.687464][ T28] audit: type=1400 audit(1779637986.956:626): avc: denied { connect } for pid=5436 comm="syz.4.527" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.889162][ T28] audit: type=1400 audit(1779637987.156:627): avc: denied { ioctl } for pid=5477 comm="syz.3.541" path="/dev/uhid" dev="devtmpfs" ino=252 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 109.133160][ T5487] loop3: detected capacity change from 0 to 1024 [ 109.145244][ T28] audit: type=1400 audit(1779637987.176:628): avc: denied { watch watch_reads } for pid=5477 comm="syz.3.541" path="/proc/310/net" dev="proc" ino=12728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 109.532821][ T5487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.119276][ T28] audit: type=1326 audit(1779637987.376:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.3.544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94da3ce59 code=0x7ffc0000 [ 110.144969][ T28] audit: type=1326 audit(1779637987.386:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.3.544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94da3ce59 code=0x7ffc0000 [ 110.156153][ T5487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.296435][ T5491] loop1: detected capacity change from 0 to 4096 [ 110.316458][ T5491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.455778][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.539725][ T28] audit: type=1326 audit(1779637987.386:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.3.544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd94da3ce59 code=0x7ffc0000 [ 110.565289][ T28] audit: type=1326 audit(1779637987.386:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.3.544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd94da3cbc2 code=0x7ffc0000 [ 110.611602][ T28] audit: type=1326 audit(1779637987.386:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.3.544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd94d9fd68e code=0x7ffc0000 [ 110.662192][ T5487] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 110.689877][ T5496] tipc: Enabled bearer , priority 0 [ 110.746988][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.747716][ T28] audit: type=1326 audit(1779637987.396:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.3.544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd94da3cc87 code=0x7ffc0000 [ 110.781275][ T28] audit: type=1326 audit(1779637987.396:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.3.544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd94d9fd68e code=0x7ffc0000 [ 110.826127][ T5496] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 110.889608][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.898874][ T5506] loop0: detected capacity change from 0 to 1024 [ 110.936360][ T5506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.166547][ T5517] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.549: missing EA_INODE flag [ 111.196874][ T5517] EXT4-fs (loop0): Remounting filesystem read-only [ 111.594232][ T5522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.553'. [ 111.633208][ T5522] vlan4: entered promiscuous mode [ 111.653550][ T5522] geneve1: entered promiscuous mode [ 111.671941][ T5522] vlan4: entered allmulticast mode [ 111.688442][ T5522] geneve1: entered allmulticast mode [ 111.716163][ T3379] tipc: Node number set to 2200237076 [ 111.803210][ T5523] xt_CT: No such helper "syz1" [ 111.835667][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.138999][ T5546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.146605][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.154346][ T5546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.209319][ T5546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.221644][ T5547] siw: device registration error -23 [ 112.383866][ T5549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.562'. [ 112.504088][ T5552] SELinux: failed to load policy [ 112.620171][ T5554] netlink: 44 bytes leftover after parsing attributes in process `syz.4.563'. [ 112.822360][ T5538] loop0: detected capacity change from 0 to 8192 [ 113.103769][ T5559] loop3: detected capacity change from 0 to 512 [ 113.123398][ T5559] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.148240][ T5559] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 113.150974][ T5569] netlink: 'syz.5.567': attribute type 7 has an invalid length. [ 113.164336][ T5559] System zones: 0-2, 18-18, 34-34 [ 113.177719][ T5559] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.190604][ T5559] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #15: comm syz.3.564: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 113.210097][ T5559] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.210545][ T5559] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.564: Bad quota inode: 15, type: 2 [ 113.219841][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 113.219873][ C0] EXT4-fs (loop3): last error at time 1779637991: ext4_ext_check_inode:521: inode 15 [ 113.256976][ T5559] loop3: lost filesystem error report for type 5 error -117 [ 113.261399][ T5559] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 113.315892][ T5559] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 113.330862][ T5559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.361138][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.383101][ T5580] loop5: detected capacity change from 0 to 4096 [ 113.414515][ T5589] loop0: detected capacity change from 0 to 1024 [ 113.424884][ T5580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.478326][ T5589] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.496790][ T5589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.512902][ T5589] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.574552][ T5589] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.576: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 113.596539][ T5589] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 113.596667][ T5589] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.576: couldn't read orphan inode 11 (err -117) [ 113.605883][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 113.605899][ C0] EXT4-fs (loop0): initial error at time 1779637991: ext4_ext_check_inode:521: inode 11 [ 113.605922][ C0] EXT4-fs (loop0): last error at time 1779637991: ext4_ext_check_inode:521: inode 11 [ 113.665865][ T5589] loop0: lost filesystem error report for type 5 error -117 [ 113.672986][ T5589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.841952][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.855850][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.192995][ T5608] netlink: 'syz.4.581': attribute type 1 has an invalid length. [ 114.218798][ T5608] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.369735][ T5608] vlan5: entered allmulticast mode [ 114.375075][ T5608] bond4: entered allmulticast mode [ 114.451514][ T5616] loop3: detected capacity change from 0 to 1024 [ 114.597035][ T5616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 114.621238][ T5616] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.705277][ T5615] loop4: detected capacity change from 0 to 512 [ 114.717912][ T5625] loop0: detected capacity change from 0 to 512 [ 114.737127][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.754325][ T5615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.772518][ T5625] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.584: iget: bad i_size value: 38620345925642 [ 114.800542][ T5625] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 114.801207][ T5625] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.584: couldn't read orphan inode 15 (err -117) [ 114.810446][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 114.810493][ C1] EXT4-fs (loop0): initial error at time 1779637993: ext4_orphan_get:1397: inode 15 [ 114.810522][ C1] EXT4-fs (loop0): last error at time 1779637993: ext4_orphan_get:1397: inode 15 [ 114.873842][ T5625] loop0: lost filesystem error report for type 5 error -117 [ 114.878575][ T5625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.913603][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.205436][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 115.205500][ T28] audit: type=1400 audit(1779637993.366:657): avc: denied { write } for pid=5620 comm="syz.0.584" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.465289][ T5456] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 115.701313][ T5647] loop1: detected capacity change from 0 to 1024 [ 116.703536][ T5647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.855393][ T5647] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.860014][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 118.157245][ T5651] loop4: detected capacity change from 0 to 512 [ 118.636144][ T5662] netlink: 112 bytes leftover after parsing attributes in process `syz.1.593'. [ 118.649640][ T5651] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.661543][ T5651] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 118.685683][ T5651] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.590: Corrupt directory, running e2fsck is recommended [ 118.743853][ T5651] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 118.770771][ T5651] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.590: corrupted in-inode xattr: e_name out of bounds [ 118.798438][ T5651] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 118.801029][ T5651] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.590: couldn't read orphan inode 15 (err -117) [ 118.810564][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 118.810672][ C0] EXT4-fs (loop4): initial error at time 1779637997: ext4_iget_extra_inode:5128: inode 15 [ 118.810921][ C0] EXT4-fs (loop4): last error at time 1779637997: ext4_iget_extra_inode:5128: inode 15 [ 118.882834][ T5651] loop4: lost filesystem error report for type 5 error -117 [ 118.893230][ T5651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.183606][ T5662] random: crng reseeded on system resumption [ 119.191703][ T28] audit: type=1400 audit(1779637997.446:658): avc: denied { write } for pid=5661 comm="syz.1.593" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 119.219086][ T5667] netlink: 20 bytes leftover after parsing attributes in process `syz.5.594'. [ 119.240416][ T5662] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5662 comm=syz.1.593 [ 119.263443][ T28] audit: type=1400 audit(1779637997.446:659): avc: denied { open } for pid=5661 comm="syz.1.593" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 119.293462][ T5667] 9p: Bad value for 'wfdno' [ 119.321205][ T28] audit: type=1400 audit(1779637997.586:660): avc: denied { append } for pid=5665 comm="syz.5.594" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 119.585240][ T28] audit: type=1400 audit(1779637997.806:661): avc: denied { execstack } for pid=5668 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 119.680154][ T5670] loop3: detected capacity change from 0 to 2048 [ 119.718043][ T28] audit: type=1400 audit(1779637997.956:662): avc: denied { remount } for pid=5668 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.801294][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.910102][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 184 with error 28 [ 119.928075][ T28] audit: type=1400 audit(1779637998.196:663): avc: denied { bind } for pid=5680 comm="syz.5.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.950925][ T36] EXT4-fs (loop0): This should not happen!! Data will be lost [ 119.950925][ T36] [ 119.961075][ T36] EXT4-fs (loop0): Total free blocks count 0 [ 119.967830][ T36] EXT4-fs (loop0): Free/Dirty block details [ 119.984086][ T28] audit: type=1400 audit(1779637998.196:664): avc: denied { write } for pid=5680 comm="syz.5.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.002809][ T5679] loop3: detected capacity change from 0 to 164 [ 120.010151][ T36] EXT4-fs (loop0): free_blocks=0 [ 120.010168][ T36] EXT4-fs (loop0): dirty_blocks=188 [ 120.010180][ T36] EXT4-fs (loop0): Block reservation details [ 120.010192][ T36] EXT4-fs (loop0): i_reserved_data_blocks=188 [ 120.019695][ T28] audit: type=1400 audit(1779637998.216:665): avc: denied { sqpoll } for pid=5680 comm="syz.5.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 120.059045][ T3305] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 120.075623][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.129329][ T5679] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 120.132862][ T28] audit: type=1400 audit(1779637998.386:666): avc: denied { mount } for pid=5676 comm="syz.3.598" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 120.178806][ T5685] loop1: detected capacity change from 0 to 1024 [ 120.186261][ T5693] loop5: detected capacity change from 0 to 1024 [ 120.204142][ T5693] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.219532][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 120.219544][ T28] audit: type=1400 audit(1779637998.486:668): avc: denied { read append } for pid=5694 comm="syz.0.606" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 120.257932][ T5693] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.267829][ T28] audit: type=1400 audit(1779637998.486:669): avc: denied { open } for pid=5694 comm="syz.0.606" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 120.294794][ T5693] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.312047][ T28] audit: type=1400 audit(1779637998.486:670): avc: denied { ioctl } for pid=5694 comm="syz.0.606" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 120.334716][ T5685] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 120.356542][ T5693] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.605: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 120.368656][ T5685] System zones: 0-1, 3-36 [ 120.400568][ T5685] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.603: bad orphan inode 134217728 [ 120.402545][ T5693] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 120.421142][ T5685] loop1: lost filesystem error report for type 5 error -117 [ 120.421184][ T5693] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.605: couldn't read orphan inode 11 (err -117) [ 120.421214][ T5693] loop5: lost filesystem error report for type 5 error -117 [ 120.424262][ T5693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.485201][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 120.491675][ C1] EXT4-fs (loop1): initial error at time 1779637998: ext4_orphan_get:1423 [ 120.500243][ C1] EXT4-fs (loop1): last error at time 1779637998: ext4_orphan_get:1423 [ 120.509199][ T5685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.531054][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.533540][ T5703] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 120.562530][ T28] audit: type=1400 audit(1779637998.826:671): avc: denied { write } for pid=5684 comm="syz.1.603" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.568429][ T5703] 8021q: adding VLAN 0 to HW filter on device bond4 [ 120.618735][ T5705] vlan5: entered allmulticast mode [ 120.649849][ T5705] bond4: entered allmulticast mode [ 120.668547][ T28] audit: type=1400 audit(1779637998.936:672): avc: denied { getopt } for pid=5684 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.691333][ T5712] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 120.709971][ T28] audit: type=1400 audit(1779637998.976:673): avc: denied { perfmon } for pid=5710 comm="syz.0.611" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.768425][ T28] audit: type=1400 audit(1779637998.986:674): avc: denied { getopt } for pid=5707 comm="syz.5.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.805239][ T28] audit: type=1400 audit(1779637998.986:675): avc: denied { create } for pid=5707 comm="syz.5.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.848908][ T28] audit: type=1400 audit(1779637999.006:676): avc: denied { create } for pid=5710 comm="syz.0.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 120.903474][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.913625][ T28] audit: type=1400 audit(1779637999.006:677): avc: denied { execmem } for pid=5707 comm="syz.5.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 121.048430][ T5735] loop0: detected capacity change from 0 to 512 [ 121.075705][ T5735] EXT4-fs: inline encryption not supported [ 121.082196][ T5735] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.094939][ T5739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.617'. [ 121.105631][ T5735] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.147731][ T5735] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.618: Failed to acquire dquot type 1 [ 121.172640][ T5735] loop0: lost filesystem error report for type 5 error -5 [ 121.175223][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 121.188949][ C1] EXT4-fs (loop0): initial error at time 1779637999: ext4_acquire_dquot:7034 [ 121.197909][ C1] EXT4-fs (loop0): last error at time 1779637999: ext4_acquire_dquot:7034 [ 121.205957][ T5735] EXT4-fs (loop0): Remounting filesystem read-only [ 121.213654][ T5735] EXT4-fs (loop0): 1 truncate cleaned up [ 121.220842][ T5735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.342467][ T5746] netlink: 52 bytes leftover after parsing attributes in process `syz.3.619'. [ 121.706325][ T5027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.807851][ T5751] loop5: detected capacity change from 0 to 1024 [ 121.827722][ T5751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 121.850381][ T5751] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.873890][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 122.011027][ T5759] loop3: detected capacity change from 0 to 1024 [ 122.019244][ T36] bridge_slave_1: left allmulticast mode [ 122.028434][ T36] bridge_slave_1: left promiscuous mode [ 122.034724][ T5759] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.041997][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.054159][ T5759] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.063768][ T36] bridge_slave_0: left allmulticast mode [ 122.070811][ T36] bridge_slave_0: left promiscuous mode [ 122.070880][ T5759] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 122.085550][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.112479][ T5755] loop5: detected capacity change from 0 to 256 [ 122.143847][ T5759] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.625: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 122.166669][ T5759] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 122.171442][ T5759] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.625: couldn't read orphan inode 11 (err -117) [ 122.180639][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 122.180677][ C1] EXT4-fs (loop3): initial error at time 1779638000: ext4_ext_check_inode:521: inode 11 [ 122.180699][ C1] EXT4-fs (loop3): last error at time 1779638000: ext4_ext_check_inode:521: inode 11 [ 122.255429][ T5759] loop3: lost filesystem error report for type 5 error -117 [ 122.256057][ T5759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.272137][ T5755] loop5: detected capacity change from 0 to 512 [ 122.332101][ T36] bond1 (unregistering): (slave geneve2): Releasing active interface [ 122.354947][ T36] geneve2 (unregistering): left allmulticast mode [ 122.362374][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.409683][ T5762] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 122.420752][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.431886][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.442207][ T36] bond0 (unregistering): Released all slaves [ 122.457486][ T36] bond1 (unregistering): Released all slaves [ 122.480598][ T36] bond2 (unregistering): Released all slaves [ 122.564067][ T3400] syz0: Port: 1 Link DOWN [ 122.577547][ T5762] 8021q: adding VLAN 0 to HW filter on device bond5 [ 122.598876][ T5769] vlan6: entered allmulticast mode [ 122.604110][ T5769] bond5: entered allmulticast mode [ 122.617499][ T36] tipc: Left network mode [ 122.649845][ T5779] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 122.657916][ T5779] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 122.692029][ T5779] System zones: 0-1, 15-15, 18-18, 34-34 [ 122.767229][ T5779] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.800177][ T5779] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 122.837258][ T36] hsr_slave_0: left promiscuous mode [ 122.843378][ T36] hsr_slave_1: left promiscuous mode [ 122.850236][ T5779] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 122.863211][ T36] veth1_macvtap: left promiscuous mode [ 122.870587][ T5779] EXT4-fs (loop3): 1 truncate cleaned up [ 122.877164][ T36] veth0_macvtap: left promiscuous mode [ 122.884041][ T5779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.896841][ T36] veth1_vlan: left promiscuous mode [ 122.902664][ T36] veth0_vlan: left promiscuous mode [ 123.011711][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.083569][ T36] team0 (unregistering): Port device team_slave_1 removed [ 123.098486][ T36] team0 (unregistering): Port device team_slave_0 removed [ 123.111845][ T4038] smc: removing ib device syz0 [ 123.381982][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.390551][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.397983][ T5766] bridge_slave_0: entered allmulticast mode [ 123.404644][ T5766] bridge_slave_0: entered promiscuous mode [ 123.411969][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.419442][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.426854][ T5766] bridge_slave_1: entered allmulticast mode [ 123.434690][ T5766] bridge_slave_1: entered promiscuous mode [ 123.453533][ T5797] set_capacity_and_notify: 1 callbacks suppressed [ 123.453562][ T5797] loop5: detected capacity change from 0 to 128 [ 123.459977][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.462993][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.498234][ T5766] team0: Port device team_slave_0 added [ 123.504994][ T5766] team0: Port device team_slave_1 added [ 123.521234][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.528234][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.554173][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.565807][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.572855][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.606492][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.635749][ T5766] hsr_slave_0: entered promiscuous mode [ 123.641959][ T5766] hsr_slave_1: entered promiscuous mode [ 123.648614][ T5766] debugfs: 'hsr0' already exists in 'hsr' [ 123.654425][ T5766] Cannot create hsr debugfs directory [ 123.841677][ T5802] netlink: 52 bytes leftover after parsing attributes in process `syz.5.635'. [ 123.963982][ T5725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.977101][ T5732] netlink: 'syz.4.617': attribute type 1 has an invalid length. [ 123.986842][ T5732] netlink: 'syz.4.617': attribute type 2 has an invalid length. [ 124.046578][ T5766] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.131534][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.246643][ T5766] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.298784][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.307014][ T5766] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.318271][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.331715][ T5766] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.350928][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.398188][ T5826] geneve3: entered promiscuous mode [ 124.403564][ T5826] geneve3: entered allmulticast mode [ 124.455631][ T5831] loop1: detected capacity change from 0 to 1024 [ 124.468999][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.476001][ T5831] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.513844][ T5831] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.540521][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.558337][ T5831] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.576021][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.583183][ T4038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.606714][ T5831] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.641: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 124.635636][ T5841] netlink: 'syz.4.643': attribute type 1 has an invalid length. [ 124.645871][ T5831] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 124.649086][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.658042][ T5831] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.641: couldn't read orphan inode 11 (err -117) [ 124.658418][ T4038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.684516][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 124.690987][ C0] EXT4-fs (loop1): initial error at time 1779638002: ext4_ext_check_inode:521: inode 11 [ 124.700782][ C0] EXT4-fs (loop1): last error at time 1779638002: ext4_ext_check_inode:521: inode 11 [ 124.717026][ T5831] loop1: lost filesystem error report for type 5 error -117 [ 124.718170][ T5831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.734556][ T5766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.777762][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.792385][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.837474][ T5841] 8021q: adding VLAN 0 to HW filter on device bond5 [ 124.846681][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 124.887351][ T5847] vlan6: entered allmulticast mode [ 124.911166][ T5847] bond5: entered allmulticast mode [ 124.939038][ T5858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.948650][ T5858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.980450][ T5856] loop1: detected capacity change from 0 to 1024 [ 125.023551][ T5856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 125.055724][ T5856] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.104441][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 125.222868][ T5898] loop3: detected capacity change from 0 to 1024 [ 125.233722][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 125.247812][ T5898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 125.283803][ T5898] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.322058][ T5909] siw: device registration error -23 [ 125.339869][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.349828][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 125.369391][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 125.369407][ T28] audit: type=1400 audit(1779638003.586:759): avc: denied { create } for pid=5891 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.397438][ T28] audit: type=1400 audit(1779638003.586:760): avc: denied { create } for pid=5891 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.418397][ T28] audit: type=1400 audit(1779638003.586:761): avc: denied { write } for pid=5891 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.530255][ T28] audit: type=1400 audit(1779638003.796:762): avc: denied { create } for pid=5925 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.806012][ T5928] loop4: detected capacity change from 0 to 4096 [ 125.882451][ T5928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.070967][ T5934] siw: device registration error -23 [ 126.111028][ T28] audit: type=1400 audit(1779638004.176:763): avc: denied { write } for pid=5906 comm="syz.4.656" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.152786][ T28] audit: type=1400 audit(1779638004.176:764): avc: denied { add_name } for pid=5906 comm="syz.4.656" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.173607][ T28] audit: type=1400 audit(1779638004.176:765): avc: denied { create } for pid=5906 comm="syz.4.656" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 126.199606][ T28] audit: type=1400 audit(1779638004.176:766): avc: denied { read write } for pid=5906 comm="syz.4.656" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.234074][ T28] audit: type=1400 audit(1779638004.176:767): avc: denied { open } for pid=5906 comm="syz.4.656" path="/143/file0/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.267989][ T28] audit: type=1400 audit(1779638004.406:768): avc: denied { write } for pid=5911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.370968][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.388653][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 126.475760][ T5766] veth0_vlan: entered promiscuous mode [ 126.501336][ T5766] veth1_vlan: entered promiscuous mode [ 126.532065][ T5766] veth0_macvtap: entered promiscuous mode [ 126.540505][ T5766] veth1_macvtap: entered promiscuous mode [ 126.563194][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.583905][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.628645][ T4038] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.640808][ T4038] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.652254][ T4038] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.671415][ T4038] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.866675][ T5967] loop3: detected capacity change from 0 to 128 [ 127.169206][ T5974] syzkaller1: entered promiscuous mode [ 127.198868][ T5974] syzkaller1: entered allmulticast mode [ 127.230689][ T5974] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 127.287417][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 127.466101][ T5990] netlink: 'syz.4.666': attribute type 1 has an invalid length. [ 127.514653][ T5990] 8021q: adding VLAN 0 to HW filter on device bond6 [ 127.543644][ T5997] vlan7: entered allmulticast mode [ 127.551500][ T5996] loop3: detected capacity change from 0 to 512 [ 127.562236][ T5997] bond6: entered allmulticast mode [ 127.577275][ T5996] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #2: comm syz.3.670: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 5, max 4(4), depth 0(0) [ 127.598854][ T5996] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 127.599181][ T5996] EXT4-fs (loop3): get root inode failed [ 127.608323][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 127.608341][ C1] EXT4-fs (loop3): initial error at time 1779638005: ext4_ext_check_inode:521: inode 2 [ 127.608371][ C1] EXT4-fs (loop3): last error at time 1779638005: ext4_ext_check_inode:521: inode 2 [ 127.706764][ T5996] EXT4-fs (loop3): mount failed [ 127.719354][ T5996] netlink: 32 bytes leftover after parsing attributes in process `syz.3.670'. [ 127.946361][ T6016] loop3: detected capacity change from 0 to 256 [ 128.082303][ T6016] loop3: detected capacity change from 0 to 512 [ 128.109624][ T6025] loop6: detected capacity change from 0 to 512 [ 128.134415][ T6025] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.679: inode has both inline data and extents flags [ 128.167899][ T6025] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 128.168099][ T6025] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.679: couldn't read orphan inode 15 (err -117) [ 128.177337][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 128.177363][ C0] EXT4-fs (loop6): initial error at time 1779638006: ext4_orphan_get:1397: inode 15 [ 128.177394][ C0] EXT4-fs (loop6): last error at time 1779638006: ext4_orphan_get:1397: inode 15 [ 128.216766][ T6025] loop6: lost filesystem error report for type 5 error -117 [ 128.217383][ T6025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.330853][ T5766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.443762][ T6055] netlink: 60 bytes leftover after parsing attributes in process `syz.3.692'. [ 128.585026][ T6075] FAULT_INJECTION: forcing a failure. [ 128.585026][ T6075] name failslab, interval 1, probability 0, space 0, times 0 [ 128.603428][ T6075] CPU: 0 UID: 0 PID: 6075 Comm: syz.4.697 Tainted: G W syzkaller #0 PREEMPT(full) [ 128.603468][ T6075] Tainted: [W]=WARN [ 128.603478][ T6075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.603494][ T6075] Call Trace: [ 128.603502][ T6075] [ 128.603511][ T6075] __dump_stack+0x1d/0x30 [ 128.603609][ T6075] dump_stack_lvl+0x95/0xd0 [ 128.603632][ T6075] dump_stack+0x15/0x1b [ 128.603655][ T6075] should_fail_ex+0x263/0x280 [ 128.603768][ T6075] should_failslab+0x8c/0xb0 [ 128.603808][ T6075] kmem_cache_alloc_noprof+0x66/0x3f0 [ 128.603844][ T6075] ? dst_alloc+0xbd/0x100 [ 128.603916][ T6075] dst_alloc+0xbd/0x100 [ 128.603946][ T6075] rt_dst_clone+0x3b/0x2e0 [ 128.604022][ T6075] NF_HOOK+0x65/0x230 [ 128.604042][ T6075] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 128.604068][ T6075] ip_mc_output+0x139/0x370 [ 128.604091][ T6075] ? __pfx_dst_output+0x10/0x10 [ 128.604113][ T6075] ? __pfx_ip_mc_output+0x10/0x10 [ 128.604170][ T6075] ip_send_skb+0x139/0x140 [ 128.604191][ T6075] udp_send_skb+0x52a/0x7b0 [ 128.604226][ T6075] udp_sendmsg+0x10d2/0x1500 [ 128.604336][ T6075] ? __pfx_udp_sendmsg+0x10/0x10 [ 128.604374][ T6075] inet_sendmsg+0xac/0xd0 [ 128.604411][ T6075] ? __pfx_inet_sendmsg+0x10/0x10 [ 128.604557][ T6075] ____sys_sendmsg+0x519/0x5b0 [ 128.604612][ T6075] ___sys_sendmsg+0x195/0x1e0 [ 128.604647][ T6075] __sys_sendmmsg+0x185/0x320 [ 128.604682][ T6075] __x64_sys_sendmmsg+0x57/0x70 [ 128.604741][ T6075] x64_sys_call+0x27aa/0x3020 [ 128.604787][ T6075] do_syscall_64+0x12c/0x3b0 [ 128.604826][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.604853][ T6075] RIP: 0033:0x7fed6b15ce59 [ 128.604876][ T6075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.604911][ T6075] RSP: 002b:00007fed69baf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 128.605004][ T6075] RAX: ffffffffffffffda RBX: 00007fed6b3d5fa0 RCX: 00007fed6b15ce59 [ 128.605017][ T6075] RDX: 0000000000000003 RSI: 0000200000004540 RDI: 0000000000000007 [ 128.605030][ T6075] RBP: 00007fed69baf090 R08: 0000000000000000 R09: 0000000000000000 [ 128.605094][ T6075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.605106][ T6075] R13: 00007fed6b3d6038 R14: 00007fed6b3d5fa0 R15: 00007ffe5cd3cf78 [ 128.605130][ T6075] [ 128.606149][ T6057] set_capacity_and_notify: 1 callbacks suppressed [ 128.606188][ T6057] loop1: detected capacity change from 0 to 256 [ 128.928590][ T6083] netlink: 28 bytes leftover after parsing attributes in process `syz.5.702'. [ 129.014770][ T6088] loop1: detected capacity change from 0 to 512 [ 129.047895][ T6090] netlink: 60 bytes leftover after parsing attributes in process `syz.5.704'. [ 129.962430][ T6130] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.159834][ T6130] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.178979][ T6134] netlink: 56 bytes leftover after parsing attributes in process `syz.3.718'. [ 130.220100][ T6130] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.259005][ T6130] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.340232][ T55] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.354493][ T55] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.399738][ T52] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.413724][ T52] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.496975][ T6143] loop6: detected capacity change from 0 to 1024 [ 130.547941][ T6143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.572972][ T6143] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.574013][ T6138] loop1: detected capacity change from 0 to 256 [ 130.632820][ T5766] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 130.734517][ T6153] xt_NFQUEUE: number of queues (65533) out of range (got 65539) [ 130.791526][ T6157] loop1: detected capacity change from 0 to 512 [ 131.079962][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 131.105016][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 131.569448][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.641027][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.765966][ T6185] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.767055][ T6179] loop6: detected capacity change from 0 to 256 [ 131.796182][ T6187] loop5: detected capacity change from 0 to 512 [ 131.833395][ T6187] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 131.848202][ T6187] System zones: 1-12 [ 131.869537][ T6187] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.734: corrupted in-inode xattr: e_value size too large [ 131.896111][ T6187] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.896767][ T6187] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.734: couldn't read orphan inode 15 (err -117) [ 131.906093][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 131.906140][ C1] EXT4-fs (loop5): initial error at time 1779638010: ext4_iget_extra_inode:5128: inode 15 [ 131.906240][ C1] EXT4-fs (loop5): last error at time 1779638010: ext4_iget_extra_inode:5128: inode 15 [ 131.939184][ T6179] loop6: detected capacity change from 0 to 512 [ 131.950717][ T6187] loop5: lost filesystem error report for type 5 error -117 [ 131.957256][ T6187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.982800][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 131.982815][ T28] audit: type=1400 audit(1779638010.246:805): avc: denied { write } for pid=6186 comm="syz.5.734" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.991904][ T6185] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.030125][ T28] audit: type=1400 audit(1779638010.286:806): avc: denied { write } for pid=6186 comm="syz.5.734" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.053177][ T28] audit: type=1400 audit(1779638010.286:807): avc: denied { write } for pid=6186 comm="syz.5.734" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.075066][ T6191] syzkaller1: entered promiscuous mode [ 132.075130][ T6191] syzkaller1: entered allmulticast mode [ 132.100404][ T28] audit: type=1400 audit(1779638010.286:808): avc: denied { write } for pid=6186 comm="syz.5.734" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.123468][ T28] audit: type=1400 audit(1779638010.286:809): avc: denied { write } for pid=6186 comm="syz.5.734" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.129276][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.146116][ T28] audit: type=1400 audit(1779638010.286:810): avc: denied { rename } for pid=6186 comm="syz.5.734" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.196527][ T6195] syzkaller1: entered promiscuous mode [ 132.202183][ T6195] syzkaller1: entered allmulticast mode [ 132.209894][ T6194] FAULT_INJECTION: forcing a failure. [ 132.209894][ T6194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.228034][ T6185] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.259101][ T6194] CPU: 1 UID: 0 PID: 6194 Comm: syz.6.736 Tainted: G W syzkaller #0 PREEMPT(full) [ 132.259140][ T6194] Tainted: [W]=WARN [ 132.259148][ T6194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.259164][ T6194] Call Trace: [ 132.259172][ T6194] [ 132.259181][ T6194] __dump_stack+0x1d/0x30 [ 132.259285][ T6194] dump_stack_lvl+0x95/0xd0 [ 132.259316][ T6194] dump_stack+0x15/0x1b [ 132.259340][ T6194] should_fail_ex+0x263/0x280 [ 132.259377][ T6194] should_fail+0xb/0x20 [ 132.259443][ T6194] should_fail_usercopy+0x1a/0x20 [ 132.259501][ T6194] _copy_from_iter+0xcf/0xea0 [ 132.259534][ T6194] ? __rcu_read_unlock+0x4e/0x70 [ 132.259561][ T6194] ? terminate_walk+0x1e6/0x210 [ 132.259600][ T6194] ? path_openat+0x1ab2/0x2050 [ 132.259704][ T6194] tun_get_user+0x15f/0x27e0 [ 132.259749][ T6194] ? ref_tracker_alloc+0x1eb/0x2f0 [ 132.259785][ T6194] ? selinux_file_permission+0x1e1/0x320 [ 132.259876][ T6194] tun_chr_write_iter+0x15e/0x210 [ 132.259917][ T6194] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 132.260013][ T6194] vfs_write+0x5a6/0x9f0 [ 132.260052][ T6194] ksys_write+0xdc/0x1a0 [ 132.260081][ T6194] __x64_sys_write+0x40/0x50 [ 132.260195][ T6194] x64_sys_call+0x27e1/0x3020 [ 132.260218][ T6194] do_syscall_64+0x12c/0x3b0 [ 132.260251][ T6194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.260273][ T6194] RIP: 0033:0x7f18087fce59 [ 132.260288][ T6194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.260330][ T6194] RSP: 002b:00007f1807257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.260349][ T6194] RAX: ffffffffffffffda RBX: 00007f1808a75fa0 RCX: 00007f18087fce59 [ 132.260424][ T6194] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000004 [ 132.260437][ T6194] RBP: 00007f1807257090 R08: 0000000000000000 R09: 0000000000000000 [ 132.260449][ T6194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.260461][ T6194] R13: 00007f1808a76038 R14: 00007f1808a75fa0 R15: 00007ffe36c317b8 [ 132.260481][ T6194] [ 132.481469][ T6199] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 132.490712][ T6199] netlink: 'syz.1.738': attribute type 4 has an invalid length. [ 132.498831][ T6199] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.738'. [ 132.558142][ T6185] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.662348][ T30] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.675080][ T30] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.701493][ T30] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.107444][ T30] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.202246][ T6215] loop4: detected capacity change from 0 to 128 [ 133.210803][ T28] audit: type=1400 audit(1779638011.476:811): avc: denied { bind } for pid=6216 comm="syz.1.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.231291][ T28] audit: type=1400 audit(1779638011.496:812): avc: denied { name_bind } for pid=6216 comm="syz.1.743" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 133.259265][ T28] audit: type=1400 audit(1779638011.496:813): avc: denied { node_bind } for pid=6216 comm="syz.1.743" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 133.300139][ T28] audit: type=1400 audit(1779638011.526:814): avc: denied { create } for pid=6205 comm="syz.3.740" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 133.439845][ T6234] loop5: detected capacity change from 0 to 1024 [ 133.449418][ T6234] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.473346][ T6234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.504686][ T6234] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.526072][ T6234] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.746: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 133.545826][ T6234] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 133.546045][ T6234] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.746: couldn't read orphan inode 11 (err -117) [ 133.555333][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 133.555351][ C0] EXT4-fs (loop5): initial error at time 1779638011: ext4_ext_check_inode:521: inode 11 [ 133.555380][ C0] EXT4-fs (loop5): last error at time 1779638011: ext4_ext_check_inode:521: inode 11 [ 133.594698][ T6234] loop5: lost filesystem error report for type 5 error -117 [ 133.595950][ T6234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.623179][ T6254] syzkaller0: entered promiscuous mode [ 133.629190][ T6250] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 133.644420][ T6254] syzkaller0: entered allmulticast mode [ 133.657204][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.809607][ T6265] loop1: detected capacity change from 0 to 256 [ 133.865475][ T6265] loop1: detected capacity change from 0 to 512 [ 133.969446][ T6271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64528 sclass=netlink_route_socket pid=6271 comm=syz.5.757 [ 134.007885][ T6274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.015888][ T6274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.023632][ T6274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.031578][ T6274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.053273][ T6276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.760'. [ 134.170601][ T6283] netlink: 52 bytes leftover after parsing attributes in process `syz.5.762'. [ 134.198939][ T6281] loop1: detected capacity change from 0 to 512 [ 134.209178][ T6285] IPVS: set_ctl: invalid protocol: 0 172.30.1.6:20001 [ 134.220733][ T3413] IPVS: starting estimator thread 0... [ 134.227029][ T6281] vfat: Unknown parameter 'shortn_me' [ 134.325282][ T6288] IPVS: using max 2544 ests per chain, 127200 per kthread [ 134.338582][ T6299] syzkaller1: entered promiscuous mode [ 134.351172][ T6299] syzkaller1: entered allmulticast mode [ 134.363262][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.373514][ T6299] loop5: detected capacity change from 0 to 512 [ 134.375587][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.394998][ T6299] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.765: inode has both inline data and extents flags [ 134.411673][ T6303] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.770'. [ 134.441347][ T6299] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.441509][ T6299] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.765: couldn't read orphan inode 15 (err -117) [ 134.450735][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 134.450751][ C1] EXT4-fs (loop5): initial error at time 1779638012: ext4_orphan_get:1397: inode 15 [ 134.450794][ C1] EXT4-fs (loop5): last error at time 1779638012: ext4_orphan_get:1397: inode 15 [ 134.488181][ T6299] loop5: lost filesystem error report for type 5 error -117 [ 134.489777][ T6299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.547957][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.555590][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.563236][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.571616][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.208051][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.229706][ T2983] ================================================================== [ 135.237827][ T2983] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 135.244883][ T2983] [ 135.247229][ T2983] read-write to 0xffff8881081f5600 of 4 bytes by task 3287 on cpu 0: [ 135.255313][ T2983] d_delete+0xbe/0xe0 [ 135.259331][ T2983] d_delete_notify+0x32/0x100 [ 135.264056][ T2983] vfs_unlink+0x289/0x490 [ 135.268428][ T2983] filename_unlinkat+0x1e2/0x410 [ 135.273408][ T2983] __se_sys_unlink+0x2b/0xe0 [ 135.278053][ T2983] __x64_sys_unlink+0x1f/0x30 [ 135.282761][ T2983] x64_sys_call+0x2eb6/0x3020 [ 135.287464][ T2983] do_syscall_64+0x12c/0x3b0 [ 135.292090][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.298008][ T2983] [ 135.300347][ T2983] read to 0xffff8881081f5600 of 4 bytes by task 2983 on cpu 1: [ 135.307901][ T2983] step_into_slowpath+0xea/0x4c0 [ 135.312870][ T2983] path_lookupat+0x330/0x500 [ 135.317490][ T2983] filename_lookup+0x190/0x390 [ 135.322307][ T2983] do_readlinkat+0x74/0x2f0 [ 135.326831][ T2983] __x64_sys_readlink+0x47/0x60 [ 135.331814][ T2983] x64_sys_call+0x2b51/0x3020 [ 135.336512][ T2983] do_syscall_64+0x12c/0x3b0 [ 135.341137][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.347043][ T2983] [ 135.349381][ T2983] value changed: 0x00300180 -> 0x00004080 [ 135.355134][ T2983] [ 135.357467][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 135.363630][ T2983] CPU: 1 UID: 0 PID: 2983 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 135.374086][ T2983] Tainted: [W]=WARN [ 135.377923][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.388026][ T2983] ================================================================== [ 135.412398][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.782'. [ 135.735736][ T6336] loop5: detected capacity change from 0 to 4096 [ 135.830687][ T6336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.054135][ T6339] netlink: 40 bytes leftover after parsing attributes in process `syz.5.781'. [ 136.308720][ T3739] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.222113][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 138.222132][ T28] audit: type=1400 audit(1779638016.486:835): avc: denied { write } for pid=6341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.260016][ T28] audit: type=1400 audit(1779638016.526:836): avc: denied { write } for pid=6352 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.357329][ T28] audit: type=1400 audit(1779638016.626:837): avc: denied { write } for pid=6356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.391048][ T28] audit: type=1400 audit(1779638016.656:838): avc: denied { write } for pid=6367 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.521154][ T28] audit: type=1400 audit(1779638017.786:839): avc: denied { write } for pid=6371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.556609][ T28] audit: type=1400 audit(1779638017.826:840): avc: denied { write } for pid=6382 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.953018][ T28] audit: type=1400 audit(1779638018.216:841): avc: denied { write } for pid=6385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.987538][ T28] audit: type=1400 audit(1779638018.256:842): avc: denied { write } for pid=6396 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1