last executing test programs: 2m47.273011374s ago: executing program 2 (id=1516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) statx(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0xfffffffffffffffe) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb01001800006394000000200000002000000003000000000000000100000d000000000000000002000000010000000000000c01000000006100"], &(0x7f0000000940)=""/222, 0x3b, 0xde, 0x1}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)='%-010d \x00'}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7fff}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m46.245137015s ago: executing program 2 (id=1536): close(0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="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", 0x54f}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) sendmsg$tipc(r1, &(0x7f0000000500)={0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_disconnect(r0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYRESDEC=r0, @ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffad3b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r9) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x4885}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r11, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd602a84350014060000000000000000000000000000000000fe0c0033804f52b46f787d000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2000090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1100, 0x0, 0x9}}}}}}}, 0x0) 2m44.641279563s ago: executing program 2 (id=1562): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8003, 0x400250}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r0, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) io_uring_enter(r1, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 2m44.603169036s ago: executing program 2 (id=1563): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") creat(&(0x7f0000000080)='./bus\x00', 0xcc) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(0x0, 0xe340, 0x103) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x5f4, &(0x7f0000000a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x400) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) getdents(r0, &(0x7f0000000080)=""/52, 0x34) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) syz_usb_disconnect(0xffffffffffffffff) pidfd_send_signal(r3, 0x2, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m43.103777364s ago: executing program 2 (id=1580): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000400"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 2m42.789189095s ago: executing program 2 (id=1585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket(0x2, 0x80805, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") 2m42.723345012s ago: executing program 32 (id=1585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket(0x2, 0x80805, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") 3.224279853s ago: executing program 3 (id=3674): close(0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="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", 0x5a9}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) sendmsg$tipc(r1, &(0x7f0000000500)={0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000200)="952bb3e006"}) syz_usb_disconnect(r0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYRESDEC=r0, @ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffad3b}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r9) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x4885}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r11, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd602a84350014060000000000000000000000000000000000fe0c0033804f52b46f787d000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2000090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1100, 0x0, 0x9}}}}}}}, 0x0) 2.44033039s ago: executing program 3 (id=3679): bind$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x30e, 0x9, 0xdf, 0x4, 0xb, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x35}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10, &(0x7f0000000400)={[], [{@obj_type={'obj_type', 0x3d, '\x01w\x94\x8c\xdd\xd1P\x87\xb5c\xd9F\xe6,'}}, {@permit_directio}, {@uid_lt}, {@obj_type={'obj_type', 0x3d, '\''}}, {@obj_user}, {@uid_lt}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}]}, 0xfc, 0x56f, &(0x7f0000000700)="$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") 2.384645095s ago: executing program 3 (id=3680): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x200000000000000) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)) open(&(0x7f0000000100)='./file0\x00', 0x100, 0xa5) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300030c0000000007000000000000020009001800000053bb46000000000003000600000000000200100000000000000000000000000002000100000000000000060d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) 2.332607671s ago: executing program 5 (id=3684): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x35}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r5, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r6}, 0x18) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10, &(0x7f0000000400)={[], [{@obj_type={'obj_type', 0x3d, '\x01w\x94\x8c\xdd\xd1P\x87\xb5c\xd9F\xe6,'}}, {@permit_directio}, {@uid_lt}, {@obj_type={'obj_type', 0x3d, '\''}}, {@obj_user}, {@uid_lt}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}]}, 0xfc, 0x56f, &(0x7f0000000700)="$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") 2.284120485s ago: executing program 5 (id=3686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getrusage(0x0, &(0x7f0000000900)) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000000680)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.845624488s ago: executing program 1 (id=3690): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f00000003c0)=""/151, 0x97}], 0x2, &(0x7f0000000c40)=[{&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000006c0)=""/208, 0xd0}, {&(0x7f0000000880)=""/215, 0xd7}, {&(0x7f0000000ac0)=""/206, 0xce}, {&(0x7f0000000bc0)=""/97, 0x61}], 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000002dc0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0xd6ab, @private2, 0xc3ca}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000400)='t', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000380)=0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x200000000}, 0x18) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) setsockopt(r3, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000004100000000000000010000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0340000001"], 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x41abcc9428181f53, 0xa}, {0x2, 0x10}, {0x0, 0xffe0}}}, 0x24}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r6, 0x0, 0xc9, 0x0, 0x0) 1.600787442s ago: executing program 1 (id=3691): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) statx(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb01001800006394000000200000002000000003000000000000000100000d000000000000000002000000010000000000000c01000000006100"], &(0x7f0000000940)=""/222, 0x3b, 0xde, 0x1}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7fff}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.507215622s ago: executing program 3 (id=3692): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7fff}, 0x18) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) close(r0) getpid() 1.438919179s ago: executing program 0 (id=3695): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[], 0x60}, 0x1, 0x7}, 0x0) 1.347697908s ago: executing program 0 (id=3696): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x35}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r5, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r6}, 0x18) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10, &(0x7f0000000400)={[], [{@obj_type={'obj_type', 0x3d, '\x01w\x94\x8c\xdd\xd1P\x87\xb5c\xd9F\xe6,'}}, {@permit_directio}, {@uid_lt}, {@obj_type={'obj_type', 0x3d, '\''}}, {@obj_user}, {@uid_lt}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}]}, 0xfc, 0x56f, &(0x7f0000000700)="$eJzs3d9rZFcdAPDvncxkk93oRO1DFVoXW9gtusmma9sg0l1BfCso9cG3NWZnQ9hJZsmP7iYUSfEPEERU8EWffBH8AwTZB98VoWDfxYqy6FbBgtor98dsstm5TbLJzJTJ5wNn5t57zr3fc+Ym99e5MzeAU+t8RFyLiLGIeCEimuX0Wplip0hZufcevLmYpSTS9PW/J5GU07JiyZ5lnitnmyjeelrf2r610G631srx2Y2V27PrW9uXllcWllpLrdUrV+Zenn9l/qX5yyfSzqxdr371Lz/6/i++9upvvnDnT9f/dvG7WZ2nyvxuO05a8bk0ss/ioXpErPUj2BCMle1pRPcFAICPsuwY/5MR8bn8+L8ZY/nRXLXxPcNJ32sHAAAAnIT06lT8N4lIjyYmjjgDAAAAMDy1/B7YpDZT3gswFbXazExxD+9TcbbW7qxvfP5mZ3P1RnGv7HQ0ajeX263LEeebxXiSjc89vKJQjL+Y52UpeeQe4B82J/P8mcVO+8YwLngAAADAKXRu3/n/v5r5+b9vcgIAAMComR52BQAAAIC+c/4PAAAAo+8Jzv/H+1EPAAAAoC++/tprWUq7z7++8cbW5q3OG5dutNZvzaxsLs4sdtZuzyx1Okvt9EzEykHLa3c6t78Yq5t3Zzda6xuz61vb11c6m6sb15cfeQQ2AAAAMECf+Oy9d5KI2PnSZJ6i27c/VjGD7wrAyKgdslyavbzb37oAg1W1mwdGX/3Ds93mCyOs/KH/ZNj1AIbnoA3ARFWJ3/ejNgAAQD9c+PS9d9Lk8f7/+u61AWBEHbb/Hxg9Ff3/aXPQFQEG7oD+f2CENdwBCKfewf3/FYr+/2sHR0jTA5cFAAD01VSektpM2Rc4FbX300JMRyO5udxuXY6Ij0fEH5uNM9n4XD5n4ksDAAAAAAAAAAAAAAAAAAAAAAAAAHBIaZpE+gTqTzQXAAAAMAwRtb8m5fO/LjSfn9p/fWA8eT9/FPAHaZre+enrP767sLGxNpdN/0czf3xgoZj+4sAvXwAAAMAp1KjM6T7lvzhPry4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMfx3oM3F7tpkHHvfyUipnvFr8dE/j4RjYg4+88k6nvmSyJi7ATi77wVEU/3ip9k1Yrpshb749ciYjKvRd/jP5Omac/4544dHU63e9n259pj/3/juyV6///Xi3T1uPGrt3+1h9u/sf3x68X272OHjPGZt381u2d0cnfwTJFf77396cZPKra/z/UKVn980re/ub1dVbf05xEXiv1PNvpI/L2xZjdWbs+ub21fWl5ZWGottVavXJl7ef6V+ZfmL8/eXG63yteeMX7wzK8/qIp//7cRZ8v9X3elp+WOZbp4+3LZ/oX97X8+G2hULXnX/96+++BTxWBj3yLi/lsRF5/rvf6fzt97fv4/+3eay/cDWf6Fcp+Q7BTDEXG+W/jZX/7h2cr2/ydbSubo6//iwU3PvfCN7/35kEUBgAFY39q+tdBut9ZOeqAeu1O+cyei/ZM0TQ83e3ZUevhYScTO/qzsAO6E25UdNVdk9Y4Vh13yU5VVfXcyoj9r59gDV49SOD1zpD+2ZOcj0MBTPDCe/0H+7lvD3jYBAAAna/fof9g1AQAAAAAAAAAAAAAAAAAAgNNrEL8rtj/mznCaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwof4fAAD//y/W0o0=") 1.341649128s ago: executing program 4 (id=3697): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x84}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x35}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@initdev, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r7}, 0x18) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 1.304434692s ago: executing program 0 (id=3698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x86c9460748f085ce}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000200)={0xe0000003}) poll(&(0x7f00000000c0)=[{r5, 0x1009}], 0x1, 0x8000007) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_TABLE={0x8, 0xf, 0x7ff}]}, 0x24}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) writev(r8, &(0x7f0000001a40)=[{&(0x7f0000001880)="64e7", 0x2}, {0x0}], 0x2) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) 1.253973547s ago: executing program 4 (id=3699): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 1.200138112s ago: executing program 5 (id=3700): r0 = syz_open_dev$hidraw(&(0x7f0000000440), 0x400, 0x87891931f7fce4fb) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000540)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0xa}, {{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f00000005c0)=""/113, 0x71}], 0x4, &(0x7f0000000480)}, 0x80000001}], 0x2, 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvTDY/mrzvm7S8vK+92IBIC9qkSVspItjitZT64+YpNmmpTZvSRDS1YAr1oogXD4InD9b/QgtePXj14MWDSCGI9GCl2pXZzKa72Wyy+bG7SfbzgUmemcnO852Eb55nn31mJoCONZx9SSMORsT1JGKwYl8h8p3DSz/34PdbF7IliWLx9d+SuPVBslB5rCT/PpC/+O/BSH5IIw501dY7O3/zysT09NSNfH107ur10dn5m0cvX524NHVp6tr4C+OnTp44eWrs2JbOr1BRPnvn7XcHPzr35ldfPErGvv7pXBKn43EeW3ZeK1/bu6Was9/ZcBSXPHyyNS19PbXFY+8UfwxW/44zycoN7FgXI6I7X/4fg9FV8dccjA9fbWtwQFMVkyi3UUDHSdbP/+7aTX3NCQZooXI/oPzefrX3wbXSJvdKgFZYPLM0SLaU+90RUc7/wtLYYPSVxgb6HyRV4zxJRGxtZG5JVsf33527ky1RZxwOaI6F2+VR7pXtf1LKzaHoK631P0ir8j+tWLLtr22y/uEV6/IfWmfhdkQ8lbf/PbHp/H9rk/XLfwAAAAAAANg+985ExPOrzf9Ll+f/9Kwy/2cgIk5vQ/3rf/6X3s8LyTZUB1RYPBPxUs38378qZwcPdeWf8/+7NB+gO714eXrqWET8JyKORHdvtj5WfdiqCcJHPznweb36K+f/ZUtWf3kuYH6o+4UVF+JOTsxNbM/ZQ2dbvB3xsDT/91C+pXr+T9b+JzXt/8evZAl+vcE6Djx793zVhl+e/HtYP/+BZil+GXF41et/nnS3k7XvzzFa6g+MlnsFtZ5+/9Nv6tUv/6F9sva/f+38700q79czu7Hj90TE8flCsd7+zfb/e5I3usrHz7w3MTd3YyyiJzlbu318YzHDXlXOh3K+ZPl/5Jm1x/+W+/8VebgvIhYarPN/jwd+rrdP+w/tk+X/5Nrt/1B1+7/RQl+M3x36Nr/FWI3zDbX/J0pt+pF8i/E/qFR7P45GE7Qt4QIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALpdGxL8iSUeWy2k6MhIxEBH/jf50emZ27rmLM+9cm8z2VT//f3BpPSk//3+oYn18xfrxiNgfEZ917Sutj1yYmZ5s98kDAAAAAAAAAAAAAAAAAADADjFQuua/2Lvy+v/Mr13tjg5oukL+Xb5D5yls+pXF3m0NBGi5zec/sNs1nv/dTY0DaL36+f/wUbGkpeEALaT/D51rk/nv4wLYA7T/0KkaHNPra3YcQDs03P4vNjcOAAAAAABgW+w/dO/HJCIWXtxXWjI9+T6T/WFvS9sdANA25vBC5yrMtDsCoF28xweS5dKfq17sX3/2f9KcgAAAAAAAAAAAAACAGocPuv4fOlUascYjvM3th71sjev/V0t+twuAPaT+oz8aafsTPQTYxbzHB9Zrx13/DwAAAAAAAAAAAAA7QN/NKxPT01M3Zud3X+HlnRHGxgoLEzsijG0tPF7vZ8qPmd/YkbsjYmecYKsL5VtwtDGMNv5PAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqvwTAAD//9ywLb8=") 1.111714241s ago: executing program 0 (id=3701): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f00000003c0)={0x1a, 0x30e, 0x9, 0xdf, 0x4, 0xb, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x84}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x35}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r8}, 0x18) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10, &(0x7f0000000400)={[], [{@obj_type={'obj_type', 0x3d, '\x01w\x94\x8c\xdd\xd1P\x87\xb5c\xd9F\xe6,'}}, {@permit_directio}, {@uid_lt={'uid<', r7}}, {@obj_type={'obj_type', 0x3d, '\''}}, {@obj_user}, {@uid_lt={'uid<', r7}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}]}, 0xfc, 0x56f, &(0x7f0000000700)="$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") 1.010717971s ago: executing program 0 (id=3702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x60, 0x30, 0x727, 0x70bd26, 0x1fc, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x25, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff3, 0xffffffff, 0x8ab3aec83569174b, 0x2, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40815}, 0x8094) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x9a, &(0x7f0000000f00)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "2c3e8f", 0x64, 0x2f, 0x1, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x3a, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1}, {}, {0x8, 0x88be, 0x2, {{0x8, 0x1, 0x1, 0x0, 0x1, 0x3, 0x4, 0x1}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0x5, 0x2, 0x96, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x2, {0x400, 0x8, 0x3, 0x1b, 0x1, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x200000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r5, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xffff}, {0xb, 0x4}, {0xfff3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000380)="ed5c1deb18abe544965aa6937f3b953afb12a58c3cc0dead1bbe2f54c7d00494ff616a7c201384c7f9bb1f80ece89adcddf9ddeeca9e5abd7d9733699c12ab2b35e620cbcd536eb76671ff14059039954de1e24cf5e26061f265169c8e0bc6558bc112cfab3d92eba22b3e94d5cac5b7f9113453751dfe9d00208f", 0x7b, 0x4000000, &(0x7f0000000300)={0xa, 0x4e23, 0x49, @local, 0x4}, 0x1c) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x8}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 993.854033ms ago: executing program 3 (id=3703): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00'], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 990.113783ms ago: executing program 4 (id=3704): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000a00ac03cdaa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x894}, 0x0) 896.205572ms ago: executing program 4 (id=3705): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{}, {0x0, 0x9}}, 0x0) timer_gettime(r5, &(0x7f0000000140)) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x56, r6}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000340)={@private1, 0x1c, r6}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8, 0x0, 0xb}, 0x18) r9 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff}) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@initdev, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r7}, 0x18) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 425.592778ms ago: executing program 4 (id=3707): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r1, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x4}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000001140)=@newchain={0xce4, 0x64, 0x300, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xd, 0xffe0}, {0xfff3, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x4}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xa}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xe4}}, @filter_kind_options=@f_flow={{0x9}, {0xc68, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xe, 0xfff3}}, @TCA_FLOW_XOR={0x8, 0x7, 0x9}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x10000}, @TCA_FLOW_POLICE={0xc44, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x9, 0x8, 0x5, 0x6, 0x8, 0x9, 0x7, 0x1e2, 0x7, 0x82fc, 0x8, 0x6bb, 0xffffff00, 0xfc8, 0x5, 0x7, 0x7a72, 0x7fffffff, 0x200, 0x5, 0xffffffff, 0x9, 0x9, 0x4, 0x5f, 0x1, 0xfffffff8, 0x1ff, 0x0, 0x7, 0x2, 0x200, 0xffffffb6, 0x5d2c, 0x0, 0x7, 0x44b, 0x0, 0x4, 0x6, 0x2, 0x9, 0x8, 0x6, 0x80000000, 0x9, 0xffffffff, 0x0, 0x4, 0x200, 0x51f, 0x6, 0x3ff, 0x9, 0x5, 0x7, 0x3, 0x9, 0x9, 0x9, 0x5, 0x4, 0x400, 0x5, 0x81, 0x10001, 0xd8d, 0x44c9e19f, 0x5, 0x4, 0x5, 0x5, 0x6, 0x8, 0xfffffffd, 0x7e70, 0x80000001, 0x8, 0x1, 0x7ff, 0x5, 0x1, 0x1, 0x5, 0xa2f, 0x4, 0x3ff, 0x0, 0x7, 0x20000000, 0x5, 0x2, 0x8, 0xd, 0x9, 0x6, 0x7fffffff, 0xffffffff, 0x0, 0x3, 0x0, 0xfffffff7, 0x3, 0x80000000, 0x2, 0x2aa, 0x400, 0x8, 0x2, 0x4, 0x3, 0x3, 0x4, 0x0, 0x4, 0x3, 0x3, 0x10001, 0x77, 0x7fffffff, 0x8, 0x2, 0x6, 0x0, 0xfffffff4, 0xa, 0xffff, 0x2, 0xff, 0x7, 0x1, 0x635c5f46, 0x6, 0x8, 0x0, 0x8167, 0x7, 0x6, 0xc, 0x7, 0x6, 0x9, 0x9, 0x4, 0xfffffffc, 0x1, 0xdf, 0x154f, 0x101, 0x8, 0x5, 0x4, 0xc5, 0x8, 0x8, 0x0, 0x5, 0x9b0f, 0x200, 0x3, 0x4, 0x9, 0x7fff, 0x9df, 0x5, 0x2, 0x0, 0x1, 0x0, 0x7, 0x10a81327, 0x2f6f74a8, 0x6, 0x80000001, 0x9, 0x9, 0xfffffff8, 0x3, 0xc9f, 0xad0, 0x8, 0x1, 0x0, 0xa39, 0x7, 0x1, 0x2, 0xffffffff, 0x9, 0x9, 0x8, 0x4, 0x8, 0xa, 0x6, 0x7, 0x8, 0x5d6, 0x6, 0x8, 0x4, 0x8, 0x0, 0x3, 0xfffffffd, 0x2, 0x8cab, 0x6, 0x3, 0x5, 0x6596, 0x0, 0x3, 0xc, 0x4, 0x6, 0x60000, 0x2, 0x7fff, 0x2, 0x2, 0x17, 0x2, 0x3, 0x5, 0x100, 0xfff, 0x9, 0x8, 0x9, 0xc47, 0x9, 0x8, 0x1010, 0xef5d, 0xb, 0x8, 0x6, 0x8eb, 0x1, 0xc, 0x5e, 0x8001, 0x0, 0x4, 0x9, 0x6, 0x3, 0xf, 0x4, 0xfffffffe, 0xffff, 0x1, 0x7f, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x200, 0x3, 0x2, 0x6, 0x2, 0x1000, 0x9, 0x2, 0x2, 0x1, 0x101, 0x0, 0x0, 0x1, 0x10000, 0x6, 0xb21, 0xfffffff8, 0x4, 0x6, 0x8, 0x40, 0x4, 0xb, 0x493cdbe6, 0xff, 0x6, 0x0, 0x5, 0x5, 0x7, 0x9, 0x7ff, 0x4278, 0x8, 0x8, 0x9, 0x91, 0x3, 0xfeb7, 0x6, 0x44, 0xd81c, 0x3, 0x3, 0x5, 0xffff, 0x10, 0x8, 0x7, 0x800, 0x7, 0x3, 0x1fb30e17, 0x2, 0x1, 0x0, 0xfffffffb, 0x4, 0x4, 0x5, 0x6, 0x4, 0xffff, 0x5, 0x7, 0x8, 0x89b, 0xe, 0xeec, 0x4, 0x2285bfca, 0xde, 0x8fb, 0x1, 0xd7, 0x2, 0x1, 0x363, 0xf, 0x9, 0x1, 0xc4500, 0x3, 0x8, 0x6, 0xe0000000, 0x7, 0x400, 0x1, 0x8, 0x9, 0xfffffffe, 0xfffffff2, 0x0, 0x4ea, 0x1, 0x9, 0x7517, 0xc, 0xf, 0x40, 0x2, 0xb19, 0x2000000, 0x7, 0x9, 0x9, 0x6, 0x100, 0x1, 0xfff, 0x0, 0x5, 0x110, 0xfffffffa, 0x665a20e0, 0x101, 0x8f, 0x200, 0x7fff, 0x2, 0x9, 0x3, 0x3d2ad3fd, 0x8, 0x7, 0xffffffff, 0x400, 0x5b6, 0x43, 0xe, 0x2, 0x5, 0xd, 0x3f8, 0x7c29, 0xf3fa, 0x3, 0x2, 0x2ba, 0x101, 0x6, 0x8, 0x4, 0xfffffbff, 0x3ff, 0x3, 0x7ff, 0x0, 0xffffff00, 0x9, 0x5, 0x8, 0x7, 0x4, 0x3f, 0x9, 0x1, 0x2, 0x292b0ed3, 0x9a3511aa, 0xffffffff, 0x58ec05d9, 0x67, 0x92800000, 0x8000, 0x60, 0x5, 0x3, 0xfff, 0x8001, 0x6, 0xfffffffa, 0x5, 0xfff, 0x7, 0x3, 0x8, 0x7f, 0x2efe, 0x4, 0xee19, 0xfffffffc, 0x0, 0x8001, 0x7f, 0x6eb9, 0x823, 0x81, 0xbcd6, 0x8, 0x5, 0x6, 0x80000000, 0x4, 0x5, 0x4, 0x4, 0x9, 0x0, 0x3, 0x2, 0xffffffc0, 0xf2, 0x1, 0x10000, 0xfffffffb, 0x3, 0x5, 0x8, 0x1f4, 0x9, 0x1, 0x7fffffff, 0x10, 0x4, 0x5, 0x4, 0x1d, 0x2, 0x2, 0x9, 0xfffffc01, 0x7, 0x1, 0x19a, 0x1, 0x800, 0x19bc, 0xdaa1, 0xfffffffd, 0x4, 0x2, 0xfff, 0x49, 0x5, 0xa89, 0x8, 0x8, 0x2, 0xfffffff3, 0x7fffffff, 0x7, 0x6, 0x80000001, 0xc, 0xa, 0x7, 0x5, 0x3, 0x6, 0xe, 0x3, 0x5, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x8, 0x1ff, 0x200, 0x66200000, 0x5, 0xfffffff8, 0x2, 0x4, 0x0, 0x7ff, 0x2, 0x3a, 0xffff, 0xe, 0x0, 0x2, 0x8000, 0x9, 0x1000, 0x8fcc, 0x1, 0x8, 0x7f, 0x2, 0x7, 0xc, 0x4, 0x80000001, 0x92b, 0x10001, 0x9, 0x4d, 0x1, 0xffff, 0x3, 0x2, 0x4, 0xe1da, 0x1, 0xffffffff, 0x1, 0x39, 0x4, 0xe, 0x57, 0x4, 0x2, 0x3, 0x5, 0xe53, 0x101, 0x1, 0x1e32, 0x59, 0xfffffff9, 0x6de, 0x5, 0x2f27, 0x7, 0x6, 0x4, 0x8, 0x74b579ed, 0x6, 0x80000000, 0x1, 0x2, 0x4, 0x10, 0x8, 0x1, 0x2e1, 0x9, 0x6, 0x9, 0x2, 0x2, 0x8, 0x3, 0x0, 0x5, 0x7ff, 0xa9b1, 0x7ff, 0x364, 0x8, 0x7f, 0x237, 0x0, 0x8001, 0x9, 0x3e6, 0xbe, 0x1ff, 0xfff, 0x400000, 0x92e9, 0x80000001, 0x8, 0x0, 0x4, 0xbc, 0x9, 0x7f, 0x9, 0x4, 0x7, 0x8, 0x5, 0x5, 0x1, 0xfffffffc, 0x8, 0x2, 0x7, 0x9, 0x7, 0x4, 0xa, 0x80, 0x3, 0x2, 0x8, 0xd2, 0x80000001, 0xc, 0x4edd, 0x1, 0x1, 0x5, 0x6, 0xff, 0x96e, 0xfffeffff, 0x5, 0xf, 0x58, 0x8, 0x1, 0x8, 0x1, 0x8, 0x81d, 0x4, 0x8, 0x6, 0xf, 0x4, 0x6, 0x8000, 0x10001, 0xffffffff, 0x80000000, 0x3ff, 0x4, 0xffff, 0x7, 0x9e8, 0x8, 0x7, 0x0, 0x3, 0x7, 0x7, 0x6, 0x0, 0x401, 0x5, 0x10001, 0x5, 0xa, 0x81, 0xbe, 0x3, 0x20, 0x8000, 0x0, 0x10001, 0x8, 0x5, 0x5, 0x4, 0xfffffffa, 0x2, 0x5f, 0x5, 0x1, 0x8, 0x3, 0x9, 0x4, 0x9, 0xe, 0xfffffffe, 0x4, 0x41d019ca, 0xc07, 0x1000, 0x10, 0x1, 0x4, 0xffffde25, 0x8000, 0x4, 0x10000, 0x4, 0x2, 0xc, 0x40, 0x7fffffff, 0x5, 0x8000, 0x68d, 0x60000000, 0x7f, 0x3, 0x1, 0x71d, 0xffff, 0x6, 0x3, 0x3, 0x2, 0x9, 0x800, 0x5, 0x7ff, 0xb, 0x0, 0xff, 0xd4e, 0x6, 0xffffff8b, 0xf9f7, 0x6, 0x80000001, 0x6, 0x8, 0x4, 0x6, 0x2, 0x4000101, 0xb78d, 0x9, 0xffffffff, 0x400, 0x6, 0x4, 0xd68b, 0x1, 0x2, 0x3, 0x2, 0x1ff, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x18a5}, @TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}]}}]}, 0xce4}}, 0x13fff4ddc3bdbddb) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) ptrace(0x10, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r7, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 399.805611ms ago: executing program 3 (id=3708): r0 = syz_open_dev$hidraw(&(0x7f0000000440), 0x400, 0x87891931f7fce4fb) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000540)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0xa}, {{&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/241, 0xf1}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f00000005c0)=""/113, 0x71}], 0x4, &(0x7f0000000480)}, 0x80000001}], 0x2, 0x20, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$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") 346.463436ms ago: executing program 5 (id=3709): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="600000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002001c0000000f00000006000100fe"], 0x60}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) 304.31306ms ago: executing program 5 (id=3710): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00'], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 227.631678ms ago: executing program 1 (id=3711): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000a00ac03cdaa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x894}, 0x0) 189.130962ms ago: executing program 1 (id=3712): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000c80)=""/237, 0x0, 0xed, 0x0, 0x800}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x3, @multicast, 'ip6gretap0\x00'}}, 0x80, 0x0}, 0x20048000) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10) setitimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, 0x0, 0x20008000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x12, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="85200000012c237303fad200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000a0ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000082a0c0001000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 51.089695ms ago: executing program 1 (id=3713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xf}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000880)={'vxcan1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000e40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000a00)={0x3c8, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x50d}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x7, 0xe5, 0x10}, {0x7, 0x2, 0x1, 0x1}, {0x5, 0x7, 0x1, 0xfb0a}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd865}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x1, 0x90, 0x1800}, {0xd6, 0x0, 0xc, 0x74}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5412}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) 50.648905ms ago: executing program 0 (id=3714): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7fff}, 0x18) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) close(r0) getpid() 16.322339ms ago: executing program 1 (id=3715): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) socket$inet(0x2, 0x2, 0x1) sendfile(r3, r3, 0x0, 0x800000009) 0s ago: executing program 5 (id=3716): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) kernel console output (not intermixed with test programs): in process `syz.3.3064'. [ 281.798124][T13181] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.806939][T13195] netlink: zone id is out of range [ 281.822262][T13195] netlink: zone id is out of range [ 281.829012][T13185] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.3062: lblock 0 mapped to illegal pblock 48 (length 1) [ 281.844120][T13195] netlink: zone id is out of range [ 281.850222][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 281.859223][T13195] netlink: zone id is out of range [ 281.865759][T13181] tipc: New replicast peer: 255.255.255.255 [ 281.866229][T13195] netlink: zone id is out of range [ 281.871900][T13181] tipc: Enabled bearer , priority 10 [ 281.877012][T13195] netlink: zone id is out of range [ 281.884985][T13181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3060'. [ 281.888893][T13185] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3062: Failed to acquire dquot type 0 [ 281.897086][T13181] tipc: Disabling bearer [ 281.911247][T13195] netlink: zone id is out of range [ 281.918781][T13195] netlink: zone id is out of range [ 281.924778][T13185] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 281.935005][T13195] netlink: zone id is out of range [ 281.935645][T13185] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3062: mark_inode_dirty error [ 281.955805][T13185] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 281.955945][T12770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.975273][T13185] EXT4-fs (loop5): 1 orphan inode deleted [ 281.981740][T13185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.982227][ T52] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 282.025181][ T52] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 282.049440][ T8282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.058981][ T8282] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 282.074188][ T8282] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 282.083772][ T8282] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 282.111563][T13202] loop1: detected capacity change from 0 to 1024 [ 282.137251][T13202] EXT4-fs: Ignoring removed bh option [ 282.147318][T13210] loop5: detected capacity change from 0 to 512 [ 282.152138][T13202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.157757][T13210] EXT4-fs: Ignoring removed nobh option [ 282.172794][T13210] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3069: iget: bad i_size value: 38620345925642 [ 282.186096][T13210] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3069: couldn't read orphan inode 15 (err -117) [ 282.199713][T13210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.445119][T13221] netlink: 'syz.4.3070': attribute type 21 has an invalid length. [ 282.770603][T13221] loop4: detected capacity change from 0 to 2048 [ 282.831266][T13221] Alternate GPT is invalid, using primary GPT. [ 282.837719][T13221] loop4: p2 p3 p7 [ 282.911717][T12770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.117281][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 283.117295][ T29] audit: type=1400 audit(1761506844.537:3467): avc: denied { create } for pid=13230 comm="syz.1.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 283.145643][ T3004] Alternate GPT is invalid, using primary GPT. [ 283.152183][ T3004] loop4: p2 p3 p7 [ 283.189509][ T29] audit: type=1400 audit(1761506844.587:3468): avc: denied { write } for pid=13230 comm="syz.1.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 283.489065][ T29] audit: type=1400 audit(1761506844.907:3469): avc: denied { create } for pid=13241 comm="syz.1.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 283.553640][ T29] audit: type=1400 audit(1761506844.947:3470): avc: denied { setopt } for pid=13241 comm="syz.1.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 283.603737][ T29] audit: type=1400 audit(1761506845.027:3471): avc: denied { create } for pid=13243 comm="syz.1.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 283.625558][ T29] audit: type=1400 audit(1761506845.047:3472): avc: denied { create } for pid=13243 comm="syz.1.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 283.645992][ T29] audit: type=1400 audit(1761506845.047:3473): avc: denied { write } for pid=13243 comm="syz.1.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 283.666349][ T29] audit: type=1400 audit(1761506845.047:3474): avc: denied { nlmsg_write } for pid=13243 comm="syz.1.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 283.725756][ T29] audit: type=1400 audit(1761506845.147:3475): avc: denied { create } for pid=13247 comm="syz.1.3081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 283.754742][ T29] audit: type=1400 audit(1761506845.177:3476): avc: denied { write } for pid=13245 comm="syz.4.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 283.814313][ T8282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.904701][T13262] loop5: detected capacity change from 0 to 512 [ 283.911925][T13262] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 283.937583][T13264] loop3: detected capacity change from 0 to 1024 [ 283.948096][T13264] EXT4-fs: Ignoring removed bh option [ 283.957951][T13264] EXT4-fs: inline encryption not supported [ 283.969423][T13264] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 283.980674][T13264] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 283.989825][T13264] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3088: lblock 2 mapped to illegal pblock 2 (length 1) [ 284.004085][T13264] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3088: lblock 0 mapped to illegal pblock 48 (length 1) [ 284.018522][T13264] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3088: Failed to acquire dquot type 0 [ 284.030068][T13264] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 284.041106][T13264] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3088: mark_inode_dirty error [ 284.053267][T13264] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 284.063604][T13264] EXT4-fs (loop3): 1 orphan inode deleted [ 284.069819][T13264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.082609][ T1729] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 284.096968][ T1729] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 284.112237][T13267] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 284.120653][T13267] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 284.130180][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.140206][ T3318] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 284.155847][ T3318] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 284.166832][ T3318] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 284.182987][T13272] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 284.211765][T13274] loop3: detected capacity change from 0 to 512 [ 284.221347][T13274] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 284.464508][T13286] loop3: detected capacity change from 0 to 512 [ 284.475969][T13286] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 284.548263][T13295] loop3: detected capacity change from 0 to 1024 [ 284.555841][T13295] EXT4-fs: Ignoring removed bh option [ 284.561573][T13295] EXT4-fs: inline encryption not supported [ 284.567920][T13295] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 284.579335][T13295] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 284.605504][T13295] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3100: lblock 2 mapped to illegal pblock 2 (length 1) [ 284.627831][T13295] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3100: lblock 0 mapped to illegal pblock 48 (length 1) [ 284.674848][T13305] loop4: detected capacity change from 0 to 1024 [ 284.679605][T13295] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3100: Failed to acquire dquot type 0 [ 284.681902][T13305] EXT4-fs: Ignoring removed bh option [ 284.717721][T13295] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 284.729205][T13305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.746695][T13295] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3100: mark_inode_dirty error [ 284.758929][T13295] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 284.775664][T13312] netlink: 'syz.5.3105': attribute type 1 has an invalid length. [ 284.779549][T13295] EXT4-fs (loop3): 1 orphan inode deleted [ 284.796279][T13312] bond4: entered promiscuous mode [ 284.799764][T13295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.801824][T13312] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.820519][ T1729] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 284.847834][ T1729] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 284.873587][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.883765][ T3318] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 284.901239][T13312] net_ratelimit: 53 callbacks suppressed [ 284.901253][T13312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.923478][T13316] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 284.932200][ T3318] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 284.953811][ T3318] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 284.976449][T13312] bond4: (slave bridge4): making interface the new active one [ 284.984044][T13312] bridge4: entered promiscuous mode [ 285.028440][T13312] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 285.029876][T13321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13321 comm=syz.5.3105 [ 285.214740][T13329] loop5: detected capacity change from 0 to 512 [ 285.222694][T13329] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 285.435673][T13334] loop1: detected capacity change from 0 to 4096 [ 285.447177][T13334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.470212][T12770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.498417][T12517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.536176][T13339] loop4: detected capacity change from 0 to 4096 [ 285.554353][T13339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.594845][T12517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.646443][T13346] loop4: detected capacity change from 0 to 4096 [ 285.659017][T13346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.688738][T12517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.782536][T13348] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 285.790827][T13348] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 285.889103][T13344] __nla_validate_parse: 9 callbacks suppressed [ 285.889118][T13344] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 285.904585][T13344] IPVS: Error connecting to the multicast addr [ 285.922211][T13368] loop3: detected capacity change from 0 to 1024 [ 285.931706][T13372] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3127'. [ 285.932875][T13368] EXT4-fs: Ignoring removed bh option [ 285.963382][T13374] tipc: Started in network mode [ 285.968465][T13374] tipc: Node identity ac14140f, cluster identity 4711 [ 285.970909][T13368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.975978][T13374] tipc: New replicast peer: 255.255.255.255 [ 285.993749][T13374] tipc: Enabled bearer , priority 10 [ 286.011868][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3128'. [ 286.020846][T13374] tipc: Disabling bearer [ 286.041993][T13378] tipc: New replicast peer: 255.255.255.255 [ 286.048045][T13378] tipc: Enabled bearer , priority 10 [ 286.054544][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3129'. [ 286.063604][T13378] tipc: Disabling bearer [ 286.246634][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3133'. [ 286.307903][T13394] netlink: 'syz.4.3135': attribute type 1 has an invalid length. [ 286.334411][T13394] bond1: entered promiscuous mode [ 286.340129][T13394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.358021][T13394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.380623][T13394] bond1: (slave bridge1): making interface the new active one [ 286.388149][T13394] bridge1: entered promiscuous mode [ 286.394972][T13394] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 286.405961][T13394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13394 comm=syz.4.3135 [ 286.591687][T13402] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3138'. [ 286.726386][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.800042][T13412] SELinux: policydb version 0 does not match my version range 15-35 [ 286.808341][T13412] SELinux: failed to load policy [ 286.823832][T13407] loop5: detected capacity change from 0 to 512 [ 286.863044][T13407] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 286.902755][T13414] loop3: detected capacity change from 0 to 512 [ 286.939996][T13414] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 287.265708][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.325736][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.427191][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.444685][T13439] loop1: detected capacity change from 0 to 1024 [ 287.453793][T13440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3150'. [ 287.480694][T13423] chnl_net:caif_netlink_parms(): no params data found [ 287.496197][T13439] EXT4-fs: Ignoring removed bh option [ 287.517577][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.530907][T13439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.568385][T13423] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.575547][T13423] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.593465][T13423] bridge_slave_0: entered allmulticast mode [ 287.600759][T13423] bridge_slave_0: entered promiscuous mode [ 287.607638][T13423] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.614968][T13423] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.622688][T13423] bridge_slave_1: entered allmulticast mode [ 287.630898][T13423] bridge_slave_1: entered promiscuous mode [ 287.648664][T13456] netlink: 'syz.5.3155': attribute type 1 has an invalid length. [ 287.663668][T13423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.678245][T13456] bond5: entered promiscuous mode [ 287.683930][T13456] 8021q: adding VLAN 0 to HW filter on device bond5 [ 287.703652][T13423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.732917][T13423] team0: Port device team_slave_0 added [ 287.739824][T13423] team0: Port device team_slave_1 added [ 287.752255][T13456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.784801][T13456] bond5: (slave bridge5): making interface the new active one [ 287.792330][T13456] bridge5: entered promiscuous mode [ 287.799556][T13456] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 287.816169][T13423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.823256][T13423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.849261][T13423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.862778][T13463] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3157'. [ 287.882963][ T42] bridge0: port 3(batadv0) entered disabled state [ 287.898204][ T42] bridge_slave_1: left allmulticast mode [ 287.904019][ T42] bridge_slave_1: left promiscuous mode [ 287.909850][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.926398][ T42] bridge_slave_0: left allmulticast mode [ 287.932282][ T42] bridge_slave_0: left promiscuous mode [ 287.938036][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.100785][ T42] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 288.108881][ T42] bridge2 (unregistering): left promiscuous mode [ 288.164115][ T42] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 288.180505][ T42] bridge3 (unregistering): left promiscuous mode [ 288.194870][T13485] loop4: detected capacity change from 0 to 512 [ 288.202664][T12770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.216089][T13485] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 288.244660][ T42] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 288.254990][ T42] bridge4 (unregistering): left promiscuous mode [ 288.261621][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 288.261634][ T29] audit: type=1326 audit(1761506849.677:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 288.291466][ T29] audit: type=1326 audit(1761506849.677:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 288.293740][T13487] SELinux: policydb version 0 does not match my version range 15-35 [ 288.315141][ T29] audit: type=1326 audit(1761506849.677:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 288.315169][ T29] audit: type=1326 audit(1761506849.677:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 288.315214][ T29] audit: type=1326 audit(1761506849.677:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 288.315240][ T29] audit: type=1326 audit(1761506849.687:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 288.315311][ T29] audit: type=1326 audit(1761506849.687:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 288.315333][ T29] audit: type=1326 audit(1761506849.687:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 288.324092][T13487] SELinux: failed to load policy [ 288.346813][ T29] audit: type=1326 audit(1761506849.687:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 288.346907][ T29] audit: type=1326 audit(1761506849.687:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13486 comm="syz.4.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 288.494610][T13470] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 288.538487][T13490] loop4: detected capacity change from 0 to 512 [ 288.557960][T13490] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 288.582092][ T42] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 288.598856][ T42] bridge5 (unregistering): left promiscuous mode [ 288.654404][T13500] loop4: detected capacity change from 0 to 2048 [ 288.663027][ T42] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 288.671551][ T42] bridge6 (unregistering): left promiscuous mode [ 288.682264][T13500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.706840][T12517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.717129][ T42] bond7 (unregistering): (slave bridge7): Releasing backup interface [ 288.725301][ T42] bridge7 (unregistering): left promiscuous mode [ 288.767055][ T42] bond8 (unregistering): (slave bridge8): Releasing backup interface [ 288.775370][ T42] bridge8 (unregistering): left promiscuous mode [ 288.820581][ T42] bond11 (unregistering): (slave bridge9): Releasing backup interface [ 288.839042][ T42] bridge9 (unregistering): left promiscuous mode [ 288.901680][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.911933][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.922958][ T42] bond0 (unregistering): Released all slaves [ 288.931889][ T42] bond1 (unregistering): Released all slaves [ 288.940735][ T42] bond2 (unregistering): Released all slaves [ 288.949552][ T42] bond3 (unregistering): Released all slaves [ 288.958492][ T42] bond4 (unregistering): Released all slaves [ 288.967372][ T42] bond5 (unregistering): Released all slaves [ 288.978222][ T42] bond6 (unregistering): Released all slaves [ 288.987441][ T42] bond7 (unregistering): Released all slaves [ 288.996542][ T42] bond8 (unregistering): Released all slaves [ 289.007943][ T42] bond9 (unregistering): Released all slaves [ 289.016524][ T42] bond10 (unregistering): Released all slaves [ 289.025719][ T42] bond11 (unregistering): Released all slaves [ 289.034994][ T42] bond12 (unregistering): Released all slaves [ 289.043841][T13423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.050834][T13423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.076767][T13423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.093645][T13470] IPVS: Error connecting to the multicast addr [ 289.114395][ T23] syz0: Port: 1 Link DOWN [ 289.179796][T13513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3168'. [ 289.247189][T13423] hsr_slave_0: entered promiscuous mode [ 289.247658][T13516] loop1: detected capacity change from 0 to 512 [ 289.265380][T13516] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 289.273255][T13423] hsr_slave_1: entered promiscuous mode [ 289.311628][T13423] debugfs: 'hsr0' already exists in 'hsr' [ 289.317378][T13423] Cannot create hsr debugfs directory [ 289.328920][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.336352][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.350699][T13527] loop4: detected capacity change from 0 to 1024 [ 289.357622][T13527] EXT4-fs: Ignoring removed bh option [ 289.379688][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.387171][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.402498][T13527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.422761][ T42] veth1_macvtap: left promiscuous mode [ 289.428250][ T42] veth0_macvtap: left promiscuous mode [ 289.439637][ T42] veth1_vlan: left promiscuous mode [ 289.444884][ T42] veth0_vlan: left promiscuous mode [ 289.450816][T13532] loop5: detected capacity change from 0 to 512 [ 289.482733][T13532] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 289.563964][ T42] team0 (unregistering): Port device team_slave_1 removed [ 289.578303][ T42] team0 (unregistering): Port device team_slave_0 removed [ 289.598619][ T3460] smc: removing ib device syz0 [ 289.982401][T13584] netlink: 'syz.1.3179': attribute type 1 has an invalid length. [ 289.995579][T13584] bond1: entered promiscuous mode [ 290.000962][T13584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.019562][T13584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.040801][T13584] bond1: (slave bridge1): making interface the new active one [ 290.048300][T13584] bridge1: entered promiscuous mode [ 290.055167][T13584] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 290.134879][T13591] loop1: detected capacity change from 0 to 512 [ 290.153202][T13423] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 290.165089][T12517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.178190][T13423] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 290.186198][T13591] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 290.210607][T13423] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 290.219322][T13423] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 290.234826][T13546] IPVS: Error connecting to the multicast addr [ 290.277221][T13615] loop1: detected capacity change from 0 to 512 [ 290.284216][T13615] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 290.286798][T13423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.307946][T13423] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.320860][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.327959][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.356091][T13423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.366518][T13423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.387164][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.394337][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.485378][T13423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.521913][T13641] loop1: detected capacity change from 0 to 512 [ 290.538951][T13641] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 290.584389][T13423] veth0_vlan: entered promiscuous mode [ 290.604834][T13423] veth1_vlan: entered promiscuous mode [ 290.623036][T13651] netlink: 'syz.4.3190': attribute type 1 has an invalid length. [ 290.628562][T13423] veth0_macvtap: entered promiscuous mode [ 290.657252][T13651] bond2: entered promiscuous mode [ 290.662860][T13651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 290.672475][T13423] veth1_macvtap: entered promiscuous mode [ 290.684575][T13423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.694221][T13651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.718926][T13651] bond2: (slave bridge2): making interface the new active one [ 290.726555][T13651] bridge2: entered promiscuous mode [ 290.733155][T13651] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 290.753087][T13423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.770775][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.773033][T13659] loop4: detected capacity change from 0 to 512 [ 290.790984][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.800167][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.809779][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.829156][T13659] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 290.895766][T13666] loop5: detected capacity change from 0 to 512 [ 290.905428][T13666] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 290.907873][T13672] __nla_validate_parse: 5 callbacks suppressed [ 290.907886][T13672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3198'. [ 291.061867][T13668] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 291.070148][T13668] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 291.101091][T13682] loop4: detected capacity change from 0 to 1024 [ 291.101714][T13682] EXT4-fs: Ignoring removed bh option [ 291.126873][T13682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.178236][T13692] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 291.209913][T13670] infiniband syz0: set active [ 291.215785][T13670] infiniband syz0: added bond_slave_0 [ 291.238376][T13697] loop1: detected capacity change from 0 to 1024 [ 291.279988][T13697] EXT4-fs: Ignoring removed bh option [ 291.287495][T13697] EXT4-fs: inline encryption not supported [ 291.290462][T13670] RDS/IB: syz0: added [ 291.297822][T13670] smc: adding ib device syz0 with port count 1 [ 291.306630][T13670] smc: ib device syz0 port 1 has no pnetid [ 291.317921][T13697] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 291.336872][T13697] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 291.350603][T13697] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.3204: lblock 2 mapped to illegal pblock 2 (length 1) [ 291.369690][T13697] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.3204: lblock 0 mapped to illegal pblock 48 (length 1) [ 291.405867][T13697] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3204: Failed to acquire dquot type 0 [ 291.436675][T13697] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 291.473167][T13697] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.3204: mark_inode_dirty error [ 291.516350][T13697] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 291.536717][T13697] EXT4-fs (loop1): 1 orphan inode deleted [ 291.546412][T13697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.559105][ T52] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 291.574350][ T52] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 291.670708][T12770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.690968][T12770] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 291.754714][T12770] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 291.774426][T12770] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 291.829911][T12517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.839794][T13707] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 291.848269][T13707] IPVS: Error connecting to the multicast addr [ 291.938436][T13714] loop4: detected capacity change from 0 to 512 [ 291.958843][T13714] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 291.997624][T13716] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3210'. [ 292.068740][T13718] loop4: detected capacity change from 0 to 4096 [ 292.095521][T13718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.327260][T12517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.340354][T13712] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 292.348930][T13712] IPVS: Error connecting to the multicast addr [ 292.567347][T13734] loop5: detected capacity change from 0 to 2048 [ 292.616031][T13738] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3217'. [ 292.625041][T13738] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3217'. [ 292.650676][T13740] loop5: detected capacity change from 0 to 1024 [ 292.657278][T13740] EXT4-fs: Ignoring removed bh option [ 292.663123][T13740] EXT4-fs: inline encryption not supported [ 292.669245][T13740] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 292.680827][T13740] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 292.689866][T13740] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.3218: lblock 2 mapped to illegal pblock 2 (length 1) [ 292.704067][T13740] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.3218: lblock 0 mapped to illegal pblock 48 (length 1) [ 292.718562][T13740] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3218: Failed to acquire dquot type 0 [ 292.730062][T13740] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 292.739677][T13740] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3218: mark_inode_dirty error [ 292.751182][T13740] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 292.762070][T13740] EXT4-fs (loop5): 1 orphan inode deleted [ 292.790396][ T58] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 292.804955][ T58] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 292.817712][ T8282] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 292.830688][ T8282] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 292.840545][ T8282] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 292.886736][T13745] loop5: detected capacity change from 0 to 512 [ 292.896291][T13745] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 292.933143][T13747] loop5: detected capacity change from 0 to 512 [ 292.942645][T13747] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 292.985178][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'. [ 293.002349][T13749] netlink: 34 bytes leftover after parsing attributes in process `syz.4.3223'. [ 293.021856][T13755] loop5: detected capacity change from 0 to 512 [ 293.030550][T13753] loop3: detected capacity change from 0 to 1024 [ 293.039326][T13755] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.067273][ T42] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 293.082353][T13753] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 293.098257][T13761] loop1: detected capacity change from 0 to 512 [ 293.098389][ T42] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 293.109935][T13761] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 293.127690][T13753] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 293.138151][T13755] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 293.168846][T13755] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.170247][T13768] loop4: detected capacity change from 0 to 1024 [ 293.182222][T13753] EXT4-fs (loop3): failed to initialize system zone (-117) [ 293.185922][ T31] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 293.201860][T13753] EXT4-fs (loop3): mount failed [ 293.216320][T13768] EXT4-fs: Ignoring removed bh option [ 293.226081][ T31] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 293.241261][T13768] EXT4-fs: inline encryption not supported [ 293.266890][T13768] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 293.296581][T13768] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 293.309512][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 293.309525][ T29] audit: type=1326 audit(1761506854.737:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.3.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 293.316379][T13777] loop3: detected capacity change from 0 to 512 [ 293.339209][ T29] audit: type=1326 audit(1761506854.737:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.3.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 293.352422][T13777] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 293.369003][ T29] audit: type=1326 audit(1761506854.737:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.3.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 293.369099][ T29] audit: type=1326 audit(1761506854.737:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.3.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 293.369120][ T29] audit: type=1326 audit(1761506854.737:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.3.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 293.369158][ T29] audit: type=1326 audit(1761506854.737:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.3.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 293.369177][ T29] audit: type=1326 audit(1761506854.737:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.3.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 293.489348][T13768] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3230: lblock 2 mapped to illegal pblock 2 (length 1) [ 293.494956][ T29] audit: type=1326 audit(1761506854.737:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.3.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 293.509200][T13768] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 293.532252][ T29] audit: type=1326 audit(1761506854.737:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13776 comm="syz.3.3233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 293.564777][T13768] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3230: lblock 0 mapped to illegal pblock 48 (length 1) [ 293.591204][T13768] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3230: Failed to acquire dquot type 0 [ 293.604942][T13768] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 293.614863][T13768] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3230: mark_inode_dirty error [ 293.626447][T13768] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 293.636819][T13768] EXT4-fs (loop4): 1 orphan inode deleted [ 293.649643][ T58] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 293.664103][ T58] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 293.761317][T12517] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 293.774625][T12517] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 293.789337][T12517] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 293.999891][T13796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3238'. [ 294.414982][T13803] tipc: New replicast peer: 255.255.255.255 [ 294.421227][T13803] tipc: Enabled bearer , priority 10 [ 294.483313][T13805] loop5: detected capacity change from 0 to 1024 [ 294.499977][T13808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3239'. [ 294.509011][T13808] tipc: Disabling bearer [ 294.527510][T13807] loop4: detected capacity change from 0 to 2048 [ 294.534480][T13805] EXT4-fs: Ignoring removed bh option [ 294.570042][T13805] EXT4-fs: inline encryption not supported [ 294.659773][T13805] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 294.685473][T13805] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 294.700259][T13805] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.3241: lblock 2 mapped to illegal pblock 2 (length 1) [ 294.723048][T13812] loop1: detected capacity change from 0 to 4096 [ 294.769970][T13805] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.3241: lblock 0 mapped to illegal pblock 48 (length 1) [ 294.799455][T13805] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3241: Failed to acquire dquot type 0 [ 294.818578][T13820] loop3: detected capacity change from 0 to 512 [ 294.853641][T13820] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 294.871090][T13805] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 294.881265][T13805] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3241: mark_inode_dirty error [ 294.893643][T13822] tipc: Started in network mode [ 294.898526][T13822] tipc: Node identity ac14140f, cluster identity 4711 [ 294.905408][T13805] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 294.915766][T13805] EXT4-fs (loop5): 1 orphan inode deleted [ 294.923659][T13822] tipc: New replicast peer: 255.255.255.255 [ 294.929778][T13822] tipc: Enabled bearer , priority 10 [ 294.930436][ T58] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 294.963646][T13822] tipc: Disabling bearer [ 294.979298][ T58] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 295.061324][ T8282] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 295.101041][ T8282] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 295.120962][ T8282] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 295.151238][T13837] netlink: 'syz.1.3255': attribute type 1 has an invalid length. [ 295.185360][T13837] bond2: entered promiscuous mode [ 295.223093][T13837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 295.247331][T13849] loop4: detected capacity change from 0 to 512 [ 295.261637][T13837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.284944][T13849] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 295.289904][T13844] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 295.346015][T13837] bond2: (slave bridge2): making interface the new active one [ 295.353568][T13837] bridge2: entered promiscuous mode [ 295.380369][T13837] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 295.389550][T13847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13847 comm=syz.1.3255 [ 295.669583][T13874] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 295.677895][T13874] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 295.728839][T13887] loop5: detected capacity change from 0 to 4096 [ 295.983786][T13892] loop5: detected capacity change from 0 to 1024 [ 296.009679][T13892] EXT4-fs: Ignoring removed bh option [ 296.015139][T13892] EXT4-fs: inline encryption not supported [ 296.059880][T13892] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 296.094056][T13892] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 296.117154][T13892] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.3274: lblock 2 mapped to illegal pblock 2 (length 1) [ 296.131876][T13892] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.3274: lblock 0 mapped to illegal pblock 48 (length 1) [ 296.146302][T13892] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3274: Failed to acquire dquot type 0 [ 296.157856][T13892] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 296.167349][T13892] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3274: mark_inode_dirty error [ 296.178879][T13892] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 296.189402][T13892] EXT4-fs (loop5): 1 orphan inode deleted [ 296.199739][ T58] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 296.260632][ T58] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 296.307733][T13898] __nla_validate_parse: 8 callbacks suppressed [ 296.307750][T13898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3276'. [ 296.322911][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3276'. [ 296.329004][T13895] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 296.340043][T13895] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 296.377306][ T8282] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 296.393492][ T8282] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 296.403225][ T8282] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 296.574043][T13919] loop3: detected capacity change from 0 to 512 [ 296.582521][T13919] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 296.654892][T13924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3288'. [ 296.663932][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3288'. [ 296.722355][T13922] loop3: detected capacity change from 0 to 1024 [ 296.736182][T13922] EXT4-fs: Ignoring removed bh option [ 296.768125][T13926] loop1: detected capacity change from 0 to 512 [ 296.779324][T13926] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 296.960714][T13946] netlink: 'syz.0.3296': attribute type 1 has an invalid length. [ 296.973217][T13946] bond1: entered promiscuous mode [ 296.978452][T13946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.999962][T13946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.024133][T13946] bond1: (slave bridge1): making interface the new active one [ 297.031745][T13946] bridge1: entered promiscuous mode [ 297.039018][T13946] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 297.050253][T13946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13946 comm=syz.0.3296 [ 297.096049][T13933] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 297.104696][T13933] IPVS: Error connecting to the multicast addr [ 297.479497][ T5604] Bluetooth: hci0: command 0x1003 tx timeout [ 297.485631][ T4467] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 297.515908][T13958] FAULT_INJECTION: forcing a failure. [ 297.515908][T13958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.529085][T13958] CPU: 0 UID: 0 PID: 13958 Comm: syz.3.3300 Not tainted syzkaller #0 PREEMPT(voluntary) [ 297.529165][T13958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.529173][T13958] Call Trace: [ 297.529220][T13958] [ 297.529225][T13958] __dump_stack+0x1d/0x30 [ 297.529238][T13958] dump_stack_lvl+0xe8/0x140 [ 297.529250][T13958] dump_stack+0x15/0x1b [ 297.529259][T13958] should_fail_ex+0x265/0x280 [ 297.529270][T13958] should_fail+0xb/0x20 [ 297.529395][T13958] should_fail_usercopy+0x1a/0x20 [ 297.529413][T13958] _copy_from_user+0x1c/0xb0 [ 297.529455][T13958] sock_do_ioctl+0xe6/0x220 [ 297.529470][T13958] sock_ioctl+0x41b/0x610 [ 297.529517][T13958] ? __pfx_sock_ioctl+0x10/0x10 [ 297.529529][T13958] __se_sys_ioctl+0xce/0x140 [ 297.529605][T13958] __x64_sys_ioctl+0x43/0x50 [ 297.529616][T13958] x64_sys_call+0x1816/0x3000 [ 297.529708][T13958] do_syscall_64+0xd2/0x200 [ 297.529719][T13958] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 297.529743][T13958] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 297.529845][T13958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.529857][T13958] RIP: 0033:0x7f13fdcbefc9 [ 297.529866][T13958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.529877][T13958] RSP: 002b:00007f13fc71f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.529961][T13958] RAX: ffffffffffffffda RBX: 00007f13fdf15fa0 RCX: 00007f13fdcbefc9 [ 297.529967][T13958] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000007 [ 297.529997][T13958] RBP: 00007f13fc71f090 R08: 0000000000000000 R09: 0000000000000000 [ 297.530025][T13958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.530036][T13958] R13: 00007f13fdf16038 R14: 00007f13fdf15fa0 R15: 00007ffe38194878 [ 297.530054][T13958] [ 297.860443][T13976] SELinux: policydb version 0 does not match my version range 15-35 [ 297.868682][T13976] SELinux: failed to load policy [ 299.896399][T13987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3310'. [ 299.905484][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3310'. [ 300.099846][T13982] netlink: 'syz.5.3309': attribute type 1 has an invalid length. [ 300.184712][T13996] SELinux: policydb version 0 does not match my version range 15-35 [ 300.197548][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 300.197562][ T29] audit: type=1326 audit(1761506861.607:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 300.205682][T13982] bond6: entered promiscuous mode [ 300.227254][ T29] audit: type=1326 audit(1761506861.607:4458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 300.232852][T13982] 8021q: adding VLAN 0 to HW filter on device bond6 [ 300.255740][ T29] audit: type=1326 audit(1761506861.607:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 300.285808][ T29] audit: type=1326 audit(1761506861.607:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 300.309248][ T29] audit: type=1326 audit(1761506861.607:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 300.332846][ T29] audit: type=1326 audit(1761506861.607:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 300.334158][T13996] SELinux: failed to load policy [ 300.356344][ T29] audit: type=1326 audit(1761506861.607:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 300.356380][ T29] audit: type=1326 audit(1761506861.607:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 300.371178][T14002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.384920][ T29] audit: type=1326 audit(1761506861.607:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 300.447677][ T29] audit: type=1326 audit(1761506861.607:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.0.3315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 300.549178][T13982] bond6: (slave bridge6): making interface the new active one [ 300.556784][T13982] bridge6: entered promiscuous mode [ 300.620681][T13982] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 300.639578][T13982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13982 comm=syz.5.3309 [ 300.666686][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3323'. [ 300.758722][T14025] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 300.767006][T14025] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 300.888777][T14027] loop3: detected capacity change from 0 to 512 [ 301.002313][T14030] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3325'. [ 301.011381][T14030] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3325'. [ 301.026376][T14027] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 301.567139][T14048] __nla_validate_parse: 1 callbacks suppressed [ 301.567154][T14048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3333'. [ 301.659113][T14053] loop5: detected capacity change from 0 to 1024 [ 301.708929][T14053] EXT4-fs: Ignoring removed bh option [ 301.741029][T14057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.849233][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'. [ 301.858167][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'. [ 301.885755][T14067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3340'. [ 301.894783][T14067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3340'. [ 301.903768][T14067] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3340'. [ 301.940730][T14069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3341'. [ 301.949784][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3341'. [ 302.008945][T14075] loop3: detected capacity change from 0 to 4096 [ 302.038423][T14078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3343'. [ 302.047538][T14078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3343'. [ 302.257637][T14085] loop3: detected capacity change from 0 to 512 [ 302.264402][T14085] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 302.333942][T14093] loop3: detected capacity change from 0 to 2048 [ 302.372294][ T3306] Alternate GPT is invalid, using primary GPT. [ 302.378694][ T3306] loop3: p2 p3 p7 [ 302.388290][T14093] Alternate GPT is invalid, using primary GPT. [ 302.394692][T14093] loop3: p2 p3 p7 [ 302.433066][ T3591] udevd[3591]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 302.446000][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 302.456009][ T3578] udevd[3578]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 302.472532][ T3591] udevd[3591]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 302.491434][ T3578] udevd[3578]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 302.502536][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 302.555432][T14102] loop5: detected capacity change from 0 to 512 [ 302.568555][T14102] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 302.683496][T14110] netlink: 'syz.5.3357': attribute type 1 has an invalid length. [ 302.697022][T14110] bond7: entered promiscuous mode [ 302.702373][T14110] 8021q: adding VLAN 0 to HW filter on device bond7 [ 302.716490][T14110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.738432][T14110] bond7: (slave bridge7): making interface the new active one [ 302.746083][T14110] bridge7: entered promiscuous mode [ 302.752694][T14110] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 302.763204][T14110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14110 comm=syz.5.3357 [ 302.950284][T14131] loop1: detected capacity change from 0 to 2048 [ 302.987927][ T3306] Alternate GPT is invalid, using primary GPT. [ 302.994229][ T3306] loop1: p2 p3 p7 [ 303.012860][T14131] Alternate GPT is invalid, using primary GPT. [ 303.019286][T14131] loop1: p2 p3 p7 [ 303.372971][ T3578] udevd[3578]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 303.384911][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 303.385772][ T3591] udevd[3591]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 303.410695][T14141] netlink: 'syz.4.3363': attribute type 21 has an invalid length. [ 303.632765][T14135] loop4: detected capacity change from 0 to 2048 [ 303.662634][T14145] netlink: 'syz.0.3370': attribute type 1 has an invalid length. [ 303.681701][T14145] bond2: entered promiscuous mode [ 303.687062][T14145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.705829][T14145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.724004][ T3306] Alternate GPT is invalid, using primary GPT. [ 303.729455][T14145] bond2: (slave bridge2): making interface the new active one [ 303.730682][ T3306] loop4: p2 p3 p7 [ 303.737729][T14145] bridge2: entered promiscuous mode [ 303.748175][T14145] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 303.764265][T14145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14145 comm=syz.0.3370 [ 303.777175][T14135] Alternate GPT is invalid, using primary GPT. [ 303.783665][T14135] loop4: p2 p3 p7 [ 304.780954][T14157] loop5: detected capacity change from 0 to 512 [ 304.788376][T14157] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 304.897160][ T3004] Alternate GPT is invalid, using primary GPT. [ 304.903544][ T3004] loop4: p2 p3 p7 [ 304.999243][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 305.206007][T14175] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 305.214413][T14175] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 305.241840][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 305.241854][ T29] audit: type=1326 audit(1761506866.667:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.0.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 305.282716][T14171] loop3: detected capacity change from 0 to 1024 [ 305.299331][ T29] audit: type=1326 audit(1761506866.697:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.0.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 305.322943][ T29] audit: type=1326 audit(1761506866.697:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.0.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 305.346658][ T29] audit: type=1326 audit(1761506866.697:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.0.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 305.370344][ T29] audit: type=1326 audit(1761506866.697:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.0.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 305.393734][ T29] audit: type=1326 audit(1761506866.697:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.0.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 305.417326][ T29] audit: type=1326 audit(1761506866.697:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.0.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 305.418914][T14193] SELinux: policydb version 0 does not match my version range 15-35 [ 305.440728][ T29] audit: type=1326 audit(1761506866.697:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.0.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 305.440802][ T29] audit: type=1326 audit(1761506866.697:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.0.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 305.440855][ T29] audit: type=1326 audit(1761506866.697:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.0.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 305.523834][T14193] SELinux: failed to load policy [ 306.905479][T14202] netlink: 'syz.1.3388': attribute type 21 has an invalid length. [ 306.920701][T14202] __nla_validate_parse: 15 callbacks suppressed [ 306.920737][T14202] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3388'. [ 306.936080][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3388'. [ 307.019672][T14202] loop1: detected capacity change from 0 to 2048 [ 307.028122][T14216] loop3: detected capacity change from 0 to 4096 [ 307.135295][T14202] Alternate GPT is invalid, using primary GPT. [ 307.141682][T14202] loop1: p2 p3 p7 [ 307.400978][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3397'. [ 307.409900][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3397'. [ 307.473439][T14230] loop1: detected capacity change from 0 to 512 [ 307.483689][T14230] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 307.523927][T13423] EXT4-fs unmount: 27 callbacks suppressed [ 307.523945][T13423] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.619875][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3400'. [ 307.628792][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3400'. [ 307.719746][T14239] netlink: 'syz.3.3399': attribute type 21 has an invalid length. [ 307.737841][T14239] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3399'. [ 307.746909][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3399'. [ 308.968761][T14244] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 308.977008][T14244] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 309.884068][T14239] loop3: detected capacity change from 0 to 2048 [ 309.918714][T14259] loop1: detected capacity change from 0 to 1024 [ 309.931768][T14259] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 309.962738][T14264] loop5: detected capacity change from 0 to 512 [ 309.970298][T14259] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 309.978571][ T3306] Alternate GPT is invalid, using primary GPT. [ 309.979752][T14264] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 309.985042][ T3306] loop3: p2 p3 p7 [ 309.999488][T14259] EXT4-fs (loop1): failed to initialize system zone (-117) [ 310.009447][T14259] EXT4-fs (loop1): mount failed [ 310.050726][T14239] Alternate GPT is invalid, using primary GPT. [ 310.057081][T14239] loop3: p2 p3 p7 [ 310.062744][T14270] netlink: 'syz.4.3409': attribute type 21 has an invalid length. [ 310.070774][T14270] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3409'. [ 310.079918][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3409'. [ 311.077438][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 311.077452][ T29] audit: type=1326 audit(1761506872.497:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14273 comm="syz.1.3413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb41073efc9 code=0x0 [ 312.075979][T14275] loop5: detected capacity change from 0 to 1024 [ 312.093604][T14275] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 312.124106][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 312.133100][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 312.154232][T14275] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 312.169473][T14275] EXT4-fs (loop5): failed to initialize system zone (-117) [ 312.187565][T14275] EXT4-fs (loop5): mount failed [ 312.228726][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 312.229034][ T3591] udevd[3591]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 312.251219][ T3578] udevd[3578]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 312.265422][T14281] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 312.273664][T14281] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 312.306154][T14270] loop4: detected capacity change from 0 to 2048 [ 312.384179][T14289] loop3: detected capacity change from 0 to 512 [ 312.389680][ T29] audit: type=1326 audit(1761506873.787:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14288 comm="syz.3.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 312.392323][T14289] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 312.414070][ T29] audit: type=1326 audit(1761506873.787:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14288 comm="syz.3.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 312.445711][ T29] audit: type=1326 audit(1761506873.787:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14288 comm="syz.3.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 312.469413][ T29] audit: type=1326 audit(1761506873.787:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14288 comm="syz.3.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 312.492960][ T29] audit: type=1326 audit(1761506873.787:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14288 comm="syz.3.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 312.516573][ T29] audit: type=1326 audit(1761506873.787:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14288 comm="syz.3.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 312.540187][ T29] audit: type=1326 audit(1761506873.787:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14288 comm="syz.3.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 312.563901][ T29] audit: type=1326 audit(1761506873.787:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14288 comm="syz.3.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 312.587638][ T29] audit: type=1326 audit(1761506873.787:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14288 comm="syz.3.3418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 312.743449][T14270] Alternate GPT is invalid, using primary GPT. [ 312.750082][T14270] loop4: p2 p3 p7 [ 312.811997][T14303] loop1: detected capacity change from 0 to 1024 [ 312.818769][T14303] EXT4-fs: Ignoring removed bh option [ 312.825586][ T3004] Alternate GPT is invalid, using primary GPT. [ 312.831961][ T3004] loop4: p2 p3 p7 [ 312.843263][T14303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.868916][ T3591] udevd[3591]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 312.868952][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 312.870557][ T3578] udevd[3578]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 312.907982][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 312.920167][ T3578] udevd[3578]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 312.938350][ T3591] udevd[3591]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 313.061131][T14318] tipc: New replicast peer: 255.255.255.255 [ 313.067172][T14318] tipc: Enabled bearer , priority 10 [ 313.073477][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3426'. [ 313.082413][T14318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3427'. [ 313.091461][T14318] tipc: Disabling bearer [ 313.101024][T14321] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3429'. [ 313.132693][T14324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'. [ 313.141698][T14324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'. [ 313.143433][T14327] loop5: detected capacity change from 0 to 1024 [ 313.150727][T14324] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3431'. [ 313.166969][T14325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3430'. [ 313.175996][T14325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3430'. [ 313.178087][T14327] EXT4-fs: Ignoring removed bh option [ 313.200537][T14327] EXT4-fs: inline encryption not supported [ 313.208245][T14327] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 313.218946][T14327] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 313.227796][T14327] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.3432: lblock 2 mapped to illegal pblock 2 (length 1) [ 313.242160][T14327] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.3432: lblock 0 mapped to illegal pblock 48 (length 1) [ 313.257367][T14327] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3432: Failed to acquire dquot type 0 [ 313.269001][T14327] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 313.278586][T14327] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3432: mark_inode_dirty error [ 313.289956][T14327] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 313.300185][T14327] EXT4-fs (loop5): 1 orphan inode deleted [ 313.306308][T14327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.319441][ T1729] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 313.333871][ T1729] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 313.366615][ T8282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.376102][ T8282] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 313.389405][ T8282] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 313.398946][ T8282] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 313.626780][T12770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.639967][T14340] netlink: 'syz.5.3435': attribute type 21 has an invalid length. [ 313.657709][T14340] loop5: detected capacity change from 0 to 2048 [ 313.720824][ T3578] Alternate GPT is invalid, using primary GPT. [ 313.727333][ T3578] loop5: p2 p3 p7 [ 313.745989][T14340] Alternate GPT is invalid, using primary GPT. [ 313.752452][T14340] loop5: p2 p3 p7 [ 315.353784][T14381] IPVS: Error connecting to the multicast addr [ 315.485189][T14403] tipc: New replicast peer: 255.255.255.255 [ 315.491315][T14403] tipc: Enabled bearer , priority 10 [ 315.497789][T14403] tipc: Disabling bearer [ 315.665994][T14416] loop3: detected capacity change from 0 to 4096 [ 315.700494][T14416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.754084][T13423] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.824998][T14422] loop3: detected capacity change from 0 to 4096 [ 315.860377][T14422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.903134][T13423] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.034480][T14431] tipc: New replicast peer: 255.255.255.255 [ 316.040642][T14431] tipc: Enabled bearer , priority 10 [ 316.054133][T14431] tipc: Disabling bearer [ 316.084343][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 316.084356][ T29] audit: type=1326 audit(1761506877.507:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13fdcbd810 code=0x7ffc0000 [ 316.084488][T14434] loop3: detected capacity change from 0 to 512 [ 316.090666][ T29] audit: type=1326 audit(1761506877.507:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f13fdcbebcb code=0x7ffc0000 [ 316.123090][T14434] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 316.443746][ T29] audit: type=1326 audit(1761506877.547:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f13fdcbdc2a code=0x7ffc0000 [ 316.467822][ T29] audit: type=1326 audit(1761506877.547:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f13fdcbdc2a code=0x7ffc0000 [ 316.491383][ T29] audit: type=1326 audit(1761506877.547:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f13fdcbd717 code=0x7ffc0000 [ 316.514964][ T29] audit: type=1326 audit(1761506877.547:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f13fdcc076a code=0x7ffc0000 [ 316.538485][ T29] audit: type=1326 audit(1761506877.657:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13fdcbd810 code=0x7ffc0000 [ 316.562092][ T29] audit: type=1326 audit(1761506877.657:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f13fdcbebcb code=0x7ffc0000 [ 316.585539][ T29] audit: type=1326 audit(1761506877.657:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f13fdcbdc2a code=0x7ffc0000 [ 316.608848][ T29] audit: type=1326 audit(1761506877.687:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14432 comm="syz.3.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 316.887670][T14455] loop3: detected capacity change from 0 to 512 [ 316.955289][T14455] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 317.075841][T14463] netlink: 'syz.1.3482': attribute type 1 has an invalid length. [ 317.130677][T14464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.201170][T14466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14466 comm=syz.1.3482 [ 317.295984][T14463] bond3: entered promiscuous mode [ 317.314918][T14463] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.643590][T14472] loop5: detected capacity change from 0 to 512 [ 317.656261][T14472] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 317.761264][T14479] loop5: detected capacity change from 0 to 1024 [ 317.788502][T14479] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 317.818502][T14479] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 317.828053][T14479] EXT4-fs (loop5): failed to initialize system zone (-117) [ 317.850397][T14486] __nla_validate_parse: 14 callbacks suppressed [ 317.850410][T14486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3490'. [ 317.865628][T14486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3490'. [ 317.874561][T14486] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3490'. [ 317.895755][T14479] EXT4-fs (loop5): mount failed [ 318.121438][T14494] SELinux: policydb version 0 does not match my version range 15-35 [ 318.129780][T14494] SELinux: failed to load policy [ 318.137929][T14494] loop4: detected capacity change from 0 to 512 [ 318.144883][T14494] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 318.561902][T14503] loop5: detected capacity change from 0 to 512 [ 318.568884][T14503] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 318.634084][T14505] loop5: detected capacity change from 0 to 512 [ 318.643647][T14505] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 318.696027][T14507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.764495][T14511] loop3: detected capacity change from 0 to 1024 [ 318.784264][T14511] EXT4-fs: Ignoring removed bh option [ 318.799646][T14511] EXT4-fs: inline encryption not supported [ 318.813902][T14511] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 318.832716][T14511] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 318.842178][T14511] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3500: lblock 2 mapped to illegal pblock 2 (length 1) [ 318.856786][T14511] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3500: lblock 0 mapped to illegal pblock 48 (length 1) [ 318.871294][T14511] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3500: Failed to acquire dquot type 0 [ 318.897436][T14511] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 318.907304][T14511] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3500: mark_inode_dirty error [ 318.919492][T14511] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 318.939517][T14511] EXT4-fs (loop3): 1 orphan inode deleted [ 318.939599][T14507] loop5: detected capacity change from 0 to 1024 [ 318.950180][T14511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.967423][ T31] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 319.037132][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 319.054771][T13423] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.064388][T13423] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 319.077783][T13423] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 319.088207][T14507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.121467][T13423] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 319.138137][T14532] loop1: detected capacity change from 0 to 1024 [ 319.153280][T14532] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 319.197179][T14532] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 319.208773][T14532] EXT4-fs (loop1): failed to initialize system zone (-117) [ 319.226520][T14534] loop3: detected capacity change from 0 to 512 [ 319.229289][T14532] EXT4-fs (loop1): mount failed [ 319.233567][T14534] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 319.291060][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3510'. [ 319.300254][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3510'. [ 319.309336][T14537] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3510'. [ 319.689436][ T8282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.922491][T14552] loop1: detected capacity change from 0 to 1024 [ 319.929745][T14552] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 319.940306][T14552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 319.948523][T14552] EXT4-fs (loop1): failed to initialize system zone (-117) [ 319.956151][T14552] EXT4-fs (loop1): mount failed [ 320.030463][T14557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3517'. [ 320.220326][T14563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3520'. [ 320.229305][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3520'. [ 320.396448][T14571] loop3: detected capacity change from 0 to 512 [ 320.403436][T14571] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 320.885129][T14595] loop1: detected capacity change from 0 to 512 [ 320.893058][T14595] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 320.943137][T14597] loop1: detected capacity change from 0 to 4096 [ 320.954078][T14597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.157639][T14602] loop4: detected capacity change from 0 to 4096 [ 321.168497][T14602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.226334][T12770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.277125][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3536'. [ 321.466470][T14617] tipc: New replicast peer: 255.255.255.255 [ 321.472598][T14617] tipc: Enabled bearer , priority 10 [ 321.483064][T14617] tipc: Disabling bearer [ 321.541465][T12517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.603617][T14626] loop5: detected capacity change from 0 to 4096 [ 321.615266][T14626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.697512][T14636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.821432][ T8282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.860386][T14642] netlink: 'syz.5.3550': attribute type 1 has an invalid length. [ 321.873846][T14642] bond8: entered promiscuous mode [ 321.879102][T14642] 8021q: adding VLAN 0 to HW filter on device bond8 [ 321.907013][T14642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.932295][T14642] bond8: (slave bridge8): making interface the new active one [ 321.940018][T14642] bridge8: entered promiscuous mode [ 321.946820][T14642] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 321.957894][T14642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14642 comm=syz.5.3550 [ 321.981374][T14636] loop3: detected capacity change from 0 to 1024 [ 322.017848][T14636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.136603][T14657] FAULT_INJECTION: forcing a failure. [ 322.136603][T14657] name failslab, interval 1, probability 0, space 0, times 0 [ 322.149394][T14657] CPU: 0 UID: 0 PID: 14657 Comm: syz.5.3555 Not tainted syzkaller #0 PREEMPT(voluntary) [ 322.149417][T14657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.149428][T14657] Call Trace: [ 322.149433][T14657] [ 322.149440][T14657] __dump_stack+0x1d/0x30 [ 322.149461][T14657] dump_stack_lvl+0xe8/0x140 [ 322.149481][T14657] dump_stack+0x15/0x1b [ 322.149577][T14657] should_fail_ex+0x265/0x280 [ 322.149594][T14657] ? __se_sys_memfd_create+0x1cc/0x590 [ 322.149615][T14657] should_failslab+0x8c/0xb0 [ 322.149656][T14657] __kmalloc_cache_noprof+0x4c/0x4a0 [ 322.149711][T14657] ? fput+0x8f/0xc0 [ 322.149726][T14657] __se_sys_memfd_create+0x1cc/0x590 [ 322.149746][T14657] __x64_sys_memfd_create+0x31/0x40 [ 322.149793][T14657] x64_sys_call+0x2ac2/0x3000 [ 322.149811][T14657] do_syscall_64+0xd2/0x200 [ 322.149874][T14657] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 322.149896][T14657] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 322.149923][T14657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.149943][T14657] RIP: 0033:0x7f335581efc9 [ 322.150006][T14657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.150022][T14657] RSP: 002b:00007f3354286e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 322.150042][T14657] RAX: ffffffffffffffda RBX: 00000000000006b1 RCX: 00007f335581efc9 [ 322.150055][T14657] RDX: 00007f3354286ef0 RSI: 0000000000000000 RDI: 00007f33558a2960 [ 322.150067][T14657] RBP: 0000200000001100 R08: 00007f3354286bb7 R09: 00007f3354286e40 [ 322.150133][T14657] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000800 [ 322.150144][T14657] R13: 00007f3354286ef0 R14: 00007f3354286eb0 R15: 0000200000000280 [ 322.150161][T14657] [ 322.400601][T14659] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 322.408809][T14659] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 322.452932][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 322.452946][ T29] audit: type=1326 audit(1761506883.877:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.4.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 322.493289][T14669] loop4: detected capacity change from 0 to 512 [ 322.500037][T14669] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 322.579912][T14674] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 322.604496][ T29] audit: type=1326 audit(1761506883.907:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.4.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 322.628121][ T29] audit: type=1326 audit(1761506883.907:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.4.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 322.651630][ T29] audit: type=1326 audit(1761506883.907:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.4.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 322.675116][ T29] audit: type=1326 audit(1761506883.907:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.4.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 322.698607][ T29] audit: type=1326 audit(1761506883.907:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.4.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 322.722025][ T29] audit: type=1326 audit(1761506883.907:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.4.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 322.745496][ T29] audit: type=1326 audit(1761506883.907:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.4.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 322.769003][ T29] audit: type=1326 audit(1761506883.907:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.4.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 322.792478][ T29] audit: type=1326 audit(1761506883.907:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz.4.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 322.821190][T13423] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.106406][T14694] loop5: detected capacity change from 0 to 1024 [ 323.118166][T14694] EXT4-fs: Ignoring removed bh option [ 323.133797][T14694] EXT4-fs: inline encryption not supported [ 323.141373][T14694] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 323.152692][T14694] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 323.161702][T14694] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.3567: lblock 2 mapped to illegal pblock 2 (length 1) [ 323.176009][T14694] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.3567: lblock 0 mapped to illegal pblock 48 (length 1) [ 323.190501][T14694] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3567: Failed to acquire dquot type 0 [ 323.202185][T14694] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 323.211941][T14694] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3567: mark_inode_dirty error [ 323.223336][T14694] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 323.236737][T14694] EXT4-fs (loop5): 1 orphan inode deleted [ 323.242992][T14694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.255583][ T52] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 323.276002][ T52] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 323.428779][ T8282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.438379][ T8282] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 323.501905][ T8282] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 323.618304][ T8282] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 323.746877][T14707] loop5: detected capacity change from 0 to 512 [ 323.753678][T14707] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 323.859951][T14704] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 323.868246][T14704] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 324.045223][T14713] __nla_validate_parse: 4 callbacks suppressed [ 324.045241][T14713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3573'. [ 324.060422][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3573'. [ 324.173022][T14702] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 324.202110][T14702] IPVS: Error connecting to the multicast addr [ 324.371196][T14720] loop1: detected capacity change from 0 to 1024 [ 324.393383][T14720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.952055][T14731] loop5: detected capacity change from 0 to 512 [ 324.960825][T14731] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 325.089200][T14752] loop4: detected capacity change from 0 to 1024 [ 325.115409][T14752] EXT4-fs: Ignoring removed bh option [ 325.121006][T14752] EXT4-fs: inline encryption not supported [ 325.127210][T14752] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 325.138482][T14752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 325.147435][T14752] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3588: lblock 2 mapped to illegal pblock 2 (length 1) [ 325.162106][T14752] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3588: lblock 0 mapped to illegal pblock 48 (length 1) [ 325.180688][T14746] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 325.188939][T14746] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 325.192253][T14752] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3588: Failed to acquire dquot type 0 [ 325.209848][T14752] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 325.221412][T14752] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3588: mark_inode_dirty error [ 325.221522][T12770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.235208][T14752] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 325.252233][T14752] EXT4-fs (loop4): 1 orphan inode deleted [ 325.292369][ T3460] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 325.307130][T14752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.330871][ T3460] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 325.376882][T14768] loop3: detected capacity change from 0 to 512 [ 325.383701][T14768] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 325.401235][T12517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.411167][T12517] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 325.428016][T12517] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 325.435444][T14772] loop3: detected capacity change from 0 to 1024 [ 325.441603][T12517] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 325.445091][T14772] EXT4-fs: Ignoring removed bh option [ 325.461048][T14772] EXT4-fs: inline encryption not supported [ 325.479562][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3593'. [ 325.497467][T14772] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 325.513586][T14772] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 325.539312][T14772] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3594: lblock 2 mapped to illegal pblock 2 (length 1) [ 325.547341][T14778] hsr0: entered promiscuous mode [ 325.559545][T14772] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3594: lblock 0 mapped to illegal pblock 48 (length 1) [ 325.574142][T14772] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3594: Failed to acquire dquot type 0 [ 325.586981][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3595'. [ 325.596023][T14772] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 325.605665][T14772] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3594: mark_inode_dirty error [ 325.616941][T14778] hsr_slave_0: left promiscuous mode [ 325.623959][T14778] hsr_slave_1: left promiscuous mode [ 325.629624][T14772] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 325.647031][T14778] hsr0 (unregistering): left promiscuous mode [ 325.653200][T14762] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 325.654004][T14772] EXT4-fs (loop3): 1 orphan inode deleted [ 325.667864][T14772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.680506][T14762] IPVS: Error connecting to the multicast addr [ 325.680506][ T42] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 325.712788][ T42] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 325.756206][T13423] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.765961][T13423] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 325.794805][T13423] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 325.804729][T13423] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 325.841587][T14785] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 326.043124][T14792] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 326.051832][T14792] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 326.153907][T14794] loop5: detected capacity change from 0 to 1024 [ 326.200506][T14794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.272426][T14803] netlink: 'syz.0.3603': attribute type 1 has an invalid length. [ 326.328224][T14803] bond3: entered promiscuous mode [ 326.338766][T14806] loop1: detected capacity change from 0 to 1024 [ 326.345461][T14806] EXT4-fs: Ignoring removed bh option [ 326.351298][T14806] EXT4-fs: inline encryption not supported [ 326.357537][T14803] 8021q: adding VLAN 0 to HW filter on device bond3 [ 326.358625][T14806] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 326.381188][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3607'. [ 326.390728][T14813] FAULT_INJECTION: forcing a failure. [ 326.390728][T14813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.403791][T14813] CPU: 1 UID: 0 PID: 14813 Comm: syz.3.3607 Not tainted syzkaller #0 PREEMPT(voluntary) [ 326.403816][T14813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 326.403835][T14813] Call Trace: [ 326.403842][T14813] [ 326.403850][T14813] __dump_stack+0x1d/0x30 [ 326.403937][T14813] dump_stack_lvl+0xe8/0x140 [ 326.403995][T14813] dump_stack+0x15/0x1b [ 326.404013][T14813] should_fail_ex+0x265/0x280 [ 326.404032][T14813] should_fail+0xb/0x20 [ 326.404047][T14813] should_fail_usercopy+0x1a/0x20 [ 326.404110][T14813] _copy_from_user+0x1c/0xb0 [ 326.404130][T14813] ___sys_sendmsg+0xc1/0x1d0 [ 326.404185][T14813] __x64_sys_sendmsg+0xd4/0x160 [ 326.404219][T14813] x64_sys_call+0x191e/0x3000 [ 326.404241][T14813] do_syscall_64+0xd2/0x200 [ 326.404282][T14813] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 326.404305][T14813] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 326.404408][T14813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.404426][T14813] RIP: 0033:0x7f13fdcbefc9 [ 326.404441][T14813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.404458][T14813] RSP: 002b:00007f13fc71f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.404478][T14813] RAX: ffffffffffffffda RBX: 00007f13fdf15fa0 RCX: 00007f13fdcbefc9 [ 326.404540][T14813] RDX: 0000000000000000 RSI: 0000200000005840 RDI: 0000000000000005 [ 326.404567][T14813] RBP: 00007f13fc71f090 R08: 0000000000000000 R09: 0000000000000000 [ 326.404578][T14813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.404588][T14813] R13: 00007f13fdf16038 R14: 00007f13fdf15fa0 R15: 00007ffe38194878 [ 326.404604][T14813] [ 326.437023][T14806] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 326.500243][T14818] loop3: detected capacity change from 0 to 1024 [ 326.557094][T14806] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.3604: lblock 2 mapped to illegal pblock 2 (length 1) [ 326.567627][T14803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.576298][T14818] EXT4-fs: Ignoring removed bh option [ 326.587008][T14803] bond3: (slave bridge3): making interface the new active one [ 326.607874][T14806] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.3604: lblock 0 mapped to illegal pblock 48 (length 1) [ 326.622520][T14803] bridge3: entered promiscuous mode [ 326.625291][T14803] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 326.658553][T14806] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3604: Failed to acquire dquot type 0 [ 326.663681][T14820] loop4: detected capacity change from 0 to 1024 [ 326.677785][T14818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.691951][T14803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14803 comm=syz.0.3603 [ 326.711618][T14820] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 326.718559][T14806] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 326.732197][T14806] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.3604: mark_inode_dirty error [ 326.732287][T14820] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 326.743689][T14806] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 326.753478][T14820] EXT4-fs (loop4): failed to initialize system zone (-117) [ 326.765141][T14806] EXT4-fs (loop1): 1 orphan inode deleted [ 326.775110][T14806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.789475][T14820] EXT4-fs (loop4): mount failed [ 326.805371][T11136] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 326.819860][T11136] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:8: Failed to release dquot type 0 [ 326.860613][ T8282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.870089][T12770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.887482][T12770] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 326.908336][T12770] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 326.921420][T12770] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 326.964141][T14840] loop5: detected capacity change from 0 to 512 [ 326.970966][T14840] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 327.001118][T14842] loop5: detected capacity change from 0 to 512 [ 327.008191][T14842] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 327.087866][T14845] loop5: detected capacity change from 0 to 512 [ 327.110422][T14845] EXT4-fs (loop5): too many log groups per flexible block group [ 327.118193][T14845] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 327.125157][T14845] EXT4-fs (loop5): mount failed [ 327.198215][T14833] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 327.207880][T14833] IPVS: Error connecting to the multicast addr [ 327.276631][T14852] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3621'. [ 327.285752][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3621'. [ 327.312907][T13423] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.439154][T14869] loop3: detected capacity change from 0 to 512 [ 327.446111][T14869] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 327.461004][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 327.461019][ T29] audit: type=1326 audit(1761506888.887:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14868 comm="syz.3.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 327.491671][ T29] audit: type=1326 audit(1761506888.887:5339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14868 comm="syz.3.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fdcbefc9 code=0x7ffc0000 [ 327.536035][ T29] audit: type=1400 audit(1761506888.957:5340): avc: denied { write } for pid=14874 comm="syz.1.3632" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 327.537013][T14875] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 327.537013][T14875] program syz.1.3632 not setting count and/or reply_len properly [ 327.559842][ T29] audit: type=1400 audit(1761506888.957:5341): avc: denied { open } for pid=14874 comm="syz.1.3632" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 327.581418][T14860] loop4: detected capacity change from 0 to 1024 [ 327.601646][ T29] audit: type=1400 audit(1761506888.957:5342): avc: denied { ioctl } for pid=14874 comm="syz.1.3632" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 327.634085][T14860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.635346][ T29] audit: type=1400 audit(1761506889.057:5343): avc: denied { create } for pid=14874 comm="syz.1.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 327.666184][ T29] audit: type=1400 audit(1761506889.087:5344): avc: denied { write } for pid=14874 comm="syz.1.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 327.779102][ T29] audit: type=1326 audit(1761506889.197:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14884 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 327.793196][T14873] IPVS: Error connecting to the multicast addr [ 327.823498][ T29] audit: type=1326 audit(1761506889.227:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14884 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 327.847248][ T29] audit: type=1326 audit(1761506889.227:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14884 comm="syz.0.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f850132efc9 code=0x7ffc0000 [ 328.178996][T12517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.294459][T14908] loop1: detected capacity change from 0 to 512 [ 328.309261][T14908] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 328.405248][T14916] loop4: detected capacity change from 0 to 4096 [ 328.434584][T14916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.434932][T14922] loop3: detected capacity change from 0 to 512 [ 328.474243][T14922] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 328.497583][T14927] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 328.565603][T14906] IPVS: Error connecting to the multicast addr [ 328.675827][T12517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.685118][T14925] loop5: detected capacity change from 0 to 1024 [ 328.701223][T14925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.154417][T14949] loop1: detected capacity change from 0 to 512 [ 329.175100][T14949] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 329.241187][ T8282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.280497][T14961] loop1: detected capacity change from 0 to 512 [ 329.287241][T14961] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 329.372767][T14969] loop1: detected capacity change from 0 to 512 [ 329.380722][T14969] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 330.270455][T14991] loop4: detected capacity change from 0 to 512 [ 330.277379][T14991] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 330.360650][T14983] __nla_validate_parse: 5 callbacks suppressed [ 330.360660][T14983] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 330.375667][T14983] IPVS: Error connecting to the multicast addr [ 330.424209][T14984] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 330.432847][T14984] IPVS: Error connecting to the multicast addr [ 330.515490][T14993] loop4: detected capacity change from 0 to 1024 [ 330.531471][T14993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.625232][T14997] loop1: detected capacity change from 0 to 1024 [ 330.632596][T14997] EXT4-fs: Ignoring removed bh option [ 330.641540][T14997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.912492][T15002] loop3: detected capacity change from 0 to 512 [ 330.919331][T15002] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 331.030271][T15012] loop5: detected capacity change from 0 to 512 [ 331.037144][T15012] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 331.068918][T12517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.104578][T15021] loop4: detected capacity change from 0 to 512 [ 331.111544][T15021] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 331.457682][T12770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.043328][T15048] SELinux: policydb version 0 does not match my version range 15-35 [ 332.051804][T15048] SELinux: failed to load policy [ 332.202524][T15050] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 332.210786][T15050] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 332.226699][T15059] loop5: detected capacity change from 0 to 1024 [ 332.251278][T15059] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 332.262386][T15059] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 332.270756][T15059] EXT4-fs (loop5): failed to initialize system zone (-117) [ 332.275442][T15061] SELinux: policydb version 0 does not match my version range 15-35 [ 332.278116][T15059] EXT4-fs (loop5): mount failed [ 332.286626][T15061] SELinux: failed to load policy [ 332.346511][T15064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3702'. [ 332.355574][T15064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3702'. [ 332.364683][T15064] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3702'. [ 332.390167][T15068] loop3: detected capacity change from 0 to 1024 [ 332.417780][T15068] EXT4-fs: Ignoring removed bh option [ 332.423823][T15068] EXT4-fs: inline encryption not supported [ 332.431444][T15068] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 332.462642][T15070] netlink: 'syz.4.3705': attribute type 1 has an invalid length. [ 332.470706][T15068] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 332.486542][T15070] bond3: entered promiscuous mode [ 332.499447][T15070] 8021q: adding VLAN 0 to HW filter on device bond3 [ 332.512980][T15070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.532994][T15068] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3703: lblock 2 mapped to illegal pblock 2 (length 1) [ 332.547133][T15068] __quota_error: 396 callbacks suppressed [ 332.547148][T15068] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 332.563040][T15068] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3703: lblock 0 mapped to illegal pblock 48 (length 1) [ 332.577593][T15068] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 332.586416][T15068] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3703: Failed to acquire dquot type 0 [ 332.598174][T15068] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 332.628932][T15068] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3703: mark_inode_dirty error [ 332.645848][ T29] audit: type=1326 audit(1761506894.067:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 332.669781][ T29] audit: type=1326 audit(1761506894.067:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 332.693401][ T29] audit: type=1326 audit(1761506894.067:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 332.716995][ T29] audit: type=1326 audit(1761506894.067:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 332.740432][ T29] audit: type=1326 audit(1761506894.067:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 332.750196][T15068] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 332.764163][ T29] audit: type=1326 audit(1761506894.167:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 332.776789][T15068] EXT4-fs (loop3): 1 orphan inode deleted [ 332.797592][ T29] audit: type=1326 audit(1761506894.167:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15076 comm="syz.4.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92daa0efc9 code=0x7ffc0000 [ 332.803902][T15068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.839499][ T52] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 332.854178][ T52] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 332.862705][ T52] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 332.865033][T15077] SELinux: policydb version 0 does not match my version range 15-35 [ 332.887800][T15077] SELinux: failed to load policy [ 332.930310][T13423] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.940569][T13423] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 332.953798][T13423] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 332.963423][T13423] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 333.006235][T15084] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3709'. [ 333.015308][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3709'. [ 333.048409][T15087] loop5: detected capacity change from 0 to 1024 [ 333.058360][T15087] EXT4-fs: Ignoring removed bh option [ 333.064362][T15087] EXT4-fs: inline encryption not supported [ 333.066968][T15085] loop3: detected capacity change from 0 to 1024 [ 333.078144][T15087] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 333.081821][T15085] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 333.114145][T15087] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 333.122838][T15085] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 333.131183][T15085] EXT4-fs (loop3): failed to initialize system zone (-117) [ 333.135874][T15087] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.3710: lblock 2 mapped to illegal pblock 2 (length 1) [ 333.138779][T15085] EXT4-fs (loop3): mount failed [ 333.158986][T15087] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.3710: lblock 0 mapped to illegal pblock 48 (length 1) [ 333.173836][T15087] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3710: Failed to acquire dquot type 0 [ 333.186233][T15087] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 333.196884][T15087] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3710: mark_inode_dirty error [ 333.208371][T15087] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 333.218636][T15087] EXT4-fs (loop5): 1 orphan inode deleted [ 333.227035][T15087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.249484][ T42] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 333.272636][ T42] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 333.273404][T15095] tipc: New replicast peer: 255.255.255.255 [ 333.290464][T15095] tipc: Enabled bearer , priority 10 [ 333.302345][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3713'. [ 333.311480][T15095] tipc: Disabling bearer [ 333.341728][ T8282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.351035][T15099] loop1: detected capacity change from 0 to 4096 [ 333.351677][ T8282] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 333.370929][ T8282] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 333.380691][ T8282] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 333.391991][T15099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.421975][T15103] ================================================================== [ 333.430062][T15103] BUG: KCSAN: data-race in blkdev_open / queue_limits_commit_update [ 333.438046][T15103] [ 333.440362][T15103] read to 0xffff888102349418 of 4 bytes by task 3306 on cpu 1: [ 333.447898][T15103] blkdev_open+0x161/0x290 [ 333.452320][T15103] do_dentry_open+0x649/0xa20 [ 333.456993][T15103] vfs_open+0x37/0x1e0 [ 333.461050][T15103] path_openat+0x1c5e/0x2170 [ 333.465650][T15103] do_filp_open+0x109/0x230 [ 333.470159][T15103] do_sys_openat2+0xa6/0x110 [ 333.474749][T15103] __x64_sys_openat+0xf2/0x120 [ 333.479541][T15103] x64_sys_call+0x2eab/0x3000 [ 333.484220][T15103] do_syscall_64+0xd2/0x200 [ 333.488729][T15103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.494639][T15103] [ 333.496956][T15103] write to 0xffff888102349388 of 192 bytes by task 15103 on cpu 0: [ 333.504846][T15103] queue_limits_commit_update+0x4b/0x160 [ 333.510488][T15103] loop_configure+0x78c/0x9c0 [ 333.515172][T15103] lo_ioctl+0x1e1/0x12b0 [ 333.519428][T15103] blkdev_ioctl+0x356/0x440 [ 333.523919][T15103] __se_sys_ioctl+0xce/0x140 [ 333.528505][T15103] __x64_sys_ioctl+0x43/0x50 [ 333.533085][T15103] x64_sys_call+0x1816/0x3000 [ 333.537758][T15103] do_syscall_64+0xd2/0x200 [ 333.542248][T15103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.548140][T15103] [ 333.550464][T15103] Reported by Kernel Concurrency Sanitizer on: [ 333.556612][T15103] CPU: 0 UID: 0 PID: 15103 Comm: syz.5.3716 Not tainted syzkaller #0 PREEMPT(voluntary) [ 333.566422][T15103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 333.576579][T15103] ================================================================== [ 333.586157][T15103] loop5: detected capacity change from 0 to 1024 [ 333.604522][T15103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.633537][ T8282] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.653433][T12770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.