last executing test programs: 1m47.347141433s ago: executing program 4 (id=5): r0 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=0x0000000000000007,check=relaxed,unhide,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',unhide,,'], 0x1, 0x562, &(0x7f0000000140)="$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") setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = syz_clone(0xc008000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000040, &(0x7f0000000300)={[{@nombcache}, {@nodioread_nolock}, {@delalloc}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x8}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@usrquota}, {@bh}]}, 0x21, 0x5c7, &(0x7f0000001080)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe3aa6ea) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000100)=0xc, 0x4) ptrace$getsig(0x4202, r1, 0x1, &(0x7f00000002c0)) r9 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) read$char_usb(r9, &(0x7f0000000180)=""/54, 0x36) 1m46.04576147s ago: executing program 4 (id=10): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xffffff69) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) symlinkat(&(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='.\x00') sendto$inet(r0, 0x0, 0x100000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000002300)=""/4096, 0x1000) 1m45.489432203s ago: executing program 4 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x2, 0x1, 0x106) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0xc, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2}, 0x50) sendmsg$NFT_BATCH(r1, 0x0, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4028015}, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_pidfd_open(0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ptrace$cont(0x18, 0x0, 0x3, 0x7) write$char_usb(r7, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x0) unlinkat(r5, &(0x7f0000000080)='./file0\x00', 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x7c, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1m45.455038879s ago: executing program 32 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x2, 0x1, 0x106) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0xc, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2}, 0x50) sendmsg$NFT_BATCH(r1, 0x0, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4028015}, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_pidfd_open(0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ptrace$cont(0x18, 0x0, 0x3, 0x7) write$char_usb(r7, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x0) unlinkat(r5, &(0x7f0000000080)='./file0\x00', 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x7c, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1m4.065391627s ago: executing program 0 (id=206): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0x5) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) 1m4.003250087s ago: executing program 0 (id=208): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs\x00', 0x1ff) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x4000080) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fchown(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000240), 0xfc, 0x569, &(0x7f0000000d00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000200)={0x0, 0x110000002000003, 0x1, 0x0, 0x1, 0x0, [{0x28, 0x507f, 0x5, '\x00', 0x1807}]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x1953, r1, 0x92bc2000) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x405c2, 0x8) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) open(0x0, 0x20000, 0x0) 1m2.54476985s ago: executing program 0 (id=212): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000100", @ANYRES16=0x0, @ANYBLOB="200029bd7000fcffffff1400000018000180140002006e657464657673696d30000000000000050019"], 0x34}}, 0x800) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x2100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="f0ff0500000000000500530000000000050053000000000008001780040003001c00e700e460bf5bffa1de43e25a8059c41cc41c15766ff2a89e3f281c00e70027c66567930c3f16bbd528e2c86571eca4c71cd39542f1681c00e7008a126b1be8650e01b9ea6b0ffd5ed66c40643f80808537e41c00e70007cf7d8c4aa9e3c779a0ef41415e6c66d83f1e6d9c15c598080005000c0000000500530001000000080005000600000005005300000000000500530001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x5}, 0x895) sched_setscheduler(0x0, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0xe8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x6}, 'port0\x00', 0x8c, 0x100040, 0x4, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYRESDEC=r0, @ANYRES8=r4, @ANYRES32=r2, @ANYRES8], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24040884) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000180)={0x3, 0x9dc8, 0x7e, 0x0, 0x2}) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) r6 = socket(0x400000000010, 0x5, 0x0) r7 = syz_io_uring_setup(0x19d1, 0x0, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r8, r9, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x3b8}, 0x0, 0x4000, 0x1}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$nl_route_sched(r11, 0x0, 0x20040084) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r10, 0x0, 0x4000) sendmsg$NL80211_CMD_SET_WDS_PEER(r6, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x20000814) io_uring_enter(r7, 0xa3d, 0x0, 0x0, 0x0, 0xff39) 1m1.593403579s ago: executing program 0 (id=216): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x8000) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0xa10844, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000ac0)="$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") socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r3, 0x63) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc0ed0044, &(0x7f0000000240)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@usrquota}, {@data_journal}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xfe, 0x483, &(0x7f00000004c0)="$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") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r4) ptrace$poke(0x5, r4, &(0x7f0000000200), 0x8) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x4) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) r7 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x211, 0x0, r5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1m1.240454869s ago: executing program 0 (id=219): io_setup(0x8, &(0x7f0000000600)) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x30, 0x0, 0x20000) 59.517300546s ago: executing program 0 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000000c0)=ANY=[@ANYBLOB="93a3e1bd4706d10424d145a7fb21e05f230b134a05cd3b21765060dd43d04d5e645323c8f4a1b855d159336fc21e52dc14b353b14e8a5f4653832aa4644ea3841c580c390d41c3ddc3cbb33201faae58", @ANYRES64=r5, @ANYBLOB="010025bd7000fedbdf250f000000400007800c00030006000000000000000800020009"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4084) 59.477806192s ago: executing program 33 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000000c0)=ANY=[@ANYBLOB="93a3e1bd4706d10424d145a7fb21e05f230b134a05cd3b21765060dd43d04d5e645323c8f4a1b855d159336fc21e52dc14b353b14e8a5f4653832aa4644ea3841c580c390d41c3ddc3cbb33201faae58", @ANYRES64=r5, @ANYBLOB="010025bd7000fedbdf250f000000400007800c00030006000000000000000800020009"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x4084) 8.788695892s ago: executing program 5 (id=522): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001000000800000007b90ebda3f1c", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000006c0)="340440eb405ea02769cbc722599b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.631023179s ago: executing program 5 (id=525): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x164, 0x7, 0xa, 0x500, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xbb, 0x7, 0x1, 0x0, "74c903a249a9b410e1a1b1f8f3b51b83db19910df17297f3befb51b87ee3b131345b99ae749f5b1080a6fe253c952cd9d97df0068c04739cfc8853c460ae4be0515390a8d94a6fd945480a3a937d2b46a16c8c2b82bd1fa26d6745825851838caafec984be608642989cb66a5a8b4604584a836b966ae6be2951a2e9356d302fb904e23d1821191b22212539738b05043c698d0887446ee2f5d8bdfcd9c864fc39a4d7299c2e5b3579a09cfa95933b9bf7151ce59b19d9"}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8863}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4305}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4305}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x164}, 0x1, 0x0, 0x0, 0x24000014}, 0x10800) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x25, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x52, 0x101, 0x0, 0x0, {0x2, 0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) 8.494168922s ago: executing program 5 (id=527): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x12a46, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000100)={{0x0, 0x49}, 'port0\x00', 0x2c, 0x35, 0xb00, 0x9, 0x80000001, 0x62, 0x16, 0x0, 0x0, 0x40}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x3}, 0x2, 0x100, 0x800000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) gettid() r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) write(r1, &(0x7f0000000680)="223ef1e5ec72032dcb909b859ccb64", 0xf) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000040)={r5, 0xf7}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x198321, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x10400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}]}}}]}, 0x40}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x4, 0x4e23, 0x1, 0x0, 0x90, 0x30, 0x2, 0x0, r3}, {0x401, 0x3, 0x400, 0x3438, 0x10000, 0xb6ed, 0x1, 0x100}, {0x8, 0x2, 0xfffffff800000000, 0xa}, 0x9, 0x0, 0x2, 0x1, 0x1, 0x2}, {{@in=@empty, 0x4d5, 0xff}, 0x8, @in6=@loopback, 0x3501, 0x0, 0x3, 0x4, 0x400, 0xf}}, 0xe8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) 6.6492629s ago: executing program 6 (id=547): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000003c0)=@abs={0x1}, 0x2) r2 = dup(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x1) syz_open_pts(r3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0xf}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0xfffffffd, 0x8, 0x9, 0x9, 0x9, 0x20000f5, 0x200, 0x6, 0x5, 0x10001, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x5, 0xa, 0xff, 0x4, 0x8, 0x9, 0xe6c1, 0x2, 0x66, 0x6, 0x5, 0x73, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0xc, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x8, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x401, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x4, 0x60df8662, 0x2, 0x5, 0x6, 0xc6, 0x8, 0x7, 0xffffffea, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff3, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x3, 0x7, 0x5, 0x4, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x0, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x9, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xfffeffff, 0x4, 0x0, 0x7fffffff, 0x9, 0xb, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x4, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f89, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x10001, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000200)) getsockopt$inet_buf(r2, 0x118, 0x29, 0x0, &(0x7f0000000140)) 6.645142041s ago: executing program 6 (id=548): accept$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x0, 0xfffffffd, 0x3, 0x9, 0x8001, 0x7ffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") setxattr$incfs_metadata(0x0, &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8", 0xf, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) msync(&(0x7f0000a86000/0x1000)=nil, 0x1000, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x26, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_direct={{{{0x26, 0x0, 0x1, 0x0, 0x1, 0x8, 0x1, 0x2, 0x72e1, 0x0, 0x2, 0x6, 0x1, 0x3, 0x3c74, 0x7f, 0x2, 0x4e23, 0x4e22}, 0x2, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x4e) 6.481497157s ago: executing program 3 (id=549): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x6, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x5, 0x20, 0x1, 0x5, 0x9}, [{0x3, 0x4, 0x5, 0x6, 0x80, 0x6, 0x2, 0x5ba2}], "", ['\x00']}, 0x158) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f00000009c0)) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xe0ffff}, 0x0) 6.40532641s ago: executing program 3 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x34, 0x20, 0x1f, 0x70bd29, 0x25dfdbfc, {0x2, 0xa, 0x10, 0xc, 0x9, 0x0, 0x0, 0x5, 0x8013}, [@FRA_DST={0x8, 0x1, @broadcast}, @FRA_FLOW={0x8}, @FRA_SRC={0x8, 0x2, @multicast2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) 6.313122926s ago: executing program 3 (id=551): r0 = socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000180)=0xfffffffffffffffc, 0x8) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@dioread_nolock}, {@data_err_ignore}, {@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@delalloc}, {@orlov}]}, 0xff, 0x26c, &(0x7f00000002c0)="$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") r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f00000032c0)={0x10, 0x1410, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000208000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x24}}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11000000040000000400"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r5, 0x106, 0x1, 0x0, 0x0) close(r0) 6.1055928s ago: executing program 3 (id=552): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.060208878s ago: executing program 3 (id=553): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x160, 0x0, 0x148, 0x0, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 'veth1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x88, 0x0, 0x10}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x1, 0x76, 0xb75e, 0x5a3e, 0x4, 0x1c}}, @common=@inet=@multiport={{0x50}, {0x0, 0x40, [0x0, 0xffff, 0x0, 0x4e25, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xdf]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa52531e464ddd335, 0x0, 0xfffffffd, 0x3, 'pptp\x00', 'syz1\x00'}}}, {{@ip={@loopback, @multicast1, 0x0, 0x0, 'veth1_to_batadv\x00', 'team_slave_1\x00', {}, {0xff}, 0x5c, 0x1, 0x14}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0xffff, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES64=r3, @ANYRESHEX=r1], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket(0x1d, 0x2, 0x6) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x2a, 0xd, 0x9, {0x2, @usr_ip6_spec={@private0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xffffffff, 0x8, 0x3}, {0x0, @multicast, 0x9, 0x8001, [0x0, 0x101]}, @esp_ip6_spec={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0x5e}, {0x0, @random="ce7170e7aa3e", 0x2, 0x8, [0x22f, 0x9503]}, 0xb, 0x3}}}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000700039022abd7000fbdbdf2507000000", @ANYRES32=r8, @ANYBLOB="0c000180040001"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x240480dc) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r10, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_freezer_state(r11, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r12, &(0x7f0000000040)='FROZEN\x00', 0x7) 3.485256378s ago: executing program 6 (id=555): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x4000011, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x80) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x4, &(0x7f0000000400)) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0000fdffff37", @ANYRES32=r3, @ANYRESDEC=r4], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x20000004) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4a0041, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="6417000000000000008847000000000000000000e8602c6c97b8628212fc7b899b54fafd6c71b65860bf7bcb659400348458e65c7f5bfc05271233ac86c00c3435b408d7d0bda7bc07487beeee9574d8471bee6374c38c8ffef605882d7e1f5c9e87ae56448b7f6ef83c490421714f7419555c4661e2f4e300c09fe5f6ea72464c51d1cfddad846ee359f850575ae80fef7c750dc787309e29be31277dced634378ebeaa790bff0f6a63750df8a75065ad0845adf2623987081af6ddaa793892c59508524c18f1dce14106ea930848c16f660de4ed0b453c937164", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000"], 0xc3}, 0x1, 0x100000000000000}, 0x1) 3.295494399s ago: executing program 3 (id=556): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[], 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) syz_open_dev$hidraw(0x0, 0x7, 0x400040) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000440)={0xe, {0x2, 0x5, 0x4f}}, 0xc) syz_emit_ethernet(0x14, &(0x7f00000013c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYBLOB="a26e48afd2acf046aace8e17fdd91989878d039c8c23f5dbf255b3760f9a70c13add793a280483c3566fb722b9559c2c8382acab643614ba6dc5824df96d8553aa85898b336c3e1a803347f0b5c4d5361919906a9022ca50ec955e2fe98c3e9a1aa5e7ed0d10c560f55e4fe1584cd165139f6fe6bc91e50dc731fd1d82c9c719c887e7368f63c9fbf53c4d2efcdda1a58a6bbf45ee48bc38f6067adfbdf4866988050dd67ce804007e409830071607486795d42094b4a2da7e61bd986306092d5eb99d6755f3d1f32c5a03c6a0b20c44599f44a0d427829ef309845fe5cf0e8bc9eb2590b12f72d9bfb55e50e7cf44092240ffb5df98c008c664706cdfbfedede83607dccb1e46f0404e43a4d49d4984bd28fb788c76299a94a81a46f35996677fe355408c19c40a5b23d231895b2411c74717a0b60ffbfe9a5b8617a7c43f22551d8894104d96252fb72c05d2bea1949ed6196fd9c9bb0cd98380e64b178529536651fa15b857385847818cd5be013c2ab9cf6d8e4fd2b7ed112dbc470a69cd8534dbfe55a895cdd213bb661efd55c60be8ea43b4b972dfd09b145a4b1984d380d621291d9a6da7dff21d61fc5397203082cb46485b92d8d08d57b38e820b45069a5484aebd4b48f336fb53c34aac948f77b0e44ec15aaa38b27df7a14872c749f618bfdcb3902745cdcb591536aeb584d354ae35fd6275e197199d262bcfa1488092d2b050fc2ba14d8399f61783ae90d452c5e261d492d2067533d69d533c4acd113122fd1812af5160455b28d7bf87cceb6c58302d449c9eb3cd7addf4a211672408ef00d557fd1ca522abd9e7c702867f2a5d27e33139cff8364c18ca4402e786eb1cc91065da689a7ec064a10cb65703dd1d0b944a8d0cbd9126467f3b1aa4f3f87112122926a533e712e437ec4f32e03f34696302935461b5d4a451ff4c95741daff2d3f213178cca1e21509dec1041b24be8eb593d3d2107ee3aedb1c51870d8560dbb88371f6eb0ff60e81ee57580101694cb137af0537d1d8b64741b76ad3f4818bd50e685e079d443edfc32093b070898eb862dc0ad884e9c9f36bb91a9d0973afde1b67ac721b42d7437371da12687522a7a8c5ee5e79fff44e2682d3ca7b8b35501edd5cd15e6e3e1addb8f6ee658a59c0b1c33b146156ab3a1aaac5c9d9cca0aedf9fbee9a9cbfe616e2111d03a0af089cbb6e8884e199c6cffe09634a48a418247f7d73ccd4969c876cfe5f12624564a50df5ae8ed857cb21ef0b978ff7e115ef6d5f3e47ed4a5747833145aa076d10ad85adbcdaab51068d09d8c6f18dcb8e92babf5a34737638f0d665044de66bffad7594fed7e1a34aa4033e0b566aa32044a1bfc9f6c5ef77186b9586fe2829c5a99964dcb6bb682e6d52c074d6b9ab619e273557727b72516f5d05ba61f8baf78decfbe02c9359166ed3543259a27540cb794a21a9dce5bccfb986d8f22b2a13cd6e0d2e56a4bf737ad18ba24fe3d29a1eb187b2a9324b93d45918128a69135e8db36acd6f5e58aa2ba3f44f4a99e9cce1d9e78dc77cc31f3874fe5b929afe40ec84139914c66c612f9675e3ce539ddaaae93f077f9b654756a450cf46ac1d36ea2af5b04a6927d2e7557e2f82107b5813f66e3b0ab6b01653eedb78efc02526b28e202cb824e1ec69afa73a34aaddc40eca2ad068b3921909148802241870fcc862b3f6a74c3ebb3bd75c502117f7d0d9150f12bf3c82af00fb061b2862feedae505f50f03d452a91bd5e8df7113b52ec4fcc4cee9af2557d9f3200a83f1caef4f288eb2b16cd719d05d1236954ccad0ba579c6fe4de3f6037f14067e418ecf7d089a5110e4ca9781e8295f2fffe7b24aeddcbd2db78cdd58f0529bb8e3afe6150e0405cf3496c0af4b06575ba22763451394e4a2b24c54dc34defb58e38570f9a28670dc631bfadaca1ecff2cc97dff6674c344d413aa3984c379b6a207e176708ce27a77fe047af84e0f887fa011e23c0f80b972d4ad4ae77c3658827ac877547a8b450746a51c1004a7814baca1220ad7cbbc9780af8cf7acdaadae4b379807d53aeb1017a62171377d34bc930957c46d57fca3ee9c62839376fb2667b9cdecfc49deb1608a49f0c9296130a77ee5a0e8ea63e3b958dadc30208956521e8d8990ca7f740a1805e5666238d73ceaf69b44dbd5fa24fbd48020a1f09d45379229fa451a7a29788f9418a6b702161d2713cd19117ff5be202176e288758c4914bafca937896e5fa301964285563454d0e4b6577814185051eb4056850159ab54f40f3c178fbc9ba283067379dcd2350e943c42f4cc120ebb461a310fb1de0654d0495a2d80cb4b57523ee877f3dbb9cc8eeba7859f312b4a1c8976a629b588fd28e8e6769efd77677a2c60eff71f38e605cd56f301494a3c5c05bdd1213fbb7973347918135da398f455e9bfe77bf5d62bf85d24a1649d10667e2bd8068001bc071f71fe9f111d01ca668ba7f2dbf8f934d0ace549b2d5b927a84825738302a7c7b3b47ca2028fe3c55fd37b3722a30b30269745b8a5aaa94e7588a3cfe7097111caaf5099d5d8a95a4532b3601a52d8f32b2638d2a529883005db2cd6f0e1022d08dc2ce5c2aec9f61a46639c2abb0e018fbb92d6beb6299631a0d68711239409736918d4eb3230befd76fbd1cc3a55bc806f20f5cf1cd3a3d36e6782b9da0588395d4141659a2d3dec0d210e2cf2a532ac2c25965ea0da5c8bfa66a2e24d1abcdf489acefb3c1ffa81ff20c89fe9da26673311ab644b4aa569e1ef184e1ed30e7cdb1d34b0f6e6ee48f4eaaaaf3f21ee36894d2bcd97386c6e0c9bc7d8f266531e72c512a5ef855e6606ab7818724dcb87d8e4d34c6bf47e00cf1e12cb434d73b015a43bfecee5bdcf2993d224b50d7f93604bfd518f7790affd81b66ebaaae06b11b76d5ed71be0bbba4536d93ecdde69c7433f26485c3cd140691b19d84fc54d09d7996cef1a4169771bd455e691eb077cbfd63e9d7b0a26a3acb5bab834aedbff2f9ceeb4ab80087a88036207bed8d549633dc0cfb26150fe1441196e544ff19ae94a7e4eb0ec4a9a707dafd0fdd2a14acd36ff95bb94206482ad5741ad91ebd3b593e5f1b260af1140aaf7b321c104475cb32f5d17604107008a73e4ede9627eb2ce3716ce5128e3bec15d5ca31f5161973f337c3d011f48a6b8a1040f6b38641a187724f96744e5f077819571520a9401f64deffc0ed51c206101059b26a20e77d24aa3e620eee0b62d5bb1591acaa316fd763b2aeb7ba05ac38d9e2841f8ab83a9a0ea73cd7a6fe50dac34e6a33d8fb31bfa6f4d9a1c93b0c5388535ed406856644c3802c2c879334514130d106222539a7f2606c2899efaaed6fdae55af741eb2562262cadd91dacf58c5e86b4621a7d53797f32118bc3a6f0cd329898835e339066a1a0794045e2e93e2618f763a7d9e63f67ec6c77761616ea20df6aede309fd5c99bd5da8400ad5865532d4d7eaa644a1f97e401759861de9bbca52a1d2c47e5600c14d73ce8dcb4c9a17e58837471eb0abaa1cf807678ab62d4ec6c92b30cc950aa190e3046d3bb4646bb975dfa68c941817561bb98d2b49c42509a95630d326dda7e0df5e4b04adb3c0259b3a9dc2d85595002ce08f44c2ecfc5e5e7e7d7e46d1963e0664b09f2af7c6ecb35d75130d956e1da0637bdf00297f515f2a258fb7fcda390b81bd9478650cdb6253ba2d040b60381e68c0e985186bd36166e526954e3d5fc2d611f53e47d41b5eb717041ddb312c86f484989f3a6437cfd8f06ac5388beeb5df303addaa19340db65098152a6fb47fd2f77f6e3a7ae994dd3da8d8e37e84de34bc758009d05635ea46f3d50c3b2798749cb659d042f2c7d1b9928f5af905e89890a799d7491ee8d4aed07a7c16d02fb7df23b1919931931dde2b0abf6f53c300e26599935863739d9a29284e4ca8d80edae1558e8229f4ce1e05a7bb22096b2668095e65d5697f758826a59de2b851e7058a538b4ae710c81e0e2fbe68243c19f5640ef3e11378d171b44116e28bc871efc0e021aa4c2d55e5e763a409bc7ca7dc9537154929917f8f048f78e92cfb1191ceed2ad02cc3e078656c661a4f43803e7bfe17c41605d03d48d84405f8646e0febd8c2665ed4995126ab5ab2d72bd6cf47e60a6e3d330197975e9ed9542ac233b98e3c7f1fba73fa14184157f648b32338b040419d0ece843008440c177488212c506563c898210fa81a02ba144444692915df85a40d44243311c26c84c88f895ed93170cd7c1c6515721bf5561611a11d4ac988fcd96c041d93f72ce6cada17cd8579fd45467c9af6c2e5acf5e8e3e3603688625a149b13c0fe25fb3a63f24352c528b8773b43f3de2767eb5586deb251246a70d31e57e7cfb9d9da612ba3a3ab925dbaab3ea99e07bfe3a7c69035aca4254cda202cd4e179ff7afa25750ad3265a5d1ff37fc253b5e13659c98a47163f82ad506b6760a251ba0167462fd3c40068fa762294824f84196f820b5d140e3ae29eaf1abc49ad5ebb1a77533ba6b6cf71655bce6859914f9439d8e5d6e856ab1e9b18e17374a1ff207979755f089da9511b13a203f3f4197e46a3ceee857d60742481c27fb0252d834b2e4009c8dc09647a17557dfdafea6c9db12263f9ca6609f3657d83cdb57a40e1cf75280e911058c4b21dd91714dc00117c0a1b864f97d756cf33308d6f7003fd0c4469859a3c31797a292bcd2da31bf82be4d2f399dc2a0f46a14cea136e5b3d381a0d660263e3be9c04f0fd83f18f292c9d610e083c3febc02d48d8d2c6550c8b80d46a160232a775cfef4ad988342184664bde13318c2fc79e6808e8f853c3efaab08fd16acbcc956134866fd10f2325a35f2538d3f4490eeff40637909bfcfa4a7d4cd5ef5b8deadc6fa1301002c5d6f3fb173bede5ba8eed4df75d20c87e65d4f768b644d5efc8dbc1ebda0d653ac8bdf69d849bc016321873413bcd5e833f083dfd705522da83555cd0d6d18736235916d810c213d2b84a5615950d8945f2dbe496b359a388121ff17ee2cdbc97d718294c4741509a62c1eb5e471d200d29f0923db39ffd3a1e685540358972bd125189d2aeaf1cb61e886e4f013f66877cf4735b52730d9adcc3beb1ff858950934e2caf844c2d6bbb7571f41a16e9bb10f67879db8eb53d3106aae2cf95ac02017464b8ca4d8b9401896b030bd8ae305be7588f31d85a44a703e15ce710603e19768863e1f6d53c9fb4b81b5529aae984514703d1cb30aff44c98920df77342c38a802af0fa3b36ae16b1511b308bfdea4cfece3d964b04ae0eafa1ad3f572147f01b0ea739f1255a2f3c643c950fcd81f790bb9eec963739c79bc2c6553ce08f9c1d4b3753f4d1f53f9e092f91ebff8a5e00cda781286fa020a4e8642947612bc8c33b41d2f4bb6a8594927d0347360d3721c6f5985d633d66b5e077c564c4db1776109d27c47efd9e187b6db9d5a1fd1b1a65dc122a330b9b861d396ddc17aae0ed3ec25b6673176091732c406658c6bc5dbdbfdc11e089958c86d11b2866c62b7dc811b2e4857061931952d293b9476af9fef5fbc605be2c5799a626d0da142edbf26c5be7a1e6f3edf5ca424d985827dc8ac7c4b4714090b13c0de452d687e6604f3f10b6f1dc3c256b596303fec297f4972d22a2b1069d618bd94f520f63362b1100c9c612a21616989a000347ccf87fed78730687868fb5ab354bb83571e11dc98e9336a4262dcdd3536152362b0de8f23b93e0deae64e0cf193157c2f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 2.865786851s ago: executing program 1 (id=557): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'netdevsim0\x00', 0x4}, 0x18) 2.81539495s ago: executing program 1 (id=558): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) timer_gettime(r1, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) futex(0x0, 0x6, 0x2, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xe54aef35e9c2845d, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x700000000000000) 2.567839181s ago: executing program 6 (id=559): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7d, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x106200, 0x198b, 0x2, 0x8, 0x800009, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1}, &(0x7f0000000280), &(0x7f0000000480)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8175, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local}, {{0x8, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0x0, 0x0, 0x8}}}}}}, 0x0) 2.229211928s ago: executing program 6 (id=561): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000200)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0xffffffffffffffd7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x20}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x8000) sendto$inet(r1, &(0x7f0000000900)="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", 0x15f, 0x8012, 0x0, 0x0) r5 = gettid() openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x56) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0x708}, 0x0, 0x3, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) perf_event_open(&(0x7f0000000ac0)={0x0, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84908, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r9, 0x6a98047402e98331, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4886) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r10, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8400}, 0x24000040) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ef8, 0x9, r5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 2.09326614s ago: executing program 1 (id=563): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.076171903s ago: executing program 2 (id=564): sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80183, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000230a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 2.064297575s ago: executing program 6 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x8, 0x7, 0x4, 0x8d}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0xffffffffffffff5c, 0x65, 0x0, 0x4, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0x3, 0xffffffffffffffff, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x107, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) accept(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x153) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c000280050001000000000014000280080001000000000008000200ac1414000800054000db0000090001"], 0x58}}, 0x0) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) chroot(&(0x7f0000000180)='./file0\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x70bd25, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x0, 0xfffffffd}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f00000ce000/0x2000)=nil, 0x2000, 0x2000000, 0x104010, r6, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 1.993298907s ago: executing program 1 (id=566): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x108) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x2018011, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0xa8503) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0x89, 0x0, 0x401}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.events\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet(0xa, 0x801, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004810}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setgroups(0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0xfffffffffffffffc, &(0x7f00000003c0)) ptrace$getregset(0x4205, r7, 0x200, &(0x7f0000000080)={0x0}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x0, 0x0, 0x7f}) fcntl$lock(r6, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x4}) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001800)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x50}}, 0x800) 1.911730861s ago: executing program 5 (id=567): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@errors_remount}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x54, 0x0, 0xfffffffffe000001}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x25) 1.883886685s ago: executing program 2 (id=568): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0xbc, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x67}, {0x4c, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x1, 0x7, {0x19, 0x2, 0x8000, 0x3, 0x7}, {0x5, 0x1, 0xedf3, 0xfffa, 0xa9, 0xffffff00}, 0x91, 0x8, 0x2}}]}, @TCA_FW_MASK={0x8, 0x5, 0xfa}]}}, @filter_kind_options=@f_fw={{0x7}, {0x3c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xe}}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gretap0\x00'}, @TCA_FW_POLICE={0x0, 0x2, [@TCA_POLICE_RATE64={0x0, 0x8, 0x1}, @TCA_POLICE_TBF={0x0, 0x1, {0x0, 0x7, 0x6, 0x100, 0x26, {0x0, 0x2, 0x7, 0x3, 0x81, 0x8}, {0x40, 0x0, 0x5, 0x0, 0x4, 0xfffffff8}, 0x8, 0x4, 0xfff}}]}, @TCA_FW_MASK={0x8, 0x5, 0x3}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) 1.847791291s ago: executing program 1 (id=569): unshare(0x20000400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r2, 0x1000000, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8903, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c23003f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000005000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x2ddf, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x20000a, 0x60}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0xffe0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0x80000001, 0xffb, 0x9, 0xb6b, 0x800c5, 0x4, 0x1, 0x1, 0x7, 0xff, 0x1000, 0xc, 0xf, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x2, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0x7, 0x7, 0x40, 0x1000, 0x8000100, 0x3, 0x0, 0x11000, 0x4, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0x9, 0x7, 0xf, 0x101, 0xa, 0x2, 0x81, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x28b, 0x5, 0x2af, 0x3, 0x85, 0x2, 0x1, 0xb, 0x4, 0x7, 0x4009, 0x0, 0x9, 0x100002, 0x8, 0x0, 0x0, 0x3, 0x0, 0x10040, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x0, 0x5, 0x3, 0xb, 0x2, 0x20006, 0xc50, 0x2, 0xe, 0x30000002, 0xd9a, 0xc8, 0x2a2, 0x78, 0x3, 0x2, 0x1, 0x8, 0x0, 0x4, 0x200, 0x200, 0x0, 0x1, 0x4, 0x401, 0x66cd, 0xc, 0x8, 0x4, 0x1f8, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0a000000040000000200000002"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, r8, 0x200000000000000}, 0x38) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.617381329s ago: executing program 2 (id=570): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000180)='\x96\x94M\x84n\xde\'\\-\x00', 0x80000, 0x0, 0x4, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4, @ANYRES8, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa121, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r8 = getpid() sched_setscheduler(r8, 0x3, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) read(r0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000000, 0x3032, r0, 0x0) 1.469324504s ago: executing program 2 (id=571): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x80000000000000) 1.457102606s ago: executing program 1 (id=572): io_setup(0x6, &(0x7f00000010c0)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xfffffffeffffffff) syz_clone3(&(0x7f0000000300)={0x23880400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0, 0x0, 0x0, 0x2000000}]) 1.430969031s ago: executing program 2 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000007000000140600001be60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_uring_setup(0x1b7b, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00000568000800a8792d7200", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x200, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') lseek(r7, 0x4, 0x1) getdents64(r7, 0xffffffffffffffff, 0x43) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r6) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$RTC_SET_TIME(r8, 0x4024700a, &(0x7f0000000280)={0x14, 0x8000009, 0x3, 0x13, 0x1, 0x100, 0x4, 0x1000013d}) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r9, 0x28, 0x2, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001a00010000000000000800000a000000", @ANYRES32=0x0, @ANYBLOB="eeef60558861f4820700000026a38d6a000000000000000014000100fc02000000000000000000000000000155f4b3abaffb20d35dba0000e6b2af05b9181a4513da59214867b8082432b195744ccbc8a53c1915f956edd0408c6ed9a85c9a3bada76ef305ff18fce7d61715d59d364df81096a601195fad5888f49e8902ec0600f06086f99fec40e8a272378b8c2ec86d181635f65458ea98b570e22e04c5e383a21c976de59272b25b0692245a1cdf2e3c2fba8670519a63382cb829cf602bedbb6e478d6198437256696f5b78f6620bd50c3acf7100127e601b1d5020c9ed856ac09b76e60172d8bb5b7c9a484515c79fe2d392209ff342eba2c9364586b7f652c6f3d11d78c8b86294ae593d14d31f3114a85f51684fa40f76377a7e9ef26466b34ac9ca3981debcf86cf1f9621fc0a277fdc67ca1e85df7"], 0x44}}, 0x0) 852.909257ms ago: executing program 5 (id=574): select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710}) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7fffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xffffffff}, &(0x7f0000000040)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="e904a20000000180c200020e08004500003c0000e0000011907800000000000000004e21000000289078e2040000000000002f91ba4f8f177f907200000000000000a9cb688e3552e5e9f7f17f7cabd67849a173b3602366"], 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x1, 0x60d3, 0x5}) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000680)=[{&(0x7f0000000140)="fe6b", 0x2}], 0x1, 0x5, 0x349) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x84, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000000d00)={[], [], 0x2c}, 0x84, 0x4fd, &(0x7f000001a240)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e67", 0x26f}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}, @NFT_MSG_DELOBJ={0x12c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xe8, 0x8, "b2c61db05d9cb79cee388f4650f1b4bc9353b7450140c70b612b7cc203b67b8a1ce8e31df58a344492f9be6017c93beee08256acccb5c908f235c2cd8b206069eae18c20e6d3a2bf2064c946ddd08aa9f73d4988a6e661b198bafa1e8315b86a358f182df54ecca053222342fc5d6d7ffaf85f999a4467ee7dd1369e352a51bc7c10e8edebfc784d8d204e9442a8c28fffd527f821534ba87dee5e1b5cb700a65922bdb667aef4d6fd89bdab0aecbc53e92788ca6cb68416c630221d7e8104189d9440d34e2168fde4943741bdea2585067ce6bbbfedafe00aab8c4882137c83415e4359"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSET={0x144, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_USERDATA={0xdd, 0xd, 0x1, 0x0, "78cd89f589809e92f003f3dd7d0471cfa7b320939b77540b51e3469783f2ac0852c54fba8e6800a4bc6ab10a196d56c8b6bbdc28610ded6842c4112a51220e603bbb1cb5ae29f283e12c2927c2e722d867d2ab73875fd2b39326b8238a6c9f24d0026f7099e8c73c39891e77b775a90958077cc5b7292d4b128077159a409c6aaaf86b5f1caed8aad11f24cc29b66b8ff779b02951bd5568b39ba9015987980a8ed162aae527b20e1eeea11e7e72f1ec5bb8541bd45536c22ca39e6de5dbdd6b41da0fdaba476430c0377d7193fb9478d798e7d0cf61605775"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x104, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x84}]}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x806}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xe2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x8f, 0x7, 0x1, 0x0, "03768a917d215ebd643f76c5e13b94bf8eecf5c8cc9ca9d1096bba683418333cc595aeda7b0e3a6550a187a579a615b95822130a6d742788361710f56927efdf4a76150c1c7baf5880e20b4c61bbd96728ece5fb960d318bb88ba334f5aac1c59bf51669d4e8fff598497080ac52e9e9a304f1f01199c137778b3a19e5ff786fea58f69244e31748e5d911"}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x40c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) socket$kcm(0xa, 0x922000000003, 0x11) 60.34454ms ago: executing program 5 (id=575): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="44000280400001"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) open(&(0x7f0000000040)='./file0\x00', 0x2141, 0xa) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x20000036, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r8}, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x8, 0x7f, 0x8, 0x0, 0xfffffffffffffffd, 0x24, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0xc500, 0xffffffffffff0001, 0x8, 0x7, 0x6, 0x8, 0x8000, 0x0, 0x2, 0x0, 0x4}, r8, 0xc, 0xffffffffffffffff, 0x0) close(r7) getsockopt(r4, 0x200000000114, 0x271d, 0x0, &(0x7f0000000400)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = io_uring_setup(0x9e5, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x0, 0xab}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r10, &(0x7f0000000100)=[{&(0x7f0000000440)="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", 0xfd1}], 0x1) socket(0xb, 0x803, 0x0) 0s ago: executing program 2 (id=576): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): tclass=bluetooth_socket permissive=1 [ 67.229429][ T28] audit: type=1400 audit(1776326262.369:257): avc: denied { getattr } for pid=4080 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.270254][ T28] audit: type=1400 audit(1776326262.409:258): avc: denied { read } for pid=4083 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.315986][ T28] audit: type=1400 audit(1776326262.429:259): avc: denied { open } for pid=4083 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.385864][ T28] audit: type=1400 audit(1776326262.519:260): avc: denied { create } for pid=4077 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.414955][ T4093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4093 comm=syz.3.114 [ 67.451314][ T28] audit: type=1400 audit(1776326262.579:261): avc: denied { write } for pid=4077 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=1691 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 67.481575][ T3523] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.814816][ T4099] loop1: detected capacity change from 0 to 2048 [ 67.948557][ T4104] netlink: 'syz.5.115': attribute type 39 has an invalid length. [ 68.071501][ T4099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.097535][ T4099] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.174313][ T4110] loop3: detected capacity change from 0 to 164 [ 68.578499][ T4120] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 4, id = 0 [ 69.421180][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.874691][ T4149] loop3: detected capacity change from 0 to 128 [ 70.176931][ T3318] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 70.192208][ T3318] FAT-fs (loop3): Filesystem has been set read-only [ 70.374930][ T4171] loop0: detected capacity change from 0 to 512 [ 70.386290][ T4171] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.397091][ T4171] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.404307][ T4171] EXT4-fs warning (device loop0): ext4_enable_quotas:7263: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 70.420895][ T4171] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 70.427957][ T4171] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 70.442755][ T4171] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #12: comm syz.0.138: corrupted inode contents [ 70.454594][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 70.454618][ C1] EXT4-fs (loop0): initial error at time 1776326265: ext4_mb_generate_buddy:1317 [ 70.454647][ C1] EXT4-fs (loop0): last error at time 1776326265: ext4_mb_generate_buddy:1317 [ 70.479853][ T4171] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 70.480062][ T4171] EXT4-fs error (device loop0): ext4_dirty_inode:6497: inode #12: comm syz.0.138: mark_inode_dirty error [ 70.501001][ T4171] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 70.501241][ T4171] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #12: comm syz.0.138: corrupted inode contents [ 70.522503][ T4171] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 70.522682][ T4171] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.138: mark_inode_dirty error [ 70.543719][ T4171] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 70.544095][ T4171] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #12: comm syz.0.138: corrupted inode contents [ 70.566237][ T4171] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 70.566430][ T4171] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 70.584673][ T4171] loop0: lost filesystem error report for type 5 error -117 [ 70.584832][ T4171] EXT4-fs error (device loop0): ext4_do_update_inode:5604: inode #12: comm syz.0.138: corrupted inode contents [ 70.604512][ T4171] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 70.605518][ T4171] EXT4-fs error (device loop0): ext4_truncate:4604: inode #12: comm syz.0.138: mark_inode_dirty error [ 70.626085][ T4171] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 70.626328][ T4171] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 70.646661][ T4171] loop0: lost filesystem error report for type 5 error -117 [ 70.647007][ T4171] EXT4-fs (loop0): 1 truncate cleaned up [ 70.662511][ T4171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.692085][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.825002][ T4186] Cannot find add_set index 2 as target [ 70.946076][ T4194] loop5: detected capacity change from 0 to 512 [ 70.956130][ T4192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.965947][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.999999][ T4192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.024665][ T4194] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 71.029657][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.047870][ T4194] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 71.202405][ T4200] loop3: detected capacity change from 0 to 2048 [ 71.909330][ T4204] Illegal XDP return value 4294967294 on prog (id 43) dev N/A, expect packet loss! [ 72.029458][ T4200] loop3: p2 < > p4 [ 72.036248][ T4200] loop3: p4 size 262144 extends beyond EOD, truncated [ 72.078331][ T4204] loop0: detected capacity change from 0 to 512 [ 72.099417][ T4204] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.266269][ T4194] loop5: detected capacity change from 0 to 764 [ 72.287479][ T4204] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.148: bad orphan inode 131083 [ 72.308196][ T4194] Symlink component flag not implemented [ 72.338634][ T4194] Symlink component flag not implemented [ 72.354391][ T4204] loop0: lost filesystem error report for type 5 error -117 [ 72.355447][ T4204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.567127][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.058076][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 73.058098][ T28] audit: type=1400 audit(1776326268.199:280): avc: denied { create } for pid=4214 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.085618][ T28] audit: type=1400 audit(1776326268.219:281): avc: denied { write } for pid=4214 comm="syz.0.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.135505][ T4219] netlink: 'syz.3.153': attribute type 12 has an invalid length. [ 73.143634][ T4219] netlink: 'syz.3.153': attribute type 29 has an invalid length. [ 73.151487][ T4219] netlink: 148 bytes leftover after parsing attributes in process `syz.3.153'. [ 73.160709][ T4219] netlink: 'syz.3.153': attribute type 1 has an invalid length. [ 73.168793][ T4219] netlink: 15 bytes leftover after parsing attributes in process `syz.3.153'. [ 73.298369][ T28] audit: type=1326 audit(1776326268.439:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee548c819 code=0x7ffc0000 [ 73.344482][ T28] audit: type=1326 audit(1776326268.439:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee548c819 code=0x7ffc0000 [ 73.376414][ T28] audit: type=1326 audit(1776326268.449:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee548c819 code=0x7ffc0000 [ 73.400019][ T28] audit: type=1326 audit(1776326268.449:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee548c819 code=0x7ffc0000 [ 73.424122][ T28] audit: type=1326 audit(1776326268.449:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ee548c819 code=0x7ffc0000 [ 73.453390][ T28] audit: type=1326 audit(1776326268.449:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee548c819 code=0x7ffc0000 [ 73.478586][ T4226] loop0: detected capacity change from 0 to 144 [ 73.486405][ T4226] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.505852][ T28] audit: type=1326 audit(1776326268.449:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee548c819 code=0x7ffc0000 [ 73.535766][ T4226] FAT-fs (loop0): Invalid FSINFO signature: 0xaaaaaaaa, 0x1e1e1e1e (sector = 1) [ 73.555654][ T4226] FAT-fs (loop0): error, invalid access to FAT (entry 0x06767676) [ 73.577515][ T28] audit: type=1326 audit(1776326268.449:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.0.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f1ee548c819 code=0x7ffc0000 [ 73.604138][ T4226] FAT-fs (loop0): Filesystem has been set read-only [ 73.616459][ T4229] loop5: detected capacity change from 0 to 512 [ 73.639399][ T4229] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.5.157: corrupted xattr block 95: invalid header [ 73.657492][ T4229] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.660127][ T4229] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 73.669387][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 73.669405][ C1] EXT4-fs (loop5): initial error at time 1776326268: ext4_expand_extra_isize_ea:2808: inode 11 [ 73.669440][ C1] EXT4-fs (loop5): last error at time 1776326268: ext4_expand_extra_isize_ea:2808: inode 11 [ 73.776890][ T4229] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.157: bg 0: block 7: invalid block bitmap [ 73.818876][ T4236] loop3: detected capacity change from 0 to 256 [ 73.828097][ T4229] loop5: lost filesystem error report for type 5 error -117 [ 73.828396][ T4229] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 73.852134][ T4229] loop5: lost filesystem error report for type 5 error -117 [ 73.853098][ T4229] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2970: inode #11: comm syz.5.157: corrupted xattr block 95: invalid header [ 73.856255][ T4236] SELinux: policydb version 1555 does not match my version range 15-35 [ 73.861543][ T4229] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.901607][ T4236] SELinux: failed to load policy [ 73.935747][ T4229] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 73.949750][ T4229] EXT4-fs (loop5): 1 orphan inode deleted [ 73.971119][ T4229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.028261][ T4241] loop0: detected capacity change from 0 to 164 [ 74.047725][ T3523] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.143396][ T4241] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=82 [ 74.300585][ T4249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.164'. [ 74.327967][ T4249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.164'. [ 74.431381][ T4251] loop1: detected capacity change from 0 to 2048 [ 74.519190][ T4251] loop1: p2 < > p4 [ 74.548821][ T4251] loop1: p4 size 262144 extends beyond EOD, truncated [ 75.400612][ T4268] loop5: detected capacity change from 0 to 164 [ 76.156517][ T4279] loop0: detected capacity change from 0 to 512 [ 76.203694][ T4277] loop5: detected capacity change from 0 to 512 [ 76.266046][ T4277] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.330296][ T4277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.366452][ T4277] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.444674][ T3523] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.546888][ T4279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.575095][ T4288] netlink: 'syz.1.178': attribute type 3 has an invalid length. [ 76.620178][ T4279] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.670205][ T4294] loop1: detected capacity change from 0 to 128 [ 76.685577][ T4294] syz.1.180: attempt to access beyond end of device [ 76.685577][ T4294] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 76.704181][ T4279] netlink: 60 bytes leftover after parsing attributes in process `syz.0.176'. [ 76.738985][ T4297] loop3: detected capacity change from 0 to 1024 [ 76.748365][ T4297] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 76.768191][ T4297] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 76.779437][ T4297] EXT4-fs (loop3): invalid journal inode [ 76.785221][ T4297] EXT4-fs (loop3): can't get journal size [ 76.796286][ T4297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.930605][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.014438][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.737509][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 78.737585][ T28] audit: type=1400 audit(1776326273.589:309): avc: denied { read } for pid=4307 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.564567][ T28] audit: type=1400 audit(1776326274.699:310): avc: denied { create } for pid=4322 comm="syz.5.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 79.586528][ T4315] loop3: detected capacity change from 0 to 512 [ 79.610853][ T4325] loop1: detected capacity change from 0 to 1024 [ 79.654790][ T4325] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.700713][ T28] audit: type=1400 audit(1776326274.819:311): avc: denied { read write } for pid=4328 comm="syz.5.190" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 79.731152][ T4325] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.777660][ T4330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.189'. [ 79.782620][ T28] audit: type=1400 audit(1776326274.819:312): avc: denied { open } for pid=4328 comm="syz.5.190" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 79.825504][ T4325] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 79.862089][ T4337] loop5: detected capacity change from 0 to 128 [ 79.868610][ T4325] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.881347][ T4325] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.187: Freeing blocks not in datazone - block = 0, count = 4096 [ 79.905258][ T4325] loop1: lost filesystem error report for type 5 error -117 [ 79.907393][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 79.916791][ T4315] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 79.921255][ C0] EXT4-fs (loop1): initial error at time 1776326275: ext4_free_blocks:6724 [ 79.921288][ C0] EXT4-fs (loop1): last error at time 1776326275: ext4_free_blocks:6724 [ 79.921661][ T4325] EXT4-fs (loop1): 1 orphan inode deleted [ 79.922107][ T4325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.073184][ T4315] EXT4-fs (loop3): 1 truncate cleaned up [ 80.241032][ T4348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 80.244159][ T4315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.264575][ T28] audit: type=1400 audit(1776326275.299:313): avc: denied { name_bind } for pid=4346 comm="syz.2.195" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.300367][ T4325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4325 comm=syz.1.187 [ 80.447373][ T4356] netlink: 16 bytes leftover after parsing attributes in process `syz.5.194'. [ 80.477259][ T4356] netlink: 'syz.5.194': attribute type 39 has an invalid length. [ 80.818318][ T4358] loop0: detected capacity change from 0 to 2048 [ 80.828053][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.491227][ T28] audit: type=1400 audit(1776326276.629:314): avc: denied { write } for pid=4361 comm="syz.1.197" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.555869][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.617058][ T4365] loop1: detected capacity change from 0 to 128 [ 81.657388][ T28] audit: type=1400 audit(1776326276.789:315): avc: denied { getopt } for pid=4373 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.813358][ T4365] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.838277][ T28] audit: type=1400 audit(1776326276.969:316): avc: denied { connect } for pid=4393 comm="syz.2.207" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.862902][ T4394] netlink: 'syz.2.207': attribute type 21 has an invalid length. [ 81.868349][ T4365] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.905719][ T28] audit: type=1400 audit(1776326277.039:317): avc: denied { create } for pid=4364 comm="syz.1.200" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 81.951114][ T4402] syzkaller0: entered allmulticast mode [ 81.957013][ T4402] syzkaller0: entered promiscuous mode [ 81.962789][ T4399] loop0: detected capacity change from 0 to 512 [ 81.965773][ T28] audit: type=1400 audit(1776326277.099:318): avc: denied { create } for pid=4401 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.990119][ T4399] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 82.034104][ T4399] EXT4-fs (loop0): orphan cleanup on readonly fs [ 82.034184][ T4406] syzkaller0 (unregistering): left allmulticast mode [ 82.034206][ T4406] syzkaller0 (unregistering): left promiscuous mode [ 82.069697][ T4399] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.208: bad orphan inode 15 [ 82.081706][ T4399] loop0: lost filesystem error report for type 5 error -117 [ 82.083734][ T4399] ext4_test_bit(bit=14, block=18) = 1 [ 82.092042][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 82.092266][ C1] EXT4-fs (loop0): initial error at time 1776326277: ext4_orphan_get:1423 [ 82.092521][ C1] EXT4-fs (loop0): last error at time 1776326277: ext4_orphan_get:1423 [ 82.130582][ T4399] is_bad_inode(inode)=0 [ 82.135393][ T4399] NEXT_ORPHAN(inode)=1023 [ 82.141391][ T4399] max_ino=32 [ 82.146111][ T4399] i_nlink=0 [ 82.160539][ T4399] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2970: inode #15: comm syz.0.208: corrupted xattr block 19: e_value size too large [ 82.176721][ T4399] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.180235][ T4399] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 82.207620][ T4399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 ro without journal. Quota mode: none. [ 82.308221][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.594519][ T4419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.655391][ T4419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.269098][ T4419] bridge_slave_0: left allmulticast mode [ 83.274946][ T4419] bridge_slave_0: left promiscuous mode [ 83.281472][ T4419] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.304292][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 84.141824][ T4419] bridge_slave_1: left allmulticast mode [ 84.149359][ T4419] bridge_slave_1: left promiscuous mode [ 84.155908][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 84.155925][ T28] audit: type=1400 audit(1776326279.289:324): avc: denied { read } for pid=4443 comm="syz.0.212" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 84.161176][ T4419] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.174781][ T28] audit: type=1400 audit(1776326279.299:325): avc: denied { open } for pid=4443 comm="syz.0.212" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 84.237907][ T28] audit: type=1400 audit(1776326279.359:326): avc: denied { allowed } for pid=4443 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.293478][ T4451] loop0: detected capacity change from 0 to 512 [ 84.304986][ T4419] bond0: (slave bond_slave_0): Releasing backup interface [ 84.324852][ T4419] bond0: (slave bond_slave_1): Releasing backup interface [ 84.343518][ T4419] team0: Port device team_slave_0 removed [ 84.343792][ T4451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.363627][ T4451] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.367237][ T4419] team0: Port device team_slave_1 removed [ 84.382520][ T28] audit: type=1400 audit(1776326279.519:327): avc: denied { ioctl } for pid=4450 comm="syz.0.216" path="socket:[8384]" dev="sockfs" ino=8384 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.384690][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.416879][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.426269][ T4419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.437815][ T4419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.449974][ T28] audit: type=1400 audit(1776326279.589:328): avc: denied { create } for pid=4450 comm="syz.0.216" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 84.488991][ T4419] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 84.597949][ T4471] xt_hashlimit: size too large, truncated to 1048576 [ 84.622661][ T28] audit: type=1400 audit(1776326279.759:329): avc: denied { remove_name } for pid=3312 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.630689][ T3312] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 84.672816][ T3312] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 84.695358][ T28] audit: type=1400 audit(1776326279.759:330): avc: denied { rmdir } for pid=3312 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.724941][ T3312] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 84.755497][ T3312] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 84.792813][ T3312] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 84.826328][ T3312] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 84.860120][ T3312] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 84.892501][ T3312] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 84.916978][ T3312] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 84.952676][ T3312] EXT4-fs warning (device loop0): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 85.122279][ T4537] netlink: 116 bytes leftover after parsing attributes in process `syz.2.221'. [ 85.213081][ T4543] netlink: 'syz.1.222': attribute type 39 has an invalid length. [ 85.417484][ T28] audit: type=1400 audit(1776326280.539:331): avc: denied { mount } for pid=4488 comm="syz.3.220" name="/" dev="autofs" ino=7655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 85.464821][ T4458] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.478222][ T3754] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.524178][ T28] audit: type=1400 audit(1776326280.629:332): avc: denied { getopt } for pid=4558 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.590864][ T4563] loop5: detected capacity change from 0 to 512 [ 85.601027][ T4565] netlink: 'syz.2.225': attribute type 21 has an invalid length. [ 85.613716][ T3754] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.641478][ T4563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.663258][ T4565] netlink: 156 bytes leftover after parsing attributes in process `syz.2.225'. [ 85.699409][ T4563] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.763419][ T3754] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.799893][ T3523] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.834681][ T4565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.225'. [ 85.861458][ T3754] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.976468][ T3754] bridge_slave_1: left allmulticast mode [ 85.984582][ T3754] bridge_slave_1: left promiscuous mode [ 85.999999][ T3754] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.015923][ T3754] bridge_slave_0: left allmulticast mode [ 86.022293][ T3754] bridge_slave_0: left promiscuous mode [ 86.033545][ T3754] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.074418][ T4565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.225'. [ 86.096478][ T4565] IPv6: addrconf: prefix option has invalid lifetime [ 86.162822][ T28] audit: type=1400 audit(1776326281.299:333): avc: denied { write } for pid=4580 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 86.250003][ T3754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.260322][ T3754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.271109][ T3754] bond0 (unregistering): Released all slaves [ 86.391090][ T3754] hsr_slave_0: left promiscuous mode [ 86.411789][ T3754] hsr_slave_1: left promiscuous mode [ 86.421643][ T4593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.230'. [ 86.431479][ T3754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.440741][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.230'. [ 86.449948][ T3754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.457953][ T3754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.465601][ T3754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.512554][ T3754] veth1_macvtap: left promiscuous mode [ 86.531280][ T3754] veth0_macvtap: left promiscuous mode [ 86.553451][ T3754] veth1_vlan: left promiscuous mode [ 86.568606][ T3754] veth0_vlan: left promiscuous mode [ 86.717623][ T3754] team0 (unregistering): Port device team_slave_1 removed [ 86.742600][ T3754] team0 (unregistering): Port device team_slave_0 removed [ 86.851231][ T3039] 8021q: adding VLAN 0 to HW filter on device eth5 [ 86.908998][ T3768] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.922349][ T4593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.230'. [ 86.962541][ T3768] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.974621][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.230'. [ 87.013579][ T3768] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.066505][ T3768] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.086276][ T4625] loop3: detected capacity change from 0 to 1024 [ 87.114896][ T4625] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.153674][ T4625] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.182176][ T4625] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 87.191386][ T4625] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.198119][ T4625] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.233: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.211598][ T4625] loop3: lost filesystem error report for type 5 error -117 [ 87.211798][ T4625] EXT4-fs (loop3): 1 orphan inode deleted [ 87.219187][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 87.219222][ C1] EXT4-fs (loop3): initial error at time 1776326282: ext4_free_blocks:6724 [ 87.219242][ C1] EXT4-fs (loop3): last error at time 1776326282: ext4_free_blocks:6724 [ 87.258041][ T4625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.374124][ T3039] 8021q: adding VLAN 0 to HW filter on device eth7 [ 87.424779][ T4639] xt_hashlimit: size too large, truncated to 1048576 [ 87.495297][ T4598] chnl_net:caif_netlink_parms(): no params data found [ 87.652463][ T4663] netlink: 65019 bytes leftover after parsing attributes in process `syz.3.233'. [ 87.717189][ T4598] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.750924][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.774283][ T4598] bridge_slave_0: entered allmulticast mode [ 87.795434][ T4598] bridge_slave_0: entered promiscuous mode [ 87.816730][ T4598] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.840995][ T4598] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.853364][ T4598] bridge_slave_1: entered allmulticast mode [ 87.866892][ T4598] bridge_slave_1: entered promiscuous mode [ 87.879703][ T3039] 8021q: adding VLAN 0 to HW filter on device eth8 [ 87.918249][ T4598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.941911][ T4598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.973728][ T4598] team0: Port device team_slave_0 added [ 87.987104][ T4598] team0: Port device team_slave_1 added [ 88.016245][ T4598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.023435][ T4598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.062596][ T4598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.075274][ T4598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.082283][ T4598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.121080][ T4598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.156445][ T4598] hsr_slave_0: entered promiscuous mode [ 88.162903][ T4598] hsr_slave_1: entered promiscuous mode [ 88.323998][ T3039] 8021q: adding VLAN 0 to HW filter on device eth6 [ 88.362542][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.446095][ T4703] loop3: detected capacity change from 0 to 1024 [ 88.472692][ T4703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.533296][ T4717] netlink: 14 bytes leftover after parsing attributes in process `syz.2.244'. [ 88.560093][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.647760][ T4598] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 88.678637][ T4598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.703110][ T4598] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 88.724071][ T4598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.742002][ T4598] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 88.759730][ T4598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.774391][ T4598] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 88.785646][ T4598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.793780][ T4726] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.801133][ T4726] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.816611][ T4730] xt_hashlimit: size too large, truncated to 1048576 [ 88.823795][ T4730] xt_hashlimit: max too large, truncated to 1048576 [ 88.918020][ T4598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.940514][ T4740] loop5: detected capacity change from 0 to 512 [ 88.950464][ T4740] EXT4-fs (loop5): orphan cleanup on readonly fs [ 88.957280][ T4740] EXT4-fs error (device loop5): ext4_acquire_dquot:7028: comm syz.5.250: Failed to acquire dquot type 1 [ 88.968790][ T4740] loop5: lost filesystem error report for type 5 error -117 [ 88.969007][ T4740] EXT4-fs error (device loop5): ext4_acquire_dquot:7028: comm syz.5.250: Failed to acquire dquot type 1 [ 88.987618][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 88.987641][ C0] EXT4-fs (loop5): last error at time 1776326284: ext4_acquire_dquot:7028 [ 89.005841][ T4598] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.008011][ T4740] loop5: lost filesystem error report for type 5 error -117 [ 89.015550][ T3768] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.030064][ T3768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.055253][ T4740] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.250: bg 0: block 248: padding at end of block bitmap is not set [ 89.080264][ T3768] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.087438][ T3768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.095290][ T4740] loop5: lost filesystem error report for type 5 error -117 [ 89.097150][ T4740] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 89.114819][ T4740] loop5: lost filesystem error report for type 5 error -117 [ 89.115141][ T4740] EXT4-fs error (device loop5): ext4_acquire_dquot:7028: comm syz.5.250: Failed to acquire dquot type 1 [ 89.139727][ T4740] loop5: lost filesystem error report for type 5 error -117 [ 89.141265][ T4740] EXT4-fs (loop5): 1 orphan inode deleted [ 89.164015][ T4740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.185722][ T4740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.255151][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 89.255169][ T28] audit: type=1400 audit(1776326284.389:348): avc: denied { remount } for pid=4739 comm="syz.5.250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 89.320013][ T4598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.404890][ T4761] Cannot find set identified by id 0 to match [ 89.485623][ T4764] loop1: detected capacity change from 0 to 512 [ 89.504204][ T4764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.539652][ T4764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.580434][ T4764] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.765362][ T28] audit: type=1400 audit(1776326284.899:349): avc: denied { map } for pid=4763 comm="syz.1.256" path="/44/bus/memory.current" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.844958][ T28] audit: type=1400 audit(1776326284.959:350): avc: denied { ioctl } for pid=4763 comm="syz.1.256" path="/44/bus/memory.current" dev="loop1" ino=19 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.906270][ T4764] mmap: syz.1.256 (4764) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.121670][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.449101][ T4787] loop1: detected capacity change from 0 to 512 [ 90.491717][ T4787] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.601957][ T4787] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 90.716162][ T28] audit: type=1400 audit(1776326285.849:351): avc: denied { connect } for pid=4791 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 91.008277][ T28] audit: type=1400 audit(1776326285.879:352): avc: denied { write } for pid=4791 comm="syz.2.260" path="socket:[9399]" dev="sockfs" ino=9399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 91.147869][ T4598] veth0_vlan: entered promiscuous mode [ 91.199782][ T4598] veth1_vlan: entered promiscuous mode [ 91.211548][ T4805] loop1: detected capacity change from 0 to 512 [ 91.261957][ T4805] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.302373][ T4805] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 91.328198][ T4598] veth0_macvtap: entered promiscuous mode [ 91.342613][ T4805] FAULT_INJECTION: forcing a failure. [ 91.342613][ T4805] name failslab, interval 1, probability 0, space 0, times 1 [ 91.387862][ T4598] veth1_macvtap: entered promiscuous mode [ 91.402335][ T4805] CPU: 0 UID: 0 PID: 4805 Comm: syz.1.265 Not tainted syzkaller #0 PREEMPT(full) [ 91.402367][ T4805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 91.402382][ T4805] Call Trace: [ 91.402390][ T4805] [ 91.402399][ T4805] __dump_stack+0x1d/0x30 [ 91.402431][ T4805] dump_stack_lvl+0x95/0xd0 [ 91.402481][ T4805] dump_stack+0x15/0x1b [ 91.402519][ T4805] should_fail_ex+0x263/0x280 [ 91.402585][ T4805] ? virtio_transport_do_socket_init+0x39/0x190 [ 91.402621][ T4805] should_failslab+0x8c/0xb0 [ 91.402650][ T4805] __kmalloc_cache_noprof+0x5f/0x400 [ 91.402700][ T4805] virtio_transport_do_socket_init+0x39/0x190 [ 91.402747][ T4805] vsock_assign_transport+0x4aa/0x600 [ 91.402885][ T4805] vsock_connect+0x3e3/0x7d0 [ 91.402910][ T4805] ? __pfx_autoremove_wake_function+0x10/0x10 [ 91.402939][ T4805] ? __pfx_vsock_connect+0x10/0x10 [ 91.403000][ T4805] __sys_connect+0x1f1/0x2a0 [ 91.403032][ T4805] __x64_sys_connect+0x3f/0x50 [ 91.403065][ T4805] x64_sys_call+0x2df0/0x3020 [ 91.403100][ T4805] do_syscall_64+0x12c/0x3b0 [ 91.403123][ T4805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.403144][ T4805] RIP: 0033:0x7f354b02c819 [ 91.403163][ T4805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.403213][ T4805] RSP: 002b:00007f3549a7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 91.403294][ T4805] RAX: ffffffffffffffda RBX: 00007f354b2a5fa0 RCX: 00007f354b02c819 [ 91.403310][ T4805] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000008 [ 91.403386][ T4805] RBP: 00007f3549a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.403398][ T4805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.403411][ T4805] R13: 00007f354b2a6038 R14: 00007f354b2a5fa0 R15: 00007ffc643ee7c8 [ 91.403430][ T4805] [ 91.790261][ T4815] __nla_validate_parse: 2 callbacks suppressed [ 91.790277][ T4815] netlink: 268 bytes leftover after parsing attributes in process `syz.2.268'. [ 91.820787][ T28] audit: type=1400 audit(1776326286.929:353): avc: denied { nlmsg_read } for pid=4811 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.870794][ T28] audit: type=1400 audit(1776326286.999:354): avc: denied { create } for pid=4811 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 91.939345][ T4598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.978675][ T4598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.005358][ T3756] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.014552][ T3756] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.045758][ T3756] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.060958][ T4816] netlink: 'syz.2.268': attribute type 10 has an invalid length. [ 92.074191][ T3756] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.086458][ T28] audit: type=1400 audit(1776326287.229:355): avc: denied { mounton } for pid=4598 comm="syz-executor" path="/root/syzkaller.0bDtvs/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 92.201519][ T4816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.223602][ T4816] team0: Port device netdevsim1 added [ 92.345653][ T4827] netlink: 'syz.3.272': attribute type 39 has an invalid length. [ 92.374126][ T28] audit: type=1400 audit(1776326287.509:356): avc: denied { listen } for pid=4824 comm="syz.6.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.403510][ T28] audit: type=1400 audit(1776326287.509:357): avc: denied { accept } for pid=4824 comm="syz.6.270" lport=54243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.596463][ T4830] loop5: detected capacity change from 0 to 512 [ 92.687917][ T4830] EXT4-fs error (device loop5): ext4_do_update_inode:5604: inode #3: comm syz.5.271: corrupted inode contents [ 92.760248][ T4830] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 92.760763][ T4838] ucma_write: process 171 (syz.3.274) changed security contexts after opening file descriptor, this is not allowed. [ 92.770300][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 92.770324][ C0] EXT4-fs (loop5): initial error at time 1776326287: ext4_do_update_inode:5604: inode 3 [ 92.770384][ C0] EXT4-fs (loop5): last error at time 1776326287: ext4_do_update_inode:5604: inode 3 [ 92.816559][ T4830] EXT4-fs error (device loop5): ext4_dirty_inode:6497: inode #3: comm syz.5.271: mark_inode_dirty error [ 92.863011][ T4830] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 92.885789][ T4830] EXT4-fs error (device loop5): ext4_do_update_inode:5604: inode #3: comm syz.5.271: corrupted inode contents [ 92.941425][ T4830] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 92.963268][ T4830] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.271: mark_inode_dirty error [ 93.050050][ T4830] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 93.091724][ T4830] EXT4-fs error (device loop5): ext4_acquire_dquot:7028: comm syz.5.271: Failed to acquire dquot type 0 [ 93.127190][ T4844] loop1: detected capacity change from 0 to 512 [ 93.178784][ T4844] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.277: inode has both inline data and extents flags [ 93.210488][ T4830] loop5: lost filesystem error report for type 5 error -117 [ 93.221713][ T4830] EXT4-fs error (device loop5): ext4_do_update_inode:5604: inode #16: comm syz.5.271: corrupted inode contents [ 93.242417][ T4844] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.242554][ T4830] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 93.242581][ T4844] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.277: couldn't read orphan inode 15 (err -117) [ 93.251881][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 93.251906][ C0] EXT4-fs (loop1): initial error at time 1776326288: ext4_orphan_get:1397: inode 15 [ 93.289400][ C0] EXT4-fs (loop1): last error at time 1776326288: ext4_orphan_get:1397: inode 15 [ 93.310701][ T4830] EXT4-fs error (device loop5): ext4_dirty_inode:6497: inode #16: comm syz.5.271: mark_inode_dirty error [ 93.327554][ T4830] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 93.327957][ T4830] EXT4-fs error (device loop5): ext4_do_update_inode:5604: inode #16: comm syz.5.271: corrupted inode contents [ 93.342008][ T4844] loop1: lost filesystem error report for type 5 error -117 [ 93.350951][ T4830] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 93.359117][ T4830] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.271: mark_inode_dirty error [ 93.380604][ T4830] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 93.381036][ T4830] EXT4-fs error (device loop5): ext4_do_update_inode:5604: inode #16: comm syz.5.271: corrupted inode contents [ 93.382425][ T4844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.394187][ T4830] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 93.418705][ T4830] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 93.439349][ T4830] loop5: lost filesystem error report for type 5 error -117 [ 93.439757][ T4830] EXT4-fs error (device loop5): ext4_do_update_inode:5604: inode #16: comm syz.5.271: corrupted inode contents [ 93.464653][ T4830] EXT4-fs error (device loop5): ext4_truncate:4604: inode #16: comm syz.5.271: mark_inode_dirty error [ 93.498498][ T4830] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 93.520377][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.530480][ T4830] loop5: lost filesystem error report for type 5 error -117 [ 93.531505][ T4830] EXT4-fs (loop5): 1 truncate cleaned up [ 93.561933][ T4830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.586638][ T4830] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.614536][ T4830] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #3: comm syz.5.271: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 93.614536][ T4830] [ 93.742346][ T3523] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.743960][ T4830] syz.5.271 (4830) used greatest stack depth: 8256 bytes left [ 93.847927][ T4851] loop1: detected capacity change from 0 to 2048 [ 93.958619][ T4851] loop1: p2 < > p4 [ 93.978387][ T4851] loop1: p4 size 262144 extends beyond EOD, truncated [ 94.552736][ T4857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.280'. [ 94.640960][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 94.640989][ T28] audit: type=1400 audit(1776326289.779:361): avc: denied { mounton } for pid=4854 comm="syz.2.280" path="/53/file0" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.896509][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.281'. [ 94.958749][ T4864] netlink: 36 bytes leftover after parsing attributes in process `syz.5.281'. [ 94.971776][ T28] audit: type=1400 audit(1776326290.109:362): avc: denied { read } for pid=4862 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.065917][ T4868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.278'. [ 95.364555][ T28] audit: type=1400 audit(1776326290.229:363): avc: denied { write } for pid=4852 comm="syz.3.282" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.514508][ T28] audit: type=1400 audit(1776326290.499:364): avc: denied { ioctl } for pid=4852 comm="syz.3.282" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.695225][ T4878] loop6: detected capacity change from 0 to 1764 [ 95.955765][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 95.981233][ T4888] syzkaller0: entered promiscuous mode [ 95.995163][ T4887] syzkaller0: left promiscuous mode [ 96.179463][ T4893] FAULT_INJECTION: forcing a failure. [ 96.179463][ T4893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.214438][ T4893] CPU: 0 UID: 0 PID: 4893 Comm: syz.6.290 Not tainted syzkaller #0 PREEMPT(full) [ 96.214466][ T4893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 96.214479][ T4893] Call Trace: [ 96.214486][ T4893] [ 96.214496][ T4893] __dump_stack+0x1d/0x30 [ 96.214591][ T4893] dump_stack_lvl+0x95/0xd0 [ 96.214623][ T4893] dump_stack+0x15/0x1b [ 96.214647][ T4893] should_fail_ex+0x263/0x280 [ 96.214756][ T4893] should_fail+0xb/0x20 [ 96.214782][ T4893] should_fail_usercopy+0x1a/0x20 [ 96.214872][ T4893] _copy_from_user+0x1c/0xb0 [ 96.214911][ T4893] do_tcp_setsockopt+0x432/0x1620 [ 96.214956][ T4893] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 96.215051][ T4893] tcp_setsockopt+0x51/0xb0 [ 96.215086][ T4893] sock_common_setsockopt+0x69/0x80 [ 96.215178][ T4893] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 96.215256][ T4893] smc_setsockopt+0x183/0x750 [ 96.215280][ T4893] ? __pfx_smc_setsockopt+0x10/0x10 [ 96.215379][ T4893] __sys_setsockopt+0x184/0x200 [ 96.215432][ T4893] __x64_sys_setsockopt+0x64/0x80 [ 96.215459][ T4893] x64_sys_call+0x2327/0x3020 [ 96.215493][ T4893] do_syscall_64+0x12c/0x3b0 [ 96.215524][ T4893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.215595][ T4893] RIP: 0033:0x7ff6b840c819 [ 96.215614][ T4893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.215638][ T4893] RSP: 002b:00007ff6b6e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 96.215663][ T4893] RAX: ffffffffffffffda RBX: 00007ff6b8685fa0 RCX: 00007ff6b840c819 [ 96.215692][ T4893] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000003 [ 96.215704][ T4893] RBP: 00007ff6b6e67090 R08: 0000000000000004 R09: 0000000000000000 [ 96.215717][ T4893] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 96.215733][ T4893] R13: 00007ff6b8686038 R14: 00007ff6b8685fa0 R15: 00007ffe224b35b8 [ 96.215761][ T4893] [ 96.468997][ T28] audit: type=1400 audit(1776326291.589:365): avc: denied { create } for pid=4894 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.503425][ T28] audit: type=1400 audit(1776326291.589:366): avc: denied { getopt } for pid=4894 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.568749][ T4902] netlink: 116 bytes leftover after parsing attributes in process `syz.3.295'. [ 96.591521][ T4899] SET target dimension over the limit! [ 96.619725][ T4906] tipc: Enabling of bearer rejected, failed to enable media [ 96.628405][ T4902] loop3: detected capacity change from 0 to 512 [ 96.673669][ T4902] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.716950][ T4902] EXT4-fs (loop3): 1 truncate cleaned up [ 96.744225][ T4902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.771737][ T28] audit: type=1400 audit(1776326291.909:367): avc: denied { setopt } for pid=4909 comm="syz.6.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.840078][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.300'. [ 96.877860][ T28] audit: type=1400 audit(1776326292.019:368): avc: denied { append } for pid=4917 comm="syz.5.302" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 96.902813][ T4921] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 96.918575][ T4921] loop5: detected capacity change from 0 to 1024 [ 96.953791][ T4921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.069627][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.082231][ T28] audit: type=1400 audit(1776326292.219:369): avc: denied { rename } for pid=4917 comm="syz.5.302" name="file1" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.106980][ T28] audit: type=1400 audit(1776326292.219:370): avc: denied { reparent } for pid=4917 comm="syz.5.302" name="file1" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.237554][ T4929] loop1: detected capacity change from 0 to 512 [ 97.471545][ T3523] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.062999][ T4934] vti0: entered allmulticast mode [ 98.162510][ T4938] loop3: detected capacity change from 0 to 512 [ 98.200740][ T4938] EXT4-fs: Ignoring removed nobh option [ 98.216342][ T4943] tipc: Started in network mode [ 98.245416][ T4943] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 98.259406][ T4938] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #3: comm syz.3.305: corrupted inode contents [ 98.271885][ T4938] fserror_report: 2 callbacks suppressed [ 98.271901][ T4938] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 98.278601][ T4938] EXT4-fs (loop3): Remounting filesystem read-only [ 98.288684][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 98.288706][ C1] EXT4-fs (loop3): initial error at time 1776326293: ext4_do_update_inode:5604: inode 3 [ 98.288739][ C1] EXT4-fs (loop3): last error at time 1776326293: ext4_do_update_inode:5604: inode 3 [ 98.327453][ T4952] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 98.336045][ T4938] EXT4-fs (loop3): 1 truncate cleaned up [ 98.342882][ T4938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.359498][ T4938] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.380484][ T4943] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 98.442019][ T4943] tipc: Enabled bearer , priority 10 [ 98.499841][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.512946][ T4952] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.534257][ T4953] netlink: 'syz.6.311': attribute type 13 has an invalid length. [ 98.551864][ T4953] netlink: 'syz.6.311': attribute type 12 has an invalid length. [ 98.576788][ T4951] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 98.592659][ T4951] bond1: (slave batadv1): making interface the new active one [ 98.605427][ T4953] loop6: detected capacity change from 0 to 128 [ 98.616736][ T4951] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 99.362203][ T4988] netlink: 116 bytes leftover after parsing attributes in process `syz.1.318'. [ 99.397793][ T3400] tipc: Node number set to 1 [ 99.628804][ T4988] loop1: detected capacity change from 0 to 512 [ 99.953710][ T4988] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.089726][ T4988] EXT4-fs (loop1): 1 truncate cleaned up [ 100.263736][ T4988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.283206][ T5009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.320'. [ 100.330507][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 100.330532][ T28] audit: type=1400 audit(1776326295.439:399): avc: denied { setopt } for pid=5011 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.418130][ T28] audit: type=1400 audit(1776326295.439:400): avc: denied { ioctl } for pid=5011 comm="syz.3.321" path="socket:[9119]" dev="sockfs" ino=9119 ioctlcmd=0x5401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.022997][ T5035] loop3: detected capacity change from 0 to 512 [ 101.044557][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.053939][ T5035] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 101.074803][ T5035] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 101.087630][ T5035] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.323: bad orphan inode 4 [ 101.097802][ T5035] loop3: lost filesystem error report for type 5 error -117 [ 101.098097][ T5035] EXT4-fs (loop3): 1 orphan inode deleted [ 101.111479][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 101.111507][ C0] EXT4-fs (loop3): initial error at time 1776326296: ext4_orphan_get:1423 [ 101.111539][ C0] EXT4-fs (loop3): last error at time 1776326296: ext4_orphan_get:1423 [ 101.136222][ T5035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.154425][ T28] audit: type=1400 audit(1776326296.289:401): avc: denied { bind } for pid=5045 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.359314][ T5055] loop1: detected capacity change from 0 to 512 [ 101.366371][ T5055] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.442907][ T5058] loop5: detected capacity change from 0 to 2048 [ 102.507699][ T5004] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 102.531622][ T5055] EXT4-fs (loop1): 1 truncate cleaned up [ 103.333167][ T5055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.681195][ T5058] loop5: p2 < > p4 [ 103.719487][ T5058] loop5: p4 size 262144 extends beyond EOD, truncated [ 103.768054][ T28] audit: type=1400 audit(1776326298.909:402): avc: denied { create } for pid=5073 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.846015][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.874045][ T28] audit: type=1400 audit(1776326298.909:403): avc: denied { write } for pid=5073 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.925014][ T5085] loop3: detected capacity change from 0 to 512 [ 103.941504][ T5085] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 103.957055][ T28] audit: type=1400 audit(1776326298.929:404): avc: denied { create } for pid=5073 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 103.972725][ T5085] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 103.988159][ T5088] netlink: 'syz.2.334': attribute type 10 has an invalid length. [ 103.997427][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 104.005460][ C0] EXT4-fs (loop3): initial error at time 1776326299: mb_free_blocks:2049: inode 11: block 64 [ 104.006652][ T5085] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #11: comm syz.3.333: corrupted inode contents [ 104.015724][ C0] EXT4-fs (loop3): last error at time 1776326299: mb_free_blocks:2049: inode 11: block 64 [ 104.054873][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.059566][ T28] audit: type=1400 audit(1776326298.939:405): avc: denied { sys_admin } for pid=5073 comm="syz.2.332" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 104.082387][ T5088] netlink: 55 bytes leftover after parsing attributes in process `syz.2.334'. [ 104.086796][ T5085] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.113359][ T5085] EXT4-fs error (device loop3): ext4_dirty_inode:6497: inode #11: comm syz.3.333: mark_inode_dirty error [ 104.151235][ T28] audit: type=1400 audit(1776326299.279:406): avc: denied { nlmsg_write } for pid=5094 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 104.159995][ T5085] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.179033][ T5085] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.333: invalid indirect mapped block 1 (level 1) [ 104.197616][ T28] audit: type=1400 audit(1776326299.279:407): avc: denied { audit_write } for pid=5094 comm="syz.1.335" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 104.225736][ T5085] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.225953][ T5085] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #11: comm syz.3.333: corrupted inode contents [ 104.247641][ T5085] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.247837][ T5085] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 104.267287][ T5085] loop3: lost filesystem error report for type 5 error -117 [ 104.269039][ T5085] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #11: comm syz.3.333: corrupted inode contents [ 104.281254][ T5100] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 104.289470][ T5085] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.290067][ T5085] EXT4-fs error (device loop3): ext4_truncate:4604: inode #11: comm syz.3.333: mark_inode_dirty error [ 104.290101][ T5085] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.290338][ T5085] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 104.322619][ T5100] SELinux: failed to load policy [ 104.347216][ T5085] loop3: lost filesystem error report for type 5 error -117 [ 104.347479][ T5085] EXT4-fs (loop3): 1 truncate cleaned up [ 104.361286][ T5085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.475697][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.489245][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 104.527968][ T5110] loop1: detected capacity change from 0 to 512 [ 104.550053][ T5110] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.572169][ T5110] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 104.662793][ T28] audit: type=1400 audit(1776326299.799:408): avc: denied { connect } for pid=5117 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.104882][ T5122] loop3: detected capacity change from 0 to 2048 [ 105.161777][ T5122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.286693][ T5118] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 105.362390][ T5118] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 105.682893][ T5128] netlink: 'syz.6.344': attribute type 21 has an invalid length. [ 105.742037][ T5128] netlink: 128 bytes leftover after parsing attributes in process `syz.6.344'. [ 105.777750][ T5128] netlink: 'syz.6.344': attribute type 4 has an invalid length. [ 105.787127][ T28] audit: type=1400 audit(1776326300.919:409): avc: denied { map } for pid=5127 comm="syz.6.344" path="socket:[10277]" dev="sockfs" ino=10277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 105.845085][ T5128] netlink: 'syz.6.344': attribute type 5 has an invalid length. [ 105.885274][ T5128] netlink: 3 bytes leftover after parsing attributes in process `syz.6.344'. [ 105.992299][ T5136] syzkaller0: entered promiscuous mode [ 106.033895][ T5135] syzkaller0: left promiscuous mode [ 106.182793][ T5148] xfrm0: entered promiscuous mode [ 106.187952][ T5148] xfrm0: entered allmulticast mode [ 106.603375][ T5153] loop5: detected capacity change from 0 to 2048 [ 106.690395][ T5110] loop1: detected capacity change from 0 to 764 [ 106.705633][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.716861][ T5153] loop5: p2 < > p4 [ 106.727062][ T5153] loop5: p4 size 262144 extends beyond EOD, truncated [ 106.748657][ T3000] loop5: p2 < > p4 [ 106.770508][ T5110] Symlink component flag not implemented [ 106.776936][ T3000] loop5: p4 size 262144 extends beyond EOD, truncated [ 106.802264][ T5110] Symlink component flag not implemented [ 107.099566][ T5158] loop6: detected capacity change from 0 to 512 [ 107.203074][ T5158] EXT4-fs: Ignoring removed orlov option [ 107.313165][ T5158] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 107.360920][ T5160] netlink: 'syz.3.353': attribute type 11 has an invalid length. [ 107.410462][ T5158] EXT4-fs (loop6): 1 orphan inode deleted [ 107.413670][ T5163] sg_write: process 205 (syz.3.353) changed security contexts after opening file descriptor, this is not allowed. [ 107.428406][ T5158] EXT4-fs (loop6): 1 truncate cleaned up [ 107.429302][ T5158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.522031][ T28] audit: type=1400 audit(1776326302.639:410): avc: denied { setopt } for pid=5161 comm="syz.2.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.628421][ T5004] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 109.028265][ T4598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.117359][ T28] audit: type=1400 audit(1776326304.249:411): avc: denied { mount } for pid=5185 comm="syz.6.362" name="/" dev="ramfs" ino=10387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 109.180702][ T5191] netlink: 'syz.1.364': attribute type 7 has an invalid length. [ 109.211113][ T5191] netlink: 'syz.1.364': attribute type 7 has an invalid length. [ 109.245069][ T5194] loop3: detected capacity change from 0 to 512 [ 109.266196][ T5194] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.312304][ T5194] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 109.597873][ T5200] loop1: detected capacity change from 0 to 164 [ 109.626572][ T5200] rock: directory entry would overflow storage [ 109.634219][ T5200] rock: sig=0x66, size=4, remaining=3 [ 109.655928][ T5200] rock: directory entry would overflow storage [ 109.663745][ T5200] rock: sig=0x66, size=4, remaining=3 [ 109.675626][ T5200] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 109.750342][ T5200] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 110.157878][ T5204] loop5: detected capacity change from 0 to 1024 [ 110.212481][ T5194] loop3: detected capacity change from 0 to 764 [ 110.243128][ T5204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.265470][ T5194] Symlink component flag not implemented [ 110.300167][ T5194] Symlink component flag not implemented [ 110.374815][ T3523] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.524135][ T5209] loop5: detected capacity change from 0 to 1024 [ 110.594384][ T5209] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 110.616659][ T5213] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 110.648938][ T5209] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.660694][ T5213] loop3: detected capacity change from 0 to 512 [ 110.814773][ T5213] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.830405][ T5209] program syz.5.369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.860579][ T5213] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 110.882222][ T5217] netlink: 120 bytes leftover after parsing attributes in process `syz.6.371'. [ 110.900551][ T5213] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 110.935061][ T5213] System zones: 0-2, 18-18, 34-34 [ 110.957723][ T5213] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.370: bad orphan inode 15 [ 110.971973][ T3523] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 111.007104][ T5213] loop3: lost filesystem error report for type 5 error -117 [ 111.007269][ T5213] ext4_test_bit(bit=14, block=18) = 1 [ 111.007378][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 111.007394][ C1] EXT4-fs (loop3): initial error at time 1776326306: ext4_orphan_get:1423 [ 111.007413][ C1] EXT4-fs (loop3): last error at time 1776326306: ext4_orphan_get:1423 [ 111.116742][ T5213] is_bad_inode(inode)=0 [ 111.130126][ T5213] NEXT_ORPHAN(inode)=2264924160 [ 111.144154][ T5213] max_ino=32 [ 111.157255][ T5213] i_nlink=0 [ 111.168090][ T5213] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #15: comm syz.3.370: corrupted inode contents [ 111.208918][ T5213] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.209183][ T5213] EXT4-fs error (device loop3): ext4_dirty_inode:6497: inode #15: comm syz.3.370: mark_inode_dirty error [ 111.263262][ T5213] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.263541][ T5213] EXT4-fs error (device loop3): ext4_do_update_inode:5604: inode #15: comm syz.3.370: corrupted inode contents [ 111.325760][ T5213] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.325939][ T5213] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.370: mark_inode_dirty error [ 111.348473][ T5213] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.348699][ T5213] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.370: mark inode dirty (error -117) [ 111.371030][ T5213] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.371212][ T5213] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 111.390431][ T5213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.494819][ T5225] syzkaller0: entered allmulticast mode [ 111.520476][ T5225] syzkaller0: entered promiscuous mode [ 111.539112][ T5225] syzkaller0 (unregistering): left allmulticast mode [ 111.552040][ T5225] syzkaller0 (unregistering): left promiscuous mode [ 111.664432][ T5230] FAULT_INJECTION: forcing a failure. [ 111.664432][ T5230] name failslab, interval 1, probability 0, space 0, times 0 [ 111.696465][ T5230] CPU: 0 UID: 0 PID: 5230 Comm: syz.1.376 Not tainted syzkaller #0 PREEMPT(full) [ 111.696499][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 111.696516][ T5230] Call Trace: [ 111.696525][ T5230] [ 111.696536][ T5230] __dump_stack+0x1d/0x30 [ 111.696584][ T5230] dump_stack_lvl+0x95/0xd0 [ 111.696653][ T5230] dump_stack+0x15/0x1b [ 111.696675][ T5230] should_fail_ex+0x263/0x280 [ 111.696763][ T5230] should_failslab+0x8c/0xb0 [ 111.696793][ T5230] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 111.696828][ T5230] ? __alloc_skb+0x2d6/0x690 [ 111.696857][ T5230] __alloc_skb+0x2d6/0x690 [ 111.697005][ T5230] ? __alloc_skb+0x200/0x690 [ 111.697025][ T5230] netlink_alloc_large_skb+0xbf/0xf0 [ 111.697099][ T5230] netlink_sendmsg+0x40c/0x6f0 [ 111.697129][ T5230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.697158][ T5230] ____sys_sendmsg+0x563/0x5b0 [ 111.697245][ T5230] ___sys_sendmsg+0x195/0x1e0 [ 111.697356][ T5230] __x64_sys_sendmsg+0xd4/0x160 [ 111.697386][ T5230] x64_sys_call+0x194c/0x3020 [ 111.697415][ T5230] do_syscall_64+0x12c/0x3b0 [ 111.697444][ T5230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.697471][ T5230] RIP: 0033:0x7f354b02c819 [ 111.697491][ T5230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.697514][ T5230] RSP: 002b:00007f3549a7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.697539][ T5230] RAX: ffffffffffffffda RBX: 00007f354b2a5fa0 RCX: 00007f354b02c819 [ 111.697557][ T5230] RDX: 0000000002004080 RSI: 0000200000000140 RDI: 0000000000000003 [ 111.697597][ T5230] RBP: 00007f3549a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 111.697614][ T5230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.697630][ T5230] R13: 00007f354b2a6038 R14: 00007f354b2a5fa0 R15: 00007ffc643ee7c8 [ 111.697651][ T5230] [ 111.981376][ T5231] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.370: bg 0: block 80: padding at end of block bitmap is not set [ 112.019118][ T28] audit: type=1400 audit(1776326307.149:412): avc: denied { append } for pid=5212 comm="syz.3.370" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.295358][ T28] audit: type=1400 audit(1776326307.419:413): avc: denied { write } for pid=5235 comm="syz.1.378" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 112.332900][ T5237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=5237 comm=syz.6.377 [ 112.360447][ T28] audit: type=1400 audit(1776326307.499:414): avc: denied { ioctl } for pid=5235 comm="syz.1.378" path="net:[4026532622]" dev="nsfs" ino=4026532622 ioctlcmd=0x6f01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 112.411357][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.469765][ T5245] loop6: detected capacity change from 0 to 512 [ 112.490720][ T5245] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 112.517797][ T5245] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 112.535570][ T5246] loop3: detected capacity change from 0 to 512 [ 112.581087][ T5246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.623071][ T5250] ip6tnl1: entered allmulticast mode [ 112.643130][ T5246] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.670900][ T5252] loop5: detected capacity change from 0 to 1024 [ 112.679921][ T5252] ext3: Unknown parameter 'noacl' [ 112.730708][ T5243] EXT4-fs warning (device loop3): ext4_group_extend:1861: can't shrink FS - resize aborted [ 112.779861][ T5254] loop1: detected capacity change from 0 to 512 [ 112.789567][ T5256] netlink: 16 bytes leftover after parsing attributes in process `syz.5.384'. [ 112.808660][ T5254] EXT4-fs (loop1): 1 truncate cleaned up [ 112.817896][ T5254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.879804][ T5254] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 112.907828][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.928054][ T28] audit: type=1400 audit(1776326308.059:415): avc: denied { write } for pid=5258 comm="syz.5.385" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 113.043188][ T5245] Symlink component flag not implemented [ 113.065786][ T28] audit: type=1400 audit(1776326308.199:416): avc: denied { name_bind } for pid=5263 comm="syz.5.387" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 113.092224][ T5245] Symlink component flag not implemented [ 113.241229][ T28] audit: type=1400 audit(1776326308.339:417): avc: denied { write } for pid=5267 comm="syz.5.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.307455][ T28] audit: type=1326 audit(1776326308.419:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b02c819 code=0x7ffc0000 [ 113.330944][ T28] audit: type=1326 audit(1776326308.419:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b02c819 code=0x7ffc0000 [ 113.354294][ T28] audit: type=1326 audit(1776326308.419:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5253 comm="syz.1.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b02c819 code=0x7ffc0000 [ 113.394918][ T28] audit: type=1400 audit(1776326308.529:422): avc: denied { bind } for pid=5274 comm="syz.6.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.532681][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.297740][ T23] IPVS: starting estimator thread 0... [ 114.427598][ T5282] IPVS: using max 2256 ests per chain, 112800 per kthread [ 115.458475][ T5296] set_capacity_and_notify: 1 callbacks suppressed [ 115.458511][ T5296] loop6: detected capacity change from 0 to 1024 [ 115.531783][ T5296] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.598178][ T5309] netlink: 'syz.3.398': attribute type 21 has an invalid length. [ 116.624846][ T5309] netlink: 128 bytes leftover after parsing attributes in process `syz.3.398'. [ 116.676178][ T5309] netlink: 'syz.3.398': attribute type 4 has an invalid length. [ 116.695325][ T5309] netlink: 'syz.3.398': attribute type 5 has an invalid length. [ 116.739552][ T5312] 9p: Bad value for 'wfdno' [ 116.767166][ T5309] netlink: 3 bytes leftover after parsing attributes in process `syz.3.398'. [ 116.812066][ T5316] loop5: detected capacity change from 0 to 512 [ 116.833109][ T5316] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 116.850215][ T5316] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 116.955526][ T4598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.047129][ T5324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 117.052359][ T5326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.405'. [ 117.071813][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 117.071867][ T28] audit: type=1400 audit(1776326312.209:454): avc: denied { connect } for pid=5321 comm="syz.6.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.100168][ T5324] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.113110][ T5324] bridge_slave_1 (unregistering): left allmulticast mode [ 117.125333][ T28] audit: type=1400 audit(1776326312.259:455): avc: denied { write } for pid=5321 comm="syz.6.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 117.157464][ T5324] bridge_slave_1 (unregistering): left promiscuous mode [ 117.176868][ T5324] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.197052][ T5326] macsec1: entered promiscuous mode [ 117.202520][ T5316] loop5: detected capacity change from 0 to 764 [ 117.216134][ T5334] lo speed is unknown, defaulting to 1000 [ 117.224809][ T5316] Symlink component flag not implemented [ 117.225402][ T5334] lo speed is unknown, defaulting to 1000 [ 117.230712][ T5316] Symlink component flag not implemented [ 117.238962][ T5334] lo speed is unknown, defaulting to 1000 [ 117.312950][ T5336] netlink: 'syz.1.408': attribute type 29 has an invalid length. [ 117.337061][ T5336] netlink: 'syz.1.408': attribute type 29 has an invalid length. [ 117.350408][ T5334] infiniband syz0: set active [ 117.355370][ T5334] infiniband syz0: added lo [ 117.361319][ T5336] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=5336 comm=syz.1.408 [ 117.386488][ T5334] RDS/IB: syz0: added [ 117.394272][ T5332] netlink: 32 bytes leftover after parsing attributes in process `syz.2.407'. [ 117.397533][ T5334] smc: adding ib device syz0 with port count 1 [ 117.431455][ T5334] smc: ib device syz0 port 1 has no pnetid [ 117.437295][ T5332] netlink: 32 bytes leftover after parsing attributes in process `syz.2.407'. [ 117.446754][ T23] lo speed is unknown, defaulting to 1000 [ 117.479280][ T5334] lo speed is unknown, defaulting to 1000 [ 117.511762][ T3387] lo speed is unknown, defaulting to 1000 [ 117.585339][ T5334] lo speed is unknown, defaulting to 1000 [ 117.672884][ T5334] lo speed is unknown, defaulting to 1000 [ 117.766042][ T5334] lo speed is unknown, defaulting to 1000 [ 117.808178][ T5334] lo speed is unknown, defaulting to 1000 [ 117.845982][ T5354] loop5: detected capacity change from 0 to 512 [ 117.863279][ T5354] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.880072][ T5354] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 118.128242][ T5364] netlink: 'syz.2.418': attribute type 39 has an invalid length. [ 118.167307][ T5354] netlink: 16 bytes leftover after parsing attributes in process `syz.5.414'. [ 120.089800][ T5369] loop1: detected capacity change from 0 to 164 [ 121.237362][ T5369] rock: directory entry would overflow storage [ 121.243591][ T5369] rock: sig=0x66, size=4, remaining=3 [ 121.492934][ T5381] netlink: 108 bytes leftover after parsing attributes in process `syz.5.422'. [ 121.516793][ T5383] FAULT_INJECTION: forcing a failure. [ 121.516793][ T5383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.564890][ T5385] netlink: 116 bytes leftover after parsing attributes in process `syz.3.424'. [ 121.572643][ T5383] CPU: 0 UID: 0 PID: 5383 Comm: syz.6.423 Not tainted syzkaller #0 PREEMPT(full) [ 121.572723][ T5383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 121.572765][ T5383] Call Trace: [ 121.572854][ T5383] [ 121.572870][ T5383] __dump_stack+0x1d/0x30 [ 121.572977][ T5383] dump_stack_lvl+0x95/0xd0 [ 121.573064][ T5383] dump_stack+0x15/0x1b [ 121.573145][ T5383] should_fail_ex+0x263/0x280 [ 121.573299][ T5383] should_fail+0xb/0x20 [ 121.573436][ T5383] should_fail_usercopy+0x1a/0x20 [ 121.573528][ T5383] _copy_from_user+0x1c/0xb0 [ 121.573685][ T5383] ___sys_sendmsg+0xc1/0x1e0 [ 121.573816][ T5383] __x64_sys_sendmsg+0xd4/0x160 [ 121.573938][ T5383] x64_sys_call+0x194c/0x3020 [ 121.573973][ T5383] do_syscall_64+0x12c/0x3b0 [ 121.574064][ T5383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.574189][ T5383] RIP: 0033:0x7ff6b840c819 [ 121.574244][ T5383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.574309][ T5383] RSP: 002b:00007ff6b6e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.574374][ T5383] RAX: ffffffffffffffda RBX: 00007ff6b8685fa0 RCX: 00007ff6b840c819 [ 121.574419][ T5383] RDX: 00000000240408d0 RSI: 0000200000000200 RDI: 0000000000000003 [ 121.574505][ T5383] RBP: 00007ff6b6e67090 R08: 0000000000000000 R09: 0000000000000000 [ 121.574549][ T5383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.574593][ T5383] R13: 00007ff6b8686038 R14: 00007ff6b8685fa0 R15: 00007ffe224b35b8 [ 121.574693][ T5383] [ 121.760541][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.425'. [ 121.773810][ T5391] batadv_slave_0: entered promiscuous mode [ 121.775295][ T5390] netlink: 248 bytes leftover after parsing attributes in process `syz.5.425'. [ 121.790454][ T5388] batadv_slave_0: left promiscuous mode [ 121.797919][ T5393] ipt_REJECT: TCP_RESET invalid for non-tcp [ 121.843505][ T5396] netlink: 'syz.6.428': attribute type 1 has an invalid length. [ 121.852532][ T5385] loop3: detected capacity change from 0 to 512 [ 121.888931][ T5385] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.905213][ T5396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.015378][ T5402] bond1: (slave veth3): Enslaving as an active interface with a down link [ 122.025323][ T5385] EXT4-fs (loop3): 1 truncate cleaned up [ 122.075604][ T5396] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 122.086031][ T5385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.101933][ T5396] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 122.339728][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.628769][ T5419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.435'. [ 122.696640][ T5420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.435'. [ 123.103251][ T5435] netlink: 116 bytes leftover after parsing attributes in process `syz.3.433'. [ 123.122129][ T5427] netlink: 65019 bytes leftover after parsing attributes in process `syz.2.438'. [ 123.143692][ T5438] FAULT_INJECTION: forcing a failure. [ 123.143692][ T5438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.160264][ T5438] CPU: 1 UID: 0 PID: 5438 Comm: syz.5.439 Not tainted syzkaller #0 PREEMPT(full) [ 123.160296][ T5438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 123.160332][ T5438] Call Trace: [ 123.160340][ T5438] [ 123.160349][ T5438] __dump_stack+0x1d/0x30 [ 123.160380][ T5438] dump_stack_lvl+0x95/0xd0 [ 123.160417][ T5438] dump_stack+0x15/0x1b [ 123.160443][ T5438] should_fail_ex+0x263/0x280 [ 123.160546][ T5438] should_fail+0xb/0x20 [ 123.160575][ T5438] should_fail_usercopy+0x1a/0x20 [ 123.160689][ T5438] _copy_from_user+0x1c/0xb0 [ 123.160779][ T5438] bpf_test_init+0xb9/0x130 [ 123.160809][ T5438] bpf_prog_test_run_xdp+0x306/0xa10 [ 123.160849][ T5438] ? __rcu_read_unlock+0x4e/0x70 [ 123.160887][ T5438] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 123.160966][ T5438] bpf_prog_test_run+0x204/0x340 [ 123.161004][ T5438] __sys_bpf+0x52e/0x7e0 [ 123.161042][ T5438] __x64_sys_bpf+0x41/0x50 [ 123.161101][ T5438] x64_sys_call+0x10cb/0x3020 [ 123.161131][ T5438] do_syscall_64+0x12c/0x3b0 [ 123.161157][ T5438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.161246][ T5438] RIP: 0033:0x7fa38dfec819 [ 123.161264][ T5438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.161290][ T5438] RSP: 002b:00007fa38ca47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.161313][ T5438] RAX: ffffffffffffffda RBX: 00007fa38e265fa0 RCX: 00007fa38dfec819 [ 123.161346][ T5438] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 123.161361][ T5438] RBP: 00007fa38ca47090 R08: 0000000000000000 R09: 0000000000000000 [ 123.161376][ T5438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.161389][ T5438] R13: 00007fa38e266038 R14: 00007fa38e265fa0 R15: 00007ffc4115f988 [ 123.161452][ T5438] [ 123.361359][ T5439] loop3: detected capacity change from 0 to 512 [ 123.469442][ T5439] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.488977][ T5443] loop6: detected capacity change from 0 to 512 [ 123.506693][ T5443] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 123.528545][ T5445] loop5: detected capacity change from 0 to 128 [ 123.552105][ T5443] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 123.618174][ T5439] EXT4-fs (loop3): 1 truncate cleaned up [ 123.625765][ T5445] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.640501][ T5439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.654514][ T5445] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.735878][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.863852][ T3523] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.297561][ T5460] loop6: detected capacity change from 0 to 764 [ 124.375283][ T5467] loop5: detected capacity change from 0 to 512 [ 124.427798][ T5443] Symlink component flag not implemented [ 124.445443][ T5474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 124.454612][ T5443] Symlink component flag not implemented [ 124.464997][ T5466] loop3: detected capacity change from 0 to 512 [ 124.703497][ T5479] loop6: detected capacity change from 0 to 8192 [ 124.724035][ T5479] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.136669][ T5467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.163020][ T5474] bond2: entered promiscuous mode [ 125.168533][ T5474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.175283][ T5467] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.194519][ T5467] Quota error (device loop5): do_check_range: Getting block 2052 out of range 1-5 [ 125.209334][ T5475] 8021q: adding VLAN 0 to HW filter on device bond3 [ 125.216180][ T5467] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 125.227370][ T5475] bond3: entered promiscuous mode [ 125.233290][ T5475] bond2: (slave bond3): Enslaving as an active interface with an up link [ 125.242033][ T5467] EXT4-fs error (device loop5): ext4_acquire_dquot:7028: comm syz.5.447: Failed to acquire dquot type 1 [ 125.339357][ T3523] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.364674][ T5483] syzkaller0: entered promiscuous mode [ 125.396416][ T5483] syzkaller0: entered allmulticast mode [ 125.444568][ T5494] syzkaller0: entered allmulticast mode [ 125.459299][ T28] audit: type=1400 audit(1776326320.599:456): avc: denied { setopt } for pid=5498 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.479312][ T5497] syzkaller0: entered promiscuous mode [ 125.487889][ T28] audit: type=1400 audit(1776326320.619:457): avc: denied { kexec_image_load } for pid=5495 comm="syz.5.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 125.504932][ T5499] batadv_slave_0: Caught tx_queue_len zero misconfig [ 125.540617][ T5500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.454'. [ 125.551320][ T28] audit: type=1401 audit(1776326320.689:458): op=setxattr invalid_context="" [ 126.275141][ T5510] tmpfs: Bad value for 'mpol' [ 126.359690][ T5512] loop6: detected capacity change from 0 to 1024 [ 126.391553][ T5512] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.460140][ T5493] syzkaller0: left promiscuous mode [ 126.465669][ T5493] syzkaller0: left allmulticast mode [ 126.478276][ T5510] loop1: detected capacity change from 0 to 4096 [ 126.489274][ T5512] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.515081][ T5510] EXT4-fs: Ignoring removed bh option [ 126.540404][ T5512] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 126.563141][ T5510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.605638][ T5512] EXT4-fs (loop6): orphan cleanup on readonly fs [ 126.637510][ T28] audit: type=1400 audit(1776326321.769:459): avc: denied { create } for pid=5509 comm="syz.1.458" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 126.692029][ T5512] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.459: Freeing blocks not in datazone - block = 0, count = 4096 [ 126.722262][ T5520] EXT4-fs: Ignoring removed i_version option [ 126.757718][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.769978][ T5512] loop6: lost filesystem error report for type 5 error -117 [ 126.770162][ T5512] EXT4-fs (loop6): 1 orphan inode deleted [ 126.777573][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 126.777592][ C1] EXT4-fs (loop6): initial error at time 1776326321: ext4_free_blocks:6724 [ 126.777612][ C1] EXT4-fs (loop6): last error at time 1776326321: ext4_free_blocks:6724 [ 126.819970][ T5520] EXT4-fs: Ignoring removed bh option [ 126.841172][ T5520] EXT4-fs (loop3): stripe (228) is not aligned with cluster size (16), stripe is disabled [ 126.882964][ T5512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.928828][ T5520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.947796][ T5512] netlink: 65019 bytes leftover after parsing attributes in process `syz.6.459'. [ 126.970238][ T28] audit: type=1400 audit(1776326322.109:460): avc: denied { override_creds } for pid=5519 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 127.041693][ T5531] sctp: [Deprecated]: syz.1.464 (pid 5531) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.041693][ T5531] Use struct sctp_sack_info instead [ 127.175153][ T5535] tipc: Started in network mode [ 127.186595][ T5535] tipc: Node identity 4, cluster identity 4711 [ 127.200537][ T5535] tipc: Node number set to 4 [ 127.223163][ T5535] set_capacity_and_notify: 1 callbacks suppressed [ 127.223184][ T5535] loop1: detected capacity change from 0 to 764 [ 127.248101][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 127.258424][ T5535] rock: directory entry would overflow storage [ 127.266268][ T5535] rock: sig=0x4654, size=5, remaining=4 [ 127.282686][ T5537] netlink: 'syz.2.466': attribute type 2 has an invalid length. [ 127.322021][ T28] audit: type=1400 audit(1776326322.459:461): avc: denied { unlink } for pid=3311 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 127.367637][ T5539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'. [ 127.528108][ T5549] netlink: 64 bytes leftover after parsing attributes in process `syz.2.472'. [ 127.538037][ T28] audit: type=1326 audit(1776326322.679:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5548 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6368fc819 code=0x7ffc0000 [ 127.569319][ T28] audit: type=1326 audit(1776326322.699:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5548 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6368fc819 code=0x7ffc0000 [ 127.608316][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.764452][ T5553] xt_socket: unknown flags 0x48 [ 127.873707][ T5562] loop5: detected capacity change from 0 to 512 [ 127.924027][ T5563] FAULT_INJECTION: forcing a failure. [ 127.924027][ T5563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.924065][ T5563] CPU: 0 UID: 0 PID: 5563 Comm: syz.1.478 Not tainted syzkaller #0 PREEMPT(full) [ 127.924103][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 127.924120][ T5563] Call Trace: [ 127.924128][ T5563] [ 127.924138][ T5563] __dump_stack+0x1d/0x30 [ 127.924174][ T5563] dump_stack_lvl+0x95/0xd0 [ 127.924212][ T5563] dump_stack+0x15/0x1b [ 127.924242][ T5563] should_fail_ex+0x263/0x280 [ 127.924278][ T5563] should_fail+0xb/0x20 [ 127.924309][ T5563] should_fail_usercopy+0x1a/0x20 [ 127.924413][ T5563] _copy_to_user+0x20/0xa0 [ 127.924452][ T5563] llc_ui_getsockopt+0x26f/0x310 [ 127.924537][ T5563] ? __pfx_llc_ui_getsockopt+0x10/0x10 [ 127.924572][ T5563] do_sock_getsockopt+0x2f5/0x570 [ 127.924632][ T5563] __x64_sys_getsockopt+0x11d/0x1a0 [ 127.924669][ T5563] x64_sys_call+0x2dcf/0x3020 [ 127.924706][ T5563] do_syscall_64+0x12c/0x3b0 [ 127.924795][ T5563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.924825][ T5563] RIP: 0033:0x7f354b02c819 [ 127.924845][ T5563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.924892][ T5563] RSP: 002b:00007f3549a7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 127.924920][ T5563] RAX: ffffffffffffffda RBX: 00007f354b2a5fa0 RCX: 00007f354b02c819 [ 127.924939][ T5563] RDX: 0000000000000001 RSI: 000000000000010c RDI: 0000000000000004 [ 127.924956][ T5563] RBP: 00007f3549a7f090 R08: 0000200000000040 R09: 0000000000000000 [ 127.924974][ T5563] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.925061][ T5563] R13: 00007f354b2a6038 R14: 00007f354b2a5fa0 R15: 00007ffc643ee7c8 [ 127.925140][ T5563] [ 127.928252][ T4598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.928900][ T5562] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 127.928931][ T5562] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 127.975232][ T5564] loop3: detected capacity change from 0 to 512 [ 128.072299][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.479'. [ 128.076397][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.479'. [ 128.090060][ T5564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.090194][ T5564] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.162285][ T5579] netlink: 12 bytes leftover after parsing attributes in process `syz.6.483'. [ 128.227965][ T5586] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 128.233253][ T5562] loop5: detected capacity change from 0 to 764 [ 128.239555][ T5562] Symlink component flag not implemented [ 128.239564][ T5562] Symlink component flag not implemented [ 128.262128][ T5588] loop6: detected capacity change from 0 to 512 [ 128.277672][ T5588] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.501107][ T5589] mmap: syz.2.485 (5589): VmData 27107328 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 128.543431][ T5588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.620809][ T5599] netlink: 108 bytes leftover after parsing attributes in process `syz.5.488'. [ 128.659570][ T5588] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.689061][ T5588] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.728699][ T4598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.759707][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.059973][ T3519] IPVS: starting estimator thread 0... [ 129.207454][ T5615] IPVS: using max 2256 ests per chain, 112800 per kthread [ 129.237688][ T5616] loop5: detected capacity change from 0 to 2048 [ 129.292399][ T5616] EXT4-fs (loop5): unsupported descriptor size 7 [ 129.515987][ T5625] FAULT_INJECTION: forcing a failure. [ 129.515987][ T5625] name failslab, interval 1, probability 0, space 0, times 0 [ 129.812995][ T5625] CPU: 1 UID: 0 PID: 5625 Comm: syz.5.495 Not tainted syzkaller #0 PREEMPT(full) [ 129.813032][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 129.813057][ T5625] Call Trace: [ 129.813066][ T5625] [ 129.813076][ T5625] __dump_stack+0x1d/0x30 [ 129.813117][ T5625] dump_stack_lvl+0x95/0xd0 [ 129.813149][ T5625] dump_stack+0x15/0x1b [ 129.813266][ T5625] should_fail_ex+0x263/0x280 [ 129.813294][ T5625] should_failslab+0x8c/0xb0 [ 129.813393][ T5625] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 129.813436][ T5625] ? __alloc_skb+0x2d6/0x690 [ 129.813459][ T5625] __alloc_skb+0x2d6/0x690 [ 129.813490][ T5625] ? __alloc_skb+0x200/0x690 [ 129.813518][ T5625] netlink_alloc_large_skb+0xbf/0xf0 [ 129.813603][ T5625] netlink_sendmsg+0x40c/0x6f0 [ 129.813665][ T5625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.813704][ T5625] ____sys_sendmsg+0x563/0x5b0 [ 129.813744][ T5625] ___sys_sendmsg+0x195/0x1e0 [ 129.813855][ T5625] ? path_openat+0x1b01/0x2050 [ 129.813903][ T5625] __sys_sendmmsg+0x185/0x320 [ 129.813950][ T5625] __x64_sys_sendmmsg+0x57/0x70 [ 129.814052][ T5625] x64_sys_call+0x27aa/0x3020 [ 129.814125][ T5625] do_syscall_64+0x12c/0x3b0 [ 129.814198][ T5625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.814221][ T5625] RIP: 0033:0x7fa38dfec819 [ 129.814236][ T5625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.814255][ T5625] RSP: 002b:00007fa38ca47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 129.814277][ T5625] RAX: ffffffffffffffda RBX: 00007fa38e265fa0 RCX: 00007fa38dfec819 [ 129.814318][ T5625] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 129.814336][ T5625] RBP: 00007fa38ca47090 R08: 0000000000000000 R09: 0000000000000000 [ 129.814351][ T5625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.814367][ T5625] R13: 00007fa38e266038 R14: 00007fa38e265fa0 R15: 00007ffc4115f988 [ 129.814406][ T5625] [ 130.540916][ T5632] loop5: detected capacity change from 0 to 512 [ 130.571425][ T5633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.494'. [ 130.681321][ T5632] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 130.707014][ T5632] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 131.113489][ T28] kauditd_printk_skb: 380 callbacks suppressed [ 131.113522][ T28] audit: type=1400 audit(1776326326.179:844): avc: denied { bind } for pid=5635 comm="syz.1.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 131.235033][ T28] audit: type=1400 audit(1776326326.239:845): avc: denied { ioctl } for pid=5629 comm="syz.2.497" path="socket:[11421]" dev="sockfs" ino=11421 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.497833][ T5645] erspan0: entered promiscuous mode [ 131.514076][ T5645] macsec1: entered promiscuous mode [ 131.583662][ T5645] erspan0: left promiscuous mode [ 133.665563][ T5653] loop1: detected capacity change from 0 to 2048 [ 135.679727][ T5657] loop6: detected capacity change from 0 to 512 [ 135.904028][ T5653] EXT4-fs warning (device loop1): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop1. [ 136.018535][ T5657] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.385144][ T5657] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 136.404200][ T5657] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.503: bg 0: block 248: padding at end of block bitmap is not set [ 136.419377][ T5657] loop6: lost filesystem error report for type 5 error -117 [ 136.420561][ T5657] Quota error (device loop6): write_blk: dquota write failed [ 136.428243][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 136.428492][ C0] EXT4-fs (loop6): last error at time 1776326331: ext4_validate_block_bitmap:441 [ 136.458244][ T5657] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 136.470722][ T5657] EXT4-fs error (device loop6): ext4_acquire_dquot:7028: comm syz.6.503: Failed to acquire dquot type 1 [ 136.484027][ T5657] loop6: lost filesystem error report for type 5 error -28 [ 136.486585][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 136.507801][ T5657] EXT4-fs (loop6): 1 truncate cleaned up [ 136.515523][ T5657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 136.543873][ T5656] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 136.554462][ T5656] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 131074 [ 136.564371][ T5656] EXT4-fs error (device loop6): ext4_acquire_dquot:7028: comm syz.6.503: Failed to acquire dquot type 1 [ 136.578305][ T5676] netlink: 1472 bytes leftover after parsing attributes in process `syz.1.510'. [ 136.588194][ T5676] netlink: 1472 bytes leftover after parsing attributes in process `syz.1.510'. [ 136.642841][ T5678] loop5: detected capacity change from 0 to 512 [ 136.663274][ T28] audit: type=1107 audit(1776326331.799:846): pid=5673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 136.684691][ T5678] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.697705][ T4598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 136.756074][ T28] audit: type=1400 audit(1776326331.889:847): avc: denied { write } for pid=5677 comm="syz.5.512" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 136.784956][ T5688] netlink: 116 bytes leftover after parsing attributes in process `syz.6.514'. [ 136.794476][ T28] audit: type=1400 audit(1776326331.889:848): avc: denied { open } for pid=5677 comm="syz.5.512" path="/99/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 136.832943][ T5686] netlink: 'syz.1.515': attribute type 39 has an invalid length. [ 136.868555][ T5688] loop6: detected capacity change from 0 to 512 [ 136.880671][ T3523] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 136.898503][ T5688] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 136.961317][ T5693] loop1: detected capacity change from 0 to 512 [ 136.981034][ T5688] EXT4-fs (loop6): 1 truncate cleaned up [ 137.000673][ T5688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.013619][ T5693] EXT4-fs: Ignoring removed bh option [ 137.029731][ T5693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.048856][ T5693] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.100399][ T28] audit: type=1400 audit(1776326332.229:849): avc: denied { read } for pid=5692 comm="syz.1.519" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 137.121952][ T5702] lo speed is unknown, defaulting to 1000 [ 137.178295][ T5709] netlink: 116 bytes leftover after parsing attributes in process `syz.2.524'. [ 137.200165][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.254118][ T5711] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 137.277153][ T5711] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 137.451117][ T5730] netlink: 'syz.1.530': attribute type 39 has an invalid length. [ 137.489901][ T5702] netlink: 132 bytes leftover after parsing attributes in process `syz.3.521'. [ 137.510518][ T5736] FAULT_INJECTION: forcing a failure. [ 137.510518][ T5736] name failslab, interval 1, probability 0, space 0, times 0 [ 137.523913][ T5736] CPU: 1 UID: 0 PID: 5736 Comm: syz.1.532 Not tainted syzkaller #0 PREEMPT(full) [ 137.523944][ T5736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.523960][ T5736] Call Trace: [ 137.523967][ T5736] [ 137.523974][ T5736] __dump_stack+0x1d/0x30 [ 137.524074][ T5736] dump_stack_lvl+0x95/0xd0 [ 137.524127][ T5736] dump_stack+0x15/0x1b [ 137.524153][ T5736] should_fail_ex+0x263/0x280 [ 137.524183][ T5736] should_failslab+0x8c/0xb0 [ 137.524217][ T5736] __kmalloc_noprof+0xb8/0x4d0 [ 137.524300][ T5736] ? start_sync_thread+0x6b4/0x1720 [ 137.524413][ T5736] start_sync_thread+0x6b4/0x1720 [ 137.524447][ T5736] ? cred_has_capability+0x224/0x2a0 [ 137.524471][ T5736] ? __pfx_sync_thread_backup+0x10/0x10 [ 137.524544][ T5736] ? selinux_capable+0x31/0x40 [ 137.524583][ T5736] ? should_fail_ex+0xd9/0x280 [ 137.524669][ T5736] ? sized_strscpy+0x121/0x1a0 [ 137.524701][ T5736] do_ip_vs_set_ctl+0x2e2/0xae0 [ 137.524727][ T5736] ? _parse_integer+0x27/0x40 [ 137.524778][ T5736] ? do_ip_setsockopt+0x1af1/0x2290 [ 137.524810][ T5736] nf_setsockopt+0x199/0x1b0 [ 137.524840][ T5736] ip_setsockopt+0x102/0x110 [ 137.524869][ T5736] sock_common_setsockopt+0x69/0x80 [ 137.524920][ T5736] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 137.524957][ T5736] __sys_setsockopt+0x184/0x200 [ 137.525054][ T5736] __x64_sys_setsockopt+0x64/0x80 [ 137.525082][ T5736] x64_sys_call+0x2327/0x3020 [ 137.525122][ T5736] do_syscall_64+0x12c/0x3b0 [ 137.525146][ T5736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.525197][ T5736] RIP: 0033:0x7f354b02c819 [ 137.525216][ T5736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.525237][ T5736] RSP: 002b:00007f3549a7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 137.525260][ T5736] RAX: ffffffffffffffda RBX: 00007f354b2a5fa0 RCX: 00007f354b02c819 [ 137.525276][ T5736] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 137.525321][ T5736] RBP: 00007f3549a7f090 R08: 0000000000000018 R09: 0000000000000000 [ 137.525342][ T5736] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.525356][ T5736] R13: 00007f354b2a6038 R14: 00007f354b2a5fa0 R15: 00007ffc643ee7c8 [ 137.525381][ T5736] [ 137.526594][ T5702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.521'. [ 137.632144][ T5707] loop3: detected capacity change from 0 to 512 [ 137.793918][ T5707] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.810129][ T5707] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.521: bad orphan inode 131083 [ 137.820573][ T5707] loop3: lost filesystem error report for type 5 error -117 [ 137.821329][ T5707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.850557][ T28] audit: type=1400 audit(1776326332.989:850): avc: denied { setattr } for pid=5701 comm="syz.3.521" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.885141][ T5702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 137.888466][ T4598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.994752][ T5746] vcan0: tx address claim with dlc 0 [ 138.035037][ T5748] loop1: detected capacity change from 0 to 2048 [ 138.051639][ T5748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.092192][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.122038][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.191313][ T5753] loop3: detected capacity change from 0 to 1024 [ 138.198822][ T5753] EXT4-fs (loop3): unsupported inode size: 4096 [ 138.205504][ T5753] EXT4-fs (loop3): blocksize: 1024 [ 138.242139][ T5759] loop6: detected capacity change from 0 to 1024 [ 138.289429][ T5759] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.308583][ T5759] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 138.319447][ T5759] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 138.327636][ T5759] EXT4-fs (loop6): orphan cleanup on readonly fs [ 138.334326][ T5759] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.538: Freeing blocks not in datazone - block = 0, count = 4096 [ 138.347771][ T5759] loop6: lost filesystem error report for type 5 error -117 [ 138.348065][ T5759] EXT4-fs (loop6): 1 orphan inode deleted [ 138.361243][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 138.361271][ C0] EXT4-fs (loop6): initial error at time 1776326333: ext4_free_blocks:6724 [ 138.361301][ C0] EXT4-fs (loop6): last error at time 1776326333: ext4_free_blocks:6724 [ 138.385237][ T5759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.476804][ T5771] netlink: 65019 bytes leftover after parsing attributes in process `syz.6.538'. [ 138.504768][ T5755] lo speed is unknown, defaulting to 1000 [ 138.528780][ T5776] loop7: detected capacity change from 0 to 16384 [ 138.618544][ T4598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.677856][ T5777] loop7: detected capacity change from 16384 to 0 [ 138.677984][ C1] I/O error, dev loop7, sector 10496 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 1 [ 138.753957][ T5781] netlink: 'syz.6.544': attribute type 3 has an invalid length. [ 138.809452][ T3415] kernel write not supported for file bpf-prog (pid: 3415 comm: kworker/1:4) [ 139.388674][ T5796] netlink: 'syz.3.549': attribute type 39 has an invalid length. [ 139.518979][ T28] audit: type=1400 audit(1776326334.659:851): avc: denied { getopt } for pid=5800 comm="syz.3.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.564760][ T5801] loop3: detected capacity change from 0 to 128 [ 139.600540][ T5801] EXT4-fs: Ignoring removed orlov option [ 139.618599][ T5792] loop6: detected capacity change from 0 to 1024 [ 139.629010][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop3 [ 139.641425][ T5801] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 139.645147][ T5792] EXT4-fs: test_dummy_encryption option not supported [ 139.675246][ T3302] udevd[3302]: incorrect ext4 checksum on /dev/loop3 [ 139.872655][ T5806] loop3: detected capacity change from 0 to 128 [ 140.158179][ T5806] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.213870][ T5806] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.441028][ T5818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.528444][ T5818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.571946][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.638943][ T5818] netlink: 'syz.6.555': attribute type 10 has an invalid length. [ 142.646942][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.654185][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.663917][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.671096][ T5818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.678469][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.685535][ T5818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.694777][ T5818] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 143.012652][ T5822] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 4, id = 0 [ 143.062775][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 143.062789][ T28] audit: type=1326 audit(1776326338.199:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b02c819 code=0x7ffc0000 [ 143.155689][ T28] audit: type=1326 audit(1776326338.199:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b02c819 code=0x7ffc0000 [ 143.266191][ T28] audit: type=1326 audit(1776326338.229:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b02c819 code=0x7ffc0000 [ 143.338023][ T28] audit: type=1326 audit(1776326338.229:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f354b02c819 code=0x7ffc0000 [ 143.387357][ T28] audit: type=1326 audit(1776326338.229:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b02c819 code=0x7ffc0000 [ 143.439056][ T28] audit: type=1326 audit(1776326338.229:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b02c819 code=0x7ffc0000 [ 143.487357][ T28] audit: type=1326 audit(1776326338.229:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b02c819 code=0x7ffc0000 [ 143.517115][ T28] audit: type=1326 audit(1776326338.229:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b02c819 code=0x7ffc0000 [ 143.540469][ T28] audit: type=1326 audit(1776326338.229:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f354b02c819 code=0x7ffc0000 [ 143.563837][ T28] audit: type=1326 audit(1776326338.229:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5823 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354b02c819 code=0x7ffc0000 [ 143.610595][ T3484] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 143.618778][ T5829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.636703][ T3484] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.656361][ T5829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.733894][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 143.989684][ T5848] loop5: detected capacity change from 0 to 2048 [ 143.996205][ T5851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.568'. [ 144.131844][ T5854] netlink: 'syz.6.565': attribute type 1 has an invalid length. [ 144.140183][ T5854] netlink: 'syz.6.565': attribute type 2 has an invalid length. [ 144.158100][ T5854] netlink: 'syz.6.565': attribute type 4 has an invalid length. [ 144.176830][ T5848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.299330][ T5848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.352455][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 144.362991][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 144.374213][ T5848] EXT4-fs error (device loop5): ext4_iget_extra_inode:5042: inode #15: comm syz.5.567: corrupted in-inode xattr: invalid ea_ino [ 144.389515][ T5848] EXT4-fs (loop5): Remounting filesystem read-only [ 144.964517][ T3523] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.644796][ T5873] netlink: 40 bytes leftover after parsing attributes in process `syz.2.573'. [ 145.670024][ T3768] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.692879][ T5872] loop5: detected capacity change from 0 to 512 [ 145.700938][ T3768] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.728935][ T3768] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.775969][ T3768] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.828046][ T5875] netlink: 60 bytes leftover after parsing attributes in process `syz.5.575'. [ 145.846432][ T5875] netlink: 60 bytes leftover after parsing attributes in process `syz.5.575'. [ 145.889752][ T3317] ================================================================== [ 145.897923][ T3317] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 145.905462][ T3317] [ 145.907820][ T3317] read-write to 0xffff888104e79da0 of 8 bytes by task 5866 on cpu 0: [ 145.915916][ T3317] shmem_recalc_inode+0x3f/0x1f0 [ 145.920945][ T3317] shmem_get_folio_gfp+0x7a8/0xd60 [ 145.926097][ T3317] shmem_write_begin+0xfc/0x1f0 [ 145.930983][ T3317] generic_perform_write+0x183/0x490 [ 145.936305][ T3317] shmem_file_write_iter+0xc5/0xf0 [ 145.941467][ T3317] __kernel_write_iter+0x319/0x590 [ 145.946655][ T3317] dump_user_range+0xa73/0xd00 [ 145.951465][ T3317] elf_core_dump+0x21a2/0x2330 [ 145.956270][ T3317] coredump_write+0xacc/0xdd0 [ 145.960992][ T3317] vfs_coredump+0x26dd/0x31e0 [ 145.965724][ T3317] get_signal+0xd5c/0xf20 [ 145.970088][ T3317] arch_do_signal_or_restart+0x96/0x450 [ 145.975694][ T3317] irqentry_exit+0x140/0x5b0 [ 145.980330][ T3317] asm_exc_page_fault+0x26/0x30 [ 145.985213][ T3317] [ 145.987565][ T3317] read to 0xffff888104e79da0 of 8 bytes by task 3317 on cpu 1: [ 145.995136][ T3317] shmem_getattr+0x41/0x200 [ 145.999674][ T3317] vfs_getattr_nosec+0x146/0x1e0 [ 146.004658][ T3317] vfs_getattr+0x48/0x60 [ 146.008960][ T3317] vfs_statx_path+0x28/0x140 [ 146.013585][ T3317] vfs_statx+0xc4/0x170 [ 146.017785][ T3317] vfs_fstatat+0x118/0x170 [ 146.022241][ T3317] __se_sys_newfstatat+0x55/0x3e0 [ 146.027304][ T3317] __x64_sys_newfstatat+0x55/0x70 [ 146.032360][ T3317] x64_sys_call+0x2c64/0x3020 [ 146.037098][ T3317] do_syscall_64+0x12c/0x3b0 [ 146.041714][ T3317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.047639][ T3317] [ 146.049994][ T3317] value changed: 0x00000000000011da -> 0x00000000000011dd [ 146.057208][ T3317] [ 146.059553][ T3317] Reported by Kernel Concurrency Sanitizer on: [ 146.065724][ T3317] CPU: 1 UID: 0 PID: 3317 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 146.075236][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 146.085312][ T3317] ================================================================== [ 146.142813][ T5881] netlink: 'syz.1.577': attribute type 4 has an invalid length.