last executing test programs: 6m54.023531315s ago: executing program 3 (id=3414): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x23, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280), 0xc, &(0x7f0000000640)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff38}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/96, 0x60}], 0x1, &(0x7f0000000d00)=""/190, 0xbe}, 0x30120) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 6m53.164123834s ago: executing program 3 (id=3455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x80c80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70fd28, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10010}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000007c0)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000e80)=@newtfilter={0x888, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x858, 0x2, [@TCA_BASIC_POLICE={0x854, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x443d76c7, 0x800, 0x0, {0x2, 0x0, 0xff, 0x7, 0x9, 0x6}, {0x4, 0x0, 0x8, 0x8, 0x2, 0xf640}, 0x2, 0xf3b, 0xe3a0}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_RATE={0x404, 0x2, [0xdeb, 0x401, 0xc24, 0x5, 0x3, 0xa, 0x0, 0x2, 0x2, 0xf, 0x1, 0x4, 0x3, 0x9f81, 0x4, 0x9, 0xb, 0x9, 0x10, 0x7c1b, 0x8, 0x101, 0x2, 0x3, 0x9, 0x9, 0x8c9, 0x5, 0x3, 0x7ff, 0x7, 0x9, 0x9, 0x0, 0x800, 0x6, 0x7, 0x0, 0x1, 0x3, 0xfffffffd, 0x5, 0x0, 0x9, 0x1, 0xd, 0xcf, 0x4, 0xff, 0x70, 0x6, 0x8, 0x8, 0x4, 0x7f, 0x7, 0xfffff4bd, 0x566, 0x1c000, 0x7, 0x5, 0x2, 0x6, 0xc66e, 0x0, 0x2, 0x80000001, 0x2, 0xff000000, 0x9e9, 0x7, 0x7, 0x200, 0x6, 0x10, 0x5, 0x1, 0x7, 0x9, 0x7, 0x4, 0x7fff, 0x2, 0xf, 0x4, 0x3, 0x0, 0x7a9, 0x231, 0x8, 0x8, 0x8, 0x0, 0x5, 0x0, 0x10000, 0x5, 0x2, 0x663, 0x3, 0x6, 0x2, 0x3ff, 0x1be000, 0x7, 0x4, 0x1, 0x5, 0x0, 0x2a3b3707, 0x8b, 0xe3a9, 0x4b, 0xe, 0x9, 0x7, 0xe7, 0x4f, 0x409c, 0x7a6, 0x0, 0x39724ea1, 0x8, 0x6, 0x101, 0xc, 0x7ff, 0x4, 0x1, 0xf413, 0x4, 0xfffffff8, 0x7f, 0x6, 0xfffffff7, 0x2, 0xfffffffc, 0x3, 0x3, 0x5, 0x5, 0x2, 0x8, 0x9, 0x1, 0x5, 0x2, 0xfffffffb, 0xfffffff7, 0x29, 0x40, 0x3, 0x3cf, 0x81, 0x0, 0xdea1, 0x2, 0x1, 0x9, 0xfffffffd, 0x10, 0xfffff801, 0x7, 0x7fffffff, 0xb, 0x7, 0x1, 0x9, 0x84c, 0x8, 0x83, 0x1000, 0xc7f, 0x70, 0x3, 0x200, 0xff, 0x40, 0x8, 0x7, 0x5, 0x5, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x3af7, 0x0, 0xe9b4, 0x0, 0x3d, 0x8, 0x8, 0x2e7, 0xb, 0x6, 0x9, 0x0, 0x8, 0x4, 0xc990, 0x40, 0x9, 0x6, 0x48a3, 0x9, 0x6, 0x37000000, 0xff, 0xd6c, 0xbb0, 0x211, 0x1, 0x2, 0x9, 0x0, 0x80000001, 0xa5, 0x0, 0x5, 0x2a0d, 0x3, 0x1, 0x3, 0xfffffe00, 0xffffffff, 0x7, 0xabd8, 0xfffffff9, 0x4, 0x7fffffff, 0x4, 0xfffffff9, 0xffffffff, 0x6, 0x6, 0x1, 0x7f, 0x0, 0x4, 0x9, 0x0, 0x8, 0x1, 0x7, 0xfffffc00, 0x1, 0x2, 0x4, 0x26a, 0x8, 0x7, 0x4, 0x455, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0x3, 0x6, 0xfffff456, 0x7a9, 0x1, 0xc1, 0x0, 0x4, 0x9, 0x8, 0x8400, 0x3b1d, 0x80000001, 0xffffffff, 0xffff, 0x5, 0x101, 0x2, 0x7fffffff, 0x1e8, 0xce20, 0x7f, 0x1ff, 0x9, 0x70ea, 0x78a9336b, 0x7, 0x7fff, 0x8, 0xce15, 0x400, 0x0, 0x5, 0x6, 0x3, 0xdd, 0x6, 0x7, 0x8000, 0x31, 0x3, 0xfffffffe, 0x9, 0x5, 0x6, 0x9, 0xffff, 0x8, 0x810, 0x2d, 0xffff, 0x6000000, 0x5, 0x340, 0x2, 0x3, 0xdfd, 0x8, 0x8, 0x8, 0x5, 0x2ec9, 0xfffeffff, 0x100, 0x5, 0x8, 0x719c, 0x7f, 0x3, 0xaa95, 0xfffffff7, 0x4, 0x5, 0x8, 0x1, 0x7, 0x10001, 0x5, 0xa8, 0x4, 0x1, 0x7, 0xfffffff8, 0xbc, 0xffff629c, 0x7, 0xfffffff7, 0x32, 0x153, 0x5, 0x2, 0x10, 0x9402, 0xb367, 0x8, 0xfffffff5, 0x8, 0x8, 0x4, 0x6d, 0x8001, 0x6, 0xf4, 0x6, 0x7, 0x7, 0x0, 0x1, 0x2, 0x8c, 0x1, 0x7, 0x10000, 0x101, 0x8, 0x3, 0x7, 0x7, 0x8, 0x3, 0x12ff, 0x8, 0x2, 0xa, 0x7, 0x8, 0x4, 0x2440, 0xa051, 0x3, 0xfff, 0x7f, 0x7, 0x3, 0x7, 0x8, 0xffff, 0x10, 0xffffffff, 0x5, 0x1e09e29c, 0x6, 0xa3ce, 0x3, 0x9, 0x9, 0x67, 0x6, 0x9d5c, 0x5, 0x5, 0x5, 0x10000, 0xad6, 0x1, 0x100, 0x100, 0x5, 0x0, 0x1, 0xd641, 0x8e11, 0x1ff, 0xfffffff8, 0x0, 0x2, 0xff, 0x10000, 0x8, 0x8, 0x3ff, 0x7, 0x9, 0x6, 0xffff, 0xff, 0x4d, 0xe2, 0x0, 0x7ff, 0x5, 0x2, 0x2, 0x3, 0x3, 0x5d9, 0x0, 0x2, 0x2, 0x4, 0x200, 0x2, 0x5, 0x16, 0x7, 0x6, 0x1, 0x2, 0x2, 0x8, 0x6, 0x1, 0x81, 0xffffffb9, 0x100, 0x2, 0x6, 0x800, 0x4, 0x7, 0xc99, 0x5, 0x7, 0x9, 0x8, 0x400, 0xd5f, 0x6, 0x0, 0x4, 0x9, 0x2, 0xc2, 0x2, 0x7, 0xffff, 0xa0b, 0x0, 0x6, 0xb, 0xe2, 0x8, 0xd, 0x8, 0xb1f, 0x4, 0x3, 0x3, 0x8, 0x4d, 0x7, 0x3, 0x4, 0x9, 0x81, 0x4, 0x3, 0x0, 0x6, 0x10, 0x9b, 0x9e27, 0x2e31, 0xae71]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) sendmsg$kcm(r4, &(0x7f0000000940)={&(0x7f0000000980)=@xdp={0x2c, 0x7, r6, 0x7}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000a40)}], 0x1}, 0x20004014) 6m53.068836574s ago: executing program 3 (id=3460): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x5}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xd, 0x1c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18080000ff03000000000000a0600f2918110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b2af8ff00000000b509000000000000c38afcfff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m53.047555266s ago: executing program 3 (id=3461): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f00000005c0)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0}, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) recvmsg$can_j1939(r1, &(0x7f00000008c0)={&(0x7f0000000900)=@ax25={{0x3, @rose}, [@remote, @bcast, @null, @default, @netrom, @default, @netrom, @default]}, 0x80, 0x0, 0x0, &(0x7f0000000980)=""/79, 0x4f}, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000a00), 0x3d) socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3ec, 0x1, 0x0, 0x0, {0xa}}}, 0x28}}, 0x24040020) sendmsg$AUDIT_USER(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x40, 0x3ed, 0x200, 0x70bd25, 0x25dfdbfb, "62dece5dc71d8296bf896d6f103115a487d5131b8137e3bdf79d8cd9cc9633eff8ea067e4ed34f39d64bdefc58"}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x4010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x40, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x1e, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb88a82c00001caaaa060001110000"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x40}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x68, &(0x7f00000006c0)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffd004000000f0ffffff6600feff7fffffff950005f30db14835e13ec2762c3a583060000000000000651453ac665b18d18cf2a55362714dddcb7a739164748916f97707f5c925b764e0b1920dd580a98f77bfc262946edebd59e28cfb1a0e1c108e6000b191240fe0d79dd1ef98e2f748d16833"], &(0x7f00000001c0)='syzkaller\x00', 0x5}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000000206030000000000000000000700000705000100070000000900020073797a31000000001c0007800800064000000eb3080013400000000e05001400090000000500050002000000050004000100001011000300686173683a69702c706f7274"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x13, 0xa, 0x201, 0x0, 0x0, {0xb3aebda866ff3aff, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x404c0c4}, 0x20000881) 6m52.889393042s ago: executing program 3 (id=3466): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800001301"], 0x48) 6m51.25769857s ago: executing program 3 (id=3499): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x23, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280), 0xc, &(0x7f0000000640)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff38}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/96, 0x60}], 0x1, &(0x7f0000000d00)=""/190, 0xbe}, 0x30120) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 6m51.229969883s ago: executing program 32 (id=3499): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x23, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280), 0xc, &(0x7f0000000640)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff38}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/96, 0x60}], 0x1, &(0x7f0000000d00)=""/190, 0xbe}, 0x30120) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 26.70450846s ago: executing program 4 (id=8787): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0x1) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x5, 0x0, 0x10000000}}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1080002}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x140a, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./pipefs\x00', 0x1ff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, 0xffffffffffffffff, 0x0, 0x80000}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf3c4}, @TCA_FQ_CODEL_FLOWS={0xc, 0x5, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x3, 0x9, 0x2, 0xffffffff, 0x3}}, {0x4}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x200) mount(0x0, &(0x7f0000000200)='./pipefs\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x40) syz_emit_ethernet(0x93, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @tipc={{0x16, 0x4, 0x1, 0x4, 0x81, 0x68, 0x0, 0xc, 0x6, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x2c, 0x5d, 0x1, 0xc, [{@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfc77}, {@loopback, 0x400}, {@empty, 0x3b}]}, @lsrr={0x83, 0x17, 0x37, [@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x18}, @loopback]}]}}, @payload_direct={{{{0x29, 0x0, 0x0, 0x0, 0x1, 0x8, 0x1, 0x2, 0xd3c, 0x0, 0x2, 0x3, 0x3, 0x3, 0x4, 0x4, 0x1, 0x4e23, 0x4e20}, 0x0, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, &(0x7f00000005c0)={0x1, 0x2, [0xe43, 0xcf5, 0xdbd, 0x251]}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {}, 0xa}}, 0x26) sendmmsg$inet(r6, &(0x7f0000000500), 0x0, 0x8080) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x14c98, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 26.267520344s ago: executing program 4 (id=8791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001114d3fd27bd7000fcdbdf2508004b0013"], 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'vxcan0\x00'}) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r6, 0x1f, &(0x7f0000000280)={0x28, 0x2, 0x0, r6, &(0x7f0000000140)="47971d02d3cc48153040886bdd065925376f684b95802bd1f10ede0f", 0x1, 0x8, 0x2, 0x0, {0x0, 0x0, r5, 0x3}}, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="cc0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="43280000000000009c00128009000100766c616e000000008c0002801c0004800c00010005000000f8ffffff0c0001000004000006000000100004800c00010006000000090000000c0002000b000000070000000600050081000000060001000300000004000300000100000300dfff330004800c00010007000000000000000c00010806000000090000000c00010003000000ff7fffff0c000100000001000900040008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0xcc}}, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e26, 0x6, @mcast2, 0xffffffba}, 0x1c) write$tcp_mem(r6, &(0x7f00000056c0)={0x6b8b, 0x20, 0x7, 0x20, 0xfffffffffffffffa}, 0x48) 25.043215691s ago: executing program 4 (id=8801): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="180000000000000000009500"/24], &(0x7f00000000c0)='syzkaller\x00', 0x9b3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000600)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="03000000030003"], 0xa) ioctl$sock_ifreq(r2, 0x8930, &(0x7f0000000440)={'veth0_virt_wifi\x00', @ifru_data=&(0x7f0000000400)="572d15fa77f93b731d46215bedb4162bd4ce2bf816f8bfbb73345a4fad8022db"}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000bc0)={'gre0\x00', &(0x7f0000000a80)={'gre0\x00', 0x0, 0x700, 0x1, 0x32, 0x1, {{0x3d, 0x4, 0x1, 0x37, 0xf4, 0x67, 0x0, 0x4, 0x4, 0x0, @remote, @broadcast, {[@generic={0x88, 0x8, "e9f325dd1012"}, @generic={0x7, 0xb, "15fdd8d7f70fbe1ff2"}, @cipso={0x86, 0x62, 0x0, [{0x1, 0xe, "1d6d3abed8b7ca629947deb2"}, {0x1, 0xe, "abb2b6a135daf7c00a74cc48"}, {0x5, 0xc, "337485ce848b2f16f695"}, {0x2, 0xd, "8968a2b9be98c80438374e"}, {0x0, 0x5, "ae275c"}, {0x7, 0xc, "88298696cecf76b2224a"}, {0x2, 0x4, "dddf"}, {0x7, 0x9, "7b5547ff9c7f64"}, {0x976f1d30d1062831, 0x9, "2cb2c7b1d27b11"}]}, @rr={0x7, 0x17, 0xdc, [@dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp={0x44, 0x20, 0x6b, 0x0, 0x7, [0x4c, 0x1000000, 0x80000000, 0x8, 0x6, 0x8000, 0x1]}, @generic={0x4fd8ea6518c4daff, 0x11, "13aa62098e04a23ee8f7f772e12068"}, @rr={0x7, 0xf, 0x23, [@multicast1, @multicast2, @local]}, @lsrr={0x83, 0x13, 0x92, [@rand_addr=0x64010100, @private=0xa010101, @broadcast, @multicast2]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './cgroup/cgroup.procs\x00'}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x1f, 0x15, &(0x7f0000000a80)=ANY=[], &(0x7f0000000540)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x11, '\x00', r6}, 0x94) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000900)={0x0, &(0x7f0000000940)}) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000a00)={0xffffffffffffffff}, 0x13f}}, 0x33) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000a40)={0x7, 0x8, 0xfa00, {r10}}, 0x10) close_range(r8, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) write$tun(r11, 0x0, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='\x00', 0x89901) move_mount(r13, &(0x7f0000000700)='./cgroup/cgroup.procs\x00', r12, &(0x7f0000000740)='\x00', 0x174) io_uring_register$IORING_REGISTER_MEM_REGION(r13, 0x22, &(0x7f00000008c0)={&(0x7f0000000880)={&(0x7f0000000780)="d4b4656d8d21c9251a5be407a26a1389228ac976e4eafd0c43dfc9d7920eae2c816aef1f612e62593ead5a8a26198ca6b0801a1d6d5ed53804082e5016e77153cfaf37b84fd14380b833763aff3ff7a4eb1463a059fa89007b4406e6ac9b0af314027c552c5186c6678475bfa255dd0c35604dc5bad29f6a4700c8f3ce1d2d5186c409fd1baaf46324a1b289722fc82ea18a055e7e81fad0bfa6bc9ee874381625e686874a3a3fca30708c288b466a88f3ce0707bb322309022ce13cc5ad3f667add9c4a72b621003bc0446a757420fdd1e8457931f07593bba94c167ed673c4f859b0e0aa44f801dcdbf7629cfd632d28bf6b9462264846", 0xf8, 0x0, 0xfa5, 0x9}, 0x1}, 0x1) 24.821746763s ago: executing program 4 (id=8805): bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x0, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0xe, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001100)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001140), 0xc) perf_event_open(&(0x7f0000001180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x300c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001200)={r4, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r2}, &(0x7f0000001280), &(0x7f00000012c0)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000001300)={0x0, 0x6000, &(0x7f0000001340)=[{&(0x7f0000001380)='U', 0xa00120}], 0x1}, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000180)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000680)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000006c0)={0x8, 0x5, 0x1000, 0x8, 0x6, 0x8000000000004, 0x5, 0xf64, 0xffffffff}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="1000000016140951"], 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0xc, &(0x7f0000000980)=ANY=[@ANYRESHEX=r5], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x1c}, 0xffffffffffffffae) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x4, &(0x7f0000000a80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000b80)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15917939fc24ceb8}, 0x94) r7 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x2, 0x5, 0x7, 0x1, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000d00)=ANY=[], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000d80)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) 24.437212683s ago: executing program 4 (id=8812): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x7}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000940)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x11, &(0x7f0000000080), 0x8) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x3, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x6, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0x0, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x5, 0xff, 0x5, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x7fffffff, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x5, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x5, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x3c, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0x2, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x583, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x0, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x6, &(0x7f0000000b80)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000bc0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000c00)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket(0x6, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f00000009c0)={0x28, 0x0, 0x2710, @local}, 0x10) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) 24.185700629s ago: executing program 4 (id=8818): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) 24.168753041s ago: executing program 33 (id=8818): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) 5.774035125s ago: executing program 2 (id=8992): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x7}, 0x2800, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x11, &(0x7f0000000080), 0x8) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0xfffff565, 0x4, 0x2, 0x8, 0x6, 0x1, 0x3ff, 0xe25, 0x7, 0x3, 0x81, 0x5, 0x800, 0x7, 0x0, 0x6, 0xb4, 0x6, 0x5, 0x3, 0x5, 0x3, 0x2, 0xef, 0x6, 0xfffffffc, 0x8, 0x8, 0xffff, 0x9, 0xffffff26, 0x5, 0xdc, 0xf, 0x9, 0x2, 0x6, 0x6e, 0x135, 0x4, 0x99d, 0x5, 0x7f, 0x200, 0xfffffc01, 0x80000000, 0x5, 0x561b, 0x6, 0x4, 0x6, 0x5, 0x5, 0x2d, 0x5, 0x8001, 0x8, 0x180000, 0x8, 0x6, 0x5, 0x7, 0x0, 0x4, 0x7fff, 0x0, 0x5edec554, 0xfffffffe, 0x81, 0x1, 0x2, 0xfffffffd, 0xfffffffc, 0x4, 0x8, 0x81, 0x0, 0x0, 0x4, 0x6, 0xffff8000, 0x0, 0xcddf, 0x2, 0x5, 0xff, 0x5, 0xf5f9, 0x6, 0x7, 0x0, 0x0, 0x3, 0x1, 0x4, 0x2, 0xe, 0x10001, 0x81, 0x6, 0x5, 0x7, 0x1ff, 0x6, 0x10001, 0x2, 0xb533, 0x2, 0x6, 0x3ba, 0x6, 0x6, 0x9, 0x80, 0x4, 0x2704, 0x5, 0x400b, 0x2, 0x1, 0x0, 0xc5, 0x7fffffff, 0x69b4dd00, 0x4fa, 0x6, 0x4, 0x6, 0x2, 0x677, 0x4, 0x6, 0x8, 0x1, 0x2, 0x7, 0x7f, 0x10, 0x154, 0x9, 0x8, 0xfffffff9, 0x0, 0x3, 0xe, 0x8, 0x1, 0x4, 0x80000000, 0x3, 0x4, 0x7, 0x8, 0x8000, 0x8, 0x8, 0x3, 0xaffdfc1, 0x2, 0x9, 0xffff, 0x8, 0x9, 0x2dd3, 0x4, 0x5, 0xa58, 0x0, 0x5, 0x1, 0x1, 0x80000000, 0x8, 0x7, 0x9, 0x401, 0x3, 0x5, 0x7, 0x2, 0x1ff, 0x8001, 0x3, 0x5, 0x1, 0x7f, 0x2, 0x401, 0x1, 0xfa65, 0x80000000, 0x7, 0x10001, 0xffff, 0x76, 0x207, 0x2, 0x7000000, 0xd, 0x1, 0xfffff887, 0xffffffff, 0x8, 0x7b, 0x3d, 0x7ff, 0x2, 0x3, 0xae0, 0x5, 0x5, 0x3, 0x41, 0x5, 0x7, 0x80000000, 0xe, 0x9, 0x10001, 0x8, 0x5, 0x6, 0x3c, 0x2903c8dc, 0x4, 0x6, 0x7fff, 0x2, 0x5d87, 0x2000000, 0x3, 0x2, 0x7, 0x6, 0x1, 0x5, 0x400, 0x583, 0x2, 0x7, 0x2, 0xea, 0x809a, 0x0, 0x89e, 0xa, 0xdc84, 0x95c6, 0x8, 0x800, 0x6, 0x3a8c, 0x7ff, 0x4, 0x7fff, 0x4]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x0, 0x941, 0x0, 0xffa9, 0x7f}, {0x7d, 0x0, 0x200, 0x8000, 0x6, 0x8}, 0x18ca4000, 0x8, 0x100, 0xff, 0xd}}]}}]}, 0x464}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x6, &(0x7f0000000b80)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000bc0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000c00)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket(0x6, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f00000009c0)={0x28, 0x0, 0x2710, @local}, 0x10) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) 5.487794255s ago: executing program 2 (id=8995): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f00000015c0), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f00000001c0)={0x0, "0011223344557c778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabb9a13eeff00112233445566778899aabbccddeeff", 0x20}, 0x5f, r1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @auto=[0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000300)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "1b699af42db92c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c49522f82f6ffcdcf860c0cadb646c435e077ecbbae7968117a70a9a1090", 0x29}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000500)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @auto=[0x30, 0x31, 0x62, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x36, 0x30, 0x39]}, &(0x7f0000000700)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000c80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) r2 = add_key$user(&(0x7f0000000d00), &(0x7f0000000d40)={'syz', 0x2}, &(0x7f0000000d80)="97", 0x1, r1) add_key$keyring(&(0x7f0000000dc0), &(0x7f0000000e00)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000e40), &(0x7f0000000e80)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000ec0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000f40), &(0x7f0000000f80)={'fscrypt:', @desc3}, &(0x7f0000000fc0)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff0011220011223344556677889c69bbccddeeff00", 0x22}, 0x48, r1) add_key$keyring(&(0x7f0000001040), &(0x7f0000001080)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f00000010c0), &(0x7f0000001100)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x32, 0x30, 0x30, 0x0, 0x35, 0x61, 0x33, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000001140)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aa00ccddeeff00112233445566778899aabbccddee1ea0b92133445566778899aabbccddeeff", 0x41}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000011c0), &(0x7f0000001200)={'fscrypt:', @auto=[0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x62, 0x30, 0x66]}, &(0x7f0000001240)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f00000012c0), &(0x7f0000001300)={'fscrypt:', @desc3}, &(0x7f0000001340)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f00000013c0), &(0x7f0000001400)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000001440), &(0x7f0000001480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f00000014c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) r3 = add_key$keyring(&(0x7f0000001540), &(0x7f0000001580)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$unlink(0x9, r2, r3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200088e, &(0x7f0000000240), 0x3, 0x448, &(0x7f0000000780)="$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") chdir(&(0x7f0000000140)='./file0\x00') r4 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 5.34133975s ago: executing program 2 (id=8996): r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000480), 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a012400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014600000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003400038030000080040001800c000540000000000000004910000b800c000080080001006e6174800c00044000000000000007"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="05000000400800000008000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000030000a00a04000028b8c87399c5b3e2ed118dfe926e9e712c5a46addab4019747f36a34488a8c2f982f38fde31049f642d22dba7b5c6100d17d67ca3b61266216ae9d3434367d0f"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='ramfs\x00', 0x244440, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) open(&(0x7f0000000080)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000000280)={0x1, 0x3, 0x1, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x410, &(0x7f0000000340)={0x1, 0x3, 0x1000000000000001, 0x9b}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000380)='./file0\x00') write(r3, &(0x7f00000001c0)='27', 0x2) r6 = syz_pidfd_open(r0, 0x0) setns(r6, 0x24020000) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="1400000034005f76432127c23b84aa980b47564c", 0x14}], 0x1}, 0x0) syz_clone(0xf8024100, 0x0, 0x0, 0x0, 0x0, 0x0) 4.332217104s ago: executing program 2 (id=9013): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 4.196552848s ago: executing program 2 (id=9016): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f00000004c0)={[{@resgid}]}, 0x3, 0x54e, &(0x7f0000000e80)="$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") readlinkat(r0, &(0x7f0000001400)='./file2\x00', &(0x7f0000001440)=""/110, 0x6e) 4.089433849s ago: executing program 2 (id=9018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x14, 0x0, 0x6, 0x0, 0x0, 0x3, 0x201}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x490, &(0x7f0000000f00)="$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") sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x44000) r1 = socket$inet(0x2, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = eventfd(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x3, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000016c0)="02965d1f5ec3de3d", 0x8}, {0x0}], 0x2) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000b40)={@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x4, 0x1, {0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x21}}}, {&(0x7f0000000a00)=""/244, 0xf4}, &(0x7f0000000b00), 0x10}, 0xa0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x120, 0xb, 0xd0e0011, 0x0, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x9c, 0x0, 'nr0\x00', 'batadv0\x00', {0xff}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000002940), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) r5 = memfd_create(&(0x7f0000000540)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8010002}) sendmsg$key(r4, &(0x7f0000000480)={0x4000000, 0x0, 0x0}, 0x0) io_submit(0x0, 0x0, &(0x7f0000000200)) syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 3.58526171s ago: executing program 6 (id=9024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000001508020000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 3.337734016s ago: executing program 6 (id=9025): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f00000000c0)='100', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x264d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x3000000, &(0x7f0000000480)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000940)="$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") open(&(0x7f0000000e80)='./file0\x00', 0x402, 0xa27b734c1a0bdb7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ec0)={0x1, &(0x7f0000000f00)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) r2 = getpid() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x24040000) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x24020000) perf_event_open$cgroup(&(0x7f0000000f40)={0xa, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x2000000000, 0x3400000, 0x4, 0x2, 0x0, 0x0, 0x0, 0xc12, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000fc0)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000002c0)='./drv\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./drv/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='0000:00:1f.3', 0xc) 2.127218631s ago: executing program 5 (id=9028): readlinkat(0xffffffffffffffff, &(0x7f0000001400)='./file2\x00', &(0x7f0000001440)=""/110, 0x6e) 2.079118816s ago: executing program 1 (id=9029): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) open(0x0, 0x107000, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8244a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r0 = socket$unix(0x1, 0x1, 0x0) getpeername$unix(r0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil) socket$tipc(0x1e, 0x5, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x7fffffff, 0x4) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000000c0)={{}, "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"}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001d80)={0xa0028014}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0xe, 0x16, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000001cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001d00), 0xffffffffffffffd2}, 0x48) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000001dc0), &(0x7f0000001e00)='./file0\x00', 0x804818, &(0x7f0000001e40)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYRESOCT=r3, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r3, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56a, &(0x7f0000002040)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x1000) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3) 2.066946377s ago: executing program 5 (id=9030): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000580)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000640)={0x0, 0x1}, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x8, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000200)={{}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280)) 2.065713587s ago: executing program 6 (id=9031): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x80) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(0x0, 0x8000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) madvise(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0x14) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (fail_nth: 1) 2.03595295s ago: executing program 0 (id=9032): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010080be0b"], 0x40) 1.968034727s ago: executing program 6 (id=9033): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x7}, 0x12804, 0x0, 0x2, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x4, 0x0, 0x0, 0x0, 0x7, 0xc05ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x10ecc9, 0x1224, 0x88, 0x1, 0x8, 0x22005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) read$qrtrtun(0xffffffffffffffff, &(0x7f00000004c0)=""/57, 0x39) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x1, @perf_config_ext={0x7, 0x7}, 0x106ca4, 0x0, 0xfffffffc, 0x3, 0x6, 0x2008001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000600)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000640)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000", @ANYRES32, @ANYRES32=r0], &(0x7f00000008c0)='GPL\x00', 0x2, 0x95, &(0x7f0000000900)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)={@ifindex, r2, 0x11}, 0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="1100000000223f009a0e3d15", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa) umount2(0x0, 0x8000000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$l2tp(0x2, 0x2, 0x73) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103ffd, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x4, 0x80000000, 0x1, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) socket$igmp(0x2, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000a40)={'filter\x00', 0x104, 0x4, 0x3c0, 0xe8, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="23090000000000000000010000000500070000000000080009", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x340200c4}, 0x0) close(r4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@quota}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@noinit_itable}, {@nolazytime}, {@noload}]}, 0xf9, 0x48b, &(0x7f0000000f40)="$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") unlink(&(0x7f0000000040)='./file0/file0\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x1, 0x2bb}) io_uring_enter(r6, 0x221a, 0xada0, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) 1.962382258s ago: executing program 5 (id=9034): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000), 0x62) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r2, 0x900}, 0x38) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.912880613s ago: executing program 0 (id=9035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 1.837634941s ago: executing program 0 (id=9036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001114d3fd27bd7000fcdbdf2508004b0013"], 0x38}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'vxcan0\x00'}) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r6, 0x1f, &(0x7f0000000280)={0x28, 0x2, 0x0, r6, &(0x7f0000000140)="47971d02d3cc48153040886bdd065925376f684b95802bd1f10ede0f", 0x1, 0x8, 0x2, 0x0, {0x0, 0x0, r5, 0x3}}, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="cc0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="43280000000000009c00128009000100766c616e000000008c0002801c0004800c00010005000000f8ffffff0c0001000004000006000000100004800c00010006000000090000000c0002000b000000070000000600050081000000060001000300000004000300000100000300dfff330004800c00010007000000000000000c00010806000000090000000c00010003000000ff7fffff0c000100000001000900040008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0xcc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$inet6(0xa, 0x80002, 0x0) 1.790477206s ago: executing program 5 (id=9037): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000000780)="$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") mount$9p_fd(0x0, 0x0, &(0x7f0000000f40), 0x14c98, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)=""/168, 0xa8) readlink(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)=""/172, 0xac) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in={0x2, 0x4e24, @empty}}}, 0x90) 1.189128057s ago: executing program 6 (id=9038): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x100000}], 0x1, &(0x7f0000001740)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$sg(0x0, 0x8e, 0x20402) r6 = mq_open(0x0, 0x42, 0x0, 0x0) mq_getsetattr(r6, 0x0, &(0x7f0000000180)) 1.080180649s ago: executing program 5 (id=9039): readlinkat(0xffffffffffffffff, &(0x7f0000001400)='./file2\x00', &(0x7f0000001440)=""/110, 0x6e) 885.222239ms ago: executing program 0 (id=9040): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0xc350, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0xea60}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x40ce, 0x0) openat(0xffffffffffffff9c, 0x0, 0x202, 0x150) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0) mount$bind(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x100000, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x8000, &(0x7f00000006c0)={0xb, 0x0, 0x100000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/wakeup_count', 0x0, 0x20) sendfile(r4, r5, 0x0, 0x8) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x4}, 0x8800, 0xff, 0x4, 0x0, 0x0, 0xd557, 0x9, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='fd', &(0x7f0000000280)='3', 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) set_mempolicy(0x8006, 0x0, 0x5) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="17000000000000400001001000000000298300007eab7513809d1ff91d48ad4db4dc451ea5b415631c269a0d5133262e7401222d56c5b24b1b4579ee", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, 0x0, &(0x7f0000000440)}, 0x20) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000340)='fd', 0x2) 845.788623ms ago: executing program 6 (id=9041): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x802040, &(0x7f0000000080)={[{@data_err_ignore}, {@resgid}, {@abort}, {@orlov}, {@nobarrier}, {@lazytime}]}, 0x9, 0x637, &(0x7f0000000340)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x280440e, &(0x7f0000000200), 0x1, 0xbdb, &(0x7f0000000f00)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001b00)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x84) prlimit64(0x0, 0xc, &(0x7f0000000980)={0xa, 0x92}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000001c00)=ANY=[@ANYBLOB="b00100001a00010000000000000000001c140000000000000000000084001300000004000000040000040f0000000100000000000000000000000000000002000000000000000000000000000000050000000000000f04000000000000000000000000000000000000000f00000000000000000000000600000f0f000000000000000000000000000000000000000e00000000000000000000000000000000008400130000000000000000000000000000000000000004000000010000000f0000000000000005000000000000000000000000000000000000000000000f0f000000000000000d00000000000000080000000000000000000000000000000000000f0f00000000000000000000000000000f0f000000080002000000000000000000000008000100000503"], 0x1b0}}, 0x0) r1 = getpid() setns(0xc9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000a40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b40), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000b80), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x1d, 0x2, 0x6) setsockopt$inet_tcp_int(r5, 0x6, 0x2b, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000c40)={0xa, 0x8000002, 0x2004}, 0x1c) perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x3f4f, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000280)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./my_configfs\x00', &(0x7f0000000b40)='configfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./my_configfs/target/dbroot\x00', 0x1, 0x0) pwritev(r6, &(0x7f0000001b40)=[{0x0}, {&(0x7f0000001b80)="000000e6e150425d120b6b932acaa3ab3246005fa433fc0fb0897cc35be685656bf21c809ed2c15c1cd939c4a156f81bcb6c027f9b7d97f38046798a62eadc0ca2638b36e8c787c7c214f465a23666b7", 0x50}], 0x2, 0x1002, 0xab75) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="0000020000200000000000181100000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000ec0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) socket$inet(0x2, 0x2, 0x0) 769.188231ms ago: executing program 5 (id=9042): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x102810, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '1\x00'}}, [@raid={0x0, 0x480, 0x0, 0x78, 'raid\x00', {'raid5_ls', 0x20, '3 64 delta_disks 1', 0x20, 0x1, [{0x20, @dev=@rnull={'/dev/syzrnull', 0x0}, 0x20, @rnull={'/dev/syzrnull', 0x0}}]}}]}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000181ac0)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x14, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793cdab0da77ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "2a8bfe1406584ae7be4af14e1df82d000001000000000000000074b000", [0x20007a, 0x9]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000181bc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000181dc0)={0x1, [{}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "cbda627192ec30"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000182dc0)={r1, 0x4}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000183dc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000184dc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000185dc0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) io_setup(0x5, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r13, &(0x7f0000000280)='30', 0x2) unshare(0x40000000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000185fc0)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0xd, "cbc2cb7e785cae"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000186fc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r20}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {r14}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "8a77b3ecb08746"}) r24 = syz_open_dev$loop(&(0x7f0000187fc0), 0xb7c8, 0xa8182) r25 = memfd_create(&(0x7f0000188000)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r24, 0xd000943d, &(0x7f00001885c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r26}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {r22}], 0x4, "cbda627192ec30"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00001895c0)={r26, 0x4}) 716.045676ms ago: executing program 1 (id=9043): timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280)) 468.598462ms ago: executing program 0 (id=9044): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010080be0b"], 0x40) 441.112114ms ago: executing program 1 (id=9045): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 255.730794ms ago: executing program 1 (id=9046): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7c, &(0x7f0000000000), 0x62) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r2, 0x900}, 0x38) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e2200000600"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 198.572499ms ago: executing program 0 (id=9047): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) open(0x0, 0x107000, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8244a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r0 = socket$unix(0x1, 0x1, 0x0) getpeername$unix(r0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x2000)=nil) socket$tipc(0x1e, 0x5, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x7fffffff, 0x4) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000000c0)={{}, "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"}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001d80)={0xa0028014}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffef6, 0x4, @perf_bp={0x0, 0x1}, 0xc8a0, 0x6, 0xfffffffe, 0x8, 0xc, 0x475}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0xe, 0x16, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000001cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001d00), 0xffffffffffffffd2}, 0x48) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000001dc0), &(0x7f0000001e00)='./file0\x00', 0x804818, &(0x7f0000001e40)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYRESOCT=r3, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r3, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x56a, &(0x7f0000002040)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000025c0)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0x1000) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3) 110.380508ms ago: executing program 1 (id=9048): r0 = mq_open(0x0, 0x42, 0x0, 0x0) mq_getsetattr(r0, 0x0, &(0x7f0000000180)) 0s ago: executing program 1 (id=9049): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32=r1, @ANYBLOB="0100001665097c023637ce3315d5d6b19c375c01", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20040084) setsockopt$sock_attach_bpf(r2, 0x84, 0x84, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x1488, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x13b8, 0x2e8, 0x2e8, 0x13b8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1128, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0x248, 0x290, 0x0, {}, [@common=@hbh={{0x48}, {0x7f, 0x6, 0x0, [0x9, 0xb57a, 0x400, 0x7, 0x5, 0x401, 0xb, 0x1, 0x0, 0xbc10, 0x17b, 0x2, 0xfffb, 0x4, 0x2, 0xa], 0xb}}, @common=@inet=@hashlimit3={{0x158}, {'\x00', {0x1, 0xb61d, 0x9, 0x8, 0x8336, 0x3, 0x4, 0xffffbff1, 0x18}, {0xcda1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1000, 0x1000, 0x6a, 'netbios-ns\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14e8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$hiddev(0x0, 0x5, 0x109800) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, 0x0) syz_genetlink_get_family_id$tipc(0x0, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x200) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) kernel console output (not intermixed with test programs): 0000000000 r/w without journal. Quota mode: none. [ 533.588854][T24349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.707732][T32663] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8592'. [ 533.707761][T32663] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8592'. [ 533.771638][T32668] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8589'. [ 533.840666][T32671] loop5: detected capacity change from 0 to 512 [ 533.857947][T32671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.858071][T32671] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.874827][T20355] IPVS: starting estimator thread 0... [ 533.877969][T32671] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8596'. [ 533.911168][T24349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.965249][T32674] IPVS: using max 1920 ests per chain, 96000 per kthread [ 533.989652][T32669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8595'. [ 534.044139][T32681] loop5: detected capacity change from 0 to 512 [ 534.047487][T32681] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.8599: bad orphan inode 15 [ 534.047628][T32681] loop5: lost filesystem error report for type 5 error -117 [ 534.047851][T32681] ext4_test_bit(bit=14, block=5) = 0 [ 534.048783][T32681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.091480][T24349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.264154][T32700] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32700 comm=syz.5.8608 [ 534.307443][T32705] loop4: detected capacity change from 0 to 512 [ 534.317189][T32705] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.8610: bad orphan inode 15 [ 534.317223][T32705] loop4: lost filesystem error report for type 5 error -117 [ 534.317337][T32705] ext4_test_bit(bit=14, block=5) = 0 [ 534.317783][T32705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.376975][T23895] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.425448][T32713] mmap: syz.5.8613 (32713) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 534.497382][T32723] 9p: Bad value for 'wfdno' [ 534.756342][T32729] loop4: detected capacity change from 0 to 512 [ 534.797352][T32729] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.8619: bad orphan inode 15 [ 534.797388][T32729] loop4: lost filesystem error report for type 5 error -117 [ 534.797503][T32729] ext4_test_bit(bit=14, block=5) = 0 [ 534.798149][T32729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.810684][T32736] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8623'. [ 534.864300][T32729] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 534.864710][T32729] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.8619: bit already cleared for inode 13 [ 534.940639][T32744] loop5: detected capacity change from 0 to 512 [ 534.946922][T32744] EXT4-fs: Ignoring removed nobh option [ 534.947002][T32744] ext4: Unknown parameter 'grpquota..' [ 535.325469][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 535.325488][ T28] audit: type=1400 audit(1793033034.415:4337): avc: denied { create } for pid=32761 comm="syz.5.8634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 535.329151][ T28] audit: type=1400 audit(1793033034.415:4338): avc: denied { bind } for pid=32761 comm="syz.5.8634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 535.329187][ T28] audit: type=1400 audit(1793033034.415:4339): avc: denied { node_bind } for pid=32761 comm="syz.5.8634" src=32768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 535.362391][T32597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.407803][ T28] audit: type=1400 audit(1793033034.485:4340): avc: denied { name_bind } for pid=32761 comm="syz.5.8634" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 535.504631][T23895] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.612853][ T28] audit: type=1400 audit(1793033034.695:4341): avc: denied { connect } for pid=308 comm="syz.4.8638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 535.929479][ T28] audit: type=1400 audit(1793033035.015:4342): avc: denied { create } for pid=318 comm="syz.1.8642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 535.941030][ T28] audit: type=1400 audit(1793033035.025:4343): avc: denied { bind } for pid=318 comm="syz.1.8642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 535.985248][ T322] loop2: detected capacity change from 0 to 164 [ 536.054243][ T28] audit: type=1400 audit(1793033035.085:4344): avc: denied { connect } for pid=318 comm="syz.1.8642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 536.239208][ T362] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.8655: bad orphan inode 15 [ 536.239239][ T362] loop5: lost filesystem error report for type 5 error -117 [ 536.239761][ T28] audit: type=1400 audit(1793033035.325:4345): avc: denied { mount } for pid=363 comm="syz.1.8656" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 536.240021][ T362] ext4_test_bit(bit=14, block=5) = 0 [ 536.242267][ T362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.293582][T24349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.318841][ T28] audit: type=1400 audit(1793033035.405:4346): avc: denied { unmount } for pid=22857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 536.427371][ T379] FAULT_INJECTION: forcing a failure. [ 536.427371][ T379] name failslab, interval 1, probability 0, space 0, times 0 [ 536.427485][ T379] CPU: 1 UID: 0 PID: 379 Comm: syz.2.8661 Not tainted syzkaller #0 PREEMPT(lazy) [ 536.427518][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 536.427535][ T379] Call Trace: [ 536.427544][ T379] [ 536.427555][ T379] __dump_stack+0x1d/0x30 [ 536.427589][ T379] dump_stack_lvl+0x95/0xd0 [ 536.427698][ T379] dump_stack+0x15/0x1b [ 536.427863][ T379] should_fail_ex+0x262/0x280 [ 536.427894][ T379] ? __se_sys_memfd_create+0x1df/0x3c0 [ 536.427931][ T379] should_failslab+0x8c/0xb0 [ 536.428078][ T379] __kmalloc_cache_noprof+0x5d/0x3e0 [ 536.428117][ T379] ? __se_sys_memfd_create+0x1df/0x3c0 [ 536.428209][ T379] ? fput+0x91/0xc0 [ 536.428236][ T379] __se_sys_memfd_create+0x1df/0x3c0 [ 536.428273][ T379] __x64_sys_memfd_create+0x31/0x40 [ 536.428310][ T379] x64_sys_call+0x1955/0x2550 [ 536.428341][ T379] do_syscall_64+0x112/0x360 [ 536.428489][ T379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.428516][ T379] RIP: 0033:0x7f6e746af559 [ 536.428537][ T379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.428563][ T379] RSP: 002b:00007f6e73106e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 536.428590][ T379] RAX: ffffffffffffffda RBX: 00000000000002b2 RCX: 00007f6e746af559 [ 536.428652][ T379] RDX: 00007f6e73106ee0 RSI: 0000000000000000 RDI: 00007f6e74746d00 [ 536.428671][ T379] RBP: 0000200000001380 R08: 00000000ffffffff R09: 0000000000000000 [ 536.428756][ T379] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000001280 [ 536.428774][ T379] R13: 00007f6e73106ee0 R14: 00007f6e73106ea0 R15: 00002000000012c0 [ 536.428802][ T379] [ 536.468127][ T379] EXT4-fs: Ignoring removed nobh option [ 536.468200][ T379] ext4: Unknown parameter 'grpquota..' [ 537.262771][ T399] FAULT_INJECTION: forcing a failure. [ 537.262771][ T399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.262809][ T399] CPU: 0 UID: 0 PID: 399 Comm: syz.2.8667 Not tainted syzkaller #0 PREEMPT(lazy) [ 537.262918][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 537.262936][ T399] Call Trace: [ 537.262945][ T399] [ 537.262955][ T399] __dump_stack+0x1d/0x30 [ 537.262991][ T399] dump_stack_lvl+0x95/0xd0 [ 537.263039][ T399] dump_stack+0x15/0x1b [ 537.263068][ T399] should_fail_ex+0x262/0x280 [ 537.263110][ T399] should_fail+0xb/0x20 [ 537.263138][ T399] should_fail_usercopy+0x1a/0x20 [ 537.263172][ T399] _copy_from_user+0x1c/0xb0 [ 537.263205][ T399] __sys_connect+0xd0/0x2a0 [ 537.263251][ T399] __x64_sys_connect+0x3f/0x50 [ 537.263322][ T399] x64_sys_call+0x1c0b/0x2550 [ 537.263351][ T399] do_syscall_64+0x112/0x360 [ 537.263501][ T399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.263531][ T399] RIP: 0033:0x7f6e746af559 [ 537.263553][ T399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.263578][ T399] RSP: 002b:00007f6e73107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 537.263606][ T399] RAX: ffffffffffffffda RBX: 00007f6e74935fa0 RCX: 00007f6e746af559 [ 537.263658][ T399] RDX: 0000000000000010 RSI: 0000200000000840 RDI: 0000000000000004 [ 537.263673][ T399] RBP: 00007f6e73107090 R08: 0000000000000000 R09: 0000000000000000 [ 537.263687][ T399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.263700][ T399] R13: 00007f6e74936038 R14: 00007f6e74935fa0 R15: 00007fffac8abfb8 [ 537.263728][ T399] [ 538.399070][ T427] syzkaller0: entered promiscuous mode [ 538.399095][ T427] syzkaller0: entered allmulticast mode [ 539.010605][ T333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.196572][ T447] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8685'. [ 539.203997][ T454] unloading [ 539.208899][ T442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8677'. [ 539.781480][ T487] syzkaller0: entered promiscuous mode [ 539.781506][ T487] syzkaller0: entered allmulticast mode [ 539.830801][ T449] ÿ: renamed from bond_slave_0 [ 539.972808][ T494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8694'. [ 540.036468][ T502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8697'. [ 540.311045][ T512] set_capacity_and_notify: 2 callbacks suppressed [ 540.311070][ T512] loop2: detected capacity change from 0 to 512 [ 540.333034][ T512] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.8700: bad orphan inode 15 [ 540.333725][ T512] loop2: lost filesystem error report for type 5 error -117 [ 540.334215][ T512] ext4_test_bit(bit=14, block=5) = 0 [ 540.337044][ T512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.355361][ T512] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 540.355687][ T512] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.8700: bit already cleared for inode 13 [ 540.355816][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 540.355885][ T28] audit: type=1400 audit(1793033039.435:4367): avc: denied { write } for pid=510 comm="syz.2.8700" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 542.307886][ T464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.338531][T23485] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.463600][ T527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8706'. [ 542.536826][ T534] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8708'. [ 542.562449][ T540] loop0: detected capacity change from 0 to 512 [ 542.562959][ T540] EXT4-fs: Ignoring removed bh option [ 542.563035][ T540] journal_path: Lookup failure for './tracing/dynamic_events' [ 542.563056][ T540] EXT4-fs: error: could not find journal device path [ 542.634373][ T28] audit: type=1400 audit(1793033041.715:4368): avc: denied { mount } for pid=539 comm="syz.0.8711" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 542.703083][ T543] loop2: detected capacity change from 0 to 8192 [ 542.772565][ T547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8713'. [ 542.862256][ T28] audit: type=1400 audit(1793033041.945:4369): avc: denied { unmount } for pid=22025 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 543.770699][ T586] FAULT_INJECTION: forcing a failure. [ 543.770699][ T586] name failslab, interval 1, probability 0, space 0, times 0 [ 543.770733][ T586] CPU: 1 UID: 0 PID: 586 Comm: syz.0.8725 Not tainted syzkaller #0 PREEMPT(lazy) [ 543.770768][ T586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 543.770786][ T586] Call Trace: [ 543.770821][ T586] [ 543.770832][ T586] __dump_stack+0x1d/0x30 [ 543.770864][ T586] dump_stack_lvl+0x95/0xd0 [ 543.770897][ T586] dump_stack+0x15/0x1b [ 543.770927][ T586] should_fail_ex+0x262/0x280 [ 543.770963][ T586] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 543.770994][ T586] should_failslab+0x8c/0xb0 [ 543.771072][ T586] __kmalloc_noprof+0xb6/0x4b0 [ 543.771165][ T586] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 543.771206][ T586] kernfs_fop_write_iter+0xd4/0x2e0 [ 543.771301][ T586] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 543.771337][ T586] vfs_write+0x57a/0x990 [ 543.771376][ T586] ksys_write+0xdc/0x1a0 [ 543.771421][ T586] __x64_sys_write+0x40/0x50 [ 543.771486][ T586] x64_sys_call+0x154e/0x2550 [ 543.771521][ T586] do_syscall_64+0x112/0x360 [ 543.771585][ T586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.771611][ T586] RIP: 0033:0x7fc97ca7f559 [ 543.771665][ T586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.771685][ T586] RSP: 002b:00007fc97b4d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 543.771711][ T586] RAX: ffffffffffffffda RBX: 00007fc97cd05fa0 RCX: 00007fc97ca7f559 [ 543.771729][ T586] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000004 [ 543.771743][ T586] RBP: 00007fc97b4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 543.771781][ T586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.771798][ T586] R13: 00007fc97cd06038 R14: 00007fc97cd05fa0 R15: 00007fff53410138 [ 543.771826][ T586] [ 543.793141][ T584] syzkaller0: entered promiscuous mode [ 543.793197][ T584] syzkaller0: entered allmulticast mode [ 544.162060][ T603] rxe_eth0 speed is unknown, defaulting to 1000 [ 544.937614][ T603] loop4: detected capacity change from 0 to 128 [ 544.939759][ T603] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 544.981055][ T603] FAT-fs (loop4): IO charset š‡/}ôU„A¹ž)utf8 not found [ 545.061283][ T623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8738'. [ 545.061311][ T623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8738'. [ 545.323516][ T628] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8738'. [ 545.485732][ T28] audit: type=1400 audit(1793033044.475:4370): avc: denied { recv } for pid=622 comm="syz.0.8738" saddr=10.128.0.163 src=30036 daddr=10.128.1.93 dest=44292 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 545.545844][ T28] audit: type=1400 audit(1793033044.625:4371): avc: denied { bpf } for pid=626 comm="syz.5.8739" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 545.606139][ T28] audit: type=1400 audit(1793033044.685:4372): avc: denied { prog_run } for pid=626 comm="syz.5.8739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 545.723503][ T28] audit: type=1400 audit(1793033044.805:4373): avc: denied { ioctl } for pid=626 comm="syz.5.8739" path="socket:[94618]" dev="sockfs" ino=94618 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 545.762606][ T28] audit: type=1400 audit(1793033044.845:4374): avc: denied { create } for pid=626 comm="syz.5.8739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 545.789284][ T28] audit: type=1400 audit(1793033044.875:4375): avc: denied { ioctl } for pid=626 comm="syz.5.8739" path="socket:[94627]" dev="sockfs" ino=94627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 545.822056][ T28] audit: type=1400 audit(1793033044.905:4376): avc: denied { create } for pid=600 comm="syz.4.8732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 545.845976][ T28] audit: type=1400 audit(1793033044.935:4377): avc: denied { bind } for pid=600 comm="syz.4.8732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 545.848904][ T28] audit: type=1400 audit(1793033044.935:4378): avc: denied { execmem } for pid=600 comm="syz.4.8732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 545.889846][ T28] audit: type=1400 audit(1793033044.975:4379): avc: denied { connect } for pid=626 comm="syz.5.8739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 546.262996][ T632] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 546.605593][ T632] loop0: detected capacity change from 0 to 512 [ 546.668974][ T664] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8750'. [ 546.668997][ T664] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8750'. [ 546.882518][ T632] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.8740: bg 0: block 385: padding at end of block bitmap is not set [ 546.882762][ T632] loop0: lost filesystem error report for type 5 error -117 [ 546.885120][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 546.885165][ C0] EXT4-fs (loop0): initial error at time 1793033045: ext4_validate_block_bitmap:445 [ 546.885191][ C0] EXT4-fs (loop0): last error at time 1793033045: ext4_validate_block_bitmap:445 [ 546.887309][ T632] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 546.887538][ T632] loop0: lost filesystem error report for type 5 error -117 [ 546.918743][ T632] EXT4-fs (loop0): 2 truncates cleaned up [ 546.927938][ T673] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8750'. [ 547.043742][ T632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.616685][ T677] syzkaller0: entered promiscuous mode [ 547.616775][ T677] syzkaller0: entered allmulticast mode [ 547.724276][T22025] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.060779][ T678] loop5: detected capacity change from 0 to 164 [ 548.090650][ T694] netlink: 'syz.0.8754': attribute type 4 has an invalid length. [ 548.207669][ T701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8758'. [ 548.207700][ T701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8758'. [ 548.209669][ T694] loop0: detected capacity change from 0 to 512 [ 548.211500][ T694] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 548.211561][ T694] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 548.214834][ T694] EXT4-fs (loop0): 1 truncate cleaned up [ 548.215977][ T694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.493823][ T705] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8758'. [ 549.278638][ T715] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8761'. [ 550.734734][ T680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 550.810947][ T28] kauditd_printk_skb: 120 callbacks suppressed [ 550.811062][ T28] audit: type=1400 audit(1793033049.895:4500): avc: denied { read } for pid=23895 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 550.811124][ T28] audit: type=1400 audit(1793033049.895:4501): avc: denied { open } for pid=23895 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 550.811154][ T28] audit: type=1400 audit(1793033049.895:4502): avc: denied { ioctl } for pid=23895 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 550.821420][ T28] audit: type=1400 audit(1793033049.905:4503): avc: denied { unmount } for pid=22025 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 550.877427][ T720] __nla_validate_parse: 2 callbacks suppressed [ 550.877476][ T720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8763'. [ 550.938610][ T28] audit: type=1400 audit(1793033050.025:4504): avc: denied { create } for pid=722 comm="syz.1.8762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 550.939979][T22025] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.940155][ T28] audit: type=1400 audit(1793033050.025:4505): avc: denied { write } for pid=722 comm="syz.1.8762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 550.992710][ T28] audit: type=1400 audit(1793033050.075:4506): avc: denied { read } for pid=722 comm="syz.1.8762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 551.016673][ T28] audit: type=1400 audit(1793033050.085:4507): avc: denied { create } for pid=722 comm="syz.1.8762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 551.028239][ T723] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8762'. [ 551.028388][ T723] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8762'. [ 551.037000][ T28] audit: type=1400 audit(1793033050.115:4508): avc: denied { write } for pid=722 comm="syz.1.8762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 551.037039][ T28] audit: type=1400 audit(1793033050.115:4509): avc: denied { prog_load } for pid=719 comm="syz.4.8763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 551.192783][ T721] bond1: option updelay: invalid value (18446744073709551612) [ 551.192813][ T721] bond1: option updelay: allowed values 0 - 2147483647 [ 551.238274][ T729] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8764'. [ 551.238381][ T729] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8764'. [ 551.353058][ T721] bond1 (unregistering): Released all slaves [ 551.376726][ T727] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8762'. [ 551.594639][ T735] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8766'. [ 552.088532][ T747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8769'. [ 552.088558][ T747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8769'. [ 552.341622][ T751] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8769'. [ 552.367618][ T743] loop5: detected capacity change from 0 to 8192 [ 553.329270][ T764] loop4: detected capacity change from 0 to 512 [ 553.341518][ T764] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.8772: bad orphan inode 15 [ 553.341548][ T764] loop4: lost filesystem error report for type 5 error -117 [ 553.343485][ T764] ext4_test_bit(bit=14, block=5) = 0 [ 553.343872][ T764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.421464][ T767] loop0: detected capacity change from 0 to 164 [ 553.421899][ T767] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 553.566393][ T762] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 553.570039][ T762] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.8772: bit already cleared for inode 13 [ 555.008320][ T788] rxe_eth0 speed is unknown, defaulting to 1000 [ 555.049215][ T791] netlink: 'syz.5.8782': attribute type 1 has an invalid length. [ 555.102096][ T793] loop0: detected capacity change from 0 to 512 [ 555.111160][ T793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 555.111805][ T793] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 555.111844][ T793] System zones: 0-2, 18-18, 34-34 [ 555.112024][ T793] EXT4-fs (loop0): orphan cleanup on readonly fs [ 555.112634][ T793] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.8783: bg 0: block 248: padding at end of block bitmap is not set [ 555.112705][ T793] loop0: lost filesystem error report for type 5 error -117 [ 555.112926][ T793] EXT4-fs error (device loop0): ext4_acquire_dquot:7120: comm syz.0.8783: Failed to acquire dquot type 1 [ 555.112955][ T793] loop0: lost filesystem error report for type 5 error -117 [ 555.113598][ T793] EXT4-fs (loop0): 1 truncate cleaned up [ 555.122825][ T793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 555.406500][ T801] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 555.406642][ T801] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.406791][ T801] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.028052][ T758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 556.063331][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 556.063428][ T28] audit: type=1400 audit(1793033055.145:4616): avc: denied { unmount } for pid=23895 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 556.093150][T23895] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.123794][ T808] FAULT_INJECTION: forcing a failure. [ 556.123794][ T808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.123832][ T808] CPU: 1 UID: 0 PID: 808 Comm: syz.5.8788 Not tainted syzkaller #0 PREEMPT(lazy) [ 556.123866][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 556.123883][ T808] Call Trace: [ 556.123898][ T808] [ 556.123941][ T808] __dump_stack+0x1d/0x30 [ 556.123976][ T808] dump_stack_lvl+0x95/0xd0 [ 556.124016][ T808] dump_stack+0x15/0x1b [ 556.124045][ T808] should_fail_ex+0x262/0x280 [ 556.124091][ T808] should_fail+0xb/0x20 [ 556.124105][ T810] netlink: 'syz.4.8787': attribute type 5 has an invalid length. [ 556.124118][ T808] should_fail_usercopy+0x1a/0x20 [ 556.124147][ T808] _copy_to_user+0x20/0xa0 [ 556.124126][ T810] __nla_validate_parse: 2 callbacks suppressed [ 556.124215][ T810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8787'. [ 556.124173][ T808] simple_read_from_buffer+0xb5/0x130 [ 556.124272][ T808] proc_fail_nth_read+0x10e/0x150 [ 556.124303][ T808] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 556.124332][ T808] vfs_read+0x18e/0x7c0 [ 556.124366][ T808] ? __rcu_read_unlock+0x4e/0x70 [ 556.124412][ T808] ? __fget_files+0x184/0x1c0 [ 556.124435][ T808] ? mutex_lock+0x52/0x90 [ 556.124531][ T808] ksys_read+0xdc/0x1a0 [ 556.124563][ T808] __x64_sys_read+0x40/0x50 [ 556.124651][ T808] x64_sys_call+0x2135/0x2550 [ 556.124714][ T808] do_syscall_64+0x112/0x360 [ 556.124756][ T808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.124857][ T808] RIP: 0033:0x7f916b1dfd8e [ 556.124879][ T808] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 556.124905][ T808] RSP: 002b:00007f9169c76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 556.124929][ T808] RAX: ffffffffffffffda RBX: 00007f9169c776c0 RCX: 00007f916b1dfd8e [ 556.124944][ T808] RDX: 000000000000000f RSI: 00007f9169c770a0 RDI: 0000000000000004 [ 556.124958][ T808] RBP: 00007f9169c77090 R08: 0000000000000000 R09: 0000000000000000 [ 556.125044][ T808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.125079][ T808] R13: 00007f916b4a6038 R14: 00007f916b4a5fa0 R15: 00007fff081e6118 [ 556.125134][ T808] [ 556.138740][ T28] audit: type=1400 audit(1793033055.215:4617): avc: denied { mount } for pid=809 comm="syz.4.8787" name="/" dev="rpc_pipefs" ino=94929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 556.161783][ T28] audit: type=1400 audit(1793033055.235:4618): avc: denied { create } for pid=802 comm="syz.1.8785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 556.199910][ T805] netlink: 'syz.2.8786': attribute type 1 has an invalid length. [ 556.244404][ T805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 556.295739][ T28] audit: type=1400 audit(1793033055.365:4619): avc: denied { create } for pid=809 comm="syz.4.8787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 556.295846][ T28] audit: type=1400 audit(1793033055.375:4620): avc: denied { connect } for pid=809 comm="syz.4.8787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 556.295932][ T28] audit: type=1400 audit(1793033055.375:4621): avc: denied { mounton } for pid=809 comm="syz.4.8787" path="/409/file0" dev="tmpfs" ino=2137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 556.313337][ T28] audit: type=1400 audit(1793033055.395:4622): avc: denied { read write } for pid=804 comm="syz.2.8786" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 556.319771][ T805] bond1: (slave gretap1): making interface the new active one [ 556.328269][ T28] audit: type=1400 audit(1793033055.395:4623): avc: denied { ioctl open } for pid=804 comm="syz.2.8786" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 556.332796][ T816] program syz.2.8786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 556.352796][ T805] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 556.431663][ T817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8789'. [ 556.443166][ T28] audit: type=1400 audit(1793033055.525:4624): avc: denied { unmount } for pid=23895 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 556.587883][ T823] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8791'. [ 556.587921][ T823] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8791'. [ 556.587962][ T28] audit: type=1400 audit(1793033055.675:4625): avc: denied { create } for pid=822 comm="syz.4.8791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 556.622611][T22025] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.670837][ T829] FAULT_INJECTION: forcing a failure. [ 556.670837][ T829] name failslab, interval 1, probability 0, space 0, times 0 [ 556.670877][ T829] CPU: 1 UID: 0 PID: 829 Comm: syz.2.8792 Not tainted syzkaller #0 PREEMPT(lazy) [ 556.670959][ T829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 556.670973][ T829] Call Trace: [ 556.670980][ T829] [ 556.670988][ T829] __dump_stack+0x1d/0x30 [ 556.671050][ T829] dump_stack_lvl+0x95/0xd0 [ 556.671078][ T829] dump_stack+0x15/0x1b [ 556.671108][ T829] should_fail_ex+0x262/0x280 [ 556.671142][ T829] ? __kernfs_new_node+0x70/0x440 [ 556.671176][ T829] should_failslab+0x8c/0xb0 [ 556.671212][ T829] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 556.671276][ T829] ? __kernfs_new_node+0x70/0x440 [ 556.671351][ T829] __kernfs_new_node+0x70/0x440 [ 556.671374][ T829] ? __rcu_read_unlock+0x4e/0x70 [ 556.671495][ T829] ? up_write+0x19/0x60 [ 556.671527][ T829] ? kernfs_link_sibling+0x2f5/0x320 [ 556.671628][ T829] ? __rcu_read_unlock+0x4e/0x70 [ 556.671656][ T829] kernfs_new_node+0x107/0x140 [ 556.671679][ T829] __kernfs_create_file+0x4b/0x180 [ 556.671736][ T829] ? __pfx_dev_attr_show+0x10/0x10 [ 556.671767][ T829] ? __pfx_dev_attr_store+0x10/0x10 [ 556.671873][ T829] sysfs_add_file_mode_ns+0x132/0x1b0 [ 556.671977][ T829] sysfs_merge_group+0xed/0x1c0 [ 556.672015][ T829] dpm_sysfs_add+0xaf/0x1e0 [ 556.672037][ T829] device_add+0x3bc/0x790 [ 556.672107][ T829] netdev_register_kobject+0x127/0x240 [ 556.672151][ T829] register_netdevice+0xc68/0x13f0 [ 556.672187][ T829] ipip6_tunnel_create+0x152/0x240 [ 556.672253][ T829] ipip6_tunnel_locate+0x39a/0x5c0 [ 556.672292][ T829] ipip6_tunnel_ctl+0x86a/0xc70 [ 556.672342][ T829] ip_tunnel_siocdevprivate+0x77/0xe0 [ 556.672460][ T829] ipip6_tunnel_siocdevprivate+0x1e5/0xd90 [ 556.672581][ T829] ? full_name_hash+0x92/0xe0 [ 556.672631][ T829] ? strcmp+0x22/0x50 [ 556.672669][ T829] dev_ifsioc+0x8f5/0xfc0 [ 556.672699][ T829] dev_ioctl+0x78c/0x960 [ 556.672726][ T829] sock_ioctl+0x58f/0x610 [ 556.672836][ T829] ? __pfx_sock_ioctl+0x10/0x10 [ 556.672890][ T829] __se_sys_ioctl+0xce/0x140 [ 556.672958][ T829] __x64_sys_ioctl+0x43/0x50 [ 556.672992][ T829] x64_sys_call+0x239d/0x2550 [ 556.673025][ T829] do_syscall_64+0x112/0x360 [ 556.673074][ T829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.673123][ T829] RIP: 0033:0x7f6e746af559 [ 556.673146][ T829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.673227][ T829] RSP: 002b:00007f6e730e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.673268][ T829] RAX: ffffffffffffffda RBX: 00007f6e74936090 RCX: 00007f6e746af559 [ 556.673284][ T829] RDX: 00002000000009c0 RSI: 00000000000089f1 RDI: 000000000000000b [ 556.673298][ T829] RBP: 00007f6e74746b20 R08: 0000000000000000 R09: 0000000000000000 [ 556.673313][ T829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.673328][ T829] R13: 00007f6e74936128 R14: 00007f6e74936090 R15: 00007fffac8abfb8 [ 556.673391][ T829] [ 556.958618][ T834] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8791'. [ 557.774219][ T856] FAULT_INJECTION: forcing a failure. [ 557.774219][ T856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.774257][ T856] CPU: 1 UID: 0 PID: 856 Comm: syz.2.8802 Not tainted syzkaller #0 PREEMPT(lazy) [ 557.774323][ T856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 557.774340][ T856] Call Trace: [ 557.774349][ T856] [ 557.774359][ T856] __dump_stack+0x1d/0x30 [ 557.774394][ T856] dump_stack_lvl+0x95/0xd0 [ 557.774434][ T856] dump_stack+0x15/0x1b [ 557.774462][ T856] should_fail_ex+0x262/0x280 [ 557.774550][ T856] should_fail+0xb/0x20 [ 557.774574][ T856] should_fail_usercopy+0x1a/0x20 [ 557.774607][ T856] _copy_from_user+0x1c/0xb0 [ 557.774639][ T856] do_mcast_group_source+0x123/0x420 [ 557.774731][ T856] ? _raw_spin_unlock+0x9/0x30 [ 557.774769][ T856] ? __d_add+0x17b/0x1a0 [ 557.774853][ T856] ? lockref_put_return+0xf7/0x130 [ 557.774882][ T856] ? __rcu_read_unlock+0x4e/0x70 [ 557.774915][ T856] ? __rcu_read_unlock+0x4e/0x70 [ 557.774949][ T856] ? _parse_integer_limit+0x174/0x190 [ 557.775052][ T856] ? lock_sock_nested+0x7f/0x110 [ 557.775086][ T856] do_ip_setsockopt+0x17a7/0x22f0 [ 557.775118][ T856] ip_setsockopt+0x58/0x110 [ 557.775146][ T856] ipv6_setsockopt+0xfb/0x130 [ 557.775255][ T856] sctp_setsockopt+0x126/0xea0 [ 557.775300][ T856] sock_common_setsockopt+0x69/0x80 [ 557.775406][ T856] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 557.775437][ T856] __sys_setsockopt+0x184/0x200 [ 557.775477][ T856] __x64_sys_setsockopt+0x64/0x80 [ 557.775587][ T856] x64_sys_call+0x248f/0x2550 [ 557.775622][ T856] do_syscall_64+0x112/0x360 [ 557.775660][ T856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.775715][ T856] RIP: 0033:0x7f6e746af559 [ 557.775812][ T856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.775838][ T856] RSP: 002b:00007f6e73107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 557.775863][ T856] RAX: ffffffffffffffda RBX: 00007f6e74935fa0 RCX: 00007f6e746af559 [ 557.775884][ T856] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000005 [ 557.775944][ T856] RBP: 00007f6e73107090 R08: 0000000000000108 R09: 0000000000000000 [ 557.775962][ T856] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000001 [ 557.775980][ T856] R13: 00007f6e74936038 R14: 00007f6e74935fa0 R15: 00007fffac8abfb8 [ 557.776009][ T856] [ 557.868342][ T859] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8799'. [ 558.074462][ T869] syzkaller0: entered promiscuous mode [ 558.074487][ T869] syzkaller0: entered allmulticast mode [ 558.125519][ T870] loop4: detected capacity change from 0 to 512 [ 558.149569][ T872] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8808'. [ 558.149596][ T872] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8808'. [ 558.149632][ T872] netlink: 'syz.2.8808': attribute type 3 has an invalid length. [ 558.149650][ T872] netlink: 11 bytes leftover after parsing attributes in process `syz.2.8808'. [ 558.191820][ T870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.192113][ T870] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.251362][ T882] FAULT_INJECTION: forcing a failure. [ 558.251362][ T882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.251430][ T882] CPU: 1 UID: 0 PID: 882 Comm: syz.2.8810 Not tainted syzkaller #0 PREEMPT(lazy) [ 558.251461][ T882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 558.251476][ T882] Call Trace: [ 558.251483][ T882] [ 558.251491][ T882] __dump_stack+0x1d/0x30 [ 558.251521][ T882] dump_stack_lvl+0x95/0xd0 [ 558.251617][ T882] dump_stack+0x15/0x1b [ 558.251640][ T882] should_fail_ex+0x262/0x280 [ 558.251715][ T882] should_fail+0xb/0x20 [ 558.251737][ T882] should_fail_usercopy+0x1a/0x20 [ 558.251841][ T882] _copy_from_user+0x1c/0xb0 [ 558.251868][ T882] __sys_bind+0x106/0x290 [ 558.251936][ T882] __x64_sys_bind+0x3f/0x50 [ 558.251962][ T882] x64_sys_call+0x1ac7/0x2550 [ 558.251991][ T882] do_syscall_64+0x112/0x360 [ 558.252023][ T882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.252095][ T882] RIP: 0033:0x7f6e746af559 [ 558.252115][ T882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.252139][ T882] RSP: 002b:00007f6e73107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 558.252162][ T882] RAX: ffffffffffffffda RBX: 00007f6e74935fa0 RCX: 00007f6e746af559 [ 558.252223][ T882] RDX: 0000000000000010 RSI: 0000200000000600 RDI: 0000000000000004 [ 558.252238][ T882] RBP: 00007f6e73107090 R08: 0000000000000000 R09: 0000000000000000 [ 558.252253][ T882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.252267][ T882] R13: 00007f6e74936038 R14: 00007f6e74935fa0 R15: 00007fffac8abfb8 [ 558.252291][ T882] [ 558.336119][T23895] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 558.336363][T23895] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 558.480841][ T892] loop5: detected capacity change from 0 to 512 [ 558.502773][ T892] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.8815: corrupted in-inode xattr: invalid ea_ino [ 558.502824][ T892] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 558.502979][ T892] EXT4-fs (loop5): Remounting filesystem read-only [ 558.503474][ T892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.503578][ T894] loop2: detected capacity change from 0 to 256 [ 558.564709][ T884] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.650908][ T902] loop2: detected capacity change from 0 to 256 [ 558.673961][ T902] FAULT_INJECTION: forcing a failure. [ 558.673961][ T902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.673999][ T902] CPU: 0 UID: 0 PID: 902 Comm: syz.2.8820 Not tainted syzkaller #0 PREEMPT(lazy) [ 558.674078][ T902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 558.674158][ T902] Call Trace: [ 558.674170][ T902] [ 558.674181][ T902] __dump_stack+0x1d/0x30 [ 558.674216][ T902] dump_stack_lvl+0x95/0xd0 [ 558.674249][ T902] dump_stack+0x15/0x1b [ 558.674278][ T902] should_fail_ex+0x262/0x280 [ 558.674330][ T902] should_fail+0xb/0x20 [ 558.674357][ T902] should_fail_usercopy+0x1a/0x20 [ 558.674392][ T902] _copy_to_user+0x20/0xa0 [ 558.674425][ T902] simple_read_from_buffer+0xb5/0x130 [ 558.674547][ T902] proc_fail_nth_read+0x10e/0x150 [ 558.674579][ T902] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 558.674621][ T902] vfs_read+0x18e/0x7c0 [ 558.674698][ T902] ? __rcu_read_unlock+0x4e/0x70 [ 558.674782][ T902] ? __fget_files+0x184/0x1c0 [ 558.674819][ T902] ? mutex_lock+0x52/0x90 [ 558.674858][ T902] ksys_read+0xdc/0x1a0 [ 558.674932][ T902] __x64_sys_read+0x40/0x50 [ 558.675023][ T902] x64_sys_call+0x2135/0x2550 [ 558.675099][ T902] do_syscall_64+0x112/0x360 [ 558.675136][ T902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.675167][ T902] RIP: 0033:0x7f6e7466fd8e [ 558.675190][ T902] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 558.675216][ T902] RSP: 002b:00007f6e73106fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 558.675244][ T902] RAX: ffffffffffffffda RBX: 00007f6e731076c0 RCX: 00007f6e7466fd8e [ 558.675308][ T902] RDX: 000000000000000f RSI: 00007f6e731070a0 RDI: 0000000000000005 [ 558.675326][ T902] RBP: 00007f6e73107090 R08: 0000000000000000 R09: 0000000000000000 [ 558.675344][ T902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.675359][ T902] R13: 00007f6e74936038 R14: 00007f6e74935fa0 R15: 00007fffac8abfb8 [ 558.675388][ T902] [ 558.894366][ T918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8822'. [ 558.977653][ T31] bridge_slave_1: left allmulticast mode [ 558.977680][ T31] bridge_slave_1: left promiscuous mode [ 558.977849][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.993625][T24349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.013706][ T31] bridge_slave_0: left allmulticast mode [ 559.013727][ T31] bridge_slave_0: left promiscuous mode [ 559.014002][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.159186][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.160191][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.160580][ T31] bond0 (unregistering): Released all slaves [ 559.225160][ T900] rxe_eth0 speed is unknown, defaulting to 1000 [ 559.229161][ T929] loop5: detected capacity change from 0 to 8192 [ 559.311770][ T31] tipc: Left network mode [ 559.428843][ T31] hsr_slave_0: left promiscuous mode [ 559.433093][ T31] hsr_slave_1: left promiscuous mode [ 559.433572][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.454116][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.524414][ T31] team0 (unregistering): Port device team_slave_1 removed [ 559.540104][ T31] team0 (unregistering): Port device team_slave_0 removed [ 559.619998][ T951] FAULT_INJECTION: forcing a failure. [ 559.619998][ T951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.620034][ T951] CPU: 1 UID: 0 PID: 951 Comm: syz.1.8829 Not tainted syzkaller #0 PREEMPT(lazy) [ 559.620159][ T951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 559.620174][ T951] Call Trace: [ 559.620182][ T951] [ 559.620191][ T951] __dump_stack+0x1d/0x30 [ 559.620267][ T951] dump_stack_lvl+0x95/0xd0 [ 559.620297][ T951] dump_stack+0x15/0x1b [ 559.620392][ T951] should_fail_ex+0x262/0x280 [ 559.620418][ T951] should_fail+0xb/0x20 [ 559.620439][ T951] should_fail_usercopy+0x1a/0x20 [ 559.620472][ T951] _copy_from_user+0x1c/0xb0 [ 559.620516][ T951] ___sys_sendmsg+0xc1/0x1e0 [ 559.620576][ T951] __sys_sendmmsg+0x1a0/0x310 [ 559.620623][ T951] __x64_sys_sendmmsg+0x57/0x70 [ 559.620692][ T951] x64_sys_call+0x1fb4/0x2550 [ 559.620729][ T951] do_syscall_64+0x112/0x360 [ 559.620766][ T951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.620827][ T951] RIP: 0033:0x7fbe263ef559 [ 559.620845][ T951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.620870][ T951] RSP: 002b:00007fbe24e3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 559.620896][ T951] RAX: ffffffffffffffda RBX: 00007fbe26675fa0 RCX: 00007fbe263ef559 [ 559.620990][ T951] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000004 [ 559.621005][ T951] RBP: 00007fbe24e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 559.621018][ T951] R10: 000000004004c014 R11: 0000000000000246 R12: 0000000000000001 [ 559.621032][ T951] R13: 00007fbe26676038 R14: 00007fbe26675fa0 R15: 00007ffd1af9bc38 [ 559.621061][ T951] [ 559.746673][ T900] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.746770][ T900] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.750383][ T900] bridge_slave_0: entered allmulticast mode [ 559.751552][ T900] bridge_slave_0: entered promiscuous mode [ 559.757336][ T900] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.757441][ T900] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.757862][ T900] bridge_slave_1: entered allmulticast mode [ 559.759153][ T900] bridge_slave_1: entered promiscuous mode [ 559.833406][ T900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.846544][ T900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.885358][ T940] loop2: detected capacity change from 0 to 164 [ 559.914834][ T900] team0: Port device team_slave_0 added [ 559.920129][ T900] team0: Port device team_slave_1 added [ 559.935471][ T940] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 559.959674][ T900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.959690][ T900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.959759][ T900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.960409][ T900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.960424][ T900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.960474][ T900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.309783][ T900] hsr_slave_0: entered promiscuous mode [ 560.315011][ T900] hsr_slave_1: entered promiscuous mode [ 560.334489][ T900] debugfs: 'hsr0' already exists in 'hsr' [ 560.342936][ T900] Cannot create hsr debugfs directory [ 561.074941][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 561.075063][ T28] audit: type=1400 audit(1793033060.155:4718): avc: denied { create } for pid=971 comm="syz.2.8835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 561.238435][ T877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.244675][ T900] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 561.244786][ T28] audit: type=1400 audit(1793033060.325:4719): avc: denied { read } for pid=966 comm="syz.5.8834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 561.283396][ T900] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 561.287457][ T900] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 561.304514][ T900] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 561.305074][ T900] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 561.315237][ T900] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 561.316458][ T900] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 561.363905][ T900] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 561.413264][ T28] audit: type=1400 audit(1793033060.495:4720): avc: denied { prog_load } for pid=983 comm="syz.5.8837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 561.434247][ T28] audit: type=1400 audit(1793033060.505:4721): avc: denied { search } for pid=974 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.482116][ T28] audit: type=1400 audit(1793033060.565:4722): avc: denied { write } for pid=976 comm="syz.0.8836" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 561.483707][ T977] loop0: detected capacity change from 0 to 8192 [ 561.484517][ T28] audit: type=1400 audit(1793033060.565:4723): avc: denied { mounton } for pid=976 comm="syz.0.8836" path="/597/file1" dev="tmpfs" ino=3092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 561.498088][ T984] loop5: detected capacity change from 0 to 512 [ 561.520018][ T977] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 561.533289][ T984] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 11534354)! [ 561.533370][ T984] EXT4-fs (loop5): group descriptors corrupted! [ 561.539931][ T28] audit: type=1400 audit(1793033060.605:4724): avc: denied { mount } for pid=976 comm="syz.0.8836" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 561.539996][ T28] audit: type=1400 audit(1793033060.625:4725): avc: denied { read } for pid=986 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.540027][ T28] audit: type=1400 audit(1793033060.625:4726): avc: denied { read open } for pid=986 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.540060][ T28] audit: type=1400 audit(1793033060.625:4727): avc: denied { getattr } for pid=986 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.577214][ T977] FAULT_INJECTION: forcing a failure. [ 561.577214][ T977] name failslab, interval 1, probability 0, space 0, times 0 [ 561.577374][ T977] CPU: 1 UID: 0 PID: 977 Comm: syz.0.8836 Not tainted syzkaller #0 PREEMPT(lazy) [ 561.577446][ T977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 561.577461][ T977] Call Trace: [ 561.577467][ T977] [ 561.577475][ T977] __dump_stack+0x1d/0x30 [ 561.577588][ T977] dump_stack_lvl+0x95/0xd0 [ 561.577691][ T977] dump_stack+0x15/0x1b [ 561.577754][ T977] should_fail_ex+0x262/0x280 [ 561.577842][ T977] ? do_getname+0x2e/0x1c0 [ 561.577904][ T977] should_failslab+0x8c/0xb0 [ 561.577996][ T977] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 561.578099][ T977] ? do_getname+0x2e/0x1c0 [ 561.578223][ T977] do_getname+0x2e/0x1c0 [ 561.578279][ T977] __se_sys_renameat2+0x29/0x1c0 [ 561.578419][ T977] __x64_sys_renameat2+0x67/0x80 [ 561.578489][ T977] x64_sys_call+0x1f7d/0x2550 [ 561.578575][ T977] do_syscall_64+0x112/0x360 [ 561.578725][ T977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.578797][ T977] RIP: 0033:0x7fc97ca7f559 [ 561.578856][ T977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.578919][ T977] RSP: 002b:00007fc97b4d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 561.579002][ T977] RAX: ffffffffffffffda RBX: 00007fc97cd05fa0 RCX: 00007fc97ca7f559 [ 561.579063][ T977] RDX: ffffffffffffff9c RSI: 0000200000000fc0 RDI: ffffffffffffff9c [ 561.579113][ T977] RBP: 00007fc97b4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 561.579143][ T977] R10: 0000200000002100 R11: 0000000000000246 R12: 0000000000000001 [ 561.579157][ T977] R13: 00007fc97cd06038 R14: 00007fc97cd05fa0 R15: 00007fff53410138 [ 561.579186][ T977] [ 561.659802][ T900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.757727][ T900] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.834533][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.834725][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.894489][ T3882] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.894526][ T3882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.184880][ T1014] __nla_validate_parse: 4 callbacks suppressed [ 562.184901][ T1014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8845'. [ 562.223805][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5 [ 562.248357][ T1021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8845'. [ 562.432970][ T900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.545042][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 562.675979][ T900] veth0_vlan: entered promiscuous mode [ 562.678607][ T900] veth1_vlan: entered promiscuous mode [ 562.679292][ T1049] loop2: detected capacity change from 0 to 512 [ 562.682592][ T1049] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.8847: bad orphan inode 15 [ 562.682659][ T1049] loop2: lost filesystem error report for type 5 error -117 [ 562.682816][ T1049] ext4_test_bit(bit=14, block=5) = 0 [ 562.683275][ T1049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.690754][ T1049] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 562.691057][ T1049] EXT4-fs error (device loop2): ext4_free_inode:356: comm syz.2.8847: bit already cleared for inode 13 [ 562.723394][ T900] veth0_macvtap: entered promiscuous mode [ 562.729414][ T900] veth1_macvtap: entered promiscuous mode [ 562.751838][ T900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.760316][ T900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.795470][T20356] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.795705][T20356] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.796009][T20356] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.796117][T20356] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.840121][ T1054] loop5: detected capacity change from 0 to 512 [ 562.908501][ T1054] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.8848: bad orphan inode 15 [ 562.908592][ T1054] loop5: lost filesystem error report for type 5 error -117 [ 562.920916][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 562.920947][ C1] EXT4-fs (loop5): initial error at time 1793033061: ext4_orphan_get:1430 [ 562.920969][ C1] EXT4-fs (loop5): last error at time 1793033061: ext4_orphan_get:1430 [ 562.941256][ T1054] ext4_test_bit(bit=14, block=5) = 0 [ 562.942263][ T1054] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.022684][ T1054] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 563.041359][ T1054] EXT4-fs error (device loop5): ext4_free_inode:356: comm syz.5.8848: bit already cleared for inode 13 [ 563.470356][ T1091] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8855'. [ 563.616645][ T1101] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8859'. [ 563.616667][ T1101] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8859'. [ 563.862950][ T1103] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8859'. [ 565.326077][ T1030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 565.369363][T23485] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.383246][T24349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.507931][ T1124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8867'. [ 565.703473][ T1155] FAULT_INJECTION: forcing a failure. [ 565.703473][ T1155] name failslab, interval 1, probability 0, space 0, times 0 [ 565.703512][ T1155] CPU: 1 UID: 0 PID: 1155 Comm: syz.6.8874 Not tainted syzkaller #0 PREEMPT(lazy) [ 565.703600][ T1155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 565.703618][ T1155] Call Trace: [ 565.703627][ T1155] [ 565.703637][ T1155] __dump_stack+0x1d/0x30 [ 565.703730][ T1155] dump_stack_lvl+0x95/0xd0 [ 565.703761][ T1155] dump_stack+0x15/0x1b [ 565.703798][ T1155] should_fail_ex+0x262/0x280 [ 565.703852][ T1155] should_failslab+0x8c/0xb0 [ 565.703935][ T1155] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 565.703975][ T1155] ? __d_alloc+0x34/0x320 [ 565.704006][ T1155] ? __d_alloc+0x34/0x320 [ 565.704040][ T1155] __d_alloc+0x34/0x320 [ 565.704151][ T1155] __d_alloc_parallel+0x4f/0xd80 [ 565.704192][ T1155] ? avc_policy_seqno+0x15/0x30 [ 565.704300][ T1155] ? selinux_inode_permission+0x618/0x740 [ 565.704401][ T1155] ? __rcu_read_unlock+0x4e/0x70 [ 565.704432][ T1155] ? __d_lookup+0x30c/0x340 [ 565.704469][ T1155] d_alloc_parallel+0x1f/0x30 [ 565.704538][ T1155] __lookup_slow+0x51/0x200 [ 565.704568][ T1155] lookup_slow+0x42/0x60 [ 565.704645][ T1155] link_path_walk+0x925/0xde0 [ 565.704688][ T1155] path_openat+0x142/0x11c0 [ 565.704761][ T1155] do_file_open+0x16c/0x290 [ 565.704803][ T1155] ? __pfx_kfree_link+0x10/0x10 [ 565.704834][ T1155] do_sys_openat2+0xa1/0x140 [ 565.704867][ T1155] __x64_sys_openat+0xf2/0x120 [ 565.704921][ T1155] x64_sys_call+0x1f72/0x2550 [ 565.704994][ T1155] do_syscall_64+0x112/0x360 [ 565.705030][ T1155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.705080][ T1155] RIP: 0033:0x7f89fc83fd8e [ 565.705100][ T1155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 565.705229][ T1155] RSP: 002b:00007f89fb2d6f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 565.705253][ T1155] RAX: ffffffffffffffda RBX: 00007f89fb2d76c0 RCX: 00007f89fc83fd8e [ 565.705269][ T1155] RDX: 0000000000000002 RSI: 00007f89fc91641a RDI: ffffffffffffff9c [ 565.705284][ T1155] RBP: 00007f89fc916b20 R08: 0000000000000000 R09: 0000000000000000 [ 565.705298][ T1155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.705312][ T1155] R13: 00007f89fcb06038 R14: 00007f89fcb05fa0 R15: 00007ffc23be2bb8 [ 565.705344][ T1155] [ 565.751670][ T3882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.874178][ T1138] ÿ: renamed from bond_slave_0 [ 565.917669][ T3882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.042748][ T3882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.055295][ T1161] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8875'. [ 566.066320][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6 [ 566.093853][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 566.093954][ T28] audit: type=1400 audit(1793033065.175:4863): avc: denied { bind } for pid=1172 comm="syz.1.8879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 566.093987][ T28] audit: type=1400 audit(1793033065.175:4864): avc: denied { name_bind } for pid=1172 comm="syz.1.8879" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 566.094028][ T28] audit: type=1400 audit(1793033065.175:4865): avc: denied { node_bind } for pid=1172 comm="syz.1.8879" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 566.095132][ T28] audit: type=1400 audit(1793033065.175:4866): avc: denied { write } for pid=1172 comm="syz.1.8879" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 566.095244][ T28] audit: type=1400 audit(1793033065.175:4867): avc: denied { connect } for pid=1172 comm="syz.1.8879" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 566.095269][ T28] audit: type=1400 audit(1793033065.175:4868): avc: denied { name_connect } for pid=1172 comm="syz.1.8879" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 566.159170][ T3882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.164089][ T28] audit: type=1400 audit(1793033065.235:4869): avc: denied { write } for pid=1165 comm="syz.5.8878" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 566.168255][ T1167] loop5: detected capacity change from 0 to 128 [ 566.188935][ T1167] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 566.206341][ T28] audit: type=1400 audit(1793033065.275:4870): avc: denied { getopt } for pid=1172 comm="syz.1.8879" laddr=::ffff:172.20.20.170 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 566.233692][ T1167] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 566.242760][ T1167] ext2 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.242948][ T28] audit: type=1400 audit(1793033065.325:4871): avc: denied { mount } for pid=1165 comm="syz.5.8878" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 566.277338][ T28] audit: type=1400 audit(1793033065.365:4872): avc: denied { setopt } for pid=1172 comm="syz.1.8879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 566.396465][ T3882] bridge_slave_1: left allmulticast mode [ 566.396526][ T3882] bridge_slave_1: left promiscuous mode [ 566.396620][ T3882] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.398045][ T3882] bridge_slave_0: left allmulticast mode [ 566.398067][ T3882] bridge_slave_0: left promiscuous mode [ 566.398295][ T3882] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.405002][ T1194] FAULT_INJECTION: forcing a failure. [ 566.405002][ T1194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.405098][ T1194] CPU: 0 UID: 0 PID: 1194 Comm: syz.6.8881 Not tainted syzkaller #0 PREEMPT(lazy) [ 566.405181][ T1194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 566.405218][ T1194] Call Trace: [ 566.405240][ T1194] [ 566.405327][ T1194] __dump_stack+0x1d/0x30 [ 566.405409][ T1194] dump_stack_lvl+0x95/0xd0 [ 566.405551][ T1194] dump_stack+0x15/0x1b [ 566.405616][ T1194] should_fail_ex+0x262/0x280 [ 566.405699][ T1194] should_fail+0xb/0x20 [ 566.405772][ T1194] should_fail_usercopy+0x1a/0x20 [ 566.405916][ T1194] _copy_from_user+0x1c/0xb0 [ 566.405992][ T1194] sg_write+0x1ec/0x7a0 [ 566.406064][ T1194] ? lockref_put_return+0xf7/0x130 [ 566.406216][ T1194] vfs_writev+0x41b/0x8b0 [ 566.406317][ T1194] ? __pfx_sg_write+0x10/0x10 [ 566.406408][ T1194] do_writev+0xe9/0x210 [ 566.406473][ T1194] __x64_sys_writev+0x45/0x50 [ 566.406575][ T1194] x64_sys_call+0x23c9/0x2550 [ 566.406660][ T1194] do_syscall_64+0x112/0x360 [ 566.406783][ T1194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.406856][ T1194] RIP: 0033:0x7f89fc87f559 [ 566.406908][ T1194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.406963][ T1194] RSP: 002b:00007f89fb2d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 566.407035][ T1194] RAX: ffffffffffffffda RBX: 00007f89fcb05fa0 RCX: 00007f89fc87f559 [ 566.407126][ T1194] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 566.407169][ T1194] RBP: 00007f89fb2d7090 R08: 0000000000000000 R09: 0000000000000000 [ 566.407232][ T1194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.407274][ T1194] R13: 00007f89fcb06038 R14: 00007f89fcb05fa0 R15: 00007ffc23be2bb8 [ 566.407348][ T1194] [ 566.681843][ T3882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.683248][ T3882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.684142][ T3882] bond0 (unregistering): Released all slaves [ 566.753436][ T1139] rxe_eth0 speed is unknown, defaulting to 1000 [ 566.754079][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8 [ 566.768880][ T3882] tipc: Left network mode [ 566.823731][T24349] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 566.833422][ T1215] FAULT_INJECTION: forcing a failure. [ 566.833422][ T1215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.833516][ T1215] CPU: 0 UID: 0 PID: 1215 Comm: syz.6.8884 Not tainted syzkaller #0 PREEMPT(lazy) [ 566.833649][ T1215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 566.833691][ T1215] Call Trace: [ 566.833713][ T1215] [ 566.833742][ T1215] __dump_stack+0x1d/0x30 [ 566.833826][ T1215] dump_stack_lvl+0x95/0xd0 [ 566.833900][ T1215] dump_stack+0x15/0x1b [ 566.834030][ T1215] should_fail_ex+0x262/0x280 [ 566.834109][ T1215] should_fail+0xb/0x20 [ 566.834174][ T1215] should_fail_usercopy+0x1a/0x20 [ 566.834258][ T1215] _copy_from_user+0x1c/0xb0 [ 566.834395][ T1215] ucma_write+0xd8/0x260 [ 566.834496][ T1215] ? __pfx_ucma_write+0x10/0x10 [ 566.834631][ T1215] vfs_write+0x24f/0x990 [ 566.834725][ T1215] ? __fget_files+0x184/0x1c0 [ 566.834831][ T1215] ksys_write+0xdc/0x1a0 [ 566.834923][ T1215] __x64_sys_write+0x40/0x50 [ 566.835017][ T1215] x64_sys_call+0x154e/0x2550 [ 566.835101][ T1215] do_syscall_64+0x112/0x360 [ 566.835274][ T1215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.835340][ T1215] RIP: 0033:0x7f89fc87f559 [ 566.835394][ T1215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.835485][ T1215] RSP: 002b:00007f89fb2d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 566.835555][ T1215] RAX: ffffffffffffffda RBX: 00007f89fcb05fa0 RCX: 00007f89fc87f559 [ 566.835616][ T1215] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000004 [ 566.835685][ T1215] RBP: 00007f89fb2d7090 R08: 0000000000000000 R09: 0000000000000000 [ 566.835795][ T1215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.835836][ T1215] R13: 00007f89fcb06038 R14: 00007f89fcb05fa0 R15: 00007ffc23be2bb8 [ 566.835908][ T1215] [ 567.045202][ T3882] hsr_slave_0: left promiscuous mode [ 567.047085][ T3882] hsr_slave_1: left promiscuous mode [ 567.047585][ T3882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.047605][ T3882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.047970][ T3882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.047987][ T3882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.053763][ T3882] veth1_vlan: left promiscuous mode [ 567.053879][ T3882] veth0_vlan: left promiscuous mode [ 567.285234][ T3882] team0 (unregistering): Port device team_slave_1 removed [ 567.298801][ T3882] team0 (unregistering): Port device team_slave_0 removed [ 567.370351][ T1221] ÿ: renamed from bond_slave_0 (while UP) [ 567.427910][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.427953][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.428101][ T1139] bridge_slave_0: entered allmulticast mode [ 567.428703][ T1139] bridge_slave_0: entered promiscuous mode [ 567.456432][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.456473][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.456682][ T1139] bridge_slave_1: entered allmulticast mode [ 567.457300][ T1139] bridge_slave_1: entered promiscuous mode [ 567.495487][ T1139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.498003][ T1139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.519540][ T1139] team0: Port device team_slave_0 added [ 567.528477][ T1139] team0: Port device team_slave_1 added [ 567.544519][ T1139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.544536][ T1139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.544585][ T1139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.548938][ T1240] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8890'. [ 567.552445][ T1139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.552463][ T1139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.552501][ T1139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.650578][ T1139] hsr_slave_0: entered promiscuous mode [ 567.651043][ T1139] hsr_slave_1: entered promiscuous mode [ 567.651400][ T1139] debugfs: 'hsr0' already exists in 'hsr' [ 567.651418][ T1139] Cannot create hsr debugfs directory [ 567.688023][ T1243] loop6: detected capacity change from 0 to 256 [ 567.751611][ T1242] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8891'. [ 567.872928][ T1256] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8895'. [ 567.949536][ T1252] loop5: detected capacity change from 0 to 164 [ 568.484176][ T1276] loop5: detected capacity change from 0 to 512 [ 568.492972][ T1276] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.8900: corrupted in-inode xattr: invalid ea_ino [ 568.493033][ T1276] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 568.493195][ T1276] EXT4-fs (loop5): Remounting filesystem read-only [ 568.493654][ T1276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.579067][T24349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.602386][ T1287] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8901'. [ 569.302903][ T1185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.304845][ T1139] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 569.326713][ T1139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.327218][ T1139] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 569.330793][ T1139] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 569.333204][ T1139] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 569.369145][ T1139] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.369589][ T1139] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 569.394502][ T1139] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 569.444051][ T1139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.456559][ T1139] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.458626][T20356] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.458669][T20356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.483339][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.483384][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.520108][ T1306] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8903'. [ 569.719926][ T1319] loop6: detected capacity change from 0 to 512 [ 569.833333][ T1319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.833447][ T1319] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 569.884740][ T1139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.136925][ T1139] veth0_vlan: entered promiscuous mode [ 570.143391][ T1139] veth1_vlan: entered promiscuous mode [ 570.165543][ T900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.210282][ T1139] veth0_macvtap: entered promiscuous mode [ 570.225925][ T1139] veth1_macvtap: entered promiscuous mode [ 570.281975][ T1139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.582580][ T1139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.643219][ T143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.675542][T20356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.675646][T20356] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.675711][T20356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.678006][ T1380] IPv6: NLM_F_CREATE should be specified when creating new route [ 570.727030][ T1385] netlink: 'syz.1.8913': attribute type 2 has an invalid length. [ 570.727056][ T1385] netlink: 'syz.1.8913': attribute type 1 has an invalid length. [ 570.743173][ T1385] FAULT_INJECTION: forcing a failure. [ 570.743173][ T1385] name failslab, interval 1, probability 0, space 0, times 0 [ 570.743269][ T1385] CPU: 1 UID: 0 PID: 1385 Comm: syz.1.8913 Not tainted syzkaller #0 PREEMPT(lazy) [ 570.743369][ T1385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 570.743419][ T1385] Call Trace: [ 570.743441][ T1385] [ 570.743472][ T1385] __dump_stack+0x1d/0x30 [ 570.743558][ T1385] dump_stack_lvl+0x95/0xd0 [ 570.743638][ T1385] dump_stack+0x15/0x1b [ 570.743697][ T1385] should_fail_ex+0x262/0x280 [ 570.743725][ T1385] ? security_inode_alloc+0x37/0x100 [ 570.743750][ T1385] should_failslab+0x8c/0xb0 [ 570.743927][ T1385] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 570.744070][ T1385] ? security_inode_alloc+0x37/0x100 [ 570.744147][ T1385] security_inode_alloc+0x37/0x100 [ 570.744315][ T1385] inode_init_always_gfp+0x495/0x4e0 [ 570.744398][ T1385] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 570.744492][ T1385] alloc_inode+0x58/0x170 [ 570.744555][ T1385] new_inode+0x1d/0xe0 [ 570.744799][ T1385] shmem_get_inode+0x250/0x7b0 [ 570.744937][ T1385] shmem_mknod+0x44/0x170 [ 570.745080][ T1385] shmem_mkdir+0x33/0x70 [ 570.745246][ T1385] vfs_mkdir+0x29d/0x3e0 [ 570.745312][ T1385] filename_mkdirat+0x138/0x300 [ 570.745357][ T1385] __se_sys_mkdirat+0x32/0xf0 [ 570.745484][ T1385] __x64_sys_mkdirat+0x43/0x50 [ 570.745586][ T1385] x64_sys_call+0x368/0x2550 [ 570.745697][ T1385] do_syscall_64+0x112/0x360 [ 570.745855][ T1385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.745948][ T1385] RIP: 0033:0x7fbe263ef559 [ 570.746000][ T1385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.746063][ T1385] RSP: 002b:00007fbe24e3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 570.746136][ T1385] RAX: ffffffffffffffda RBX: 00007fbe26675fa0 RCX: 00007fbe263ef559 [ 570.746187][ T1385] RDX: 00000000000001ff RSI: 0000200000000300 RDI: ffffffffffffff9c [ 570.746262][ T1385] RBP: 00007fbe26486b20 R08: 0000000000000000 R09: 0000000000000000 [ 570.746305][ T1385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.746341][ T1385] R13: 00007fbe26676038 R14: 00007fbe26675fa0 R15: 00007ffd1af9bc38 [ 570.746400][ T1385] [ 571.108165][ T1387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8914'. [ 571.135796][ T1400] FAULT_INJECTION: forcing a failure. [ 571.135796][ T1400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.135886][ T1400] CPU: 1 UID: 0 PID: 1400 Comm: syz.6.8917 Not tainted syzkaller #0 PREEMPT(lazy) [ 571.135994][ T1400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 571.136014][ T1400] Call Trace: [ 571.136024][ T1400] [ 571.136036][ T1400] __dump_stack+0x1d/0x30 [ 571.136074][ T1400] dump_stack_lvl+0x95/0xd0 [ 571.136128][ T1400] dump_stack+0x15/0x1b [ 571.136258][ T1400] should_fail_ex+0x262/0x280 [ 571.136294][ T1400] should_fail+0xb/0x20 [ 571.136325][ T1400] should_fail_usercopy+0x1a/0x20 [ 571.136405][ T1400] _copy_from_user+0x1c/0xb0 [ 571.136438][ T1400] memdup_user+0x5e/0xd0 [ 571.136467][ T1400] strndup_user+0x68/0xb0 [ 571.136563][ T1400] keyctl_restrict_keyring+0x167/0x1c0 [ 571.136601][ T1400] __se_sys_keyctl+0x228/0xb70 [ 571.136654][ T1400] ? __se_sys_futex+0x2f6/0x370 [ 571.136687][ T1400] ? xfd_validate_state+0x45/0xf0 [ 571.136766][ T1400] ? restore_fpregs_from_fpstate+0x61/0x110 [ 571.136806][ T1400] __x64_sys_keyctl+0x67/0x80 [ 571.136875][ T1400] x64_sys_call+0x1fe0/0x2550 [ 571.136917][ T1400] do_syscall_64+0x112/0x360 [ 571.137014][ T1400] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 571.137134][ T1400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.137165][ T1400] RIP: 0033:0x7f89fc87f559 [ 571.137184][ T1400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.137286][ T1400] RSP: 002b:00007f89fb2d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 571.137325][ T1400] RAX: ffffffffffffffda RBX: 00007f89fcb05fa0 RCX: 00007f89fc87f559 [ 571.137409][ T1400] RDX: 0000200000000d80 RSI: 0000000020c68191 RDI: 000000000000001d [ 571.137432][ T1400] RBP: 00007f89fc916b20 R08: 0000000000000000 R09: 0000000000000000 [ 571.137487][ T1400] R10: 0000200000000dc0 R11: 0000000000000246 R12: 0000000000000000 [ 571.137512][ T1400] R13: 00007f89fcb06038 R14: 00007f89fcb05fa0 R15: 00007ffc23be2bb8 [ 571.137538][ T1400] [ 571.143362][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 571.143448][ T28] audit: type=1400 audit(1793033070.225:4928): avc: denied { write } for pid=1398 comm="syz.0.8870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 571.171495][ T1401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8870'. [ 571.173657][ T28] audit: type=1400 audit(1793033070.255:4929): avc: denied { mount } for pid=1402 comm="syz.1.8918" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 571.211872][ T1404] ip_tables: iptables: counters copy to user failed while replacing table [ 571.218918][ T28] audit: type=1400 audit(1793033070.305:4930): avc: denied { write } for pid=1398 comm="syz.0.8870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 571.356045][ T28] audit: type=1400 audit(1793033070.435:4931): avc: denied { setopt } for pid=1402 comm="syz.1.8918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 571.480141][ T28] audit: type=1400 audit(1793033070.565:4932): avc: denied { unmount } for pid=22857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 571.689184][ T28] audit: type=1400 audit(1793033070.775:4933): avc: denied { read } for pid=1425 comm="syz.0.8927" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 571.689301][ T28] audit: type=1400 audit(1793033070.775:4934): avc: denied { open } for pid=1425 comm="syz.0.8927" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 571.693585][ T28] audit: type=1400 audit(1793033070.775:4935): avc: denied { write } for pid=1425 comm="syz.0.8927" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 571.694310][ T28] audit: type=1400 audit(1793033070.775:4936): avc: denied { ioctl } for pid=1425 comm="syz.0.8927" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x40047451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 571.694985][ T28] audit: type=1400 audit(1793033070.775:4937): avc: denied { bind } for pid=1425 comm="syz.0.8927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 571.986679][ T1440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8930'. [ 572.028002][ T1445] loop0: detected capacity change from 0 to 512 [ 572.041964][ T1445] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 572.042136][ T1445] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 572.042155][ T1445] loop0: lost filesystem error report for type 5 error -12 [ 572.044683][ T1445] EXT4-fs (loop0): 1 truncate cleaned up [ 572.045300][ T1445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.222571][ T1452] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8937'. [ 572.309958][ T1459] loop2: detected capacity change from 0 to 1024 [ 572.318879][ T1459] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 572.320539][ T1459] JBD2: no valid journal superblock found [ 572.320572][ T1459] EXT4-fs (loop2): Could not load journal inode [ 572.523524][ T1139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.713610][ T1465] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8944'. [ 573.086754][ T1481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8948'. [ 573.120127][ T1485] loop5: detected capacity change from 0 to 512 [ 573.167592][ T1485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.167687][ T1485] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.280242][ T1504] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8952'. [ 573.280268][ T1504] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8952'. [ 573.415480][ T1484] rxe_eth0 speed is unknown, defaulting to 1000 [ 573.593027][ T1511] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8952'. [ 573.751537][ T1512] loop2: detected capacity change from 0 to 512 [ 573.886029][ T1512] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 573.886050][ T1512] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 573.886174][ T1512] System zones: 0-1, 15-15, 18-18, 34-34 [ 573.886927][ T1512] EXT4-fs (loop2): orphan cleanup on readonly fs [ 573.886982][ T1512] EXT4-fs error (device loop2): ext4_quota_enable:7307: comm syz.2.8951: Bad quota inum: 768, type: 0 [ 573.887106][ T1512] loop2: lost filesystem error report for type 5 error -117 [ 573.887609][ T1512] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-117, ino=768). Please run e2fsck to fix. [ 573.887665][ T1512] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 573.984133][ T1512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 574.102929][T24349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.248258][ T1522] loop5: detected capacity change from 0 to 512 [ 574.260362][ T1522] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.8954: corrupted in-inode xattr: invalid ea_ino [ 574.260395][ T1522] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 574.262178][ T1522] EXT4-fs (loop5): Remounting filesystem read-only [ 574.262649][ T1522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.381552][T23485] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.402686][ T1484] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.402817][ T1484] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.402984][ T1484] bridge_slave_0: entered allmulticast mode [ 574.403629][ T1484] bridge_slave_0: entered promiscuous mode [ 574.411033][ T1484] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.411236][ T1484] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.411523][ T1484] bridge_slave_1: entered allmulticast mode [ 574.412047][ T1484] bridge_slave_1: entered promiscuous mode [ 574.475211][ T1484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.480586][ T1484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.516663][ T1484] team0: Port device team_slave_0 added [ 574.520048][ T1484] team0: Port device team_slave_1 added [ 574.569190][ T1484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.569211][ T1484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.569263][ T1484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.573673][ T1484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.573728][ T1484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.573822][ T1484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.647379][ T1532] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.8956'. [ 574.706581][ T1484] hsr_slave_0: entered promiscuous mode [ 574.707099][ T1484] hsr_slave_1: entered promiscuous mode [ 574.707427][ T1484] debugfs: 'hsr0' already exists in 'hsr' [ 574.707444][ T1484] Cannot create hsr debugfs directory [ 574.762368][T24349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.835599][ T1560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8961'. [ 574.901831][ T1568] FAULT_INJECTION: forcing a failure. [ 574.901831][ T1568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.901883][ T1568] CPU: 0 UID: 0 PID: 1568 Comm: syz.6.8964 Not tainted syzkaller #0 PREEMPT(lazy) [ 574.901996][ T1568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 574.902013][ T1568] Call Trace: [ 574.902074][ T1568] [ 574.902084][ T1568] __dump_stack+0x1d/0x30 [ 574.902116][ T1568] dump_stack_lvl+0x95/0xd0 [ 574.902145][ T1568] dump_stack+0x15/0x1b [ 574.902169][ T1568] should_fail_ex+0x262/0x280 [ 574.902198][ T1568] should_fail+0xb/0x20 [ 574.902291][ T1568] should_fail_usercopy+0x1a/0x20 [ 574.902381][ T1568] _copy_from_iter+0xcc/0xe70 [ 574.902412][ T1568] ? selinux_file_open+0x2e3/0x330 [ 574.902488][ T1568] tun_get_user+0x159/0x2970 [ 574.902516][ T1568] ? __rcu_read_unlock+0x4e/0x70 [ 574.902551][ T1568] ? _parse_integer_limit+0x174/0x190 [ 574.902672][ T1568] ? ref_tracker_alloc+0x236/0x340 [ 574.902709][ T1568] tun_chr_write_iter+0x15a/0x210 [ 574.902737][ T1568] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 574.902767][ T1568] vfs_write+0x57a/0x990 [ 574.902835][ T1568] ksys_write+0xdc/0x1a0 [ 574.902875][ T1568] __x64_sys_write+0x40/0x50 [ 574.902937][ T1568] x64_sys_call+0x154e/0x2550 [ 574.903028][ T1568] do_syscall_64+0x112/0x360 [ 574.903062][ T1568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.903142][ T1568] RIP: 0033:0x7f89fc87f559 [ 574.903166][ T1568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.903191][ T1568] RSP: 002b:00007f89fb2d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 574.903215][ T1568] RAX: ffffffffffffffda RBX: 00007f89fcb05fa0 RCX: 00007f89fc87f559 [ 574.903234][ T1568] RDX: 000000000000fdef RSI: 0000200000003440 RDI: 0000000000000003 [ 574.903253][ T1568] RBP: 00007f89fb2d7090 R08: 0000000000000000 R09: 0000000000000000 [ 574.903276][ T1568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.903291][ T1568] R13: 00007f89fcb06038 R14: 00007f89fcb05fa0 R15: 00007ffc23be2bb8 [ 574.903313][ T1568] [ 575.192251][ T1578] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 575.226396][ T1484] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 575.230284][ T1484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 575.232224][ T1484] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 575.256710][ T1484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 575.272686][ T1484] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 575.282506][ T1484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 575.282998][ T1484] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 575.299365][ T1484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 575.346894][ T1484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.353584][ T1484] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.372026][ T3882] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.372065][ T3882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.373759][ T3882] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.373849][ T3882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.409774][ T1597] FAULT_INJECTION: forcing a failure. [ 575.409774][ T1597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.409875][ T1597] CPU: 1 UID: 0 PID: 1597 Comm: syz.2.8970 Not tainted syzkaller #0 PREEMPT(lazy) [ 575.409928][ T1597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 575.409945][ T1597] Call Trace: [ 575.409954][ T1597] [ 575.409964][ T1597] __dump_stack+0x1d/0x30 [ 575.409995][ T1597] dump_stack_lvl+0x95/0xd0 [ 575.410100][ T1597] dump_stack+0x15/0x1b [ 575.410124][ T1597] should_fail_ex+0x262/0x280 [ 575.410176][ T1597] should_fail+0xb/0x20 [ 575.410202][ T1597] should_fail_usercopy+0x1a/0x20 [ 575.410281][ T1597] _copy_from_user+0x1c/0xb0 [ 575.410394][ T1597] ___sys_sendmsg+0xc1/0x1e0 [ 575.410451][ T1597] __x64_sys_sendmsg+0xd4/0x160 [ 575.410488][ T1597] x64_sys_call+0x22ab/0x2550 [ 575.410564][ T1597] do_syscall_64+0x112/0x360 [ 575.410593][ T1597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.410681][ T1597] RIP: 0033:0x7f6e746af559 [ 575.410698][ T1597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.410718][ T1597] RSP: 002b:00007f6e730e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.410774][ T1597] RAX: ffffffffffffffda RBX: 00007f6e74936090 RCX: 00007f6e746af559 [ 575.410870][ T1597] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 000000000000000a [ 575.410889][ T1597] RBP: 00007f6e730e6090 R08: 0000000000000000 R09: 0000000000000000 [ 575.410905][ T1597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.410918][ T1597] R13: 00007f6e74936128 R14: 00007f6e74936090 R15: 00007fffac8abfb8 [ 575.410941][ T1597] [ 575.697130][ T1484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.791525][ T1484] veth0_vlan: entered promiscuous mode [ 575.807377][ T1484] veth1_vlan: entered promiscuous mode [ 575.851886][ T1484] veth0_macvtap: entered promiscuous mode [ 575.855370][ T1484] veth1_macvtap: entered promiscuous mode [ 575.875073][ T1484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.883224][ T1484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.925718][ T366] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.926077][ T366] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.926155][ T366] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.926272][ T366] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.006475][ T1623] loop1: detected capacity change from 0 to 128 [ 576.079256][ T1625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8973'. [ 576.095757][ T1623] loop1: detected capacity change from 0 to 128 [ 576.148640][ T28] kauditd_printk_skb: 281 callbacks suppressed [ 576.148661][ T28] audit: type=1400 audit(1793033075.235:5220): avc: denied { ioctl } for pid=1628 comm="syz.0.8975" path="socket:[100092]" dev="sockfs" ino=100092 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 576.149475][ T28] audit: type=1400 audit(1793033075.225:5218): avc: denied { mount } for pid=1622 comm="syz.1.8941" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 576.242749][ T28] audit: type=1400 audit(1793033075.325:5221): avc: denied { connect } for pid=1633 comm="syz.2.8977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 576.242798][ T28] audit: type=1400 audit(1793033075.325:5222): avc: denied { name_connect } for pid=1633 comm="syz.2.8977" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 576.277002][ T1623] xt_ecn: cannot match TCP bits for non-tcp packets [ 576.351244][ T28] audit: type=1400 audit(1793033075.425:5223): avc: denied { setopt } for pid=1636 comm="syz.0.8979" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 576.369454][ T28] audit: type=1400 audit(1793033075.455:5224): avc: denied { setopt } for pid=1622 comm="syz.1.8941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 576.459023][ T28] audit: type=1400 audit(1793033075.545:5225): avc: denied { unmount } for pid=1484 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 576.497159][ T28] audit: type=1400 audit(1793033075.575:5226): avc: denied { write } for pid=1636 comm="syz.0.8979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 576.510757][ T1637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8979'. [ 576.518759][ T28] audit: type=1400 audit(1793033075.605:5227): avc: denied { create } for pid=1633 comm="syz.2.8977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 576.519188][ T28] audit: type=1400 audit(1793033075.605:5228): avc: denied { setopt } for pid=1633 comm="syz.2.8977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 576.608427][ T1655] netlink: 'syz.0.8983': attribute type 13 has an invalid length. [ 576.608556][ T1655] netlink: 'syz.0.8983': attribute type 12 has an invalid length. [ 576.614933][ T1657] FAULT_INJECTION: forcing a failure. [ 576.614933][ T1657] name failslab, interval 1, probability 0, space 0, times 0 [ 576.614971][ T1657] CPU: 1 UID: 0 PID: 1657 Comm: syz.6.8984 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 576.615070][ T1657] Tainted: [Y]=FORCED_BIND [ 576.615084][ T1657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 576.615101][ T1657] Call Trace: [ 576.615124][ T1657] [ 576.615136][ T1657] __dump_stack+0x1d/0x30 [ 576.615171][ T1657] dump_stack_lvl+0x95/0xd0 [ 576.615201][ T1657] dump_stack+0x15/0x1b [ 576.615229][ T1657] should_fail_ex+0x262/0x280 [ 576.615285][ T1657] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 576.615427][ T1657] should_failslab+0x8c/0xb0 [ 576.615541][ T1657] __kmalloc_noprof+0xb6/0x4b0 [ 576.615667][ T1657] ? kernfs_fop_write_iter+0xd4/0x2e0 [ 576.615760][ T1657] kernfs_fop_write_iter+0xd4/0x2e0 [ 576.615891][ T1657] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 576.616033][ T1657] vfs_write+0x57a/0x990 [ 576.616127][ T1657] ksys_write+0xdc/0x1a0 [ 576.616165][ T1657] __x64_sys_write+0x40/0x50 [ 576.616279][ T1657] x64_sys_call+0x154e/0x2550 [ 576.616492][ T1657] do_syscall_64+0x112/0x360 [ 576.616590][ T1657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.616652][ T1657] RIP: 0033:0x7f89fc87f559 [ 576.616669][ T1657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.616697][ T1657] RSP: 002b:00007f89fb2d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 576.616763][ T1657] RAX: ffffffffffffffda RBX: 00007f89fcb05fa0 RCX: 00007f89fc87f559 [ 576.616826][ T1657] RDX: 0000000000000005 RSI: 0000200000000900 RDI: 0000000000000004 [ 576.616882][ T1657] RBP: 00007f89fb2d7090 R08: 0000000000000000 R09: 0000000000000000 [ 576.616933][ T1657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.617035][ T1657] R13: 00007f89fcb06038 R14: 00007f89fcb05fa0 R15: 00007ffc23be2bb8 [ 576.617106][ T1657] [ 576.938629][ T1669] cgroup: fork rejected by pids controller in /syz1 [ 576.962441][ T1668] loop1: detected capacity change from 0 to 512 [ 577.294470][ T1823] loop2: detected capacity change from 0 to 512 [ 577.310988][ T1823] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 577.311011][ T1823] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 577.318448][ T1823] EXT4-fs error (device loop2): ext4_iget_extra_inode:6027: inode #15: comm syz.2.8995: corrupted in-inode xattr: invalid ea_ino [ 577.318579][ T1823] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 577.319285][ T1823] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.8995: couldn't read orphan inode 15 (err -117) [ 577.319380][ T1823] loop2: lost filesystem error report for type 5 error -117 [ 577.320849][ T1823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.393427][T23485] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.441006][ T1829] FAULT_INJECTION: forcing a failure. [ 577.441006][ T1829] name fail_futex, interval 1, probability 0, space 0, times 1 [ 577.441081][ T1829] CPU: 1 UID: 0 PID: 1829 Comm: syz.5.8997 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 577.441118][ T1829] Tainted: [Y]=FORCED_BIND [ 577.441127][ T1829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 577.441173][ T1829] Call Trace: [ 577.441183][ T1829] [ 577.441194][ T1829] __dump_stack+0x1d/0x30 [ 577.441222][ T1829] dump_stack_lvl+0x95/0xd0 [ 577.441246][ T1829] dump_stack+0x15/0x1b [ 577.441270][ T1829] should_fail_ex+0x262/0x280 [ 577.441303][ T1829] should_fail+0xb/0x20 [ 577.441355][ T1829] get_futex_key+0x5ba/0xc40 [ 577.441381][ T1829] ? __css_rstat_updated+0xbb/0x280 [ 577.441417][ T1829] ? __wake_up_sync_key+0x52/0x80 [ 577.441521][ T1829] futex_wake+0x89/0x400 [ 577.441549][ T1829] ? perf_lock_task_context+0x24b/0x2c0 [ 577.441585][ T1829] do_futex+0x3f8/0x460 [ 577.441618][ T1829] mm_exit_exec_release+0xab/0x190 [ 577.441701][ T1829] exit_mm+0x37/0x1b0 [ 577.441733][ T1829] do_exit+0x437/0x14f0 [ 577.441774][ T1829] ? zap_other_threads+0x2a6/0x300 [ 577.441898][ T1829] do_group_exit+0x138/0x140 [ 577.441933][ T1829] __x64_sys_exit_group+0x1f/0x20 [ 577.442004][ T1829] x64_sys_call+0x254f/0x2550 [ 577.442037][ T1829] do_syscall_64+0x112/0x360 [ 577.442105][ T1829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.442135][ T1829] RIP: 0033:0x7f916b21f559 [ 577.442206][ T1829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.442274][ T1829] RSP: 002b:00007f9169c76f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 577.442297][ T1829] RAX: ffffffffffffffda RBX: 00007f916b28c590 RCX: 00007f916b21f559 [ 577.442313][ T1829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 577.442394][ T1829] RBP: 0000000000000002 R08: 0000000000000000 R09: 00007f916b4a6038 [ 577.442421][ T1829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.442456][ T1829] R13: 00007f916b4a6038 R14: 00007f916b4a5fa0 R15: 00007fff081e6118 [ 577.442481][ T1829] [ 577.666841][ T1832] br_netfilter no longer supported in user namespaces [ 577.690912][ T1832] rxe_eth0 speed is unknown, defaulting to 1000 [ 577.717158][ T1841] FAULT_INJECTION: forcing a failure. [ 577.717158][ T1841] name failslab, interval 1, probability 0, space 0, times 0 [ 577.717203][ T1841] CPU: 1 UID: 0 PID: 1841 Comm: syz.5.9002 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 577.717249][ T1841] Tainted: [Y]=FORCED_BIND [ 577.717321][ T1841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 577.717338][ T1841] Call Trace: [ 577.717348][ T1841] [ 577.717403][ T1841] __dump_stack+0x1d/0x30 [ 577.717486][ T1841] dump_stack_lvl+0x95/0xd0 [ 577.717520][ T1841] dump_stack+0x15/0x1b [ 577.717552][ T1841] should_fail_ex+0x262/0x280 [ 577.717604][ T1841] ? dup_fd+0x3a/0x5f0 [ 577.717629][ T1841] should_failslab+0x8c/0xb0 [ 577.717669][ T1841] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 577.717728][ T1841] ? should_fail_ex+0xdb/0x280 [ 577.717759][ T1841] ? dup_fd+0x3a/0x5f0 [ 577.717832][ T1841] dup_fd+0x3a/0x5f0 [ 577.717860][ T1841] ? avc_has_perm+0x101/0x190 [ 577.717959][ T1841] copy_files+0x97/0xe0 [ 577.717996][ T1841] copy_process+0x1000/0x23f0 [ 577.718129][ T1841] kernel_clone+0x1c0/0x5f0 [ 577.718169][ T1841] ? do_futex+0x391/0x460 [ 577.718208][ T1841] __x64_sys_clone+0x143/0x180 [ 577.718337][ T1841] x64_sys_call+0x2479/0x2550 [ 577.718384][ T1841] do_syscall_64+0x112/0x360 [ 577.718426][ T1841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.718479][ T1841] RIP: 0033:0x7f916b21f559 [ 577.718502][ T1841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.718597][ T1841] RSP: 002b:00007f9169c76fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 577.718628][ T1841] RAX: ffffffffffffffda RBX: 00007f916b4a5fa0 RCX: 00007f916b21f559 [ 577.718672][ T1841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f8024000 [ 577.718693][ T1841] RBP: 00007f916b2b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 577.718714][ T1841] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 577.718734][ T1841] R13: 00007f916b4a6038 R14: 00007f916b4a5fa0 R15: 00007fff081e6118 [ 577.718786][ T1841] [ 577.825177][ T1845] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8999'. [ 578.048035][ T1853] loop1: detected capacity change from 0 to 2048 [ 578.070319][ T1853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.073086][ T1853] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #12: block 2: comm syz.1.9006: lblock 0 mapped to illegal pblock 2 (length 1) [ 578.073678][ T1853] EXT4-fs error (device loop1): ext4_map_blocks:867: inode #12: block 2: comm syz.1.9006: lblock 0 mapped to illegal pblock 2 (length 1) [ 578.143074][ T1484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.211227][ T1863] FAULT_INJECTION: forcing a failure. [ 578.211227][ T1863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.211270][ T1863] CPU: 1 UID: 0 PID: 1863 Comm: syz.5.9010 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 578.211368][ T1863] Tainted: [Y]=FORCED_BIND [ 578.211376][ T1863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 578.211390][ T1863] Call Trace: [ 578.211397][ T1863] [ 578.211406][ T1863] __dump_stack+0x1d/0x30 [ 578.212022][ T1863] dump_stack_lvl+0x95/0xd0 [ 578.212050][ T1863] dump_stack+0x15/0x1b [ 578.212153][ T1863] should_fail_ex+0x262/0x280 [ 578.212186][ T1863] should_fail+0xb/0x20 [ 578.212213][ T1863] should_fail_usercopy+0x1a/0x20 [ 578.212247][ T1863] _copy_from_user+0x1c/0xb0 [ 578.212367][ T1863] do_sock_getsockopt+0x122/0x350 [ 578.212412][ T1863] __x64_sys_getsockopt+0x11d/0x1a0 [ 578.212455][ T1863] x64_sys_call+0x1032/0x2550 [ 578.212545][ T1863] do_syscall_64+0x112/0x360 [ 578.212583][ T1863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.212613][ T1863] RIP: 0033:0x7f916b21f559 [ 578.212635][ T1863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.212672][ T1863] RSP: 002b:00007f9169c77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 578.212699][ T1863] RAX: ffffffffffffffda RBX: 00007f916b4a5fa0 RCX: 00007f916b21f559 [ 578.212779][ T1863] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 578.212797][ T1863] RBP: 00007f9169c77090 R08: 0000200000000300 R09: 0000000000000000 [ 578.212813][ T1863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.212826][ T1863] R13: 00007f916b4a6038 R14: 00007f916b4a5fa0 R15: 00007fff081e6118 [ 578.212848][ T1863] [ 578.274089][ T1866] loop1: detected capacity change from 0 to 128 [ 578.279076][ T1866] EXT4-fs: Ignoring removed mblk_io_submit option [ 578.279184][ T1866] ext2: Bad value for 'stripe' [ 578.530551][ T1875] netlink: 'syz.5.9014': attribute type 5 has an invalid length. [ 578.530730][ T1875] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9014'. [ 578.602343][ T1880] loop2: detected capacity change from 0 to 512 [ 578.612199][ T1880] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 578.612232][ T1880] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 578.612282][ T1880] System zones: 0-1, 15-15, 18-18, 34-34 [ 578.612454][ T1880] EXT4-fs (loop2): orphan cleanup on readonly fs [ 578.612472][ T1880] EXT4-fs error (device loop2): ext4_quota_enable:7307: comm syz.2.9016: Bad quota inum: 768, type: 0 [ 578.612525][ T1880] loop2: lost filesystem error report for type 5 error -117 [ 578.612765][ T1880] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-117, ino=768). Please run e2fsck to fix. [ 578.612838][ T1880] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 578.615864][ T1880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 578.707165][ T1886] loop0: detected capacity change from 0 to 164 [ 578.794112][ T1889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=1889 comm=syz.6.9017 [ 578.861441][T23485] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.050956][ T1875] loop5: detected capacity change from 0 to 1024 [ 579.050980][ T1897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9020'. [ 579.051349][ T1875] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 579.103534][ T1899] loop0: detected capacity change from 0 to 128 [ 579.127800][ T1899] lo: entered promiscuous mode [ 579.129741][ T1899] tunl0: entered promiscuous mode [ 579.160474][ T1899] gre0: entered promiscuous mode [ 579.228840][ T1892] loop2: detected capacity change from 0 to 512 [ 579.264715][ T1899] gretap0: entered promiscuous mode [ 579.302201][ T1899] erspan0: entered promiscuous mode [ 579.312195][ T1899] ip_vti0: entered promiscuous mode [ 579.320582][ T1899] ip6_vti0: entered promiscuous mode [ 579.322804][ T1899] sit0: entered promiscuous mode [ 579.336383][ T1899] ip6tnl0: entered promiscuous mode [ 579.338086][ T1899] ip6gre0: entered promiscuous mode [ 579.340733][ T1899] syz_tun: entered promiscuous mode [ 579.344469][ T1899] ip6gretap0: entered promiscuous mode [ 579.397082][ T1899] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.397223][ T1899] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.397439][ T1899] bridge0: entered promiscuous mode [ 579.403347][ T1899] vcan0: entered promiscuous mode [ 579.404117][ T1913] xt_ecn: cannot match TCP bits for non-tcp packets [ 579.421648][ T1892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.421889][ T1892] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.472254][ T1899] bond0: entered promiscuous mode [ 579.472284][ T1899] bond_slave_0: entered promiscuous mode [ 579.472436][ T1899] bond_slave_1: entered promiscuous mode [ 579.492344][ T1899] team0: entered promiscuous mode [ 579.492367][ T1899] team_slave_0: entered promiscuous mode [ 579.492517][ T1899] team_slave_1: entered promiscuous mode [ 579.512749][ T1899] dummy0: entered promiscuous mode [ 579.523909][ T1899] nlmon0: entered promiscuous mode [ 579.533176][ T1899] batadv0: entered promiscuous mode [ 579.573509][ T1899] vxcan0: entered promiscuous mode [ 579.574244][ T1899] vxcan1: entered promiscuous mode [ 579.586333][ T1899] veth0: entered promiscuous mode [ 579.594534][ T1899] veth1: entered promiscuous mode [ 579.604605][ T1899] wg0: entered promiscuous mode [ 579.612120][ T1899] wg1: entered promiscuous mode [ 579.616886][ T1899] wg2: entered promiscuous mode [ 579.626793][ T1899] veth0_to_bridge: entered promiscuous mode [ 579.646795][ T1899] veth1_to_bridge: entered promiscuous mode [ 579.653476][ T1899] veth0_to_bond: entered promiscuous mode [ 579.659614][ T1899] veth1_to_bond: entered promiscuous mode [ 579.673708][ T1899] veth0_to_team: entered promiscuous mode [ 579.691280][ T1899] veth1_to_team: entered promiscuous mode [ 579.702964][ T1899] veth0_to_batadv: entered promiscuous mode [ 579.725798][ T1899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.725840][ T1899] batadv_slave_0: entered promiscuous mode [ 579.733488][ T1899] veth1_to_batadv: entered promiscuous mode [ 579.747808][ T1899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.747893][ T1899] batadv_slave_1: entered promiscuous mode [ 579.759508][ T1899] xfrm0: entered promiscuous mode [ 579.770840][ T1899] veth0_to_hsr: entered promiscuous mode [ 579.786396][ T1899] veth1_to_hsr: entered promiscuous mode [ 579.820171][ T1899] hsr0: entered promiscuous mode [ 579.833594][ T1899] veth1_virt_wifi: entered promiscuous mode [ 579.857010][ T1899] veth0_virt_wifi: entered promiscuous mode [ 579.868802][ T1899] vlan0: entered promiscuous mode [ 579.870075][ T1899] vlan1: entered promiscuous mode [ 579.888190][ T1899] macvlan0: entered promiscuous mode [ 579.891500][ T1899] macvlan1: entered promiscuous mode [ 579.892324][ T1899] ipvlan0: entered promiscuous mode [ 579.892459][ T1899] ipvlan1: entered promiscuous mode [ 579.927659][ T1899] macvtap0: entered promiscuous mode [ 579.928514][ T1899] macsec0: entered promiscuous mode [ 579.930479][ T1899] geneve0: entered promiscuous mode [ 579.931377][ T1899] geneve1: entered promiscuous mode [ 579.954957][ T1914] loop6: detected capacity change from 0 to 512 [ 579.965217][ T1899] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 580.021464][ T1899] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 580.039740][ T1899] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 580.042090][ T1899] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 580.076250][ T3882] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.076689][ T3882] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.076741][ T3882] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.076786][ T3882] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.101246][ T1914] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 580.159452][ T1923] loop1: detected capacity change from 0 to 164 [ 580.229268][ T1892] xt_CT: No such helper "syz1" [ 580.295237][ T1914] EXT4-fs (loop6): 1 orphan inode deleted [ 580.295651][ T1914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.301229][ T1914] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.327025][ T3882] EXT4-fs error (device loop6): ext4_release_dquot:7156: comm kworker/u8:10: Failed to release dquot type 1 [ 580.350352][ T1939] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9026'. [ 580.372463][T23485] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.585373][ T1924] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.775448][ T1945] rxe_eth0 speed is unknown, defaulting to 1000 [ 580.885685][ T1971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9034'. [ 580.980317][ T1977] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9036'. [ 580.980340][ T1977] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9036'. [ 581.242897][ T1998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9036'. [ 581.412884][ T1994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.460909][ T1994] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #12: block 2: comm syz.5.9037: lblock 0 mapped to illegal pblock 2 (length 1) [ 581.463322][ T1994] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #12: block 2: comm syz.5.9037: lblock 0 mapped to illegal pblock 2 (length 1) [ 581.649721][T24349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.738000][ T1945] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.738040][ T1945] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.738107][ T1945] bridge_slave_0: entered allmulticast mode [ 581.738590][ T1945] bridge_slave_0: entered promiscuous mode [ 581.739491][ T1945] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.739527][ T1945] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.739634][ T1945] bridge_slave_1: entered allmulticast mode [ 581.740151][ T1945] bridge_slave_1: entered promiscuous mode [ 581.805347][ T1945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.807029][ T1945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.892375][ T1945] team0: Port device team_slave_0 added [ 581.893457][ T1945] team0: Port device team_slave_1 added [ 581.915842][ T1945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.915860][ T1945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.915896][ T1945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.916602][ T1945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.916619][ T1945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.916713][ T1945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.026223][ T1945] hsr_slave_0: entered promiscuous mode [ 582.026721][ T1945] hsr_slave_1: entered promiscuous mode [ 582.027180][ T1945] debugfs: 'hsr0' already exists in 'hsr' [ 582.027196][ T1945] Cannot create hsr debugfs directory [ 582.040786][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 582.040808][ T28] audit: type=1400 audit(1793033081.125:5285): avc: denied { read write } for pid=2022 comm="syz.5.9042" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 582.040917][ T28] audit: type=1400 audit(1793033081.125:5286): avc: denied { open } for pid=2022 comm="syz.5.9042" path="/dev/mapper/control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 582.046586][ T28] audit: type=1400 audit(1793033081.125:5287): avc: denied { ioctl } for pid=2022 comm="syz.5.9042" path="/dev/mapper/control" dev="devtmpfs" ino=248 ioctlcmd=0xc138fd09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 582.130297][ T2024] FAULT_INJECTION: forcing a failure. [ 582.130297][ T2024] name failslab, interval 1, probability 0, space 0, times 0 [ 582.130411][ T2024] CPU: 0 UID: 0 PID: 2024 Comm: syz.5.9042 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 582.130534][ T2024] Tainted: [Y]=FORCED_BIND [ 582.130568][ T2024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 582.130646][ T2024] Call Trace: [ 582.130679][ T2024] [ 582.130722][ T2024] __dump_stack+0x1d/0x30 [ 582.130830][ T2024] dump_stack_lvl+0x95/0xd0 [ 582.130972][ T2024] dump_stack+0x15/0x1b [ 582.131137][ T2024] should_fail_ex+0x262/0x280 [ 582.131243][ T2024] ? proc_net_ns_init+0x2f/0x1f0 [ 582.131347][ T2024] should_failslab+0x8c/0xb0 [ 582.131492][ T2024] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 582.131594][ T2024] ? proc_net_ns_init+0x2f/0x1f0 [ 582.131749][ T2024] proc_net_ns_init+0x2f/0x1f0 [ 582.131843][ T2024] ops_init+0x22a/0x2e0 [ 582.131944][ T2024] setup_net+0x9f/0x230 [ 582.132153][ T2024] copy_net_ns+0x339/0x490 [ 582.132305][ T2024] create_new_namespaces+0x1f6/0x420 [ 582.132483][ T2024] unshare_nsproxy_namespaces+0x115/0x150 [ 582.132583][ T2024] ksys_unshare+0x3a3/0x690 [ 582.132709][ T2024] __x64_sys_unshare+0x1f/0x30 [ 582.132841][ T2024] x64_sys_call+0x1e33/0x2550 [ 582.132942][ T2024] do_syscall_64+0x112/0x360 [ 582.133048][ T2024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.133131][ T2024] RIP: 0033:0x7f916b21f559 [ 582.133198][ T2024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.133277][ T2024] RSP: 002b:00007f9169c77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 582.133356][ T2024] RAX: ffffffffffffffda RBX: 00007f916b4a5fa0 RCX: 00007f916b21f559 [ 582.133416][ T2024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 582.133480][ T2024] RBP: 00007f916b2b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 582.133537][ T2024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.133625][ T2024] R13: 00007f916b4a6038 R14: 00007f916b4a5fa0 R15: 00007fff081e6118 [ 582.133697][ T2024] [ 582.145571][ T28] audit: type=1400 audit(1793033081.235:5288): avc: denied { connect } for pid=2017 comm="syz.0.9040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 582.175341][ T28] audit: type=1400 audit(1793033081.265:5289): avc: denied { setopt } for pid=2017 comm="syz.0.9040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 582.321723][ T2021] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9041'. [ 582.330947][ T2021] netlink: 'syz.6.9041': attribute type 16 has an invalid length. [ 582.331064][ T2021] netlink: 'syz.6.9041': attribute type 17 has an invalid length. [ 582.339667][ T28] audit: type=1400 audit(1793033081.425:5290): avc: denied { write } for pid=2000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.419979][ T2021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.474847][ T2021] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 582.492949][ T28] audit: type=1400 audit(1793033081.585:5291): avc: denied { write } for pid=2038 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.729160][ T28] audit: type=1400 audit(1793033081.815:5292): avc: denied { write } for pid=2043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.784376][ T28] audit: type=1400 audit(1793033081.865:5293): avc: denied { write } for pid=2062 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.918240][ T28] audit: type=1400 audit(1793033082.005:5294): avc: denied { read } for pid=3017 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 583.003994][ T366] bridge_slave_1: left allmulticast mode [ 583.004149][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.004826][ T366] bridge_slave_0: left allmulticast mode [ 583.005042][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.114973][ T366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.130960][ T366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.136972][ T366] bond0 (unregistering): Released all slaves [ 583.185227][ T2022] ================================================================== [ 583.185274][ T2022] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 583.185320][ T2022] [ 583.185324][ T2022] read-write to 0xffff888105a5afe0 of 8 bytes by interrupt on cpu 1: [ 583.185342][ T2022] __xa_clear_mark+0xf5/0x1e0 [ 583.185372][ T2022] __folio_end_writeback+0xe7/0x530 [ 583.185403][ T2022] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 583.185425][ T2022] folio_end_writeback+0x72/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 583.185443][ T2022] bh_end_async_write+0x18b/0x230 [ 583.185470][ T2022] bio_endio+0x390/0x570 [ 583.185499][ T2022] blk_update_request+0x33a/0x710 [ 583.185527][ T2022] blk_mq_end_request+0x26/0x50 [ 583.185558][ T2022] lo_complete_rq+0x98/0x130 [ 583.185592][ T2022] blk_done_softirq+0x77/0xb0 [ 583.185624][ T2022] handle_softirqs+0x109/0x310 [ 583.185649][ T2022] __irq_exit_rcu+0x40/0xf0 [ 583.185675][ T2022] sysvec_apic_timer_interrupt+0x74/0x80 [ 583.185717][ T2022] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 583.185746][ T2022] __tsan_read8+0xe9/0x190 [ 583.185768][ T2022] generic_perform_write+0x165/0x490 [ 583.185798][ T2022] shmem_file_write_iter+0xc5/0xf0 [ 583.185837][ T2022] lo_rw_aio+0x6a6/0x760 [ 583.185863][ T2022] loop_process_work+0x569/0xac0 [ 583.185890][ T2022] loop_workfn+0x31/0x40 [ 583.185923][ T2022] process_scheduled_works+0x53f/0xa20 [ 583.185950][ T2022] worker_thread+0x56c/0x770 [ 583.185977][ T2022] kthread+0x223/0x270 [ 583.186006][ T2022] ret_from_fork+0x146/0x330 [ 583.186037][ T2022] ret_from_fork_asm+0x1a/0x30 [ 583.186068][ T2022] [ 583.186076][ T2022] read to 0xffff888105a5afe0 of 8 bytes by task 2022 on cpu 0: [ 583.186097][ T2022] xas_find_marked+0x211/0x650 [ 583.186129][ T2022] filemap_get_folios_tag+0xf7/0x400 [ 583.186152][ T2022] filemap_write_and_wait_range+0x1f5/0x370 [ 583.186194][ T2022] bdev_release+0xd4/0x3d0 [ 583.186229][ T2022] blkdev_release+0x15/0x20 [ 583.186266][ T2022] __fput+0x286/0x610 [ 583.186289][ T2022] fput_close_sync+0xad/0x190 [ 583.186316][ T2022] filp_close_sync+0x27/0x40 [ 583.186340][ T2022] __se_sys_close_range+0x915/0xa00 [ 583.186367][ T2022] __x64_sys_close_range+0x43/0x50 [ 583.186393][ T2022] x64_sys_call+0x2198/0x2550 [ 583.186425][ T2022] do_syscall_64+0x112/0x360 [ 583.186454][ T2022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.186481][ T2022] [ 583.186487][ T2022] value changed: 0xfffff00000000000 -> 0xfff8000000000000 [ 583.186500][ T2022] [ 583.186505][ T2022] Reported by Kernel Concurrency Sanitizer on: [ 583.186524][ T2022] CPU: 0 UID: 0 PID: 2022 Comm: syz.5.9042 Tainted: G Y syzkaller #0 PREEMPT(lazy) [ 583.186567][ T2022] Tainted: [Y]=FORCED_BIND [ 583.186576][ T2022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 583.186592][ T2022] ================================================================== [ 583.503731][ T366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.509937][ T366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.708606][ T366] team0 (unregistering): Port device team_slave_1 removed [ 583.711693][ T366] team0 (unregistering): Port device team_slave_0 removed [ 583.754972][ T1945] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 583.764185][ T1945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 583.839130][ T3017] 8021q: adding VLAN 0 to HW filter on device eth9 [ 583.992626][ T3017] 8021q: adding VLAN 0 to HW filter on device eth10 [ 584.126443][ T3017] 8021q: adding VLAN 0 to HW filter on device eth11 [ 584.144451][ T366] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.198642][ T366] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.238774][ T366] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.269057][ T3017] 8021q: adding VLAN 0 to HW filter on device eth12 [ 584.284385][ T366] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.342179][ T366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.389021][ T366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.440204][ T366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.479242][ T3017] 8021q: adding VLAN 0 to HW filter on device eth13 [ 584.495305][ T366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.625790][ T3017] 8021q: adding VLAN 0 to HW filter on device eth14 [ 584.738529][ T3017] 8021q: adding VLAN 0 to HW filter on device eth15 [ 584.788505][ T366] bridge_slave_1: left allmulticast mode [ 584.788528][ T366] bridge_slave_1: left promiscuous mode [ 584.788723][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.790365][ T366] bridge_slave_0: left allmulticast mode [ 584.790391][ T366] bridge_slave_0: left promiscuous mode [ 584.790602][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.831135][ T366] bridge_slave_1: left allmulticast mode [ 584.831158][ T366] bridge_slave_1: left promiscuous mode [ 584.831365][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.832201][ T366] bridge_slave_0: left allmulticast mode [ 584.832223][ T366] bridge_slave_0: left promiscuous mode [ 584.832325][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.874438][ T366] bridge_slave_1: left allmulticast mode [ 584.874463][ T366] bridge_slave_1: left promiscuous mode [ 584.874579][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.893971][ T366] bridge_slave_0: left allmulticast mode [ 584.893998][ T366] bridge_slave_0: left promiscuous mode [ 584.894148][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.982131][ T366] bond0 (unregistering): (slave 47ÿ): Releasing backup interface [ 584.983627][ T366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.984719][ T366] bond0 (unregistering): Released all slaves [ 585.019332][ T366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.020721][ T366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.021542][ T366] bond0 (unregistering): Released all slaves [ 585.052012][ T366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.053084][ T366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.053776][ T366] bond0 (unregistering): Released all slaves [ 585.059290][ T3017] 8021q: adding VLAN 0 to HW filter on device eth16 [ 585.177750][ T366] hsr_slave_0: left promiscuous mode [ 585.178065][ T366] hsr_slave_1: left promiscuous mode [ 585.178591][ T366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.178690][ T366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.179066][ T366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.179085][ T366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.181141][ T366] hsr_slave_0: left promiscuous mode [ 585.181477][ T366] hsr_slave_1: left promiscuous mode [ 585.181946][ T366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.181964][ T366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.182362][ T366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.182380][ T366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.184683][ T366] hsr_slave_0: left promiscuous mode [ 585.211392][ T366] hsr_slave_1: left promiscuous mode [ 585.212025][ T366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.253452][ T366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.286864][ T366] veth1_macvtap: left promiscuous mode [ 585.286901][ T366] veth0_macvtap: left promiscuous mode [ 585.286948][ T366] veth1_vlan: left promiscuous mode [ 585.287100][ T366] veth0_vlan: left promiscuous mode [ 585.305901][ T366] veth1_macvtap: left promiscuous mode [ 585.305993][ T366] veth0_macvtap: left promiscuous mode [ 585.306196][ T366] veth1_vlan: left promiscuous mode [ 585.306301][ T366] veth0_vlan: left promiscuous mode [ 585.428298][ T366] team0 (unregistering): Port device team_slave_1 removed [ 585.430766][ T366] team0 (unregistering): Port device team_slave_0 removed [ 585.493056][ T366] team0 (unregistering): Port device team_slave_1 removed [ 585.502629][ T366] team0 (unregistering): Port device team_slave_0 removed [ 585.557120][ T366] team0 (unregistering): Port device team_slave_1 removed [ 585.559605][ T366] team0 (unregistering): Port device team_slave_0 removed [ 585.596052][ T3017] 8021q: adding VLAN 0 to HW filter on device eth17 [ 585.716701][ T3017] 8021q: adding VLAN 0 to HW filter on device eth18 [ 585.830036][ T3017] 8021q: adding VLAN 0 to HW filter on device eth19 [ 585.947645][ T3017] 8021q: adding VLAN 0 to HW filter on device eth20 [ 586.059247][ T3017] 8021q: adding VLAN 0 to HW filter on device eth21 [ 586.179566][ T3017] 8021q: adding VLAN 0 to HW filter on device eth22 [ 586.289521][ T3017] 8021q: adding VLAN 0 to HW filter on device eth23 [ 586.405593][ T3017] 8021q: adding VLAN 0 to HW filter on device eth24