last executing test programs: 28.442826342s ago: executing program 4 (id=258): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x300, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x1000}, 0x100, 0x1, 0x800, 0x7, 0x0, 0x80000000, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4a2, &(0x7f0000000400)={0x0, 0x79ae, 0x3180, 0x8000, 0xfd}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0xc}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) ftruncate(r0, 0xc17a) ftruncate(r0, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'ip6gre0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x7, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 28.352312928s ago: executing program 4 (id=262): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="34febc6a05bb00200000db22bad7bec21a25000000000000000938c6f736b30000000000000074689289872ba1d5ea335dc10b730cfd12d4b004baa644038ae7a10eca4cc03bf5800879dcae773035cef9e821046d2a0588815af5ef3232a4c653", @ANYRES16=r1, @ANYRES8=0x0], 0x78}, 0x1, 0x0, 0x0, 0x44091}, 0x24000800) 28.329227369s ago: executing program 4 (id=263): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000540)={0x0, 'veth0_vlan\x00', {0x2}, 0x9}) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x20040084) socket$inet6(0xa, 0x7, 0x7b3) (async, rerun: 32) r7 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) ptrace$setregs(0xd, r10, 0x0, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 28.259521933s ago: executing program 4 (id=266): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@struct={0x3, 0x0, 0x0, 0x4, 0x1, 0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}]}]}, {0x0, [0x61, 0x5f, 0x5f]}}, &(0x7f0000002cc0)=""/4085, 0x4d, 0xff5, 0x9}, 0x6b) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000500)={0x0, 0x2, 0x0, 0x1, 0x26b}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xef7f, 0x1, 0x0, 0xffffffff, 0x0, 0x1, {0x1}}) io_uring_enter(r1, 0x6e2, 0x3900, 0x43, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x1, 0x2) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f00000002c0)={0x5, 0x4, 0x9, 0x6, 0x3}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r5, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) fchdir(r4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0xfffffffffffffffe, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x5, r5, 0xb) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="6469736335c5d9c63dd8623064dffeae5e6368d2d0679da81f896865636b3d73653b6178020000006f74732c6e6f646f74732c646973636172"], 0x1, 0x22d, &(0x7f0000000300)="$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") r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000540)=@deltfilter={0x24c, 0x2d, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0x8}, {0xd, 0x3}, {0x0, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x862}, @filter_kind_options=@f_route={{0xa}, {0x214, 0x2, [@TCA_ROUTE4_ACT={0x200, 0x6, [@m_tunnel_key={0xc4, 0xa, 0x0, 0x0, {{0xf}, {0x4}, {0x94, 0x6, "0fd0d3be7f724339124fc09f656cf41609526cea4c14d5c86602889c4d2e925f54b02b5ece43ab7acc4ca0366c1f6a2df706ae5d76fa256367686e80a155c1ed8ed97a6ec26b66386de7a36ae9829da4b9bae142d67adcf8ac6eeef4ee46be8bbcdeeb6ad1345218fb01804295273f12712ba16326f516499718ffe0e20562ed7b2b3a3cd70cdb06dee88ebcdef2d54f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x138, 0x1a, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x20, 0x1, 0x6, 0xc8e}}, @TCA_DEF_DATA={0x7, 0x3, '({\x00'}]}, {0xea, 0x6, "244b726c9ed28684151a5e359dbd0a1b29bc0d5b17417d60cdaaee402398f679515f8b65ac5909b93e7fa01f6422ab51c5d14faaacbbcb6b001974d929394c8e685a5f0c75df398876260567ce35722b0957066c0a224f25d59ec631159621401f366bab1ab49bc44636f09f850b49f9f9b9a35a72101dd98a5ae5b462e177681ad5c120e173dcdaa0ef831253c6d4249c23da4377294aa86d3e5ac24b9086e1c5eaf0bda781f6c07d9fd7fc8ae6252780dbd253cd8986b04c7c01a67c538a1e2dbd1d4f31d589d95b5edef3a64d1b487c589a4b05c44ec2530f38eec82a68504d0b416a7045"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x91}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40}, 0x4008840) r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) unlinkat(r9, &(0x7f0000000280)='./file0\x00', 0x200) 27.640471959s ago: executing program 4 (id=275): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3e, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x9, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r1 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x4, 0x2, 0x0, {0x0, r4, r0}}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 27.322137268s ago: executing program 4 (id=277): syz_emit_ethernet(0x74, &(0x7f0000000400)=ANY=[@ANYBLOB="2a9304055947f26400000000080045000024000000000073903800000300e000000100000000fe9a90790200e80000000000", @ANYRES32=0x0, @ANYRES16], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x8000004, 0x3, 0x1800077, 0x6, 0x2, 0x6, 0x20000001004, 0x8000001, 0xfffffffb}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x84242, 0x46) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4004014) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="da10000008eb3d", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf254c0000000e0001006e657464657673696d0000000f0002006e658f64657673696d3000000c00a70000000000000000000e00a90066697273746e616d65000000"], 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x20) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r5, 0x5602, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x8000, 0x3}) ioctl$KDFONTOP_GET(r4, 0x560f, &(0x7f0000000040)={0x1, 0x4002, 0x3f, 0x2, 0x3f000000, 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) getsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000300)=""/90, &(0x7f0000000140)=0x5a) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"}) r7 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) write(0xffffffffffffffff, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xfffffffffffffcc6, 0xc854}, 0x4000010) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x2062) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc0042, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r9, 0x0) write$UHID_INPUT(r6, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1015) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 27.27345372s ago: executing program 32 (id=277): syz_emit_ethernet(0x74, &(0x7f0000000400)=ANY=[@ANYBLOB="2a9304055947f26400000000080045000024000000000073903800000300e000000100000000fe9a90790200e80000000000", @ANYRES32=0x0, @ANYRES16], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x8000004, 0x3, 0x1800077, 0x6, 0x2, 0x6, 0x20000001004, 0x8000001, 0xfffffffb}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x84242, 0x46) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4004014) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="da10000008eb3d", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf254c0000000e0001006e657464657673696d0000000f0002006e658f64657673696d3000000c00a70000000000000000000e00a90066697273746e616d65000000"], 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x20) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r5, 0x5602, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x8000, 0x3}) ioctl$KDFONTOP_GET(r4, 0x560f, &(0x7f0000000040)={0x1, 0x4002, 0x3f, 0x2, 0x3f000000, 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) getsockopt$packet_buf(r3, 0x107, 0x6, &(0x7f0000000300)=""/90, &(0x7f0000000140)=0x5a) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"}) r7 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) write(0xffffffffffffffff, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xfffffffffffffcc6, 0xc854}, 0x4000010) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x2062) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc0042, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r9, 0x0) write$UHID_INPUT(r6, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1015) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 21.412736132s ago: executing program 1 (id=382): syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x8000004, 0x3, 0x1800077, 0x8, 0x2, 0x6, 0x20000001004, 0x1, 0xfffffffd}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) open(&(0x7f00000000c0)='./bus\x00', 0x84242, 0x46) mknodat(r0, &(0x7f0000000100)='./bus\x00', 0x400, 0x9) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4004014) inotify_rm_watch(0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 21.315598538s ago: executing program 1 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x0, 0xd, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x10, 0x7800, 0x4, 0x6}}) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=@bridge_getneigh={0x2c0, 0x1e, 0x100, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x2028, 0x400}, [@IFLA_MAP={0x24, 0xe, {0x5d, 0xc85, 0x8e1b, 0x7, 0x5, 0x4}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6d8a}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_VFINFO_LIST={0x244, 0x16, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1, 0xffffff41}}, @IFLA_VF_MAC={0x28, 0x1, {0x3, @local}}, @IFLA_VF_TRUST={0xc, 0x9, {0x800, 0xfffffffa}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0x7, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0xe}}, @IFLA_VF_RATE={0x10, 0x6, {0x8, 0x81, 0x7ff}}]}, {0xa4, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xb5, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @multicast}}, @IFLA_VF_VLAN={0x10, 0x2, {0xb, 0x708, 0x10000}}, @IFLA_VF_MAC={0x28, 0x1, {0xbb9, @multicast}}, @IFLA_VF_RATE={0x10, 0x6, {0x28bf, 0x9, 0xfffffff5}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x40, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x9, 0x6}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x10, 0x179, 0x2, 0x8100}}, {0x14, 0x1, {0x7ff, 0x7f1, 0xd5, 0x88a8}}]}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8001, 0xd}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xffff, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x6}}, @IFLA_VF_TRUST={0xc, 0x9, {0xf, 0x5}}]}, {0xb0, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xc2, @random="fc6d3bb9b6c5"}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x1c90d553}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x200, 0xffffffff}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x2da}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x4}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x4}}, @IFLA_VF_MAC={0x28, 0x1, {0x5, @broadcast}}, @IFLA_VF_RATE={0x10, 0x6, {0x290c, 0x8}}]}]}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0xd4c}}}}, @IFLA_WEIGHT={0x8, 0xf, 0x8}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) read(r2, &(0x7f0000000440)=""/179, 0xb3) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000540)='1\x00', 0x2) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000005c0), 0x10001, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback=r5, r4, 0x2f, 0x14, 0x0, @void, @value=r6}, 0x20) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000600)={0x0, 0x1, 0x1, "8e"}, 0x9) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000640)) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0), 0x391000, 0x0) setsockopt$MRT_DONE(r7, 0x0, 0xc9, 0x0, 0x0) recvmmsg(r7, &(0x7f0000003d40)=[{{&(0x7f0000000700)=@nl=@proc, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000780)=""/102, 0x66}, {&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f00000008c0)=""/117, 0x75}, {&(0x7f0000000940)=""/12, 0xc}, {&(0x7f0000000980)=""/151, 0x97}, {&(0x7f0000000a40)=""/151, 0x97}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/132, 0x84}], 0x8, &(0x7f0000001c40)=""/130, 0x82}, 0x8}, {{&(0x7f0000001d00)=@isdn, 0x80, &(0x7f0000002f80)=[{&(0x7f0000001d80)=""/52, 0x34}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/142, 0x8e}, {&(0x7f0000002e80)=""/240, 0xf0}], 0x4, &(0x7f0000002fc0)=""/31, 0x1f}, 0x6}, {{&(0x7f0000003000)=@hci, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003080)=""/121, 0x79}, {&(0x7f0000003100)=""/204, 0xcc}, {&(0x7f0000003200)=""/119, 0x77}, {&(0x7f0000003280)=""/135, 0x87}, {&(0x7f0000003340)=""/10, 0xa}, {&(0x7f0000003380)=""/234, 0xea}, {&(0x7f0000003480)=""/203, 0xcb}, {&(0x7f0000003580)=""/23, 0x17}, {&(0x7f00000035c0)=""/213, 0xd5}], 0x9, &(0x7f0000003780)=""/77, 0x4d}, 0x2}, {{&(0x7f0000003800)=@nl=@proc, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003880)=""/109, 0x6d}, {&(0x7f0000003900)=""/150, 0x96}, {&(0x7f00000039c0)=""/130, 0x82}, {&(0x7f0000003a80)=""/48, 0x30}, {&(0x7f0000003ac0)=""/88, 0x58}, {&(0x7f0000003b40)=""/236, 0xec}, {&(0x7f0000003c40)=""/121, 0x79}], 0x7}, 0x4}], 0x4, 0x12020, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000003e40)='wg1\x00', 0x4) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r8, 0x80044943, &(0x7f0000003e80)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000003ec0)={{0x1, 0x1, 0x18, r3, {0x64cf}}, './file0\x00'}) read$snapshot(r7, &(0x7f0000003f00)=""/223, 0xdf) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000004040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000004000)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000004080)={0x6, 0x118, 0xfa00, {{0x0, 0x1, "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", 0x7, 0x3e, 0x10, 0x8, 0x4c, 0x7, 0x8}, r10}}, 0x120) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = open$dir(&(0x7f00000041c0)='./file0\x00', 0xc0280, 0x119) ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000004200)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x8, 0x8000, 0xd0c, 0x7, 0x4, 0x2}, {0x0, 0x4, 0x40, 0x80, 0xfffffffffffffffa}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) copy_file_range(r3, &(0x7f0000004400)=0x1, r2, &(0x7f0000004440)=0x5, 0xffffffffffffff01, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000004480)={{0x8}, 'port1\x00', 0x10, 0x4, 0x7, 0x8, 0x5, 0x3, 0x1, 0x0, 0x1}) 20.464662957s ago: executing program 1 (id=406): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 20.391123611s ago: executing program 1 (id=407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300730ae015000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000df050000080001"], 0x20}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc6c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000400003803c000080080003400000000230000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001400000011000100"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2cc, &(0x7f0000000100), 0xfd, 0x4a5, &(0x7f0000000e00)="$eJzs3M1rHOUfAPDvbDZJ35Nff/WltdpoFYsvSZNWLShYBcGDgqCHepKYpKU2baSJ0JZgo5R6EbTgXQQvon+BJ0+ingSvepdCkV5aPa1MZmbdJLtJk02yafbzgWnm2X1mnuc7zzwzz8zsNIC21Zf+k0TsiIjfI6InIkq1GbZmU5rv9s3pkb9vTo8kUam8+VeSLha3bk6PFFmT/O/2LFFOV1S6ksTxOuVOXrx0Znh8fOx8nh6YOvv+wOTFS0+fPjt8auzU2LmhY8eOHhl87tmhZ1YlzrROt/Z9OLF/76tvX3t95MS1d3/+LonYVnxfG0eTnu+pzk5Xt8l8j61SYRvFzpr5pNzCirAs3RGRNlfnbP/viY4ru6rf9cQrH7e0csCaqlQqlaHGX89UgE0siVbXAGiN4kSfXv8W0zoNPTaEGy9lF0Bp3LfzKfumnN0H6c6ujXauUfl9EXFi5p8v0ymWfR+ic41qBQBsZj+k45+n6oz/yhH31uTblT8b6o2I/0XE7oj4f0TsiYh7Ist7X0TcX7+YvncalN83L71w/FO63kR4S0rHfy/kz7bmjv+qT8F6O/LUztn4O5OTp8fHDufb5FB0dqfpwbprTyJm0r+/fdao/NrxXzql5Rdjwbwe18vdc5cZHZ4abjrw3I2PIvaV68WfRPm/KGJvROxbYRmnn/hm/9xPOqpzS8e/iFV4zlT5KuLxrP1nYl78hWTx55MDW2J87PBAsVcs9MuvV99oVH4WfykWj39r84E2kLb/tnr7/4vV+HuT2ue1kwtW0bVUGVf/+KThNc1K9/+u5K05hV8Ynpo6PxjRlby28POaG9xF+sLot7P50/gPHazf/3fny6TxPxAR6U78YEQ8FBEH8ro/HBGPRMTBReL/6eVH32sY/4Em9v9VkMY/Wvf416j9lzGzJV/DmR+/b1R+tf2LBqvb/keLxGylZo9/S3SJO63pyrYaAAAA3F1KEbEjklJ/db5U6u/Pfi+/J7aVxicmp548OfHBudHsHYHe6CwVd7p6au6HDub3hov0UJ6+nKeP5PeNv+jYOpvuH5kYH2118NDmtkccjzr9P/VnR6trB6y5Bc/RKj2tqQiw7ryvCe1r5f3fkQPudkv04tJ61QNYf87i0L7q9f/LtYkksl/JA5uO8z+0r2r///wOMte87jX/5U3g7rPY+d9PAWBzM/6HtrSi9/o30kx8HbF4nmSjVHVZM582s3h5HWoYpRZun66WNMpQR0QLd4nynf6vFnGxcrnpQlt9ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgd/wYAAP//+OPdbA==") timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f000068f000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x8, 0x274}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x21921b9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9e96}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r9 = dup(r8) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000080)={0x0, r9, 0x3, 0xc67, 0x9, 0xf}) 20.116370588s ago: executing program 1 (id=411): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) mount_setattr(r0, 0x0, 0x9800, &(0x7f0000000040)={0x100002, 0xf4, 0x0, {r0}}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x40, 0xe, 0x0, @remote, @loopback, 0x7, 0x8000, 0x5, 0xa}}) r2 = openat(r0, &(0x7f0000000140)='./bus\x00', 0x3b7281, 0x0) socket(0xb, 0x5, 0x4000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) unshare(0x2a020400) pselect6(0xfffffffffffffea2, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2, 0x5000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ftruncate(r2, 0x8800000) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setresuid(0x0, 0xee00, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$sock_int(r4, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r2) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="14d072edd8000000", @ANYRES16=r6, @ANYBLOB="290327bd7000fddbdf250b000000"], 0x14}}, 0xc0) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x13, &(0x7f0000000000)=0x8000002, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @local, 0xff}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r7, 0x0) sendfile(r3, r2, 0x0, 0x578410ed) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f00000005c0)='./bus\x00'}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000400)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x6}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb517}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000300)='syzkaller\x00', 0x208, 0xb4, &(0x7f0000000700)=""/180, 0x41100, 0x10, '\x00', r1, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xce8f, 0xffffffffffffffff, 0x9, &(0x7f0000000b00)=[r0, r2, r8, r9, r2, r8, r0, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x3, 0x3, 0x6}, {0x4, 0x1, 0xf, 0x4}, {0x1, 0x3, 0x8, 0x4}, {0x1, 0x4, 0x9, 0x9}, {0x5, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x6, 0x9}, {0x5, 0x5, 0xf, 0x3}, {0x1, 0x3, 0xa}, {0x0, 0x1, 0xd, 0xa}], 0x10, 0x10000}, 0x94) 19.7396056s ago: executing program 1 (id=416): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe000000008500000089000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 19.642141675s ago: executing program 33 (id=416): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe000000008500000089000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 15.793149739s ago: executing program 0 (id=468): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file2\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000380)=0xef) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000e, 0x10012, r0, 0x0) 15.44513656s ago: executing program 0 (id=471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x400}) syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") 15.108945169s ago: executing program 0 (id=476): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x8, &(0x7f0000000100)=[{0xc9f, 0x6, 0xc, 0x7}, {0x2, 0xf5, 0x90, 0x8000}, {0x2, 0x21, 0x9, 0x1}, {0x2, 0x3}, {0xc3, 0x2, 0x5, 0x8}, {0xaa0c, 0x2, 0x40}, {0xa2ec, 0x10, 0x6, 0x1}, {0x1, 0x81, 0x3, 0x7f}]}, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @val=@netfilter={0x3, 0x0, 0xbfe, 0x1}}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x8}, 0x8216, 0x6, 0x11000, 0x0, 0x9484, 0x1, 0x400}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = io_uring_setup(0x512, &(0x7f0000000640)={0x0, 0xdda8, 0x800, 0x503fc, 0x2e0}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000040)=""/190, 0xbe) 14.802515567s ago: executing program 0 (id=492): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r1], 0x80}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") ioprio_set$pid(0x3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x146) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) write(r9, &(0x7f0000000a00)="c7", 0x1) sendfile(r9, r4, 0x0, 0x3ffff) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r11, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r12 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r6, @ANYRES32=r5, @ANYBLOB="005481d278e1e28069d1d238c567b383ca"], 0x18, 0x4000025}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000000000000071103c00000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00'}, 0x80) close(r7) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) io_uring_register$IORING_REGISTER_FILES(r5, 0x20, &(0x7f0000000000)=[r5], 0x1) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = msgget(0x0, 0x223) msgsnd(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x2000, 0x2d3e49c85323258d) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e540800014000000000"], 0x70}}, 0x24044850) close(r4) io_uring_enter(r6, 0x2d19, 0x196, 0x20, &(0x7f00000001c0)={[0x8]}, 0x8) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r0) 14.167950904s ago: executing program 0 (id=489): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@noblock_validity}, {@abort}, {@noload}, {@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nolazytime}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x49a, &(0x7f00000013c0)="$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") 14.161806574s ago: executing program 34 (id=489): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@noblock_validity}, {@abort}, {@noload}, {@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nolazytime}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x49a, &(0x7f00000013c0)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKoUaWhMhRKsHPBoS78b/wnjSi1EvmnjVuyEhhguolzWzM9OWZbfd0mWXsp9Psux7M8O+9503b/bNvM4G0LWGsn+SiO0R8UdEDOTZWzcYyt9uXr808c/1SxNJVCpv/51Ut7tx/dJEuWn5/7blmUqlyG+qU+7l9yLGZ2amzhf5kfmzH47MXbj44vTZ8dNTp6fOjR0/fuTwvv5jY0dbEmcW1409n8zu3X3i3StvTpy88v7PSRp53FETR6sM5Xu3rmdaXViH7ViWTnqXr9n/61K63pFAJ/VERNZcfdX+PxA9sWVx3UC8/nlHKwfcVZVKpbLCWXmhAtzHkuh0DYDOKL/os+vf8tWmocc94dor+QVQFvfN4pWv6Y00T+zvq7m+3d7C8oci4uTCv19nr1jrfYj+FlYEAOga32fjnxfqjf/SeCRPVEcZDxRzKIMR8WBE7IyIhyJiV0Q8HFHd9tGIeGyN5dfOkNw+/kmv3nFwTcjGfy8Xc1u3jv/ScpPBniK3oxp/X3JqembqULFPDkbfplPTydToCmX88NrvXzZat3z8l72y8suxYFGPq701N+gmx+fH1xPzctc+i9jTWy/+JMppnCQidkfEnjssY/q53obrVo9/BY0/tmmVbyKezdt/IWriLyUN5ydHXzo2dnRkc8xMHRopj4rb/fLb5beK5JbadeuKvwWy9t9a9/hfjH8w2Rwxd+Himep87dyaPj7rOnH5zy8aXtMU8Wfdq5nj/8SO4vjvT96pLshOTpsj4uPx+eqppD95Y3F55Mvnz48tfVqZr76P5vEfPFC//++MpT3xeETsjYh9EfFEdlFY1P3JiHgqIg6ssBN+evXpD1aJv077t2euNIt/crX2j+Xtv/ZEz5kfv1s9/qwVG7X/kWrqYLGkmfNfsxVcz74DAACAjSL/G/gkHV5Mp+nwcP43/LtiazozOzf//KnZj85N5vPeg9GXlne6BpbdDx0t7g2X+bGa/OHivvFXPVuq+eGJ2ZnJTgcPXW5bg/6f+aun07UD7rqm5tEaP8sGbGAtmEcHNqg76v99ra8H0F6J73/oakv9v5WPtgEbQb3v/08bbj387V2tDNBWxv/QvZro/wv5W+NRAbAx+f6H7qX/Q1dq+Gx8Guk6Hvlve+K/4vcM75X6dCpRSSKiLWVFeo+EfL8nepv+MYs1JCoDef/Plmyqu02nz0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACt8X8AAAD//3964Ro=") 3.401024191s ago: executing program 7 (id=688): syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x8000004, 0x3, 0x1800077, 0x8, 0x2, 0x6, 0x20000001004, 0x1, 0xfffffffd}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) open(&(0x7f00000000c0)='./bus\x00', 0x84242, 0x46) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4004014) inotify_rm_watch(0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x1) 3.25730224s ago: executing program 7 (id=691): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x6, 0x0, 0x5, 0xe, 0x2, 0xf, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}, [@generic={0x91, 0x1, 0x1, 0x7e}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.719709091s ago: executing program 7 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18100000000000000007000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x20}}, 0x2000e844) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40081271, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x3218f72e}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xc1, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f00000006c0)={[{@sysvgroups}, {@noblock_validity}, {@nolazytime}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_gt}, {@obj_user={'obj_user', 0x3d, ','}}, {@obj_role={'obj_role', 0x3d, '.)^'}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4") r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000280)=0x4) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f0000000500)={'filter\x00', 0x0, [0x7f, 0x7, 0x20000004, 0x5, 0x100000c]}, &(0x7f0000000040)=0x54) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r10 = dup(r9) write$UHID_CREATE2(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000000000000001dbf00000000ea0000000000000da5d61a"], 0x11e) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f00000002c0)) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') renameat2(r11, &(0x7f0000000000)='./mnt\x00', r11, &(0x7f0000000080)='./cgroup\x00', 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f80)=@newqdisc={0x43c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0xb, 0xa}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x410, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x2891, 0x80000001, 0xc6, 0x9461, 0x2, 0x100, 0x5, 0x6, 0x1, 0xe, 0x6, 0x39, 0xfffffff1, 0x1, 0x2, 0x7, 0x8, 0x101, 0x1000, 0xf0, 0x4, 0x3, 0x5, 0x0, 0x10, 0x7, 0x7, 0x4, 0x5, 0x7, 0x8, 0x9, 0xffff, 0x9, 0x3, 0x24, 0x6, 0x6, 0x6, 0x9, 0x3, 0x2, 0x5, 0x16, 0x1, 0x8, 0x6, 0x7, 0x26f9, 0x2, 0x1, 0x4, 0x5, 0x0, 0x0, 0x2, 0xf, 0x9, 0x8001, 0x9, 0x3, 0x7, 0x6, 0x0, 0x0, 0xad75, 0x6, 0x1000, 0x4, 0x3, 0x7, 0x1, 0x81b, 0x9, 0xfffff6fc, 0x8, 0x9, 0x9, 0x4, 0x0, 0xd50, 0x9, 0x5b5, 0x101, 0x4, 0x0, 0x1, 0x8, 0xff, 0xfffffff7, 0x8, 0x4, 0xa, 0x8d8, 0x2, 0x5, 0x6, 0x2, 0x0, 0x4, 0x2, 0x40093, 0x200, 0xffff, 0x4, 0x401, 0x0, 0x4, 0x10000, 0x7, 0x5, 0x0, 0x5, 0x0, 0x6, 0x2, 0x2, 0x800, 0x93b, 0x1, 0x38, 0x662, 0x2b, 0x7f, 0x8, 0xd, 0x34, 0x1, 0x6, 0x7, 0x3ff, 0x10000, 0x62, 0xe590, 0xe, 0x146, 0x7, 0xb, 0xc000000, 0x2, 0x1ff, 0x7, 0x1, 0xfffffffe, 0xfffffffb, 0x5, 0x101, 0x10001, 0x1, 0x5f, 0x3, 0x7, 0x8, 0x7, 0x7, 0x9, 0x3, 0x15, 0x10001, 0x100, 0x2, 0x9, 0x400, 0xfffffff8, 0x5, 0x0, 0x59, 0x8000, 0x3, 0x7fff, 0x6, 0xc, 0x7, 0xa1c, 0x98a, 0xf, 0x6, 0xe, 0x0, 0x61a, 0x9, 0x5, 0x6, 0x9, 0xf, 0xa, 0x11d, 0xfff, 0x2, 0xe96c, 0x7, 0x4, 0x8, 0xffff4018, 0x4, 0x10001, 0xd262, 0x6, 0x8, 0x7, 0x4, 0x9, 0x859e, 0x7, 0x9, 0x7, 0xba, 0x6, 0x5, 0x3, 0x4e13a58e, 0x3, 0x8000, 0x97, 0x6, 0x1, 0x8, 0x1, 0x7, 0xb1f, 0x86, 0x898, 0x6, 0x80, 0x10000, 0x2, 0x9, 0x1, 0x4dc, 0xdf81, 0xfff, 0x5, 0x2, 0x7f, 0x0, 0x0, 0x3, 0x2, 0x9, 0xfffffffd, 0xfaa0, 0xcd, 0x7, 0x7, 0x10000, 0x6, 0x84, 0xfe, 0xc5b, 0x80000001, 0xa, 0x5, 0x3, 0x7, 0x3, 0x9e83]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1a7d}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40001}, 0x44080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="000000006a00000c29bd7000fedbdf25020000000000000000000b0000000500", @ANYRES32=r3, @ANYBLOB="00000500071ad1e6f45b5599dadf19a8a6a11eaf4d88d0a1aa1284bab84272d15dd91fc4673163549dfd7c6ae5e477a74e399cca2dbedc91be642b72a80efa84be3b3235228f07ecd725ecb408a48c431a46f55f068f04aec74783ae15180743d26a9b9a1c530627c52894f3ceccfa10436e3bfc37cb6d1f42e9eb7187a7e557334aa9250a93d95bf38ace90f551f322a0a630c90500b104a0ae1b5a28237cdf136d3a6402", @ANYBLOB, @ANYBLOB="00000900000001000000000000000a000200000400000b0000000500", @ANYRESOCT=r5, @ANYRES32=r7], 0x58}}, 0x20000010) 2.108339287s ago: executing program 7 (id=709): unshare(0x22020600) (async) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './bus'}, 0x9) (async) copy_file_range(0xffffffffffffffff, &(0x7f00000008c0)=0x800000000000008, r0, 0x0, 0x10, 0x0) 2.040805281s ago: executing program 7 (id=711): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) (async) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x2000e0c) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') (async) unshare(0x2c020400) 1.779198996s ago: executing program 7 (id=715): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f00000001c0), 0x0) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000)) 1.777152146s ago: executing program 5 (id=717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.719125649s ago: executing program 5 (id=720): socket(0xf, 0x2, 0x80000083) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x323, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x182}) 1.664176853s ago: executing program 6 (id=721): creat(&(0x7f0000000080)='./file1\x00', 0x100) (async) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x100) close_range(0xffffffffffffffff, r0, 0x0) (async) close_range(0xffffffffffffffff, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/kcm\x00') pread64(r1, &(0x7f0000000040)=""/26, 0x1a, 0x7fffffff) lseek(r1, 0x10001, 0x0) io_uring_enter(r0, 0x6bf5, 0xf8d8, 0x4, &(0x7f0000000140)={[0x8]}, 0x8) unshare(0x16060080) signalfd(r0, &(0x7f0000000200)={[0x3]}, 0x8) (async) r2 = signalfd(r0, &(0x7f0000000200)={[0x3]}, 0x8) bind$802154_raw(r2, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r3, 0xb) socket$kcm(0x11, 0x3, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000340)={0x0, @generic={0x29, "a04ba749fb821c85e0dcfc59060e"}, @can, @isdn={0x22, 0x8, 0xc, 0x0, 0x9}, 0xff, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)='bridge_slave_0\x00', 0xd8d3, 0x10, 0x39ba}) io_setup(0x2007, &(0x7f0000000980)=0x0) r7 = eventfd2(0x9, 0x0) io_pgetevents(r6, 0xfffffffffffffffe, 0x8, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) (async) io_pgetevents(r6, 0xfffffffffffffffe, 0x8, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x1000001) io_destroy(r6) (async) io_destroy(r6) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r3) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000180)=@ax25={{0x3, @null, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x80, &(0x7f0000001300)=[{&(0x7f00000000c0)="2705020034000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600012c21880b00a38f2b97ccfff7b9bf52fa205e2d", 0x41}, {&(0x7f00000002c0)="1c393502dda1a67d93b1cea300"/25, 0x19}], 0x2}, 0x9cdc2384016f4068) 1.520604151s ago: executing program 6 (id=724): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x200f67f, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x100, 0xc2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000380)={0x9, 0x0, 0x5fe, 0xffffffff, 0xdae}) 1.466457784s ago: executing program 6 (id=726): r0 = msgget$private(0x0, 0x421) msgsnd(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="0200e9ea"], 0x8, 0x0) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0x8, 0x800) msgrcv(r0, &(0x7f0000000280)={0x0, ""/4092}, 0x1004, 0xbd8e6b799bcfd099, 0x2800) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000140)={0x80, 0x1}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000008000300af51823c3567", @ANYRES32=0x0], 0x3c}}, 0x4000054) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$eJzs2k9rHHUYB/BnYqUxJd2I/2hB+kMP6mVocvIgkiAtiAFFG6EK0qmZ6JJxN2SWwIrYeNGLB1+CZ/HoTZCKFy+5+Ao8eMslxx7EkXbTNhtWyKJxS/P5XPZhn/0uz/AMw+8wu69888n6Wp2vFb2YyrKYWoztuJXFXEzFXdvx0gtXf332navvvbG0vHzp7ZQuL12ZX0gpnb3w0/ufff/czd6Zd384++Pp2Jn7YHfviz92nt45t/vXlY/bdWrXqdPtpSJd73Z7xfWqTKvtej1P6a2qLOoytTt1uTnUX6u6Gxv9VHRWZ2c2Nsu6TkWnn9bLfup1U2+zn4qPinYn5XmeZmeCf2Plu1tNE3vNo9ciu/vd7O/RiuzxlD2xmD11LXtmOzu31zStyQ7KMbm3/6ZpHvs2zty0/xPlwEN9OqL6amtla2XwOegvrUU7qijjYrTiz7h9m+wb1JdfX750Md0xF19WN/bzN7ZWHhnOz0cr5kbn5wf5NJw/HTMH8wvRiidH5xdG5qfjxecP5PNoxW8fRjeqWI3b2fv5z+dTeu3N5UP583d+BwDwsMnTPSPPb3n+T/1Bfozz4aHz1ak4f2qy105E3f90vaiqclMxTnFh3NT05GeeeHH8N1uTRTwIV3qk4pefX335ARhjv1g8vJ1JP5n4P9xf+lET08c7EAAAAAAAAAAAAEfy371F+PX+Pw61snHeLAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6mvwMAAP//cOvMBw==") truncate(&(0x7f0000002540)='./file2\x00', 0xe) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=@newtaction={0x170, 0x30, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{0x15c, 0x1, [@m_ctinfo={0x124, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xd}]}, {0xe6, 0x6, "5ab877dbcff7ce1001e47dba8b0357ca4c333da803765a0002334e36a7b54dd46fea02087d57ceb96b0e38cfd9f1e1ad4f0b6effe95a63286373141885aa81ed64b40b79f5839efd98ad4e3bffc74c6f36e0425c6c1e674dedcbe7183ad76f11b109fdf63a5cbcb6966fcd9a67e05f64fe140aa3e82b0793e3788c5ccd40e7a79465e245327acdc5950982d96c98fb1b9109f1de52ebec930ad89d3281f563ad182d0477eb5e51db9c3dfdfe030c6949a9fb54189296e7caab1a51597338d261133368f9fa2e95378594bff3e8d9edc024ff54cce18fb9bbafe185037284b942465a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x170}}, 0x0) 893.893637ms ago: executing program 2 (id=728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 868.147619ms ago: executing program 5 (id=729): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002a00)="f8", 0x1}], 0x1, &(0x7f0000003a00)=[{0x10, 0x1, 0xd}], 0x10}}], 0x2, 0x40088c5) 811.623132ms ago: executing program 5 (id=730): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff30, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0xfb5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x148}}, 0x844) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0xfb5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x148}}, 0x844) 810.865582ms ago: executing program 2 (id=731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x2, 0x80, 0x1, 0x1, 0x6, 0x7, 0x0, 0x101, 0x2c000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x625, 0x3}, 0x800, 0x2, 0x5a1, 0x2, 0x6, 0x3, 0xe, 0x0, 0x9, 0x0, 0x2}) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 768.218435ms ago: executing program 5 (id=732): mount_setattr(0xffffffffffffff9c, 0x0, 0x9000, &(0x7f0000002340)={0x20, 0x1000f5}, 0x20) r0 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\n'], 0x50) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 32) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async, rerun: 32) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (rerun: 32) 754.400926ms ago: executing program 2 (id=733): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setfsgid(0xee01) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000000}) 630.099023ms ago: executing program 5 (id=734): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9fb, @dev={0xfe, 0x80, '\x00', 0x16}, 0x80000000}, 0x1c) r1 = timerfd_create(0x5, 0x80000) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r1}, {@void, @max}}) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=""/196, &(0x7f0000000180)=0xc4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x220, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f00000001c0), {[{{@arp={@local, @broadcast, 0xffffffff, 0xff000000, 0xe, 0xb, {@mac=@random="212664a66029", {[0xf5d7fa8a98bdb24f, 0x0, 0xc64e266955ab59f4, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x10, 0x6, 0x7, 0x3, 0x7, 0x3, 'bond_slave_0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x0, 0x142}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="e22b24d27f12", @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000680)={0x2f, @local, 0x4e23, 0x4, 'sed\x00', 0x12, 0x8, 0x16}, 0x2c) r3 = signalfd(r2, &(0x7f00000006c0)={[0x8001]}, 0x8) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000700)={0x1, 0xe, 0x0, 0xfffffffb, 0xb, "b443d6c17e6c163c2f92888bf0093a21d11ef3"}) r4 = fcntl$dupfd(r2, 0x406, r0) sendto$inet6(r4, &(0x7f0000000740)="db41e99060cc210c1e3f4a0a34778af75817e575735e39999e6c674b785b3899949c3b67334aa44645ff42d2ba9479540b35507552e2878b1a4b6a7db04b6702c9b87e908d8b557a87ba125fa9e51ad609b1609ea3966f7933c9e79bda41a4dca344ecc6f088256cf261a966cf2ebefb7dd5bdf0fd078b23d504d2ce4f746a412a3833832617bed052aef10b10a65b014acdb15e1a4bd4ec27b1a4189a5c31dfd2aa319926318d1e341c9292e32ee64bd9d4ee2e873f7a4c436b34eef6db3823b494", 0xc2, 0x8c3, &(0x7f0000000840)={0xa, 0x4e20, 0x7ff, @remote, 0x9}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x12, 0x1e, &(0x7f0000000880)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7a}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lu}], &(0x7f0000000980)='syzkaller\x00', 0xbcba, 0x1000, &(0x7f00000009c0)=""/4096, 0x41100, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x9, r4, 0x8, &(0x7f00000019c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001a00)={0x1, 0x1, 0x4, 0x10}, 0x10, 0x0, r4, 0x4, 0x0, &(0x7f0000001a40)=[{0x0, 0x3, 0x8, 0xb}, {0x4, 0x2, 0xa, 0x4}, {0x5, 0x3, 0xa, 0x4}, {0x3, 0x1, 0xf}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002cc0)={r5, 0x0, 0x6c, 0x26, &(0x7f0000001b40)="b4e6c8191c8a71cc5fa2d9369ef4bdd651fcc5ba27315449f264fe68c7c5e43a42c47337a5a9feb9fd888865ca1489a5fde1051acc9748ebe6aeafbbe86b24ca4f4e07bf474a178dd774a5576843bf33b141f004f29d9b0d67d8d12ad0862f84a07c1fee5457eadbbbf9ae1d", &(0x7f0000001bc0)=""/38, 0x9, 0x0, 0x85, 0x1000, &(0x7f0000001c00)="afff5c81a40784d6e9c033f77273cd5fcd20189f6b5a8bd4fad2f7cb4def2039ca0166ac7049bcf7254dee1994fbf72da11e3e3fe76121eba7fe383d1ca3aea5f2a15f14232e5ffa4c09e552fdbcda0c26929e3c86238f9829bdb8e92b3050f99709a8421b0c771a950dc82e78777e36b484f794fdace4f9486283747f4d6319ba26e263d1", &(0x7f0000001cc0)="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", 0x6}, 0x50) timer_create(0x3, &(0x7f0000002e40)={0x0, 0x26, 0x4, @thr={&(0x7f0000002d40)="c4d2beaa9271da6aadcbe4b7c8a73944511d5cab575ca796a83e0c0a", &(0x7f0000002d80)="bf62d1be651c8f31cdc7c745bf3a152c0b7af5b0fb2e61f2a523d758ece77f6d7c8844bfaabcfc2219117f8e54a6414ecd28630c03523096f32b336225ec11a4032aa50cf6d77081d780eab47ca460c5c62220646c6afd817ea7bc5a26e52ec978c85c7c45dd33abee5c177a91578328543bb2e80898a24a76ad15bcafb63b5c6ccb20828baee917bd8e441291070cce453774404bca670b132f6a87310af9b730e2a4de2145c9140d8c3e9debd6ff172f71"}}, &(0x7f0000002e80)) io_cancel(0x0, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x1, 0x8000, r1, &(0x7f0000002ec0)="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", 0x1000, 0x0, 0x0, 0x3, r4}, &(0x7f0000003f00)) r6 = syz_open_dev$mouse(&(0x7f0000003f40), 0x6, 0x200200) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0xf503, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000052c0)={{'\x00', 0x3}, {0xc0000000000}, 0x8ef144d3a07c0594, 0x0, 0x0, &(0x7f0000003f80)='./file0\x00', &(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000)="23afc11019069d2fefabd3a42389fddfd0ab8ee9797e372bd590c815f4c0e0ea25f6904720e988573b0859b6ac760b519fdf71dd38e76325870dd3ac92a659fb0d2913cbbb1e3c1b5fcb49937aa8bbfc6201d942b23a1fbaf995284d4dc1d6b11c1d5d2730a38d31214520261ecf7e1da44dc3780117b69134ec3043b69ffdb7e443accc5555e01330a1323d97647673ad3198fdc6961b2d949645afa8e72d80c0d1fba195dc14ae3ff754c4e65de82d5797b724649690e8e6b730c0a3c91d200eb1", 0xc2, 0x0, &(0x7f0000004100)={0x2, 0x108a, {0x1, 0xc, 0x7d, "b8859f564bc755382b2f552e17f09f3519f3963f2850e1fd22a12e39c6ce87eeada1cda26239a4f914e0b06ffdd03634c9a601d5bc85196cf72b3f80838738a68c0e7626737c4a1eefa1d7f1451596955beb0afa45cd8a2e6a900a684364b1e3d187a8e79286cfc506649024a8d8258c83d3054c2b9e56dbb095844af3", 0x1000, "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"}, 0xff, "b5ff7727a5ae8b9b0a50f514efd444ce5778cd63d0d29c1eea6a3c51320e9eed054330a65f3f4720c19f10c8ecbc5ec9061d31bc9b8a774a802a2e8da22ea6cfe7f2cb3c1a6f75f2620b1317d18e56c5160115006b4ad1b0f3e0595a4973e1e07fb624c421e5d5767e910cfaf20b447b75fa6a2903673456ae23c21d126de1cc19d1077210263f39ec7d3ab8269ce36f685db0e8afad2a4a6da29a76297fbae97197c2fc0ef93c0eac341406f5d25c40f40b1e65810f544b4af47dc70706583f09b351c06d314b526b7292ba9c435af7d9b7052b9e2b689fc38c1950b1b9a2563387f9129cc73fc223a5ceb5a8a7b51fd02fb093e1c5930ba154ce7872065f"}, 0x1195}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000005340)) read$msr(r4, &(0x7f0000005380)=""/7, 0x7) r7 = socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005440)={{r6, 0xffffffffffffffff}, &(0x7f00000053c0), &(0x7f0000005400)=r6}, 0x20) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000005640)=0x0, &(0x7f0000005680)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000057c0)=@bpf_lsm={0x1d, 0xd, &(0x7f0000005480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x9, 0x1, 0x0, r4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000005500)='syzkaller\x00', 0x9, 0xfd, &(0x7f0000005540)=""/253, 0x0, 0x2, '\x00', r9, 0x1b, r4, 0x8, &(0x7f00000056c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000005700)={0x2, 0xe, 0x10000, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000005740)=[r6, r6, r6], &(0x7f0000005780)=[{0x5, 0x3, 0x10, 0x4}, {0x2, 0x3, 0xe, 0x7}], 0x10, 0xbfa0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000005880)=r4, 0x4) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f00000058c0)={0x3, 0x200, 0xd}) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f0000005900)={0x4e, "6fb0c14a2ee4c59fe27737f9292478c7d2524810b6e6c20a1290af6a22db52c831ebab1c82efb76e014f34710ed8cb6001e09fec346b4ea9e3f04871b3cf20f2ce80a4986e3136820d1e7213c10100efc56c928f18bdb99abed4913312c806cc58c8a82881685cb00b07d6b91ba8256294c736b35a6dce807c5086ae81dbfb82"}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000059c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa40, 0x23a6629e}}, './file0\x00'}) 546.493238ms ago: executing program 6 (id=735): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250500000018000180140002006272696467653000000000000000000008000900080000000500070005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x5d}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x8}]}}}]}, 0x4c}}, 0x4054) fsconfig$FSCONFIG_SET_FLAG(r2, 0x5, &(0x7f0000000000)='rw\x00', 0x0, 0x4) (async) r4 = socket$kcm(0x2, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ef8, 0x9, r5}) (async, rerun: 64) sched_getscheduler(r5) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0x704a, 0x8, 0x6, 0x5, 0x100, 0x0, 0x0, 0x0, 0x1}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) unshare(0x20000680) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000071c05"], 0x30}, 0x40880) 452.644393ms ago: executing program 2 (id=736): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x200f67f, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x100, 0xc2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000380)={0x9, 0x0, 0x5fe, 0xffffffff, 0xdae}) 404.709816ms ago: executing program 6 (id=737): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') pread64(r0, 0x0, 0x0, 0x1000000300) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x8, 0x30}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x154, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0xa33b}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x101, 0x7fff, 0x1e, 0xe, 0x8, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "9b4b25d7b45b1508fbc62dafb194da1b87a3b6ae3929b7a94d81349a50db6bce7837f108b3d77b5349a553b1ed0e3ef906afa01f9e736e6ddc24cefee96e8cc6d307315dd6c805874c454a49d61402279c351c7cf2129df624f2ad024b65933824b59d72e2230541aac5560532e0039ff504f5ea1edbe4fcb94a76098a0962da8b8f69b6e07f9f747e8bc016c5fe622e13464bdbdd70bcd2c02106effd6bf90f83d142229e286c107c1f3b6d0616b44582506e72972d333abcbca044c1163c65d586aa3555a9df17b564edb038364adbfb736c235857b9223d5207a7612878ae20c6ca7600e84128b5957a18de22c26831dc9fb28767011ee80dda9403844aac"}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x2, &(0x7f0000000a00)=ANY=[@ANYRES16=0x0], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x94) set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfff9) syz_read_part_table(0x5c9, &(0x7f0000000000)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f000006f000/0x4000)=nil, &(0x7f000012d000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f00005e1000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f00000007c0)={0x2, 0x4e21, @local}, 0x10) io_uring_setup(0x12f25, &(0x7f0000000040)={0x0, 0xc8a6, 0x8, 0x1, 0x800c1}) 403.891586ms ago: executing program 2 (id=738): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10100, 0xfffffffd, 0xd5}, &(0x7f0000000100)=0x0, &(0x7f0000002080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x72}, 0x2c) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r13 = socket$kcm(0x11, 0x3, 0x0) r14 = socket(0x400000000010, 0x3, 0x0) r15 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r16, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0xf3c, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x8, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x8e9, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xe2f3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x40000005, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3d, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0xc28, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r17) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r17, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r18, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f00000000000000fdfdffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000655090100000020009500000000000000bf91000000000000b702000001000100000000002a000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0xf, 0xffd, &(0x7f0000000cc0)=""/4093, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) io_uring_enter(r1, 0x27e2, 0x0, 0x7, 0x0, 0x0) 368.072438ms ago: executing program 3 (id=739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000030801010000000000000000000000081400048008000140000000080800024000000003050003002f"], 0x30}, 0x1, 0x0, 0x0, 0x4008871}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2008000000000015000c0080ffffff3d03010000000000950000d300000000bc26080000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) 303.074982ms ago: executing program 6 (id=740): socket(0xf, 0x2, 0x80000083) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x323, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x182}) 238.070036ms ago: executing program 3 (id=741): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002a00)="f8", 0x1}], 0x1, &(0x7f0000003a00)=[{0x10, 0x1, 0xd}], 0x10}}], 0x2, 0x40088c5) 237.248116ms ago: executing program 3 (id=742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 226.327406ms ago: executing program 2 (id=743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x182) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket(0x22, 0xa, 0xce14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) fallocate(r2, 0x0, 0x1, 0x2000402) 175.819329ms ago: executing program 3 (id=744): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000001, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x80000) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @dev}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "0cd80e00"}]}}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000005}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 5.215249ms ago: executing program 3 (id=745): socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x4, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x2, [{0x8, 0x2}, {0x2, 0x3}, {0x8, 0x9}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f00000000c0)=""/189, 0x32, 0xbd, 0x1}, 0x28) 0s ago: executing program 3 (id=746): r0 = socket(0x1, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000340)={0x2, &(0x7f0000000040)=[{0x30, 0x8, 0x80, 0xfffff028}, {0x6, 0xc0, 0xff}]}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) (async, rerun: 64) shutdown(r1, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) close(r0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) (async) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r5, @ANYBLOB="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"/512], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000500)={0xe000200c}) (async) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f0000000040)={0x80000004}) kernel console output (not intermixed with test programs): __dump_stack+0x1d/0x30 [ 32.732743][ T3809] dump_stack_lvl+0x95/0xd0 [ 32.732803][ T3809] dump_stack+0x15/0x1b [ 32.732825][ T3809] should_fail_ex+0x263/0x280 [ 32.732880][ T3809] should_failslab+0x8c/0xb0 [ 32.732910][ T3809] kmem_cache_alloc_noprof+0x66/0x400 [ 32.732940][ T3809] ? do_getname+0x2e/0x1c0 [ 32.732972][ T3809] do_getname+0x2e/0x1c0 [ 32.733051][ T3809] __se_sys_mknod+0x21/0xf0 [ 32.733074][ T3809] __x64_sys_mknod+0x43/0x50 [ 32.733124][ T3809] x64_sys_call+0x2acd/0x3020 [ 32.733210][ T3809] do_syscall_64+0x12c/0x370 [ 32.733243][ T3809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.733266][ T3809] RIP: 0033:0x7f0c08fdbf79 [ 32.733283][ T3809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.733321][ T3809] RSP: 002b:00007f0c07a2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 32.733341][ T3809] RAX: ffffffffffffffda RBX: 00007f0c09255fa0 RCX: 00007f0c08fdbf79 [ 32.733357][ T3809] RDX: 0000000000000707 RSI: 0000000000000000 RDI: 0000200000000000 [ 32.733370][ T3809] RBP: 00007f0c07a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 32.733383][ T3809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.733405][ T3809] R13: 00007f0c09256038 R14: 00007f0c09255fa0 R15: 00007fffd6fd9078 [ 32.733425][ T3809] [ 32.908050][ T3827] loop2: detected capacity change from 0 to 512 [ 32.922593][ T3827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.929599][ T3825] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 32.942495][ T3827] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.950297][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.976398][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.981304][ T3546] Bluetooth: hci0: command 0x1003 tx timeout [ 32.986162][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.017579][ T3831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 33.027642][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.112609][ T3841] Illegal XDP return value 4294967274 on prog (id 33) dev syz_tun, expect packet loss! [ 33.136018][ T3841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'. [ 33.158005][ T3853] tmpfs: Bad value for 'mpol' [ 33.163172][ T3852] loop4: detected capacity change from 0 to 512 [ 33.183964][ T3852] msdos: Unknown parameter 'checkÎ_£µ8U' [ 33.185503][ T3855] loop3: detected capacity change from 0 to 512 [ 33.203164][ T3852] Zero length message leads to an empty skb [ 33.209483][ T3855] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.246610][ T3855] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 33.261552][ T3855] EXT4-fs (loop3): Remounting filesystem read-only [ 33.268526][ T3855] EXT4-fs (loop3): 1 truncate cleaned up [ 33.275374][ T3855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.303582][ T3860] loop1: detected capacity change from 0 to 512 [ 33.307853][ T3382] IPVS: starting estimator thread 0... [ 33.325484][ T3855] syz.3.111 (3855) used greatest stack depth: 9144 bytes left [ 33.372696][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.440990][ T3868] IPVS: using max 2496 ests per chain, 124800 per kthread [ 33.465660][ T3885] loop1: detected capacity change from 0 to 512 [ 33.482612][ T3887] loop2: detected capacity change from 0 to 512 [ 33.493497][ T3887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.510543][ T3887] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.522209][ T3885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.535746][ T3887] FAULT_INJECTION: forcing a failure. [ 33.535746][ T3887] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.550742][ T3885] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.563745][ T3887] CPU: 0 UID: 0 PID: 3887 Comm: syz.2.117 Not tainted syzkaller #0 PREEMPT(full) [ 33.563813][ T3887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 33.563824][ T3887] Call Trace: [ 33.563831][ T3887] [ 33.563839][ T3887] __dump_stack+0x1d/0x30 [ 33.563863][ T3887] dump_stack_lvl+0x95/0xd0 [ 33.563889][ T3887] dump_stack+0x15/0x1b [ 33.563908][ T3887] should_fail_ex+0x263/0x280 [ 33.563940][ T3887] should_fail+0xb/0x20 [ 33.563968][ T3887] should_fail_usercopy+0x1a/0x20 [ 33.564064][ T3887] strncpy_from_user+0x27/0x250 [ 33.564086][ T3887] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 33.564121][ T3887] do_getname+0x59/0x1c0 [ 33.564156][ T3887] __se_sys_mknod+0x21/0xf0 [ 33.564183][ T3887] __x64_sys_mknod+0x43/0x50 [ 33.564318][ T3887] x64_sys_call+0x2acd/0x3020 [ 33.564342][ T3887] do_syscall_64+0x12c/0x370 [ 33.564383][ T3887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.564403][ T3887] RIP: 0033:0x7f819255bf79 [ 33.564420][ T3887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.564495][ T3887] RSP: 002b:00007f8190faf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 33.564514][ T3887] RAX: ffffffffffffffda RBX: 00007f81927d5fa0 RCX: 00007f819255bf79 [ 33.564528][ T3887] RDX: 0000000000000705 RSI: 0000000000000000 RDI: 0000200000000000 [ 33.564540][ T3887] RBP: 00007f8190faf090 R08: 0000000000000000 R09: 0000000000000000 [ 33.564551][ T3887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.564562][ T3887] R13: 00007f81927d6038 R14: 00007f81927d5fa0 R15: 00007fff5c69b5f8 [ 33.564577][ T3887] [ 33.566634][ T3892] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 33.748450][ T3892] System zones: 0-1, 3-36 [ 33.753968][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.763921][ T3892] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.118: bad orphan inode 134217728 [ 33.776125][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.785366][ T3892] loop4: lost filesystem error report for type 5 error -117 [ 33.786037][ T3892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.807932][ T3903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.821221][ T3903] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.853701][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.877924][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.906987][ T3916] mmap: syz.1.120 (3916) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.924718][ T3914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'. [ 33.940643][ T3914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 33.946903][ T3917] netlink: 'syz.2.121': attribute type 21 has an invalid length. [ 34.023181][ T3929] netlink: 64 bytes leftover after parsing attributes in process `syz.0.127'. [ 34.034315][ T3929] netlink: 64 bytes leftover after parsing attributes in process `syz.0.127'. [ 34.082992][ T3933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.099963][ T3937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.111387][ T3937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.121854][ T3937] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 34.156734][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.193817][ T3939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.206545][ T3939] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.226608][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.246123][ T3943] FAULT_INJECTION: forcing a failure. [ 34.246123][ T3943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.259354][ T3943] CPU: 1 UID: 0 PID: 3943 Comm: syz.2.132 Not tainted syzkaller #0 PREEMPT(full) [ 34.259372][ T3943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 34.259447][ T3943] Call Trace: [ 34.259452][ T3943] [ 34.259458][ T3943] __dump_stack+0x1d/0x30 [ 34.259474][ T3943] dump_stack_lvl+0x95/0xd0 [ 34.259487][ T3943] dump_stack+0x15/0x1b [ 34.259499][ T3943] should_fail_ex+0x263/0x280 [ 34.259601][ T3943] should_fail+0xb/0x20 [ 34.259615][ T3943] should_fail_usercopy+0x1a/0x20 [ 34.259711][ T3943] _copy_from_user+0x1c/0xb0 [ 34.259730][ T3943] ___sys_sendmsg+0xc1/0x1e0 [ 34.259819][ T3943] ? path_openat+0x1b01/0x2050 [ 34.259972][ T3943] __sys_sendmmsg+0x185/0x320 [ 34.259990][ T3943] __x64_sys_sendmmsg+0x57/0x70 [ 34.260025][ T3943] x64_sys_call+0x27aa/0x3020 [ 34.260040][ T3943] do_syscall_64+0x12c/0x370 [ 34.260127][ T3943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.260140][ T3943] RIP: 0033:0x7f819255bf79 [ 34.260151][ T3943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.260161][ T3943] RSP: 002b:00007f8190faf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 34.260199][ T3943] RAX: ffffffffffffffda RBX: 00007f81927d5fa0 RCX: 00007f819255bf79 [ 34.260208][ T3943] RDX: 0000000000000002 RSI: 0000200000002280 RDI: 0000000000000003 [ 34.260215][ T3943] RBP: 00007f8190faf090 R08: 0000000000000000 R09: 0000000000000000 [ 34.260223][ T3943] R10: 00000000040088c5 R11: 0000000000000246 R12: 0000000000000001 [ 34.260231][ T3943] R13: 00007f81927d6038 R14: 00007f81927d5fa0 R15: 00007fff5c69b5f8 [ 34.260242][ T3943] [ 34.453783][ T3945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.466481][ T3945] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.488543][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.515946][ T3949] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.134: iget: bad extended attribute block 262144 [ 34.529395][ T3949] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.529550][ T3949] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.134: couldn't read orphan inode 15 (err -117) [ 34.550609][ T3949] loop2: lost filesystem error report for type 5 error -117 [ 34.550998][ T3949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.637673][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.734231][ T3970] netlink: 96 bytes leftover after parsing attributes in process `syz.2.140'. [ 34.743352][ T3970] 8021q: VLANs not supported on ip6_vti0 [ 34.780500][ T3980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.793326][ T3980] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.826355][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.857479][ T3990] EXT4-fs: Ignoring removed orlov option [ 34.870932][ T3994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=3994 comm=syz.0.144 [ 34.877046][ T3992] Option 'Ú¼ÂeFœýØ 2Í‚úØ ·æÞÅ ¡†¶K¡…*Ϫã,ÛŸÊn‰yBÞ6Îf[åA [ 34.877046][ T3992] Q¿ñí׿2:[¼„‚”·¶éÇkáz' to dns_resolver key: bad/missing value [ 34.884032][ T3990] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 34.925460][ T3998] bond0: (slave bond_slave_1): Releasing backup interface [ 34.954316][ T3998] bond_slave_1 (unregistering): left promiscuous mode [ 34.966496][ T4001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.975699][ T4001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.988471][ T4001] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 35.117865][ T4011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.280150][ T4013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.314711][ T4013] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.347707][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.364109][ T4006] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 35.420537][ T4006] xfrm0: entered promiscuous mode [ 35.463449][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.522303][ T4024] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.157: invalid indirect mapped block 256 (level 2) [ 35.542962][ T4024] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 35.552882][ T4024] EXT4-fs (loop1): 2 truncates cleaned up [ 35.604421][ T4024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.674854][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.740403][ T4045] ext4: Unknown parameter 'subj_role' [ 35.779504][ T4047] rock: directory entry would overflow storage [ 35.785814][ T4047] rock: sig=0x4f50, size=4, remaining=3 [ 35.791543][ T4047] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 35.862038][ T4049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.879974][ T4049] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.919116][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.973008][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.007240][ T4062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.168'. [ 36.077615][ T4069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.090048][ T4068] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.172'. [ 36.099775][ T4068] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 36.119923][ T4069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.130442][ T4069] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 36.172100][ T4076] syz.4.174 uses obsolete (PF_INET,SOCK_PACKET) [ 36.182912][ T4075] syz.0.176(4075): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 36.229658][ T4078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.243223][ T4078] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.280163][ T4083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.298081][ T4083] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.319449][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.476911][ T4098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.497514][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.497860][ T4098] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.517083][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.526243][ T4098] FAULT_INJECTION: forcing a failure. [ 36.526243][ T4098] name failslab, interval 1, probability 0, space 0, times 0 [ 36.548701][ T4098] CPU: 1 UID: 0 PID: 4098 Comm: syz.3.179 Not tainted syzkaller #0 PREEMPT(full) [ 36.548730][ T4098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 36.548753][ T4098] Call Trace: [ 36.548760][ T4098] [ 36.548768][ T4098] __dump_stack+0x1d/0x30 [ 36.548792][ T4098] dump_stack_lvl+0x95/0xd0 [ 36.548813][ T4098] dump_stack+0x15/0x1b [ 36.548837][ T4098] should_fail_ex+0x263/0x280 [ 36.548921][ T4098] should_failslab+0x8c/0xb0 [ 36.548948][ T4098] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 36.549021][ T4098] ? __d_alloc+0x37/0x340 [ 36.549045][ T4098] __d_alloc+0x37/0x340 [ 36.549066][ T4098] d_alloc+0x2e/0x100 [ 36.549088][ T4098] lookup_one_qstr_excl+0x99/0x250 [ 36.549151][ T4098] filename_create+0x155/0x220 [ 36.549176][ T4098] filename_mknodat+0x13e/0x450 [ 36.549202][ T4098] __se_sys_mknod+0x37/0xf0 [ 36.549230][ T4098] __x64_sys_mknod+0x43/0x50 [ 36.549309][ T4098] x64_sys_call+0x2acd/0x3020 [ 36.549342][ T4098] do_syscall_64+0x12c/0x370 [ 36.549377][ T4098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.549402][ T4098] RIP: 0033:0x7f0c08fdbf79 [ 36.549435][ T4098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.549454][ T4098] RSP: 002b:00007f0c07a2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 36.549475][ T4098] RAX: ffffffffffffffda RBX: 00007f0c09255fa0 RCX: 00007f0c08fdbf79 [ 36.549490][ T4098] RDX: 0000000000000707 RSI: 0000000000000000 RDI: 0000200000000000 [ 36.549516][ T4098] RBP: 00007f0c07a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 36.549528][ T4098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.549541][ T4098] R13: 00007f0c09256038 R14: 00007f0c09255fa0 R15: 00007fffd6fd9078 [ 36.549561][ T4098] [ 36.567906][ T4114] batadv_slave_1: entered promiscuous mode [ 36.749914][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.769793][ T4124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 36.862421][ T4133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.896908][ T4133] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.911110][ T4142] netem: change failed [ 36.934918][ T4126] batadv_slave_1: left promiscuous mode [ 36.971141][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.019635][ T4164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.027311][ T3301] loop3: p1 < > p3 p4 < > [ 37.034004][ T3301] loop3: partition table partially beyond EOD, truncated [ 37.038519][ T4164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.049428][ T3301] loop3: p1 start 16777991 is beyond EOD, truncated [ 37.056321][ T3301] loop3: p3 start 263168 is beyond EOD, truncated [ 37.067312][ T4164] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 37.077141][ T4154] loop3: p1 < > p3 p4 < > [ 37.081993][ T4154] loop3: partition table partially beyond EOD, truncated [ 37.089346][ T4154] loop3: p1 start 16777991 is beyond EOD, truncated [ 37.096314][ T4154] loop3: p3 start 263168 is beyond EOD, truncated [ 37.140695][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 37.163560][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 37.163574][ T28] audit: type=1400 audit(1770907167.696:379): avc: denied { read write } for pid=4171 comm="syz.3.201" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 37.195695][ T28] audit: type=1400 audit(1770907167.696:380): avc: denied { open } for pid=4171 comm="syz.3.201" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 37.273785][ T4178] syzkaller0: entered promiscuous mode [ 37.279651][ T4178] syzkaller0: entered allmulticast mode [ 37.286074][ T4179] EXT4-fs: Ignoring removed bh option [ 37.296000][ T4178] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.297207][ T4179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.335275][ T4178] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 37.407922][ T4184] set_capacity_and_notify: 23 callbacks suppressed [ 37.407935][ T4184] loop3: detected capacity change from 0 to 128 [ 37.430392][ T4184] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.444595][ T4184] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.445588][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.465296][ T28] audit: type=1400 audit(1770907168.008:381): avc: denied { append } for pid=4183 comm="syz.3.205" name="file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.510478][ T4187] loop4: detected capacity change from 0 to 512 [ 37.526718][ T4184] Process accounting resumed [ 37.543174][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.564924][ T4192] loop3: detected capacity change from 0 to 512 [ 37.602847][ T4192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.615992][ T4192] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.624074][ T4198] loop1: detected capacity change from 0 to 512 [ 37.664931][ T4198] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.209: inode has both inline data and extents flags [ 37.664957][ T4198] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.665069][ T4198] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.209: couldn't read orphan inode 15 (err -117) [ 37.665100][ T4198] loop1: lost filesystem error report for type 5 error -117 [ 37.665477][ T4198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.728215][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.737890][ T4198] ext4: Unknown parameter '·' [ 37.760868][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.770023][ T28] audit: type=1400 audit(1770907168.280:382): avc: denied { remount } for pid=4197 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.910972][ T4228] loop1: detected capacity change from 0 to 1764 [ 37.924024][ T4233] openvswitch: netlink: Missing key (keys=40, expected=100) [ 37.978165][ T4237] netlink: 'syz.4.219': attribute type 1 has an invalid length. [ 37.990301][ T28] audit: type=1400 audit(1770907168.532:383): avc: denied { getopt } for pid=4238 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.023911][ T4237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.091087][ T4250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.100817][ T4248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.117780][ T4248] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 38.128745][ T4250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.141011][ T4248] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 38.153886][ T4250] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 38.201727][ T4237] gretap1: entered promiscuous mode [ 38.210768][ T4237] bond1: (slave gretap1): making interface the new active one [ 38.218773][ T4237] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 38.234463][ T4253] macvlan2: entered promiscuous mode [ 38.239939][ T4253] macvlan2: entered allmulticast mode [ 38.240078][ T4252] loop0: detected capacity change from 0 to 164 [ 38.263402][ T4252] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=82 [ 38.277384][ T4246] loop1: detected capacity change from 0 to 512 [ 38.305283][ T4246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.349453][ T4246] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.475697][ T28] audit: type=1400 audit(1770907169.016:384): avc: denied { associate } for pid=4264 comm="syz.4.227" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.540264][ T4270] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 38.544741][ T28] audit: type=1400 audit(1770907169.086:385): avc: denied { create } for pid=4269 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 38.569936][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.613318][ T28] audit: type=1400 audit(1770907169.157:386): avc: denied { name_bind } for pid=4281 comm="syz.4.231" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.636749][ T4282] IPVS: set_ctl: invalid protocol: 59 172.20.20.10:20001 [ 38.739060][ T4293] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 38.739060][ T4293] The task syz.4.234 (4293) triggered the difference, watch for misbehavior. [ 38.766168][ T28] audit: type=1400 audit(1770907169.308:387): avc: denied { create } for pid=4290 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 38.788205][ T28] audit: type=1400 audit(1770907169.338:388): avc: denied { write } for pid=4290 comm="syz.4.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 38.800459][ T4297] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.917186][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.954533][ T4302] syzkaller1: entered promiscuous mode [ 38.960343][ T4302] syzkaller1: entered allmulticast mode [ 39.050634][ T1646] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.502493][ T4316] netlink: 'syz.2.244': attribute type 6 has an invalid length. [ 39.547094][ T4319] loop4: detected capacity change from 0 to 256 [ 39.569354][ T4319] vfat: Unknown parameter '' [ 39.635795][ T4326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.644537][ T4326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.661470][ T4326] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 40.005159][ T4328] loop1: detected capacity change from 0 to 512 [ 40.019266][ T4328] ext4: Unknown parameter 'func' [ 40.082496][ T4332] loop1: detected capacity change from 0 to 1024 [ 40.097317][ T4332] EXT4-fs: inline encryption not supported [ 40.141027][ T4332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.231240][ T4338] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.250: Allocating blocks 385-513 which overlap fs metadata [ 40.267511][ T4340] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 40.301668][ T4338] EXT4-fs (loop1): Remounting filesystem read-only [ 40.583578][ T4350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.621644][ T4350] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.642902][ T4350] FAULT_INJECTION: forcing a failure. [ 40.642902][ T4350] name failslab, interval 1, probability 0, space 0, times 0 [ 40.664956][ T4354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.256'. [ 40.680583][ T4350] CPU: 0 UID: 0 PID: 4350 Comm: syz.2.255 Not tainted syzkaller #0 PREEMPT(full) [ 40.680668][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 40.680680][ T4350] Call Trace: [ 40.680687][ T4350] [ 40.680695][ T4350] __dump_stack+0x1d/0x30 [ 40.680723][ T4350] dump_stack_lvl+0x95/0xd0 [ 40.680747][ T4350] dump_stack+0x15/0x1b [ 40.680817][ T4350] should_fail_ex+0x263/0x280 [ 40.680849][ T4350] should_failslab+0x8c/0xb0 [ 40.680880][ T4350] kmem_cache_alloc_noprof+0x66/0x400 [ 40.680946][ T4350] ? security_inode_alloc+0x37/0x100 [ 40.680972][ T4350] security_inode_alloc+0x37/0x100 [ 40.681081][ T4350] inode_init_always_gfp+0x4b7/0x500 [ 40.681116][ T4350] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 40.681149][ T4350] alloc_inode+0x58/0x170 [ 40.681253][ T4350] new_inode+0x1d/0xe0 [ 40.681314][ T4350] __ext4_new_inode+0x15e/0x2330 [ 40.681348][ T4350] ? __dquot_initialize+0x6fa/0x7c0 [ 40.681399][ T4350] ext4_create+0x16e/0x2f0 [ 40.681519][ T4350] vfs_create+0x1f4/0x300 [ 40.681552][ T4350] filename_mknodat+0x296/0x450 [ 40.681581][ T4350] __se_sys_mknod+0x37/0xf0 [ 40.681621][ T4350] __x64_sys_mknod+0x43/0x50 [ 40.681650][ T4350] x64_sys_call+0x2acd/0x3020 [ 40.681741][ T4350] do_syscall_64+0x12c/0x370 [ 40.681787][ T4350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.681812][ T4350] RIP: 0033:0x7f819255bf79 [ 40.681830][ T4350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.681849][ T4350] RSP: 002b:00007f8190faf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 40.681915][ T4350] RAX: ffffffffffffffda RBX: 00007f81927d5fa0 RCX: 00007f819255bf79 [ 40.682004][ T4350] RDX: 0000000000000705 RSI: 0000000000000000 RDI: 0000200000000000 [ 40.682016][ T4350] RBP: 00007f8190faf090 R08: 0000000000000000 R09: 0000000000000000 [ 40.682030][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.682044][ T4350] R13: 00007f81927d6038 R14: 00007f81927d5fa0 R15: 00007fff5c69b5f8 [ 40.682066][ T4350] [ 40.683173][ T4354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.256'. [ 40.911568][ T4354] bond1: entered promiscuous mode [ 40.916893][ T4354] bond1: entered allmulticast mode [ 40.922322][ T4354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.931189][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.981276][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.042831][ T4370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.059332][ T4374] dvmrp1: tun_chr_ioctl cmd 2148038145 [ 41.065895][ T4374] tmpfs: Bad value for 'mpol' [ 41.077244][ T4367] lo: entered promiscuous mode [ 41.092140][ T3546] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.101265][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.114022][ T4367] EXT4-fs (loop0): Invalid log block size: 4294967295 [ 41.189497][ T4389] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.191876][ T4386] FAT-fs (loop4): Directory bread(block 64) failed [ 41.217679][ T4386] FAT-fs (loop4): Directory bread(block 65) failed [ 41.226266][ T4386] FAT-fs (loop4): Directory bread(block 66) failed [ 41.227777][ T4392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.233942][ T4386] FAT-fs (loop4): Directory bread(block 67) failed [ 41.250682][ T4389] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.264: inode has both inline data and extents flags [ 41.257073][ T4386] FAT-fs (loop4): Directory bread(block 68) failed [ 41.282911][ T4392] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.295457][ T4386] FAT-fs (loop4): Directory bread(block 69) failed [ 41.302193][ T4386] FAT-fs (loop4): Directory bread(block 70) failed [ 41.308774][ T4386] FAT-fs (loop4): Directory bread(block 71) failed [ 41.309856][ T4389] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 41.315481][ T4386] FAT-fs (loop4): Directory bread(block 72) failed [ 41.343175][ T4389] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.264: couldn't read orphan inode 17 (err -117) [ 41.353803][ T4386] FAT-fs (loop4): Directory bread(block 73) failed [ 41.365714][ T4392] FAULT_INJECTION: forcing a failure. [ 41.365714][ T4392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.374471][ T4389] loop2: lost filesystem error report for type 5 error -117 [ 41.399148][ T4392] CPU: 1 UID: 0 PID: 4392 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(full) [ 41.399180][ T4392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 41.399194][ T4392] Call Trace: [ 41.399202][ T4392] [ 41.399211][ T4392] __dump_stack+0x1d/0x30 [ 41.399235][ T4392] dump_stack_lvl+0x95/0xd0 [ 41.399271][ T4392] dump_stack+0x15/0x1b [ 41.399289][ T4392] should_fail_ex+0x263/0x280 [ 41.399354][ T4392] should_fail+0xb/0x20 [ 41.399376][ T4392] should_fail_usercopy+0x1a/0x20 [ 41.399405][ T4392] _copy_to_user+0x20/0xa0 [ 41.399433][ T4392] simple_read_from_buffer+0xb5/0x130 [ 41.399514][ T4392] proc_fail_nth_read+0x10e/0x150 [ 41.399536][ T4392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 41.399556][ T4392] vfs_read+0x1ab/0x7f0 [ 41.399583][ T4392] ? __rcu_read_unlock+0x4e/0x70 [ 41.399613][ T4392] ? __fget_files+0x184/0x1c0 [ 41.399743][ T4392] ? mutex_lock+0x57/0x90 [ 41.399768][ T4392] ksys_read+0xdc/0x1a0 [ 41.399823][ T4392] __x64_sys_read+0x40/0x50 [ 41.399846][ T4392] x64_sys_call+0x2886/0x3020 [ 41.399901][ T4392] do_syscall_64+0x12c/0x370 [ 41.399931][ T4392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.400004][ T4392] RIP: 0033:0x7f44d274c84e [ 41.400021][ T4392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 41.400111][ T4392] RSP: 002b:00007f44d11defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.400130][ T4392] RAX: ffffffffffffffda RBX: 00007f44d11df6c0 RCX: 00007f44d274c84e [ 41.400217][ T4392] RDX: 000000000000000f RSI: 00007f44d11df0a0 RDI: 0000000000000004 [ 41.400229][ T4392] RBP: 00007f44d11df090 R08: 0000000000000000 R09: 0000000000000000 [ 41.400242][ T4392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.400254][ T4392] R13: 00007f44d2a06038 R14: 00007f44d2a05fa0 R15: 00007fff4bfeeb88 [ 41.400273][ T4392] [ 41.407836][ T4389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.638752][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.683737][ T4389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.756362][ T3314] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 41.786347][ T3314] FAT-fs (loop4): Filesystem has been set read-only [ 41.957917][ T4427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 42.345892][ T4457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.356174][ T4457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.382150][ T4457] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 42.470928][ T4464] capability: warning: `syz.2.284' uses 32-bit capabilities (legacy support in use) [ 42.483583][ T4464] set_capacity_and_notify: 7 callbacks suppressed [ 42.483598][ T4464] loop2: detected capacity change from 0 to 512 [ 42.502796][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 42.502862][ T28] audit: type=1400 audit(1770907173.085:462): avc: denied { read write } for pid=4462 comm="syz.2.284" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.582605][ T28] audit: type=1400 audit(1770907173.115:463): avc: denied { open } for pid=4462 comm="syz.2.284" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.593808][ T4435] chnl_net:caif_netlink_parms(): no params data found [ 42.620756][ T28] audit: type=1326 audit(1770907173.145:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.0.286" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9c862bf79 code=0x0 [ 42.654131][ T4486] 9pnet_fd: Insufficient options for proto=fd [ 42.676758][ T28] audit: type=1400 audit(1770907173.195:465): avc: denied { block_suspend } for pid=4480 comm="syz.2.287" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.726481][ T4493] loop2: detected capacity change from 0 to 1024 [ 42.734487][ T4493] EXT4-fs: Ignoring removed orlov option [ 42.741174][ T4493] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 42.752392][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.759627][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.767116][ T4435] bridge_slave_0: entered allmulticast mode [ 42.773632][ T4435] bridge_slave_0: entered promiscuous mode [ 42.775220][ T4491] tmpfs: Unknown parameter '0x0000000000000000' [ 42.780877][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.786826][ T4493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.793218][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.813549][ T4435] bridge_slave_1: entered allmulticast mode [ 42.820216][ T4435] bridge_slave_1: entered promiscuous mode [ 42.842224][ T4500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 42.846196][ T4435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.861068][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.861736][ T4435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.891055][ T4500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.903495][ T4500] macvlan2: entered promiscuous mode [ 42.910078][ T4500] macvlan2: entered allmulticast mode [ 42.911134][ T28] audit: type=1400 audit(1770907173.487:466): avc: denied { create } for pid=4502 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 42.916632][ T4500] bond1: (slave macvlan2): Opening slave failed [ 42.938916][ T28] audit: type=1400 audit(1770907173.518:467): avc: denied { write } for pid=4502 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 42.996330][ T4435] team0: Port device team_slave_0 added [ 43.008981][ T4435] team0: Port device team_slave_1 added [ 43.031744][ T4512] loop1: detected capacity change from 0 to 1024 [ 43.045604][ T4512] EXT4-fs: dax option not supported [ 43.057103][ T4511] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 43.065606][ T4511] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 43.089455][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.096808][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.127909][ T4435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.140923][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.148167][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.175369][ T4435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.225867][ T4435] hsr_slave_0: entered promiscuous mode [ 43.232325][ T4435] hsr_slave_1: entered promiscuous mode [ 43.241455][ T4435] debugfs: 'hsr0' already exists in 'hsr' [ 43.249109][ T4435] Cannot create hsr debugfs directory [ 43.415842][ T28] audit: type=1400 audit(1770907173.991:468): avc: denied { read } for pid=4522 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.440508][ T4435] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.450292][ T28] audit: type=1400 audit(1770907173.991:469): avc: denied { ioctl } for pid=4522 comm="syz.3.299" path="socket:[8811]" dev="sockfs" ino=8811 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.453281][ T4435] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.493259][ T4523] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.508597][ T4435] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.509649][ T4523] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 43.533661][ T4435] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.586666][ T28] audit: type=1400 audit(1770907174.172:470): avc: denied { nlmsg_read } for pid=4546 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.651609][ T4554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 43.673913][ T4554] tipc: Invalid UDP bearer configuration [ 43.673949][ T4554] tipc: Enabling of bearer rejected, failed to enable media [ 43.690772][ T4554] netlink: 36 bytes leftover after parsing attributes in process `syz.1.306'. [ 43.699480][ T4556] loop3: detected capacity change from 0 to 1024 [ 43.708150][ T4435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.717159][ T4554] netlink: 36 bytes leftover after parsing attributes in process `syz.1.306'. [ 43.743852][ T4435] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.778788][ T4565] loop0: detected capacity change from 0 to 128 [ 43.788264][ T4567] loop2: detected capacity change from 0 to 512 [ 43.801247][ T4563] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 43.808948][ T4565] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.824585][ T4563] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 43.840340][ T4567] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.851431][ T4565] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.874837][ T4567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.875409][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.894681][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.901114][ T4576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 43.904388][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.911129][ T4576] netlink: 40 bytes leftover after parsing attributes in process `syz.1.310'. [ 43.918585][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.094595][ T4435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.197345][ T1646] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.207645][ T28] audit: type=1400 audit(1770907174.786:471): avc: denied { read } for pid=4607 comm="syz.3.317" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.298657][ T4435] veth0_vlan: entered promiscuous mode [ 44.311122][ T4435] veth1_vlan: entered promiscuous mode [ 44.343367][ T4435] veth0_macvtap: entered promiscuous mode [ 44.364428][ T4435] veth1_macvtap: entered promiscuous mode [ 44.375000][ T30] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.385131][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.395948][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.433876][ T4629] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 44.442269][ T4629] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 44.459310][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.469286][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.480214][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.489923][ T4627] loop3: detected capacity change from 0 to 1024 [ 44.490143][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.500229][ T4627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.527938][ T4627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.578407][ T4627] process 'syz.3.322' launched './file1' with NULL argv: empty string added [ 44.600145][ T4641] loop5: detected capacity change from 0 to 512 [ 44.620832][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.623604][ T4643] pim6reg: entered allmulticast mode [ 44.654112][ T4641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.667894][ T4641] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.669065][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.690823][ T4646] pim6reg: left allmulticast mode [ 44.714602][ T4435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.752409][ T4653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.762002][ T4651] loop3: detected capacity change from 0 to 2048 [ 44.769506][ T4653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.773202][ T4655] sctp: [Deprecated]: syz.2.329 (pid 4655) Use of int in max_burst socket option. [ 44.773202][ T4655] Use struct sctp_assoc_value instead [ 44.798863][ T4651] EXT4-fs (loop3): unsupported descriptor size 0 [ 44.808767][ T4653] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 44.821850][ T4655] 9p: Bad value for 'rfdno' [ 44.834936][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 44.982593][ T1556] IPVS: starting estimator thread 0... [ 45.074397][ T4665] IPVS: using max 2784 ests per chain, 139200 per kthread [ 45.117955][ T4676] loop3: detected capacity change from 0 to 512 [ 45.132041][ T4676] EXT4-fs: Ignoring removed orlov option [ 45.138171][ T4676] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.148387][ T4676] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 45.167653][ T4676] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.337: attempt to clear invalid blocks 2 len 1 [ 45.183706][ T4676] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 45.191907][ T4676] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 45.209631][ T4678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.218112][ T4676] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.337: invalid indirect mapped block 1819239214 (level 0) [ 45.243721][ T4678] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.247427][ T4676] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 45.254636][ T4676] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.337: invalid indirect mapped block 1819239214 (level 1) [ 45.278383][ T4676] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 45.278981][ T4676] EXT4-fs (loop3): 1 truncate cleaned up [ 45.294842][ T4676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.319718][ T4676] EXT4-fs (loop3): shut down requested (1) [ 45.334151][ T3447] IPVS: stop unused estimator thread 0... [ 45.341329][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.432404][ T4684] vhci_hcd vhci_hcd.2: invalid port number 96 [ 45.438656][ T4684] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 45.450533][ T4684] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.475715][ T4684] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.484205][ T4684] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.492694][ T4684] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.501361][ T4684] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.510089][ T4684] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.519140][ T4684] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.524752][ T4689] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 45.528167][ T4684] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.539341][ T4689] netlink: 'syz.3.339': attribute type 8 has an invalid length. [ 45.546536][ T4684] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 45.563165][ T4684] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 45.670084][ T4696] __nla_validate_parse: 2 callbacks suppressed [ 45.670102][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.344'. [ 45.688584][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.827190][ T4705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 45.834691][ T4705] IPv6: NLM_F_CREATE should be set when creating new route [ 45.842054][ T4705] IPv6: NLM_F_CREATE should be set when creating new route [ 45.849359][ T4705] IPv6: NLM_F_CREATE should be set when creating new route [ 45.886585][ T4709] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.899743][ T4709] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.925528][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.956254][ T4713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.977059][ T4713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 45.986979][ T4713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 46.005795][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.349'. [ 46.016963][ T4713] netlink: 104 bytes leftover after parsing attributes in process `syz.2.349'. [ 46.040744][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.095802][ T4720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.105715][ T4720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.116111][ T4720] !yz!: rxe_newlink: already configured on team_slave_0 [ 46.135735][ T4722] batman_adv: batadv0: Adding interface: dummy0 [ 46.143871][ T4722] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.170525][ T4722] batman_adv: batadv0: Interface activated: dummy0 [ 46.256566][ T3546] Bluetooth: hci0: command 0x1003 tx timeout [ 46.263183][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.318088][ T4740] netlink: 'syz.3.356': attribute type 1 has an invalid length. [ 46.341293][ T4740] bond1: entered promiscuous mode [ 46.347026][ T4740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.360677][ T4746] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 46.456286][ T4752] batman_adv: batadv0: Interface deactivated: dummy0 [ 46.463229][ T4752] batman_adv: batadv0: Removing interface: dummy0 [ 46.495162][ T4752] bridge_slave_0: left allmulticast mode [ 46.511463][ T4752] bridge_slave_0: left promiscuous mode [ 46.518939][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.537209][ T4752] bridge_slave_1: left allmulticast mode [ 46.543500][ T4752] bridge_slave_1: left promiscuous mode [ 46.550312][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.561413][ T4762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'. [ 46.570993][ T4752] bond0: (slave bond_slave_0): Releasing backup interface [ 46.582338][ T4752] bond0: (slave bond_slave_1): Releasing backup interface [ 46.595658][ T4752] team0: Port device team_slave_0 removed [ 46.606193][ T4752] team0: Port device team_slave_1 removed [ 46.618754][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.627091][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.637945][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.645752][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.658367][ T4752] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 46.692773][ T4762] bond1: (slave bridge2): making interface the new active one [ 46.716405][ T4762] bridge2: entered promiscuous mode [ 46.725234][ T4762] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 46.791895][ T4777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.819843][ T4777] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.822285][ T4784] netlink: 'syz.3.368': attribute type 10 has an invalid length. [ 46.840134][ T4777] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.366: iget: bad i_size value: 2533274857506816 [ 46.855622][ T4784] netlink: 2 bytes leftover after parsing attributes in process `syz.3.368'. [ 46.866699][ T4784] bond0: entered promiscuous mode [ 46.871918][ T4784] bond_slave_0: entered promiscuous mode [ 46.878365][ T4784] bond_slave_1: entered promiscuous mode [ 46.884462][ T4784] bridge0: port 3(bond0) entered blocking state [ 46.890839][ T4784] bridge0: port 3(bond0) entered disabled state [ 46.897975][ T4784] bond0: entered allmulticast mode [ 46.898377][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.903153][ T4784] bond_slave_0: entered allmulticast mode [ 46.917916][ T4784] bond_slave_1: entered allmulticast mode [ 46.931837][ T4790] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4790 comm=syz.5.370 [ 46.942930][ T4784] bridge0: port 3(bond0) entered blocking state [ 46.950712][ T4784] bridge0: port 3(bond0) entered forwarding state [ 47.013483][ T4802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.023104][ T4802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.036097][ T4802] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 47.072178][ T4805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.157841][ T4811] EXT4-fs: Ignoring removed orlov option [ 47.166380][ T10] IPVS: starting estimator thread 0... [ 47.174503][ T4811] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.189827][ T4811] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 47.202347][ T4811] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.377: attempt to clear invalid blocks 2 len 1 [ 47.217277][ T4811] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 47.217671][ T4811] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 47.242892][ T4811] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.377: invalid indirect mapped block 1819239214 (level 0) [ 47.258142][ T4811] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 47.259076][ T4811] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.377: invalid indirect mapped block 1819239214 (level 1) [ 47.260469][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.269313][ T4811] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 47.283176][ T4812] IPVS: using max 2688 ests per chain, 134400 per kthread [ 47.303512][ T4811] EXT4-fs (loop3): 1 truncate cleaned up [ 47.315147][ T4811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.333802][ T4811] EXT4-fs (loop3): shut down requested (2) [ 47.357893][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.393425][ T4823] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 47.405201][ T4817] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=4817 comm=syz.0.378 [ 47.425523][ T4817] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4817 comm=syz.0.378 [ 47.445852][ T4815] EXT4-fs: Ignoring removed orlov option [ 47.460280][ T4815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.478245][ T4821] ------------[ cut here ]------------ [ 47.478661][ T4815] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.483976][ T4821] EA inode 11 i_nlink=2 [ 47.492880][ T4821] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.3.379/4821 [ 47.494501][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 47.494514][ T28] audit: type=1400 audit(1770907178.108:512): avc: denied { connect } for pid=4827 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.497163][ T4821] Modules linked in: [ 47.497180][ T4821] CPU: 0 UID: 0 PID: 4821 Comm: syz.3.379 Not tainted syzkaller #0 PREEMPT(full) [ 47.547030][ T4821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 47.550855][ T28] audit: type=1400 audit(1770907178.158:513): avc: denied { map } for pid=4827 comm="syz.0.380" path="socket:[9822]" dev="sockfs" ino=9822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 47.557223][ T4821] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 47.586946][ T4821] Code: 14 3f 9a ff 4c 8d 2d 1d be 3d 05 49 8d 7e 40 e8 c4 a7 b6 ff 49 8b 6e 40 4c 89 e7 e8 f8 a2 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f 1c d2 03 66 66 66 66 66 66 2e [ 47.606871][ T4821] RSP: 0018:ffffc90001333778 EFLAGS: 00010246 [ 47.613478][ T4821] RAX: ffff88810426dba8 RBX: ffff88811acbdbe8 RCX: ffffffff81bec198 [ 47.621829][ T4821] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc7fa0 [ 47.630459][ T4821] RBP: 000000000000000b R08: 000188811acbdb9b R09: 0000000000000000 [ 47.638910][ T4821] R10: ffffc900013336a8 R11: 0001c900013336a8 R12: ffff88811acbdb98 [ 47.647005][ T4821] R13: ffffffff86fc7fa0 R14: ffff88811acbdb50 R15: 0000000000000001 [ 47.655340][ T4821] FS: 00007f0c07a2f6c0(0000) GS:ffff8882aeb41000(0000) knlGS:0000000000000000 [ 47.662939][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.664612][ T4821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.672094][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.677816][ T4821] CR2: 00007fab68b06000 CR3: 000000011c52a000 CR4: 00000000003506f0 [ 47.692249][ T4821] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 47.700612][ T4821] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 47.708802][ T4821] Call Trace: [ 47.712067][ T4821] [ 47.714987][ T4821] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 47.720929][ T4821] ? errseq_check+0x2c/0x50 [ 47.725577][ T4821] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 47.731271][ T4821] ? ext4_truncate+0x92b/0xad0 [ 47.736113][ T4821] ext4_evict_inode+0xa1f/0xd40 [ 47.741180][ T4821] ? __pfx_ext4_evict_inode+0x10/0x10 [ 47.746618][ T4821] evict+0x2af/0x510 [ 47.750555][ T4821] ? __dquot_initialize+0x146/0x7c0 [ 47.755768][ T4821] iput+0x41a/0x580 [ 47.759703][ T4821] ext4_process_orphan+0x1a9/0x1c0 [ 47.764856][ T4821] ext4_orphan_cleanup+0x6a8/0xa00 [ 47.770091][ T4821] ext4_fill_super+0x3476/0x3800 [ 47.775157][ T4821] ? set_blocksize+0x19e/0x2c0 [ 47.780141][ T4821] ? setup_bdev_super+0x30e/0x370 [ 47.785288][ T4821] ? __pfx_ext4_fill_super+0x10/0x10 [ 47.790655][ T4821] get_tree_bdev_flags+0x291/0x300 [ 47.795993][ T4821] ? __pfx_ext4_fill_super+0x10/0x10 [ 47.801622][ T4821] get_tree_bdev+0x1f/0x30 [ 47.806060][ T4821] ext4_get_tree+0x1c/0x30 [ 47.810638][ T4821] vfs_get_tree+0x57/0x1d0 [ 47.815083][ T4821] do_new_mount+0x288/0x8d0 [ 47.819655][ T4821] path_mount+0x4d0/0xbc0 [ 47.824028][ T4821] __se_sys_mount+0x28c/0x2e0 [ 47.828748][ T4821] ? __se_sys_mkdirat+0xa2/0xf0 [ 47.833617][ T4821] ? kmem_cache_free+0xc8/0x370 [ 47.838520][ T4821] __x64_sys_mount+0x67/0x80 [ 47.843201][ T4821] x64_sys_call+0x2d61/0x3020 [ 47.848179][ T4821] do_syscall_64+0x12c/0x370 [ 47.852830][ T4821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.858966][ T4821] RIP: 0033:0x7f0c08fdd20a [ 47.863485][ T4821] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.883477][ T4821] RSP: 002b:00007f0c07a2ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 47.892495][ T4821] RAX: ffffffffffffffda RBX: 00007f0c07a2eee0 RCX: 00007f0c08fdd20a [ 47.900956][ T4821] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f0c07a2eea0 [ 47.909375][ T4821] RBP: 00002000000009c0 R08: 00007f0c07a2eee0 R09: 0000000000800718 [ 47.917590][ T4821] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 47.925873][ T4821] R13: 00007f0c07a2eea0 R14: 000000000000048d R15: 0000200000000200 [ 47.934196][ T4821] [ 47.937658][ T4821] ---[ end trace 0000000000000000 ]--- [ 47.944293][ T4821] EXT4-fs (loop3): 1 orphan inode deleted [ 47.966107][ T4821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.984508][ T4833] set_capacity_and_notify: 10 callbacks suppressed [ 47.984527][ T4833] loop1: detected capacity change from 0 to 512 [ 48.010384][ T4833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.024153][ T4833] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.036665][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.053160][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.092216][ T28] audit: type=1400 audit(1770907178.702:514): avc: denied { setopt } for pid=4837 comm="syz.3.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.119281][ T28] audit: type=1400 audit(1770907178.712:515): avc: denied { sqpoll } for pid=4837 comm="syz.3.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.146129][ T28] audit: type=1400 audit(1770907178.722:516): avc: denied { getopt } for pid=4837 comm="syz.3.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.168503][ T28] audit: type=1400 audit(1770907178.722:517): avc: denied { read } for pid=4836 comm="syz.1.384" path="socket:[10757]" dev="sockfs" ino=10757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 48.192262][ T4847] loop3: detected capacity change from 0 to 512 [ 48.192421][ T28] audit: type=1400 audit(1770907178.782:518): avc: denied { setopt } for pid=4836 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 48.203253][ T4847] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.332165][ T4868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.340778][ T4867] loop2: detected capacity change from 0 to 512 [ 48.341275][ T4868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.351560][ T4867] EXT4-fs: test_dummy_encryption option not supported [ 48.361597][ T4868] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 48.407233][ T28] audit: type=1400 audit(1770907179.014:519): avc: denied { bind } for pid=4866 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 48.548048][ T4888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4888 comm=syz.0.397 [ 48.560554][ T4890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4890 comm=syz.0.397 [ 48.583838][ T4888] IPVS: persistence engine module ip_vs_pe_ý not found [ 48.616883][ T28] audit: type=1400 audit(1770907179.235:520): avc: denied { ioctl } for pid=4894 comm="syz.2.399" path="socket:[9910]" dev="sockfs" ino=9910 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.673743][ T28] audit: type=1400 audit(1770907179.285:521): avc: denied { mount } for pid=4896 comm="syz.2.400" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 48.832733][ T4909] loop0: detected capacity change from 0 to 512 [ 48.937032][ T4918] loop0: detected capacity change from 0 to 1024 [ 48.956201][ T4922] loop1: detected capacity change from 0 to 512 [ 48.972096][ T4922] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.1.407: corrupted xattr block 95: invalid header [ 48.973139][ T4918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.021730][ T4922] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.023656][ T4922] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.407: bg 0: block 7: invalid block bitmap [ 49.045510][ T4922] loop1: lost filesystem error report for type 5 error -117 [ 49.046568][ T4922] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 49.063460][ T4922] loop1: lost filesystem error report for type 5 error -117 [ 49.063638][ T4922] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.407: corrupted xattr block 95: invalid header [ 49.084877][ T4922] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.100812][ T4922] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 49.137649][ T4922] EXT4-fs (loop1): 1 orphan inode deleted [ 49.148098][ T4922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.163238][ T4927] loop3: detected capacity change from 0 to 512 [ 49.173210][ T4927] EXT4-fs: Mount option(s) incompatible with ext2 [ 49.238096][ T3308] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /67/file0: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=196732, size=1024 fake=0 [ 49.259264][ T4933] vhci_hcd vhci_hcd.0: invalid port number 11 [ 49.307329][ T3308] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 49.337140][ T3308] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 49.385028][ T4933] Process accounting resumed [ 49.564054][ T4946] loop3: detected capacity change from 0 to 512 [ 49.607306][ T4946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.628483][ T4946] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.667659][ T3430] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.680411][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.687717][ T3546] Bluetooth: hci0: command 0x1003 tx timeout [ 49.757498][ T3430] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.867489][ T3430] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.881104][ T4960] loop2: detected capacity change from 0 to 8192 [ 49.934297][ T3301] loop2: p1 p3 p4 [ 49.949804][ T3301] loop2: p1 size 477167616 extends beyond EOD, truncated [ 49.963523][ T3430] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.971468][ T3301] loop2: p3 start 4294901760 is beyond EOD, truncated [ 49.981110][ T3301] loop2: p4 size 32768 extends beyond EOD, truncated [ 49.994452][ T4960] loop2: p1 p3 p4 [ 49.999478][ T4960] loop2: p1 size 477167616 extends beyond EOD, truncated [ 50.017119][ T4960] loop2: p3 start 4294901760 is beyond EOD, truncated [ 50.062390][ T4960] loop2: p4 size 32768 extends beyond EOD, truncated [ 50.162847][ T4998] loop5: detected capacity change from 0 to 512 [ 50.208102][ T4998] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.220056][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 50.237919][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 50.282917][ T3430] bridge_slave_1: left allmulticast mode [ 50.312990][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 50.329194][ T3430] bridge_slave_1: left promiscuous mode [ 50.335379][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 50.358276][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.369576][ T3430] bridge_slave_0: left allmulticast mode [ 50.380375][ T3430] bridge_slave_0: left promiscuous mode [ 50.387832][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.512961][ T5043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 50.524044][ T5041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 50.528988][ T5043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 50.581620][ T3430] bond0 (unregistering): left promiscuous mode [ 50.587886][ T3430] bond_slave_0: left promiscuous mode [ 50.594426][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.605608][ T3430] bond0 (unregistering): Released all slaves [ 50.620468][ T3430] bond1 (unregistering): Released all slaves [ 50.642348][ T5017] syzkaller0: entered promiscuous mode [ 50.647989][ T5017] syzkaller0: entered allmulticast mode [ 50.683595][ T5056] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.696366][ T5056] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c841e018, mo2=0000] [ 50.707398][ T5056] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.439: lblock 2 mapped to illegal pblock 2 (length 1) [ 50.735239][ T5056] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 50.738483][ T5056] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.439: lblock 0 mapped to illegal pblock 48 (length 1) [ 50.773744][ T5056] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 50.775877][ T5056] EXT4-fs error (device loop3): ext4_acquire_dquot:6998: comm syz.3.439: Failed to acquire dquot type 0 [ 50.783782][ T4954] chnl_net:caif_netlink_parms(): no params data found [ 50.796633][ T5056] loop3: lost filesystem error report for type 5 error -117 [ 50.817767][ T5056] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 50.827468][ T5056] loop3: lost filesystem error report for type 5 error -117 [ 50.829173][ T5056] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.439: mark_inode_dirty error [ 50.853821][ T5056] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.863026][ T5056] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 50.874917][ T5071] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.913229][ T5056] EXT4-fs (loop3): 1 orphan inode deleted [ 50.919218][ T4601] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.934423][ T3430] batadv0: left promiscuous mode [ 50.944427][ T3430] hsr_slave_0: left promiscuous mode [ 50.949930][ T4601] EXT4-fs error (device loop3): ext4_release_dquot:7034: comm kworker/u8:8: Failed to release dquot type 0 [ 50.971106][ T3430] hsr_slave_1: left promiscuous mode [ 50.977526][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.985141][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.013712][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.024796][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.036694][ T3430] veth1_macvtap: left promiscuous mode [ 51.042324][ T3430] veth0_macvtap: left promiscuous mode [ 51.048586][ T3430] veth1_vlan: left promiscuous mode [ 51.053987][ T3430] veth0_vlan: left promiscuous mode [ 51.116545][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 51.128914][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 51.205530][ T4954] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.212965][ T4954] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.220674][ T4954] bridge_slave_0: entered allmulticast mode [ 51.227546][ T4954] bridge_slave_0: entered promiscuous mode [ 51.235056][ T4954] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.241820][ T5093] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.250546][ T4954] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.259427][ T4954] bridge_slave_1: entered allmulticast mode [ 51.267137][ T4954] bridge_slave_1: entered promiscuous mode [ 51.282486][ T3313] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 51.285990][ T4954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.307643][ T4954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.319959][ T3313] loop3: lost filesystem error report for type 5 error -117 [ 51.323188][ T3313] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 51.327340][ T5093] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.447: bad orphan inode 16 [ 51.332182][ T3313] loop3: lost filesystem error report for type 5 error -117 [ 51.352407][ T3313] EXT4-fs error (device loop3): ext4_quota_off:7282: inode #3: comm syz-executor: mark_inode_dirty error [ 51.368982][ T4954] team0: Port device team_slave_0 added [ 51.377335][ T5093] loop2: lost filesystem error report for type 5 error -117 [ 51.381739][ T3313] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 51.384423][ T5093] ext4_test_bit(bit=15, block=4) = 0 [ 51.404717][ T4954] team0: Port device team_slave_1 added [ 51.414222][ T5093] EXT4-fs (loop2): 1 orphan inode deleted [ 51.427118][ T4954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.443979][ T4954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.483737][ T4954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.502906][ T4954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.513603][ T4954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.545400][ T5115] Unable to read rock-ridge attributes [ 51.566189][ T4954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.572324][ T5115] Unable to read rock-ridge attributes [ 51.588075][ T5093] __nla_validate_parse: 1 callbacks suppressed [ 51.588092][ T5093] netlink: 3834 bytes leftover after parsing attributes in process `syz.2.447'. [ 51.620039][ T5115] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 51.653017][ T5124] tmpfs: Bad value for 'mpol' [ 51.678161][ T4954] hsr_slave_0: entered promiscuous mode [ 51.686710][ T4954] hsr_slave_1: entered promiscuous mode [ 51.696198][ T5126] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.929882][ T4954] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 51.950251][ T4954] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 51.970913][ T4954] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 51.994453][ T4954] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.034852][ T5137] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 52.057489][ T5137] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.093321][ T4954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.111332][ T5137] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.123280][ T4954] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.133532][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.140771][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.161446][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.168549][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.187543][ T5137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.453'. [ 52.230438][ T5169] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.261014][ T5137] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5137 comm=syz.3.453 [ 52.275146][ T5169] EXT4-fs (loop0): 1 truncate cleaned up [ 52.292695][ T5169] netlink: 116812 bytes leftover after parsing attributes in process `syz.0.457'. [ 52.305644][ T5169] netlink: zone id is out of range [ 52.310892][ T5169] netlink: zone id is out of range [ 52.316579][ T5169] netlink: zone id is out of range [ 52.322149][ T5169] netlink: zone id is out of range [ 52.328159][ T5169] netlink: zone id is out of range [ 52.334278][ T5169] netlink: zone id is out of range [ 52.339561][ T5169] netlink: zone id is out of range [ 52.361535][ T4954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.378619][ T5169] netlink: zone id is out of range [ 52.383965][ T5169] netlink: zone id is out of range [ 52.389416][ T5169] netlink: zone id is out of range [ 52.463274][ T5193] ext4: Bad value for 'barrier' [ 52.486469][ T5193] netlink: 'syz.0.458': attribute type 3 has an invalid length. [ 52.504787][ T5193] netlink: 'syz.0.458': attribute type 3 has an invalid length. [ 52.525949][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 52.525961][ T28] audit: type=1326 audit(1770907183.159:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5192 comm="syz.0.458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9c862bf79 code=0x0 [ 52.574553][ T5199] xt_hashlimit: size too large, truncated to 1048576 [ 52.734866][ T4954] veth0_vlan: entered promiscuous mode [ 52.756958][ T4954] veth1_vlan: entered promiscuous mode [ 52.786922][ T4954] veth0_macvtap: entered promiscuous mode [ 52.803364][ T4954] veth1_macvtap: entered promiscuous mode [ 52.841680][ T4954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.860823][ T4954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.889756][ T41] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.917124][ T41] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.948553][ T28] audit: type=1400 audit(1770907183.591:611): avc: denied { lock } for pid=5211 comm="syz.3.460" path="socket:[11588]" dev="sockfs" ino=11588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.973174][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.983091][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.022805][ T28] audit: type=1400 audit(1770907183.662:612): avc: denied { mounton } for pid=4954 comm="syz-executor" path="/root/syzkaller.AT4NSq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 53.055919][ T5208] set_capacity_and_notify: 10 callbacks suppressed [ 53.056035][ T5208] loop0: detected capacity change from 0 to 512 [ 53.079719][ T5208] EXT4-fs: Ignoring removed bh option [ 53.176548][ T5208] EXT4-fs: Ignoring removed oldalloc option [ 53.181457][ T5221] loop3: detected capacity change from 0 to 512 [ 53.183949][ T28] audit: type=1400 audit(1770907183.752:613): avc: denied { accept } for pid=5214 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.219621][ T5222] 9p: Bad value for 'rfdno' [ 53.245444][ T5208] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.270343][ T5208] EXT4-fs (loop0): 1 truncate cleaned up [ 53.345917][ T5221] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.399173][ T28] audit: type=1400 audit(1770907184.044:614): avc: denied { mounton } for pid=5229 comm="syz.6.463" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.485537][ T5240] program syz.6.465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.503842][ T5238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.562441][ T5251] sctp: [Deprecated]: syz.3.464 (pid 5251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 53.562441][ T5251] Use struct sctp_sack_info instead [ 53.582601][ T5253] loop0: detected capacity change from 0 to 128 [ 53.589285][ T5249] loop6: detected capacity change from 0 to 2048 [ 53.620379][ T5251] loop3: detected capacity change from 0 to 512 [ 53.640977][ T28] audit: type=1400 audit(1770907184.255:615): avc: denied { remove_name } for pid=5248 comm="syz.6.467" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.698494][ T5251] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.726899][ T28] audit: type=1400 audit(1770907184.255:616): avc: denied { rename } for pid=5248 comm="syz.6.467" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.729188][ T5251] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.464: invalid indirect mapped block 4294967295 (level 0) [ 53.785937][ T5251] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 53.786130][ T5251] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.464: invalid indirect mapped block 4294967295 (level 1) [ 53.795009][ T28] audit: type=1400 audit(1770907184.255:617): avc: denied { unlink } for pid=5248 comm="syz.6.467" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.799070][ T5251] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 53.819643][ T5260] loop2: detected capacity change from 0 to 164 [ 53.859027][ T28] audit: type=1326 audit(1770907184.436:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.6.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca6a7bf79 code=0x7ffc0000 [ 53.868280][ T5251] EXT4-fs (loop3): 1 orphan inode deleted [ 53.868757][ T28] audit: type=1326 audit(1770907184.436:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5261 comm="syz.6.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca6a7bf79 code=0x7ffc0000 [ 53.909528][ T5251] EXT4-fs (loop3): 1 truncate cleaned up [ 53.974393][ T5265] loop0: detected capacity change from 0 to 2048 [ 54.010740][ T5270] loop6: detected capacity change from 0 to 1024 [ 54.017688][ T5270] EXT4-fs: Ignoring removed nobh option [ 54.024001][ T5270] EXT4-fs: inline encryption not supported [ 54.036201][ T3301] loop0: p2 p3 p7 [ 54.040965][ T5270] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 54.051673][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.080455][ T5277] loop5: detected capacity change from 0 to 1024 [ 54.101892][ T5265] loop0: p2 p3 p7 [ 54.278674][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 54.290449][ T5001] udevd[5001]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 54.298533][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 54.420443][ T5292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.480'. [ 54.436468][ T5292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 54.450098][ T5289] loop2: detected capacity change from 0 to 8192 [ 54.494674][ T5295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.513871][ T5295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.523340][ T5292] wireguard0: entered promiscuous mode [ 54.534355][ T5292] wireguard0: entered allmulticast mode [ 54.537336][ T3301] loop2: p1 p3 p4[EZD] [ 54.544681][ T5295] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 54.561755][ T3301] loop2: p1 start 262144 is beyond EOD, truncated [ 54.571710][ T3301] loop2: p3 start 331781 is beyond EOD, truncated [ 54.586590][ T3301] loop2: p4 size 197376 extends beyond EOD, truncated [ 54.607949][ T5289] loop2: p1 p3 p4[EZD] [ 54.612939][ T5289] loop2: p1 start 262144 is beyond EOD, truncated [ 54.625349][ T5289] loop2: p3 start 331781 is beyond EOD, truncated [ 54.631988][ T5289] loop2: p4 size 197376 extends beyond EOD, truncated [ 54.660350][ T5299] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 54.673688][ T5299] System zones: 0-1, 3-36 [ 54.701814][ T5299] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.492: bad orphan inode 134217728 [ 54.739772][ T5299] loop0: lost filesystem error report for type 5 error -117 [ 54.767417][ T3315] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 54.833009][ T3315] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 55.075009][ T5312] netlink: 'syz.5.485': attribute type 10 has an invalid length. [ 55.099721][ T5312] netlink: 16 bytes leftover after parsing attributes in process `syz.5.485'. [ 55.291285][ T5349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.497'. [ 55.362966][ T5359] vlan2: entered allmulticast mode [ 55.368219][ T5359] bridge0: entered allmulticast mode [ 55.373700][ T5359] bridge1: port 1(vlan2) entered blocking state [ 55.380124][ T5359] bridge1: port 1(vlan2) entered disabled state [ 55.387232][ T5359] vlan2: entered promiscuous mode [ 55.392361][ T5359] bridge0: entered promiscuous mode [ 55.420463][ T5330] chnl_net:caif_netlink_parms(): no params data found [ 55.420933][ T5366] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 55.471434][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.478786][ T5330] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.486422][ T5330] bridge_slave_0: entered allmulticast mode [ 55.493251][ T5330] bridge_slave_0: entered promiscuous mode [ 55.500074][ T5330] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.507641][ T5330] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.514968][ T5330] bridge_slave_1: entered allmulticast mode [ 55.521554][ T5330] bridge_slave_1: entered promiscuous mode [ 55.538033][ T5330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.549132][ T5330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.567340][ T5330] team0: Port device team_slave_0 added [ 55.573939][ T5330] team0: Port device team_slave_1 added [ 55.589577][ T5330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.596870][ T5330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.623162][ T5330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.636187][ T5330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.643506][ T5330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.670165][ T5330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.712521][ T5330] hsr_slave_0: entered promiscuous mode [ 55.718902][ T5330] hsr_slave_1: entered promiscuous mode [ 55.729545][ T5330] debugfs: 'hsr0' already exists in 'hsr' [ 55.735378][ T5330] Cannot create hsr debugfs directory [ 55.859699][ T5330] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 55.874876][ T5330] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 55.887142][ T5330] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 55.897585][ T5330] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 55.930234][ T5330] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.937443][ T5330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.944934][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.952070][ T5330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.963097][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.009767][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.061606][ T5330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.083162][ T5330] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.092610][ T4601] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.099724][ T4601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.111241][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.118423][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.229250][ T5435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 56.241499][ T5435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 56.253354][ T5435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 56.270910][ T5330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.362798][ T5446] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.477166][ T5464] vlan2: entered promiscuous mode [ 56.482521][ T5464] vlan2: entered allmulticast mode [ 56.488032][ T5464] hsr_slave_1: entered allmulticast mode [ 56.514203][ T5468] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 56.539410][ T5330] veth0_vlan: entered promiscuous mode [ 56.556903][ T5330] veth1_vlan: entered promiscuous mode [ 56.576615][ T5330] veth0_macvtap: entered promiscuous mode [ 56.585315][ T5330] veth1_macvtap: entered promiscuous mode [ 56.593489][ T5475] __nla_validate_parse: 1 callbacks suppressed [ 56.593503][ T5475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.514'. [ 56.610737][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.637060][ T5330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.665229][ T30] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.688696][ T30] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.712936][ T30] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.722298][ T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.808783][ T5495] netlink: 'syz.3.519': attribute type 39 has an invalid length. [ 57.404675][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.561975][ T5497] netlink: 452 bytes leftover after parsing attributes in process `syz.2.520'. [ 57.567119][ T5506] netlink: 24 bytes leftover after parsing attributes in process `syz.6.522'. [ 57.605086][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 57.605099][ T28] audit: type=1400 audit(1770907188.268:654): avc: denied { read } for pid=5505 comm="syz.6.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.636718][ T5506] netlink: 32 bytes leftover after parsing attributes in process `syz.6.522'. [ 57.675006][ T28] audit: type=1326 audit(1770907188.338:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.5.525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2459eabf79 code=0x0 [ 57.827019][ T5530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.837837][ T5526] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.531: iget: bad i_size value: 38620345925642 [ 57.841370][ T5530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.859375][ T5526] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.860405][ T5526] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.531: couldn't read orphan inode 15 (err -117) [ 57.875942][ T5511] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 57.901224][ T5526] loop3: lost filesystem error report for type 5 error -117 [ 57.922758][ T5530] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 57.942894][ T5511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.955841][ T1646] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 57.969885][ T1646] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 57.972629][ T5511] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.985933][ T1646] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.985933][ T1646] [ 58.004102][ T1646] EXT4-fs (loop3): Total free blocks count 0 [ 58.010604][ T1646] EXT4-fs (loop3): Free/Dirty block details [ 58.016903][ T1646] EXT4-fs (loop3): free_blocks=0 [ 58.021938][ T1646] EXT4-fs (loop3): dirty_blocks=1 [ 58.027491][ T1646] EXT4-fs (loop3): Block reservation details [ 58.032740][ T5511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.523'. [ 58.033571][ T1646] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 58.069470][ T5537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.071853][ T5511] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5511 comm=syz.2.523 [ 58.078633][ T5537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.113048][ T5537] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 58.607003][ T28] audit: type=1400 audit(1770907189.283:656): avc: denied { getopt } for pid=5577 comm="syz.6.544" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.684673][ T28] audit: type=1400 audit(1770907189.364:657): avc: denied { name_bind } for pid=5583 comm="syz.7.546" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 58.735065][ T28] audit: type=1400 audit(1770907189.384:658): avc: denied { name_connect } for pid=5583 comm="syz.7.546" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 58.797808][ T28] audit: type=1400 audit(1770907189.394:659): avc: denied { accept } for pid=5588 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 58.846341][ T5584] wireguard0: entered promiscuous mode [ 58.846379][ T5584] wireguard0: entered allmulticast mode [ 58.882756][ T5605] set_capacity_and_notify: 8 callbacks suppressed [ 58.882801][ T5605] loop7: detected capacity change from 0 to 512 [ 58.901346][ T5605] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 58.927612][ T5607] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 58.940300][ T28] audit: type=1400 audit(1770907189.615:660): avc: denied { setopt } for pid=5601 comm="syz.6.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.053599][ T5618] loop2: detected capacity change from 0 to 1024 [ 59.070325][ T5620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.090481][ T5620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.119512][ T5620] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 59.144340][ T28] audit: type=1400 audit(1770907189.816:661): avc: denied { write } for pid=5627 comm="syz.6.561" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 59.206840][ T28] audit: type=1400 audit(1770907189.816:662): avc: denied { create } for pid=5627 comm="syz.6.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 59.251644][ T5634] netlink: 'syz.2.562': attribute type 21 has an invalid length. [ 59.259436][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 59.270732][ T5637] netlink: 'syz.2.562': attribute type 21 has an invalid length. [ 59.278861][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 59.449703][ T5648] loop2: detected capacity change from 0 to 512 [ 59.456320][ T5648] EXT4-fs: Ignoring removed nobh option [ 59.473355][ T5648] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.521605][ T5646] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5646 comm=syz.6.569 [ 59.525805][ T5648] EXT4-fs (loop2): 1 truncate cleaned up [ 59.576138][ T5657] sctp: [Deprecated]: syz.5.571 (pid 5657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 59.576138][ T5657] Use struct sctp_sack_info instead [ 59.675988][ T28] audit: type=1400 audit(1770907190.349:663): avc: denied { getopt } for pid=5658 comm="syz.6.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.730641][ T5668] loop2: detected capacity change from 0 to 256 [ 59.829093][ T5683] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 59.913990][ T5690] bridge_slave_0: left allmulticast mode [ 59.931443][ T5690] bridge_slave_0: left promiscuous mode [ 59.938026][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.950412][ T5690] bridge_slave_1: left allmulticast mode [ 59.957160][ T5690] bridge_slave_1: left promiscuous mode [ 59.963731][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.973995][ T5690] bond0: (slave bond_slave_0): Releasing backup interface [ 59.986152][ T5690] bond0: (slave bond_slave_1): Releasing backup interface [ 60.000109][ T5690] team0: Port device team_slave_0 removed [ 60.011208][ T5690] team0: Port device team_slave_1 removed [ 60.018915][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.027086][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.037960][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.045891][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.056377][ T5690] net_ratelimit: 76 callbacks suppressed [ 60.056392][ T5690] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 60.090668][ T9] !yz!: Port: 1 Link DOWN [ 60.098411][ T5700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=5700 comm=syz.3.586 [ 60.111743][ T5700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=5700 comm=syz.3.586 [ 60.124588][ T5700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=5700 comm=syz.3.586 [ 60.138110][ T5700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=5700 comm=syz.3.586 [ 60.159624][ T5700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=5700 comm=syz.3.586 [ 60.174453][ T5700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=5700 comm=syz.3.586 [ 60.187953][ T5722] loop7: detected capacity change from 0 to 512 [ 60.208860][ T5722] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.242505][ T5726] loop2: detected capacity change from 0 to 1764 [ 60.364073][ T5750] loop6: detected capacity change from 0 to 512 [ 60.372792][ T5750] EXT4-fs: Ignoring removed nobh option [ 60.378903][ T5750] EXT4-fs: Ignoring removed orlov option [ 60.418512][ T5750] EXT4-fs error (device loop6): __ext4_iget:5426: inode #11: block 1: comm syz.6.598: invalid block [ 60.508576][ T5750] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 60.543900][ T5750] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.598: couldn't read orphan inode 11 (err -117) [ 60.689712][ T5765] netlink: 2 bytes leftover after parsing attributes in process `syz.7.602'. [ 60.721828][ T5750] loop6: lost filesystem error report for type 5 error -117 [ 60.743470][ T5750] netlink: 20 bytes leftover after parsing attributes in process `syz.6.598'. [ 60.772550][ T5765] netlink: 'syz.7.602': attribute type 10 has an invalid length. [ 60.810686][ T5765] netlink: 40 bytes leftover after parsing attributes in process `syz.7.602'. [ 60.855579][ T5765] dummy0: entered promiscuous mode [ 60.895241][ T5765] dummy0: entered allmulticast mode [ 60.914511][ T5765] bridge0: port 3(dummy0) entered blocking state [ 60.935936][ T5765] bridge0: port 3(dummy0) entered disabled state [ 60.959040][ T5765] bridge0: port 3(dummy0) entered blocking state [ 60.965478][ T5765] bridge0: port 3(dummy0) entered forwarding state [ 61.009853][ T5750] bond0: entered promiscuous mode [ 61.016427][ T5750] bond_slave_0: entered promiscuous mode [ 61.039644][ T5770] loop3: detected capacity change from 0 to 512 [ 61.046743][ T5750] bond_slave_1: entered promiscuous mode [ 61.077170][ T5750] batadv0: entered promiscuous mode [ 61.083410][ T5750] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 61.399731][ T5805] loop3: detected capacity change from 0 to 512 [ 61.436850][ T5805] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.3.616: corrupted xattr block 95: invalid header [ 61.451022][ T5805] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.478264][ T5805] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.616: bg 0: block 7: invalid block bitmap [ 61.500044][ T5805] loop3: lost filesystem error report for type 5 error -117 [ 61.500191][ T5805] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 61.516414][ T5805] loop3: lost filesystem error report for type 5 error -117 [ 61.516586][ T5805] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #11: comm syz.3.616: corrupted xattr block 95: invalid header [ 61.539267][ T5805] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.539386][ T5805] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 61.598774][ T5805] EXT4-fs (loop3): 1 orphan inode deleted [ 61.903681][ T5821] netlink: 72 bytes leftover after parsing attributes in process `syz.3.618'. [ 61.918102][ T5817] netlink: 72 bytes leftover after parsing attributes in process `syz.3.618'. [ 62.082672][ T5831] netlink: 36 bytes leftover after parsing attributes in process `syz.3.622'. [ 62.204611][ T5831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.622'. [ 62.886285][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 62.886298][ T28] audit: type=1400 audit(1770907193.575:673): avc: denied { listen } for pid=5845 comm="syz.2.623" laddr=172.20.20.10 lport=14797 faddr=172.20.20.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.274140][ T5877] bridge0: port 3(dummy0) entered disabled state [ 63.335468][ T5891] loop2: detected capacity change from 0 to 512 [ 63.362027][ T5877] bridge_slave_0: left allmulticast mode [ 63.364737][ T5891] EXT4-fs: Ignoring removed nobh option [ 63.387705][ T5891] EXT4-fs: Ignoring removed orlov option [ 63.394030][ T5877] bridge_slave_0: left promiscuous mode [ 63.405862][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.415784][ T5877] bridge_slave_1: left allmulticast mode [ 63.421710][ T5877] bridge_slave_1: left promiscuous mode [ 63.430103][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.449006][ T5891] EXT4-fs error (device loop2): __ext4_iget:5426: inode #11: block 1: comm syz.2.632: invalid block [ 63.462312][ T5877] bond0: (slave bond_slave_0): Releasing backup interface [ 63.560123][ T5891] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.560347][ T5877] bond0: (slave bond_slave_1): Releasing backup interface [ 63.560432][ T5891] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.632: couldn't read orphan inode 11 (err -117) [ 63.589739][ T5891] loop2: lost filesystem error report for type 5 error -117 [ 63.595532][ T5877] team0: Port device team_slave_0 removed [ 63.612295][ T5877] team0: Port device team_slave_1 removed [ 63.619587][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.635209][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.657939][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.682665][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.697088][ T5877] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 63.771282][ T5900] netlink: 36 bytes leftover after parsing attributes in process `syz.5.635'. [ 63.781311][ T5900] netlink: 24 bytes leftover after parsing attributes in process `syz.5.635'. [ 63.804296][ T5894] ipvlan2: entered allmulticast mode [ 63.824387][ T5894] dummy0: entered allmulticast mode [ 63.946337][ T28] audit: type=1326 audit(1770907194.641:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.3.639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c08fdbf79 code=0x0 [ 63.988747][ T28] audit: type=1400 audit(1770907194.691:675): avc: denied { setopt } for pid=5923 comm="syz.2.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.009877][ T28] audit: type=1326 audit(1770907194.711:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5916 comm="syz.3.639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c08fdbf79 code=0x0 [ 64.049198][ T5924] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 64.061836][ T28] audit: type=1400 audit(1770907194.761:677): avc: denied { create } for pid=5927 comm="syz.7.642" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 64.092007][ T5924] bond2 (unregistering): Released all slaves [ 64.101844][ T28] audit: type=1400 audit(1770907194.761:678): avc: denied { ioctl } for pid=5927 comm="syz.7.642" path="socket:[14682]" dev="sockfs" ino=14682 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 64.266968][ T5936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.288311][ T5936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.322552][ T5936] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 64.379984][ T5951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.649'. [ 64.409064][ T5956] loop6: detected capacity change from 0 to 512 [ 64.500725][ T5972] xt_hashlimit: size too large, truncated to 1048576 [ 64.563171][ T5973] loop6: detected capacity change from 0 to 128 [ 64.588146][ T5973] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.637195][ T5982] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 64.692871][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.6.660'. [ 64.794547][ T5994] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.802583][ T5995] bond1: option mode: unable to set because the bond device is up [ 64.811110][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.662'. [ 64.820083][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.6.662'. [ 65.224883][ T28] audit: type=1326 audit(1770907195.927:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.5.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2459eabf79 code=0x7ffc0000 [ 65.273474][ T28] audit: type=1326 audit(1770907195.927:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.5.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f2459eabf79 code=0x7ffc0000 [ 65.313051][ T28] audit: type=1326 audit(1770907195.927:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.5.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2459eabf79 code=0x7ffc0000 [ 65.368098][ T28] audit: type=1326 audit(1770907195.947:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6008 comm="syz.5.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2459eabf79 code=0x7ffc0000 [ 65.530227][ T6031] loop2: detected capacity change from 0 to 512 [ 65.549295][ T6031] EXT4-fs mount: 41 callbacks suppressed [ 65.549306][ T6031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.568401][ T6031] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.610188][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.778696][ T6050] loop2: detected capacity change from 0 to 512 [ 65.807117][ T6050] EXT4-fs: Ignoring removed nobh option [ 65.823205][ T6050] EXT4-fs: Ignoring removed orlov option [ 65.834862][ T6050] EXT4-fs error (device loop2): __ext4_iget:5426: inode #11: block 1: comm syz.2.677: invalid block [ 65.847556][ T6050] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 65.847751][ T6050] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.677: couldn't read orphan inode 11 (err -117) [ 65.878647][ T6050] loop2: lost filesystem error report for type 5 error -117 [ 65.881636][ T6050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.956606][ T6067] loop7: detected capacity change from 0 to 512 [ 65.968146][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.043876][ T6074] loop2: detected capacity change from 0 to 2048 [ 66.060040][ T6067] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.073689][ T6067] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.076638][ T6074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 66.104026][ T6074] EXT4-fs error (device loop2): ext4_lookup:1785: inode #16: comm syz.2.689: iget: bad i_size value: 8796093031208 [ 66.117764][ T5330] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.627911][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 66.679444][ T6092] x_tables: duplicate underflow at hook 3 [ 66.693247][ T6090] SET target dimension over the limit! [ 66.744695][ T6090] SELinux: failed to load policy [ 66.772418][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.796241][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.989136][ T6110] loop6: detected capacity change from 0 to 2048 [ 67.007393][ T6118] loop7: detected capacity change from 0 to 512 [ 67.023263][ T6110] netlink: 'syz.6.700': attribute type 2 has an invalid length. [ 67.038988][ T6110] __nla_validate_parse: 6 callbacks suppressed [ 67.039006][ T6110] netlink: 199792 bytes leftover after parsing attributes in process `syz.6.700'. [ 67.043198][ T6118] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 67.057545][ T6110] loop6: detected capacity change from 0 to 256 [ 67.094122][ T6110] vfat: Unknown parameter 'erro' [ 67.188393][ T6124] netlink: 24 bytes leftover after parsing attributes in process `syz.5.698'. [ 67.222178][ T6135] netlink: 'syz.6.706': attribute type 21 has an invalid length. [ 67.247316][ T6124] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6124 comm=syz.5.698 [ 67.315658][ T6148] loop3: detected capacity change from 0 to 512 [ 67.349766][ T6148] EXT4-fs: Ignoring removed nobh option [ 67.385521][ T6148] EXT4-fs: Ignoring removed orlov option [ 67.417420][ T6148] EXT4-fs error (device loop3): __ext4_iget:5426: inode #11: block 1: comm syz.3.708: invalid block [ 67.438622][ T6148] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 67.449014][ T6148] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.708: couldn't read orphan inode 11 (err -117) [ 67.514071][ T6148] loop3: lost filesystem error report for type 5 error -117 [ 67.527919][ T6148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.586334][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.632529][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.696059][ T6169] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 67.721012][ T6169] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.728153][ T6169] EXT4-fs error (device loop3): __ext4_iget:5426: inode #11: block 8: comm syz.3.714: invalid block [ 67.743208][ T6169] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 67.743970][ T6169] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.714: couldn't read orphan inode 11 (err -117) [ 67.766412][ T6169] loop3: lost filesystem error report for type 5 error -117 [ 67.769559][ T6169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 67.822465][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.833930][ T6190] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 67.850092][ T6190] FAT-fs (loop2): Filesystem has been set read-only [ 67.901758][ T6190] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 67.943344][ T6198] netlink: 'syz.2.725': attribute type 21 has an invalid length. [ 67.951771][ T6198] netlink: 156 bytes leftover after parsing attributes in process `syz.2.725'. [ 67.962635][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 67.973737][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 67.973750][ T28] audit: type=1400 audit(1770907198.690:713): avc: denied { firmware_load } for pid=6197 comm="syz.2.725" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 67.999067][ T6200] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 68.057965][ T6203] netlink: 32 bytes leftover after parsing attributes in process `syz.6.726'. [ 68.121811][ T6203] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54) [ 68.130001][ T6203] FAT-fs (loop6): Filesystem has been set read-only [ 68.281211][ T6198] syz.2.725 (6198) used greatest stack depth: 9016 bytes left [ 68.371585][ T6207] FAT-fs (loop2): Directory bread(block 414) failed [ 68.383655][ T6207] FAT-fs (loop2): Directory bread(block 415) failed [ 68.391077][ T6207] FAT-fs (loop2): Directory bread(block 416) failed [ 68.399836][ T6207] FAT-fs (loop2): Directory bread(block 417) failed [ 68.407047][ T6207] FAT-fs (loop2): Directory bread(block 418) failed [ 68.413911][ T6207] FAT-fs (loop2): Directory bread(block 419) failed [ 68.421704][ T6207] FAT-fs (loop2): Directory bread(block 420) failed [ 68.429883][ T6207] FAT-fs (loop2): Directory bread(block 421) failed [ 68.457528][ T6207] FAT-fs (loop2): FAT read failed (blocknr 128) [ 68.547754][ T6193] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.577726][ T6193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.591162][ T6193] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.603812][ T28] audit: type=1400 audit(1770907199.333:714): avc: denied { write } for pid=6192 comm="syz.3.723" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.640775][ T28] audit: type=1326 audit(1770907199.363:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819255bf79 code=0x7ffc0000 [ 68.652427][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.723'. [ 68.664668][ T28] audit: type=1326 audit(1770907199.363:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819255bf79 code=0x7ffc0000 [ 68.698003][ T28] audit: type=1326 audit(1770907199.363:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819255bf79 code=0x7ffc0000 [ 68.704499][ T6228] x_tables: duplicate underflow at hook 1 [ 68.721343][ T28] audit: type=1326 audit(1770907199.363:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f819255bf79 code=0x7ffc0000 [ 68.735000][ T6228] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 68.750646][ T28] audit: type=1326 audit(1770907199.363:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819255bf79 code=0x7ffc0000 [ 68.784793][ T28] audit: type=1326 audit(1770907199.363:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819255bf79 code=0x7ffc0000 [ 68.810172][ T28] audit: type=1326 audit(1770907199.363:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819255bf79 code=0x7ffc0000 [ 68.834574][ T28] audit: type=1326 audit(1770907199.363:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6220 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f819255bf79 code=0x7ffc0000 [ 68.860524][ T4954] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 54) [ 68.891244][ T6193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6193 comm=syz.3.723 [ 68.999678][ T6244] syzkaller0: entered promiscuous mode [ 69.013876][ T6244] syzkaller0: entered allmulticast mode [ 69.020435][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.078126][ T30] kworker/u8:1: attempt to access beyond end of device [ 69.078126][ T30] loop6: rw=1, sector=153, nr_sectors = 16 limit=128 [ 69.091980][ T30] kworker/u8:1: attempt to access beyond end of device [ 69.091980][ T30] loop6: rw=1, sector=177, nr_sectors = 8 limit=128 [ 69.106037][ T30] kworker/u8:1: attempt to access beyond end of device [ 69.106037][ T30] loop6: rw=1, sector=193, nr_sectors = 8 limit=128 [ 69.119824][ T30] kworker/u8:1: attempt to access beyond end of device [ 69.119824][ T30] loop6: rw=1, sector=209, nr_sectors = 8 limit=128 [ 69.147321][ T30] kworker/u8:1: attempt to access beyond end of device [ 69.147321][ T30] loop6: rw=1, sector=225, nr_sectors = 8 limit=128 [ 69.170307][ T30] kworker/u8:1: attempt to access beyond end of device [ 69.170307][ T30] loop6: rw=1, sector=241, nr_sectors = 8 limit=128 [ 69.189251][ T30] kworker/u8:1: attempt to access beyond end of device [ 69.189251][ T30] loop6: rw=1, sector=257, nr_sectors = 8 limit=128 [ 69.211575][ T30] kworker/u8:1: attempt to access beyond end of device [ 69.211575][ T30] loop6: rw=1, sector=273, nr_sectors = 8 limit=128 [ 69.225322][ T30] kworker/u8:1: attempt to access beyond end of device [ 69.225322][ T30] loop6: rw=1, sector=289, nr_sectors = 8 limit=128 [ 69.239088][ T30] kworker/u8:1: attempt to access beyond end of device [ 69.239088][ T30] loop6: rw=1, sector=305, nr_sectors = 8 limit=128 [ 69.367767][ T6254] ================================================================== [ 69.375887][ T6254] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 69.383420][ T6254] [ 69.385798][ T6254] write to 0xffffc90001c13e18 of 8 bytes by task 6258 on cpu 1: [ 69.394214][ T6254] shmem_fallocate+0x724/0x920 [ 69.398962][ T6254] vfs_fallocate+0x3b6/0x450 [ 69.403576][ T6254] __x64_sys_fallocate+0x7a/0xd0 [ 69.408527][ T6254] x64_sys_call+0x298e/0x3020 [ 69.413340][ T6254] do_syscall_64+0x12c/0x370 [ 69.418023][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.424036][ T6254] [ 69.426368][ T6254] read to 0xffffc90001c13e18 of 8 bytes by task 6254 on cpu 0: [ 69.433965][ T6254] shmem_writeout+0x2c1/0x920 [ 69.438753][ T6254] shrink_folio_list+0x1e75/0x2710 [ 69.443853][ T6254] evict_folios+0x2a4e/0x35b0 [ 69.448522][ T6254] try_to_shrink_lruvec+0x5f6/0x960 [ 69.453707][ T6254] shrink_lruvec+0x24e/0x1bc0 [ 69.458409][ T6254] shrink_node+0x68e/0x2000 [ 69.463029][ T6254] do_try_to_free_pages+0x404/0xcc0 [ 69.468391][ T6254] try_to_free_mem_cgroup_pages+0x222/0x470 [ 69.474450][ T6254] try_charge_memcg+0x37e/0xa10 [ 69.479293][ T6254] obj_cgroup_charge_pages+0x23/0xc0 [ 69.484554][ T6254] __memcg_kmem_charge_page+0x9e/0x170 [ 69.490077][ T6254] __alloc_frozen_pages_noprof+0x18a/0x350 [ 69.495882][ T6254] alloc_pages_mpol+0xb3/0x260 [ 69.500626][ T6254] alloc_pages_noprof+0x8f/0x130 [ 69.505561][ T6254] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 69.511440][ T6254] __kvmalloc_node_noprof+0x3c3/0x620 [ 69.516880][ T6254] ip_set_alloc+0x24/0x30 [ 69.521384][ T6254] hash_netiface_create+0x282/0x740 [ 69.526613][ T6254] ip_set_create+0x3cf/0x970 [ 69.531287][ T6254] nfnetlink_rcv_msg+0x509/0x5d0 [ 69.536237][ T6254] netlink_rcv_skb+0x123/0x220 [ 69.540993][ T6254] nfnetlink_rcv+0x167/0x1720 [ 69.546219][ T6254] netlink_unicast+0x5c0/0x690 [ 69.551366][ T6254] netlink_sendmsg+0x5c8/0x6f0 [ 69.556148][ T6254] ____sys_sendmsg+0x5af/0x600 [ 69.560903][ T6254] ___sys_sendmsg+0x195/0x1e0 [ 69.565585][ T6254] __x64_sys_sendmsg+0xd4/0x160 [ 69.570447][ T6254] x64_sys_call+0x194c/0x3020 [ 69.575215][ T6254] do_syscall_64+0x12c/0x370 [ 69.579806][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.585698][ T6254] [ 69.588102][ T6254] value changed: 0x000000000000100f -> 0x0000000000001010 [ 69.595727][ T6254] [ 69.598038][ T6254] Reported by Kernel Concurrency Sanitizer on: [ 69.604175][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz.2.743 Tainted: G W syzkaller #0 PREEMPT(full) [ 69.615183][ T6254] Tainted: [W]=WARN [ 69.618979][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 69.629138][ T6254] ================================================================== [ 69.649358][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 69.650569][ T3546] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.013717][ T6254] syz.2.743 (6254) used greatest stack depth: 5672 bytes left