last executing test programs: 1m35.460315319s ago: executing program 4 (id=18): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m33.993181809s ago: executing program 4 (id=20): creat(0x0, 0x100) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x100, 0x0, 0x3ab}, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef) 1m31.949765522s ago: executing program 4 (id=26): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x109, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000840)=ANY=[@ANYRESHEX], 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSETATTR(r6, &(0x7f0000000200)={0x7, 0x1b, 0x2}, 0x7) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000080900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080001400000000a08000340000000000900"], 0xc4}}, 0x40000) r7 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, 0xffffffffffffffff, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r8, 0x0, 0xffffffffffffffff) 1m30.216930676s ago: executing program 4 (id=29): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x800455ca, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02000000010000000000000004000000000000000020000200de85c8086cf93ab22690e777267559"], 0x24, 0x2) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r4, 0x1009}], 0x1, 0x8000007) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setopts(0x4200, r5, 0x5, 0x85565d0b4f4c053e) r6 = socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000300)='./bus\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@commit={'commit', 0x3d, 0x4}}, {@nobarrier}, {@barrier}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0xfffffffffffffffd}}, {@bh}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}], [{@smackfsdef={'smackfsdef', 0x3d, 'barrier'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x39, 0x66, 0x0, 0x33, 0x38, 0x61, 0x62], 0x2d, [0x35, 0x31, 0x33, 0x63], 0x2d, [0x37, 0x33, 0x63, 0x35], 0x2d, [0x64, 0x33, 0x35, 0x30], 0x2d, [0x39, 0x34, 0x33, 0x63, 0x66, 0x38, 0x32, 0x62]}}}, {@audit}, {@fowner_eq={'fowner', 0x3d, r7}}]}, 0x0, 0x47e, &(0x7f0000001b40)="$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") sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES8=r2], 0x14}}, 0x40005) recvmmsg(r3, &(0x7f0000001200)=[{{&(0x7f0000000d80)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000e00)=""/219, 0xdb}, {&(0x7f0000000f00)=""/139, 0x8b}, {&(0x7f0000000380)=""/35, 0x23}, {&(0x7f0000000fc0)=""/65, 0x41}], 0x4}, 0x1}, {{&(0x7f0000001040)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/118, 0x76}], 0x2, &(0x7f0000001140)=""/162, 0xa2}, 0x8}], 0x2, 0x40, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r8, r8) setresuid(0x0, r8, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000240)=@filename='./file2\x00', 0x0, &(0x7f0000000280)) 1m28.815809981s ago: executing program 4 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, r1, 0x20, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40011}, 0x48080) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000b000000090000000200009301000000090000000c0000000e00000003000000e2a30000040000000071305f2e2e30611b61"], 0x0, 0x47, 0x0, 0x0, 0x9}, 0x28) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xfffffffffffffe0f}}, 0x4010) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a0012000a000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1m26.228447971s ago: executing program 4 (id=44): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffdfffe, 0xfffffffc}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r2, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x140) open(&(0x7f0000000040)='./file0\x00', 0x109200, 0x25) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0xd0, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffe00}, {0xc, 0x90, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x60f6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x70000000000000}, {0xc, 0x90, 0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000500)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, &(0x7f0000000380)=[{&(0x7f0000002000)="080000000000b20000fe02e4ebed7ce0548466cc00007a000000ad0000000000000000be1017bd00", 0x28}], 0x1}, 0x8010) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x2000, 0x0, 0xe147ab35358f57d7, 0x3614f}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004d848}, 0x0) fcntl$setlease(r2, 0x400, 0x0) memfd_secret(0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r1, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) 1m25.304297954s ago: executing program 32 (id=44): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffdfffe, 0xfffffffc}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r2, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x140) open(&(0x7f0000000040)='./file0\x00', 0x109200, 0x25) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0xd0, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffe00}, {0xc, 0x90, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x60f6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x70000000000000}, {0xc, 0x90, 0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000500)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, &(0x7f0000000380)=[{&(0x7f0000002000)="080000000000b20000fe02e4ebed7ce0548466cc00007a000000ad0000000000000000be1017bd00", 0x28}], 0x1}, 0x8010) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x2000, 0x0, 0xe147ab35358f57d7, 0x3614f}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004d848}, 0x0) fcntl$setlease(r2, 0x400, 0x0) memfd_secret(0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r1, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) 35.923294391s ago: executing program 0 (id=373): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20048010) (fail_nth: 1) 35.604615449s ago: executing program 0 (id=376): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25640101010000000000000000000000007f00000100000000000000000000000000000020001d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 29.849143732s ago: executing program 0 (id=415): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x35, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x38, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008064) 29.543463929s ago: executing program 0 (id=417): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'pimreg\x00'}, 0x18) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) syz_clone3(&(0x7f00000000c0)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f0000000100)='./file1\x00', 0x64842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001800)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x2) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 29.31081022s ago: executing program 0 (id=420): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0900000000000000ffff00000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27.977266799s ago: executing program 0 (id=432): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 27.938128362s ago: executing program 33 (id=432): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 7.105946447s ago: executing program 5 (id=595): r0 = socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r1 = syz_io_uring_setup(0x311, &(0x7f00000004c0)={0x0, 0x2, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000200)) io_uring_enter(r1, 0xd89, 0x3ffb, 0xd, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x1f, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=r2, 0x10}}, 0x20) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x24, 0x0, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x14180, 0x4, 0x16}, 0x18) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='blkio.throttle.io_serviced\x00', 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2004000aaaaaaaaaaaa0800450000280064000000e000000211009078e00000020001000100"/54], 0x0) statx(r7, &(0x7f0000000580)='./file0\x00', 0x800, 0x80, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="dbdf251d01020008000eee", @ANYRES32=r8, @ANYBLOB="15000400020000202602000053b50f76bc4db5760400000008000900", @ANYRES32=r9, @ANYBLOB="150003000100006008020000d941a672f05213ae00000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20044844) 7.019297845s ago: executing program 5 (id=596): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file1\x00', 0x239, 0x0, 0x1}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents(r3, 0x0, 0x48) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000080)={0x6, r0, 'id1\x00'}) io_uring_enter(r0, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 7.018091825s ago: executing program 6 (id=597): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8979) r3 = open(&(0x7f0000000080)='.\x00', 0x798202, 0x78e22799f4a46e8e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1ff, r3, 0x4}, 0x38) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xc}, {0x8, 0x2}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c090}, 0x20040000) 6.951938401s ago: executing program 6 (id=598): creat(0x0, 0x100) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x1669e000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef) 6.951327311s ago: executing program 5 (id=599): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x6dad, 0xdd5}, 0x0, 0x0, 0x10002, 0x2, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x2) accept4(0xffffffffffffffff, 0x0, &(0x7f00000008c0), 0x800) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x158, 0xfd730c35dcbfc59e}}], 0x1, 0x80) prctl$PR_MCE_KILL(0x50, 0x1, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x1d, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xa19, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff, 0xffff}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xfffffffffffffea2}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.800420025s ago: executing program 5 (id=600): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) r3 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000180)='./file1\x00', 0x102) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000040)={'L+', 0x4}, 0x16, 0x2) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0xfffffffc, 0x10100}, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x19}, &(0x7f0000000240)=0x0) timer_settime(r6, 0x1, &(0x7f0000000440)={{}, {0x0, 0x989680}}, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711822000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010700000000000000006700000008002601"], 0x1c}}, 0x2000) r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r8, 0x0, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r8, 0x80) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0, @ANYRES64, @ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYRES16=r2, @ANYRES64=r7, @ANYBLOB="2e155fe54ec71dcded7d1959b627d4e61563fcda8294295a6bf6fd89d3769dda4987611d4d648aef16cda6649b2870f658857622586587f77d432b310e8eb6de5d521a6202d55442f745142e508145e29a1f754d6c586c6e9c164fc8c60a7f98b39abc72284687998c1561924281bae4cb9b461440bfd5f93d068b8e7a5eb905f235088093e3e0f8c846296c9ae44020d3c2534f6f9e54e35f9ed1f3ec052311fd9350818db5c4a96e2f86c9a8f574ec6164cf1ac4d7804a899d40355ca883295583c0647e0b8f4e736275ca110b04fcfdf37071ec082f7e0dd43302ef1664c9d084e6f5913f283d096e971b82dfc7e1"], 0x38}, 0x1, 0x0, 0x0, 0x4008080}, 0x10) 6.6293522s ago: executing program 5 (id=603): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25640101010000000000000000000000007f00000100000000000000000000000000000020001d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff7f000001000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000900000000000000ffffff7f0000000042050000000000003b00000000000000fdffffffffffff7ffcffffffffffffffe2eb0000000000000200000000000000010000002cbd7000003500000a00040050000000000000001c00040007004e244e200000ac14142e00000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x16c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 6.51802148s ago: executing program 6 (id=605): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x6dad, 0xdd5}, 0x0, 0x0, 0x10002, 0x2, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x2) accept4(0xffffffffffffffff, 0x0, &(0x7f00000008c0), 0x800) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x158, 0xfd730c35dcbfc59e}}], 0x1, 0x80) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x1d, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xa19, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff, 0xc}, {0x5, 0x10}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.149221991s ago: executing program 2 (id=612): clock_getres(0x6, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000640)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}], [{@subj_user={'subj_user', 0x3d, 'nodioread_nolock'}}, {@subj_role={'subj_role', 0x3d, 'sb'}}, {@smackfsroot={'smackfsroot', 0x3d, 'nodioread_nolock'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x8de\"\nr\x90\xc1\xde\xb0P|)'}}, {@subj_user={'subj_user', 0x3d, ','}}, {@subj_type={'subj_type', 0x3d, '\xff\xff\xff\xff\f\x00\x00\x00'}}, {@subj_role={'subj_role', 0x3d, 'cgroup2\x00'}}, {@subj_user={'subj_user', 0x3d, 'cgroup.procs\x00'}}, {@appraise_type}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000010000100000000000000e4000184000a244058f3e43eabff2ed529fc342b54fdacef9f42c495d606cd28139944243861be4e3f6e910954befb949d61761b83dcd92b10f135160de2541329e14da4836e55071473a25fe80591aed3a9129b2eb35cfabff8623d5ee98bb28ea75ba258d564d92f597450e71d20fd8b366ef9a3d98f2f"], 0x28}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20050800) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001614"], 0x18}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000840)='net/packet\x00') mq_getsetattr(r4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000e30f0001000000000000000000000000000002000000100004800c00018007000100637400000900010073797a30000000000900da004541b0f84573797a3200f0ffff130000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x8054) r7 = fsmount(r5, 0x0, 0x80) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000001c00), 0x12) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0xc8, "56646ce8f0bf0e39cf2b2d7ef2e4a2ba495841acc2b536d9a10183b8a7d4b7db3899d31f2643d8fa7ab9979fdfbb09387ff24206c9c46f3624fb606853e171e582af06475dfc3b268847751ed624508ddc6e6540fa9e705136f0d22f844af895a849f83c1dc01734e13cb410e1ab72402ba5935a6687cad53e1cf64485a1305133345d9694098807f89f5bf8f019bced25b5f5c6bbeb451bff2a82f882720b5bed0fd72c826e89a386aeeaaa19ab277e398e10c6c84f1b861512ea17c759e6d93a11aa3595fd0145"}, &(0x7f0000000000)=0xd0) accept(r2, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, &(0x7f00000001c0)=0xfffffffffffffdd9) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000400)={r9, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x4, 0x7, 0x10003, 0xfff, 0x9}, &(0x7f0000000040)=0x98) 4.648563686s ago: executing program 6 (id=615): creat(0x0, 0x100) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x1669e000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef) 4.136714051s ago: executing program 6 (id=617): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) (fail_nth: 4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=']) 3.697489861s ago: executing program 3 (id=620): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8979) open(&(0x7f0000000080)='.\x00', 0x798202, 0x78e22799f4a46e8e) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xc}, {0x8, 0x2}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c090}, 0x20040000) 3.634752916s ago: executing program 3 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x1}}, {{0xa, 0x4e23, 0x4a3, @local, 0x4ef}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x210) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setrlimit(0xc, &(0x7f00000000c0)={0x4, 0x81}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) socket(0x1f, 0x5, 0x8001) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file1\x00', 0x239, 0x0, 0x1}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents(r8, 0x0, 0x48) io_uring_enter(r5, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 3.409424086s ago: executing program 2 (id=623): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r1, 0x3328}, {0xffffffffffffffff, 0x4}], 0x2, 0x0, 0x0, 0x0) close(r0) 3.357240231s ago: executing program 2 (id=624): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x715, &(0x7f00000009c0)="$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") timer_create(0x6, &(0x7f00000000c0)={0x0, 0x12, 0x2, @tid=r0}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300200008001b00000000003d73d2ef406ae6c35e1be79edac28c5657d251a24cb3f7fa58083bdf49388a6e6bdbce9705af369f0d06400fe7bfcafef5cb47b1936dff1959c08a71670018a242d59a58c3655e0dc6e5d57dd0b5f49b6f3319080ac1640ae5e0c0a1f4fbede01f58f038c5f691897c4704bdc48a272e5458bc6059f82476aa88f36da9f97f9feba8ef0f52dd6395e30a1691e91a28b3daa9"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) iopl(0x0) 3.048421559s ago: executing program 6 (id=625): socket$packet(0x11, 0x3, 0x300) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x2042, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x71) fchdir(r1) umount2(&(0x7f0000000040)='.\x00', 0x2) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4104, 0x1008}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x20010, r3, 0xcf26476c8da53dba) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, 0x0, 0x40450) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r5, @ANYBLOB="200001"], 0x38}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bca) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) 2.935108908s ago: executing program 2 (id=626): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x40e8662e, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) recvfrom$x25(r1, &(0x7f0000000080)=""/38, 0x26, 0x2, 0x0, 0x0) unshare(0x6a040000) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x200, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(0x3) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0xbf7ffffb) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c00fc72000000000000000000000000000000000000000000000000000004"], &(0x7f0000000040)=0x2c) 2.58156641s ago: executing program 3 (id=628): r0 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="2c646566636f6e74657874d6"]) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc, 0x12, r0, 0x0) r2 = openat(r1, &(0x7f00000001c0)='./file0\x00', 0x20080, 0x40) syz_open_dev$usbfs(&(0x7f0000000440), 0x5, 0xc2401) sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x340}, 0x1, 0x0, 0x0, 0x20008050}, 0x800) ioprio_set$pid(0x1, 0x0, 0x2007) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ftruncate(r0, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x20, 0x40, 0x3, 0xe, {{0xc, 0x4, 0x1, 0x6, 0x30, 0x67, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x46, 0x3, 0x1, [{@local, 0x1}, {@local, 0x7ff}, {@loopback, 0x6}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000140)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x2, 0x9c, &(0x7f0000001300)=""/156, 0x41000, 0xb, '\x00', r3}, 0x94) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f00001e6000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/4096, 0x1000, 0x1, &(0x7f0000000280)=""/206, 0xce}, &(0x7f0000000180)=0x40) 2.499613527s ago: executing program 3 (id=629): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003000800000000000000fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000000)='S', 0x1) 2.489936778s ago: executing program 1 (id=630): r0 = syz_io_uring_setup(0x43b9, &(0x7f0000019380)={0x0, 0xf8d5, 0x8, 0x3, 0x29d}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) (async) write$P9_RXATTRWALK(r3, &(0x7f0000000340)={0xf, 0x1f, 0x1, 0x4}, 0xf) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}}}, &(0x7f0000000140)=0x84) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) timer_create(0xfffffffd, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, 0x0, 0x0) inotify_init1(0x80800) (async) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) request_key(&(0x7f0000000080)='user\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000000000)='R\x10rD\x90\x05\x10\xce\x8b\xe6\x17\t\x00\xccl\x1e\x94\x00#\xdd\xe7p\xf1\x9f\x9c\xcf`\x1f<\x03\x87\x93\xbb\a?\xa4\xfc\xddv\x8b_(\xe3\x14\xcf\x15\xfc\x00\x00\xac\xd9\xc4\xa1\x00\x00', 0x0) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000019200)={r4, 0x8000}, &(0x7f0000019240)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000019280)={r6, 0x5, 0xf85}, &(0x7f00000192c0)=0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000001ce40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x50, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x104, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0xd1, 0x6, "e4f4beb31692712ffb0eaaf1728722788b5f6c6b0c2bc3dd74bd2e768c2f2a1e9538748bbe9ce19c5652a3f4d9da4b72a832e58252a489eb959cab56b5502e0e67afe20e97ce4b22f2527c3c28ab5d914e79a9f70cf8eb6354f102b78adf3b3a50508e77c43bca5c4efa12262413d610938438686cba0a67b733cb4037b44e2d517356b53cc1bf7ac534984355c3526092c42fbfad8634911532fd59d4f0875e8b6b281279934eaa5a926298afc7e2fcfa1f3cd59add16587831282214c1a87615e65f4704a0925c8fca794128"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1dc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.432447293s ago: executing program 3 (id=631): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07106706000020000000170200000ee60000bf250000000000002d3500"], 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) listen(r1, 0xffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af365", 0x20}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000038000900000000000021000004000000040000800c000380"], 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x80, 0x2}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000910000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.417292795s ago: executing program 1 (id=632): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.029157459s ago: executing program 3 (id=633): clock_getres(0x6, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000640)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}], [{@subj_user={'subj_user', 0x3d, 'nodioread_nolock'}}, {@subj_role={'subj_role', 0x3d, 'sb'}}, {@smackfsroot={'smackfsroot', 0x3d, 'nodioread_nolock'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x8de\"\nr\x90\xc1\xde\xb0P|)'}}, {@subj_user={'subj_user', 0x3d, ','}}, {@subj_type={'subj_type', 0x3d, '\xff\xff\xff\xff\f\x00\x00\x00'}}, {@subj_role={'subj_role', 0x3d, 'cgroup2\x00'}}, {@subj_user={'subj_user', 0x3d, 'cgroup.procs\x00'}}, {@appraise_type}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000010000100000000000000e4000184000a244058f3e43eabff2ed529fc342b54fdacef9f42c495d606cd28139944243861be4e3f6e910954befb949d61761b83dcd92b10f135160de2541329e14da4836e55071473a25fe80591aed3a9129b2eb35cfabff8623d5ee98bb28ea75ba258d564d92f597450e71d20fd8b366ef9a3d98f2f"], 0x28}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20050800) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001614"], 0x18}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000840)='net/packet\x00') mq_getsetattr(r4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000e30f0001000000000000000000000000000002000000100004800c00018007000100637400000900010073797a30000000000900da004541b0f84573797a3200f0ffff130000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x8054) r7 = fsmount(r5, 0x0, 0x80) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000001c00), 0x12) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0xc8, "56646ce8f0bf0e39cf2b2d7ef2e4a2ba495841acc2b536d9a10183b8a7d4b7db3899d31f2643d8fa7ab9979fdfbb09387ff24206c9c46f3624fb606853e171e582af06475dfc3b268847751ed624508ddc6e6540fa9e705136f0d22f844af895a849f83c1dc01734e13cb410e1ab72402ba5935a6687cad53e1cf64485a1305133345d9694098807f89f5bf8f019bced25b5f5c6bbeb451bff2a82f882720b5bed0fd72c826e89a386aeeaaa19ab277e398e10c6c84f1b861512ea17c759e6d93a11aa3595fd0145"}, &(0x7f0000000000)=0xd0) accept(r2, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, &(0x7f00000001c0)=0xfffffffffffffdd9) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000400)={r9, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x4, 0x7, 0x10003, 0xfff, 0x9}, &(0x7f0000000040)=0x98) 1.940604777s ago: executing program 1 (id=634): bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r0, 0x3328}, {0xffffffffffffffff, 0x4}], 0x2, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 1.885840622s ago: executing program 1 (id=635): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() set_mempolicy(0x6005, &(0x7f0000000140)=0x2dc, 0x4) getpriority(0x1, 0xe6) r1 = add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe) creat(0x0, 0x2) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000000c0)={0xf91, 0x5, 0x7, 0xffffffff, 0xf0, "ce94eb139533c58583b0637f3c5588e990b6a2", 0xc42, 0x7ff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000500)='autofs\x00', 0x0, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB') socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x6, 0x10ffe, 0x0, 0x2, 0x80040011, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x1008) 1.808006089s ago: executing program 2 (id=636): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write(r3, &(0x7f0000000400)="1400100052004f00000b6cc81b0000008000060000a86c77070c7431c53a28b16f602a9e174660e39111a390dc40fe4b05a36d00f3659f6b9d21cd7bab90323fe0ca3bb5a1b370ef60ed14cbbaad6724d15c61b4f7f16e45927ca8396dd792e067922bbee39e81137a636348c453909b7d04224c1a3149156f", 0x79) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x100, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1203, 0x48a4d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) unshare(0x41854a52f870ee31) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x1b3, 0x0) ioctl$BLKPG(r8, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000080)={0xffffffff, 0x0, 0xa}}) 720.550636ms ago: executing program 2 (id=637): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$eJzs3c9rHFUcAPDvbJKmTauJIPjjFBA0ULoxNbYKHioeRLBQ0LPtstmGmk22ZDelCQEtIngRVDwIeunZH/Xm1R9X/S88iKVqWqx4kMhsZtpts5smbZKt7ucD07w3b7bvfffNvHm7M8wG0LNG038KEY9FxAdJxHC2PomIgWaqP+LY2nbXV5bL6ZLE6uprvyfNba6tLJej5TWp/Vnm0Yj4/t2Ig4X19dYXl2ZK1Wplfi3bFxFnx+uLS4fOzJamK9OVuSMTk5OHjz579Mj2xfrnT0sHLn/48lNfHfv7nUcuvf9DEsfiQFbWGsd2GY3R7D0ZSN/CW7y03ZV1WdLtBnBXCtnB1x/pGDAcfc0UAPB/9lZErAIAPSZx/geAHpN/D3BtZbmcL939RmJ3XXkxIvauxZ9f31wr6c+u2e1tXgcdupbccmUkiYiRbah/NCI+++aNL9Ildug6JEA7b1+IiFMjo+vH/2TdPQtb9fQGZXuyv6O3rTf+we75Np3/PNdu/le4Mf+JNvOfwTbH7t244/G/bxsq2UA6/3uh5d626y3xZ0b6stwDzTnfQHL6TLWSjm0PRsRYDAym+YkN6hi7+s/VTmWt878/Pnrz87T+9O/NLQq/9g/e+pqpUqN0LzG3unIh4vH+dvEnN/o/6TD/PbHJOl55/r1PO5Wl8afx5sv6+CO7O2lnrF6MeLJt/9+8oy1NjTdmO9yfON7cHcbznaKNr3/+ZKhT/a39ny5p/flngd2Q9v/QxvGPJK33a9bXjv2t+PHi8Hedyu4cf/v9f0/yejOdzyPOlxqN+YmIPcmr69cfvvnaPJ9vn8Y/9kT743+j/T/9THhqk/H3X/7tyw3j39/d/p/aUv+3S6SDdIeimVL10vWZvk71b67/J5upsWzNZsa/Ti29PXEv7x0AAAAAAAAAAAAAAAAAAAAAAAAAbFYhIg5EUijeSBcKxeLab3g/HEOFaq3eOHi6tjA3Fc3fyh6JgUL+qMvhluehTmTPw8/zh2/LPxMRD0XEx4P7kvw5ilNdjh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcvs7/P5/6pfBbrcOANgxe7vdAABg1zn/A0Dvcf4HgN7j/A8Avcf5HwB6j/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+zE8ePpsvrXynI5zU+dW1yYqZ07NFWpzxRnF8rFcm3+bHG6VpuuVorl2uyd/r9qrXZ2MuYWzo83KvXGeH1x6eRsbWGucfLMbGm6crIysCtRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDW1BeXZkrVamVe4i4Sq/dHM7qf6Mt2p/ulPbuaSO6PZmxzossDEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/xL8BAAD//7KsH7I=") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 296.568734ms ago: executing program 1 (id=638): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x715, &(0x7f00000009c0)="$eJzs3V+P21gZBvDnJJlJJoWqAlStqm7ndMpKUzGkTmabKipIGOckY0jiyPbAjIS0KnQGjZopS1skmpt2bhaQli/A3d5wwYdYiQuuVuJDwBVIKxAS2hUIGfnYzl8nM2nTdqs+v6i1Y78+fn3s+tQz9jGIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgIwqobRlmgZXd29+RsVt112smXLKbmR6Wt4Ho0cn3eOlfC9QIi/INCAW9Fk9/62jDkYvjXBi5H3y6jEA4K6J+7eOH2V3OZZPk5CT8LLFrgw8f9e3d6vYMHZ4jNYuHiXyVkzhDUVB3bc+y22VTS9hxZq1aNGzsNTzbslvL2PV+1peWqjO+4ctO6Lsu12rZUpX1nt9Osmy2VTLz1zYphVOX38tGOBlDyrB271bI7TR0Tzg5jbskPfxQFKLMt5eFR72B7JJ8naXUcBpVTks+MBodBldM2t2JUKuVypVKu3qzdvGUYuakJRkgYA5iKWPpBS69SJj5eF1hkeSdvoueUser/Nf4igBYK6GAXe5Djn0w0tFCHCwftyfnxJ5a0/+/cUHPXO9r+J638ynD2Jej2/0r07cqs9n9GLhJSL5A2R8yYvthnRWck8RCP0cc93EEPPRzgwRLKlpDrz13CqhHX5FLymflpQqEDGx4c2GjDRBNfhoynSNRQRRUG3sMOGvAg0YCNFhQ87MODDxUeUathpgomfDhwIbEJC9chUUYNNWxDQqGEfTjYRQdN1GHisyAIDnGk6307zudpylYjCSrP2Ig8cslxd4DKnK2d1f7/+Em0dNz+G2z/31TRcZCPBp/MiyH6AgisuvHnDxZebP2FJENEREREREREL4TQP30X+rfybwMI0LBbyhiLyb+y7IiIiIiIiIhoGQSCPC5DRHfl422I6et/IiIiIiIiInq9Cf2MnQBQ1Df1i+HjUmf5IUD2JaRIRERERERERM8pvPLHlVUg0Hf5r0MsdP1PRERERERERK+BX4/0sZ/Lxn3sBsmv9TMA1v+aFx//Iw93RZx0974ujs1wjnkcx0zdAeA3LonzcUe9erAKQH+z1GURr00C/05++hD69DC9r/+nQUQI4U4ksJodLWBGAiJcczUXf8OHuBotcjXuZ/5uPwM9J+pRuNiwW6pkOa3bZZjm+Yyv9vxf3D/6JeAOtvPwqHdQ+snPend1LifhpJPjsNAnY+lk0itjmMsj3d+CfuYirXfjNTSSVf6m0y4KvV4j2f4szOPM6Irm7YDqGhBt5QfYiPbZRhDFFvuDHvcFsK47fyiX9C4b23p3RQyzKE9uedqOmLHlBZ3FtSjm2ua1aJDUSVhORhS+kQUqpcl9ECY6kkVlNIvT60L8c6L+52cBUQjrYjvM4o9hQRN18cOPo4W3u3tJ9xhnyWLqKCAielUOh62Q7sR8qo/9pHlITmpnb3eQA+Kz3IzWfbiWIG4/ktb90e+CqIXKArn4dxPpa0naFYRn9E2hy1mNOnTPXUo5oxulz4MgMM8XMHpG/18QJBtkLNC6nQRBMHlG/8PwHUhx2lNZ/CcIgttl3ZL8dqJV/Shc4KOx9b4/sl6vVcmigDweHb+Pz5K0Dn56cL9S2a4a7xrGzQpW9H8V4kEWbHuIiGjK6e/Y0RGZORHiXVyNyrh69+/vRGNjLd5X4lsKtBtAD3exlbxCYD291CIO8e1/RbchbEVXrcBGMRoW+/LihdvhVe0g9kjk9BtetmZe1enGMorVtzdUBrHJe4cmrwCHsdsveC8QERG9XBsz2mFgrP3HePtfGGv/t7AZRWxeSr3uLo7cUriVXB0PLun7505SY8unJ/+dJVcGERHRG0K5n4qi/yvhunb3vXKtVjb9HSVdx/q+dO16U0m74yvX2jE7TSW7ruM7ltOSXRd5e0150tvtdh3Xlw3HlV3Hs/f0m99l/Op3T7XNjm9bXrelTE9Jy+n4puXLuu1Zsrv73Zbt7ShXL+x1lWU3bMv0bacjPWfXtVRJSk+pkUC7rjq+3bDD0Y7sunbbdPflD5zWblvJuvIs1+76TlRgsi6703Dcti62hCDtfgEiIqI3zsPH/Xt3er2DB5Mja+GleTTlBDNipkdWUwpkH0FERERfMMPmeoGFCi8wISIiIiIiIiIiIiIiIiIiIiIiIiIiIiIimnL6I30LjqykPSwIDKb8/Hw8BU8xfMRwqhyB583nc/dPumO/Z1k8M5giAJxhqeSRiP69T+YErw2mJNU/GnOySIa4ADxz/fztS8A5PQXRlNwSD4Dp50eXfoyljXzrMKrRWTF6Zuqs/GBf5Jb/zyEcuf/76VkirPkgCIL5i+fH63D17MdzDsCD1Tm7YO2U4+dln4mI6GX7fwAAAP//5YcxOg==") timer_create(0x6, &(0x7f00000000c0)={0x0, 0x12, 0x2, @tid=r0}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300200008001b00000000003d73d2ef406ae6c35e1be79edac28c5657d251a24cb3f7fa58083bdf49388a6e6bdbce9705af369f0d06400fe7bfcafef5cb47b1936dff1959c08a71670018a242d59a58c3655e0dc6e5d57dd0b5f49b6f3319080ac1640ae5e0c0a1f4fbede01f58f038c5f691897c4704bdc48a272e5458bc6059f82476aa88f36da9f97f9feba8ef0f52dd6395e30a1691e91a28b3daa9"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) iopl(0x0) 139.224198ms ago: executing program 1 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x1}}, {{0xa, 0x4e23, 0x4a3, @local, 0x4ef}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x210) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setrlimit(0xc, &(0x7f00000000c0)={0x4, 0x81}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) socket(0x1f, 0x5, 0x8001) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)='./file1\x00', 0x239, 0x0, 0x1}) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') io_uring_enter(r5, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 0s ago: executing program 5 (id=640): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x100, 0x0, 0x3ab}, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003110004000000a60c6eec00be00442c2f"], 0xfdef) kernel console output (not intermixed with test programs): om 0 to 764 [ 52.062011][ T262] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.078814][ T3689] loop3: detected capacity change from 0 to 128 [ 52.102906][ T3690] loop1: detected capacity change from 0 to 256 [ 52.246238][ T3690] FAT-fs (loop1): Directory bread(block 64) failed [ 52.252992][ T3690] FAT-fs (loop1): Directory bread(block 65) failed [ 52.259761][ T3690] FAT-fs (loop1): Directory bread(block 66) failed [ 52.266807][ T3690] FAT-fs (loop1): Directory bread(block 67) failed [ 52.273878][ T3690] FAT-fs (loop1): Directory bread(block 68) failed [ 52.280571][ T3690] FAT-fs (loop1): Directory bread(block 69) failed [ 52.287247][ T3690] FAT-fs (loop1): Directory bread(block 70) failed [ 52.294174][ T3690] FAT-fs (loop1): Directory bread(block 71) failed [ 52.300939][ T3690] FAT-fs (loop1): Directory bread(block 72) failed [ 52.307634][ T3690] FAT-fs (loop1): Directory bread(block 73) failed [ 52.479276][ T3695] loop0: detected capacity change from 0 to 128 [ 52.630128][ T3695] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.993831][ T3675] lo speed is unknown, defaulting to 1000 [ 53.144706][ T3695] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.169880][ T262] bridge_slave_1: left allmulticast mode [ 53.186098][ T262] bridge_slave_1: left promiscuous mode [ 53.860873][ T3712] loop2: detected capacity change from 0 to 256 [ 53.880811][ T262] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.955282][ T262] bridge_slave_0: left allmulticast mode [ 54.038809][ T3712] FAT-fs (loop2): Directory bread(block 64) failed [ 54.046111][ T3712] FAT-fs (loop2): Directory bread(block 65) failed [ 54.054192][ T3712] FAT-fs (loop2): Directory bread(block 66) failed [ 54.062108][ T3712] FAT-fs (loop2): Directory bread(block 67) failed [ 54.069263][ T3712] FAT-fs (loop2): Directory bread(block 68) failed [ 54.076296][ T3712] FAT-fs (loop2): Directory bread(block 69) failed [ 54.083430][ T3712] FAT-fs (loop2): Directory bread(block 70) failed [ 54.090088][ T3712] FAT-fs (loop2): Directory bread(block 71) failed [ 54.096726][ T3712] FAT-fs (loop2): Directory bread(block 72) failed [ 54.103316][ T3712] FAT-fs (loop2): Directory bread(block 73) failed [ 54.227254][ T262] bridge_slave_0: left promiscuous mode [ 54.511873][ T262] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.638824][ T3723] FAT-fs (loop3): error, clusters badly computed (2 != 0) [ 54.735275][ T3723] FAT-fs (loop3): Filesystem has been set read-only [ 54.823413][ T3723] FAT-fs (loop3): error, clusters badly computed (3 != 1) [ 54.896303][ T262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.935821][ T262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.976005][ T262] bond0 (unregistering): Released all slaves [ 54.990992][ T3730] capability: warning: `syz.1.55' uses 32-bit capabilities (legacy support in use) [ 55.078184][ T262] hsr_slave_0: left promiscuous mode [ 55.092310][ T262] hsr_slave_1: left promiscuous mode [ 55.122077][ T262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.137207][ T262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.149829][ T3735] xt_l2tp: missing protocol rule (udp|l2tpip) [ 55.264614][ T262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.293791][ T262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.333997][ T262] veth1_macvtap: left promiscuous mode [ 55.339642][ T262] veth0_macvtap: left promiscuous mode [ 55.388748][ T262] veth1_vlan: left promiscuous mode [ 55.403701][ T262] veth0_vlan: left promiscuous mode [ 55.548934][ T262] team0 (unregistering): Port device team_slave_1 removed [ 55.553009][ T3745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 55.565033][ T3745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 55.574994][ T262] team0 (unregistering): Port device team_slave_0 removed [ 55.632552][ T3732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 55.646343][ T3732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 55.666676][ T3745] bridge1: entered promiscuous mode [ 55.673172][ T3745] bridge1: entered allmulticast mode [ 55.679125][ T3717] lo speed is unknown, defaulting to 1000 [ 55.698603][ T3695] lo speed is unknown, defaulting to 1000 [ 55.749682][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 55.749697][ T28] audit: type=1400 audit(1771539163.384:192): avc: denied { accept } for pid=3749 comm="syz.2.60" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.777205][ T28] audit: type=1400 audit(1771539163.404:193): avc: denied { create } for pid=3749 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.796780][ T28] audit: type=1400 audit(1771539163.414:194): avc: denied { write } for pid=3749 comm="syz.2.60" path="socket:[5327]" dev="sockfs" ino=5327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.799768][ T3675] chnl_net:caif_netlink_parms(): no params data found [ 55.887932][ T3761] loop3: detected capacity change from 0 to 512 [ 55.952637][ T3761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.971876][ T3761] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.036601][ T3761] ======================================================= [ 56.036601][ T3761] WARNING: The mand mount option has been deprecated and [ 56.036601][ T3761] and is ignored by this kernel. Remove the mand [ 56.036601][ T3761] option from the mount to silence this warning. [ 56.036601][ T3761] ======================================================= [ 56.039993][ T28] audit: type=1400 audit(1771539163.674:195): avc: denied { remount } for pid=3758 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.116336][ T3761] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 56.146136][ T3761] EXT4-fs (loop3): can't enable nombcache during remount [ 56.153806][ T3741] syz.1.58 (3741) used greatest stack depth: 9696 bytes left [ 56.166274][ T3675] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.195833][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.230070][ T28] audit: type=1400 audit(1771539163.824:196): avc: denied { create } for pid=3775 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.249505][ T28] audit: type=1400 audit(1771539163.824:197): avc: denied { create } for pid=3775 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.249535][ T28] audit: type=1400 audit(1771539163.834:198): avc: denied { perfmon } for pid=3758 comm="syz.3.61" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.249745][ T3675] bridge_slave_0: entered allmulticast mode [ 56.250415][ T3675] bridge_slave_0: entered promiscuous mode [ 56.251336][ T3675] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.251392][ T3675] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.251500][ T3675] bridge_slave_1: entered allmulticast mode [ 56.252121][ T3675] bridge_slave_1: entered promiscuous mode [ 56.268944][ T3675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.360034][ T3786] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.375678][ T3675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.415209][ T28] audit: type=1400 audit(1771539164.044:199): avc: denied { read } for pid=3758 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.431748][ T3778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 56.438959][ T3675] team0: Port device team_slave_0 added [ 56.476821][ T3675] team0: Port device team_slave_1 added [ 56.492768][ T28] audit: type=1400 audit(1771539164.054:200): avc: denied { create } for pid=3775 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.532060][ T3675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.541061][ T3675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.574434][ T28] audit: type=1400 audit(1771539164.204:201): avc: denied { bpf } for pid=3796 comm="syz.1.63" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.595515][ T3675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.617020][ T3675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.638227][ T3675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.682646][ T3805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 56.682844][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.692317][ T3675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.712331][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.755203][ T3812] loop0: detected capacity change from 0 to 164 [ 56.786058][ T3812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 56.817963][ T3675] hsr_slave_0: entered promiscuous mode [ 56.830171][ T3817] ieee802154 phy0 wpan0: encryption failed: -22 [ 56.837379][ T3675] hsr_slave_1: entered promiscuous mode [ 56.867733][ T3675] debugfs: 'hsr0' already exists in 'hsr' [ 56.887599][ T3675] Cannot create hsr debugfs directory [ 59.036984][ T3856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 59.145625][ T3675] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.341850][ T3868] netlink: 64 bytes leftover after parsing attributes in process `syz.1.80'. [ 59.827854][ T3675] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.851379][ T3675] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.888630][ T3675] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.939741][ T3872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.021325][ T3872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.216573][ T3675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.270274][ T3675] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.306653][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.313989][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.376429][ T262] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.385268][ T262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.449696][ T3892] netlink: 27 bytes leftover after parsing attributes in process `syz.2.86'. [ 60.462130][ T3675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.491827][ T3893] loop1: detected capacity change from 0 to 1024 [ 60.513002][ T3893] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.536520][ T3899] netlink: 'syz.3.89': attribute type 12 has an invalid length. [ 60.573195][ T3893] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 60.616268][ T3675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.619068][ T3893] System zones: 0-1, 3-12 [ 60.654056][ T3893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.924197][ T3922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 61.008399][ T3893] EXT4-fs error (device loop1): __ext4_remount:6806: comm syz.1.87: Abort forced by user [ 61.269740][ T3893] EXT4-fs (loop1): Remounting filesystem read-only [ 61.333060][ T3893] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 61.658275][ T3933] loop3: detected capacity change from 0 to 512 [ 61.912590][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.923002][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 61.923020][ T28] audit: type=1400 audit(1771539169.564:224): avc: denied { connect } for pid=3937 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.952365][ T28] audit: type=1400 audit(1771539169.594:225): avc: denied { ioctl } for pid=3937 comm="syz.2.99" path="socket:[6853]" dev="sockfs" ino=6853 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.036923][ T3675] veth0_vlan: entered promiscuous mode [ 62.061283][ T3675] veth1_vlan: entered promiscuous mode [ 62.091211][ T3675] veth0_macvtap: entered promiscuous mode [ 62.108490][ T28] audit: type=1400 audit(1771539169.734:226): avc: denied { read write } for pid=3951 comm="syz.1.103" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 62.136314][ T3675] veth1_macvtap: entered promiscuous mode [ 62.159750][ T3675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.171953][ T28] audit: type=1400 audit(1771539169.734:227): avc: denied { open } for pid=3951 comm="syz.1.103" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 62.212329][ T3675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.222634][ T262] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.231650][ T28] audit: type=1400 audit(1771539169.734:228): avc: denied { create } for pid=3942 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.257667][ T28] audit: type=1400 audit(1771539169.744:229): avc: denied { connect } for pid=3942 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.284126][ T262] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.294301][ T262] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.303830][ T28] audit: type=1400 audit(1771539169.764:230): avc: denied { create } for pid=3944 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.325074][ T262] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.334742][ T28] audit: type=1400 audit(1771539169.874:231): avc: denied { getopt } for pid=3944 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.364945][ T28] audit: type=1326 audit(1771539169.884:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd3cfc629 code=0x7ffc0000 [ 62.507259][ T28] audit: type=1326 audit(1771539169.884:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3960 comm="syz.1.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd3cfc629 code=0x7ffc0000 [ 62.615209][ T3969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.765806][ T3969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.860133][ T3973] veth1_to_bond: entered allmulticast mode [ 62.915981][ T3972] veth1_to_bond: entered promiscuous mode [ 62.946061][ T3975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.961126][ T3971] veth1_to_bond: left promiscuous mode [ 62.987623][ T3971] veth1_to_bond: left allmulticast mode [ 62.997565][ T3975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.097425][ T3976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.109'. [ 63.407378][ T3978] loop1: detected capacity change from 0 to 4096 [ 63.535990][ T3978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.694923][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.206418][ T4014] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 65.214339][ T3399] IPVS: starting estimator thread 0... [ 65.222404][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 65.441426][ T4015] IPVS: using max 2592 ests per chain, 129600 per kthread [ 66.208689][ T4041] loop0: detected capacity change from 0 to 2048 [ 66.577919][ T4041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.590381][ T4041] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.675993][ T4054] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 66.789454][ T4054] EXT4-fs (loop0): Remounting filesystem read-only [ 67.245782][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 67.245804][ T28] audit: type=1400 audit(1771539174.884:263): avc: denied { create } for pid=4062 comm="syz.5.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.296368][ T28] audit: type=1400 audit(1771539174.924:264): avc: denied { getopt } for pid=4062 comm="syz.5.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 67.396445][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.537320][ T4065] loop5: detected capacity change from 0 to 4096 [ 67.563022][ T4065] EXT4-fs: test_dummy_encryption option not supported [ 67.570017][ T28] audit: type=1400 audit(1771539175.194:265): avc: denied { ioctl } for pid=4067 comm="syz.3.140" path="socket:[5877]" dev="sockfs" ino=5877 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.610263][ T4071] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 67.781258][ T4078] netlink: 44 bytes leftover after parsing attributes in process `syz.5.144'. [ 67.936927][ T28] audit: type=1400 audit(1771539175.574:266): avc: denied { create } for pid=4079 comm="syz.3.145" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.227545][ T28] audit: type=1400 audit(1771539175.604:267): avc: denied { write } for pid=4079 comm="syz.3.145" name="file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.302751][ T28] audit: type=1400 audit(1771539175.604:268): avc: denied { open } for pid=4079 comm="syz.3.145" path="/29/file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.402685][ T28] audit: type=1400 audit(1771539175.604:269): avc: denied { ioctl } for pid=4079 comm="syz.3.145" path="/29/file0" dev="tmpfs" ino=172 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 68.429768][ T4101] netlink: 'syz.5.153': attribute type 12 has an invalid length. [ 69.402555][ T28] audit: type=1400 audit(1771539175.624:270): avc: denied { unlink } for pid=3317 comm="syz-executor" name="file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.429866][ T28] audit: type=1400 audit(1771539176.004:271): avc: denied { remount } for pid=4090 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.811311][ T28] audit: type=1400 audit(1771539176.014:272): avc: denied { kexec_image_load } for pid=4092 comm="syz.5.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 69.903067][ T4133] loop0: detected capacity change from 0 to 512 [ 69.943494][ T4133] EXT4-fs: Ignoring removed i_version option [ 69.949828][ T4133] EXT4-fs: Ignoring removed bh option [ 70.024122][ T4133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.050650][ T4133] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.064542][ T4152] loop2: detected capacity change from 0 to 4096 [ 70.115418][ T4152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.202233][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.252109][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.023216][ T4214] loop3: detected capacity change from 0 to 128 [ 72.050924][ T4214] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.100340][ T4214] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.113300][ T4220] loop5: detected capacity change from 0 to 4096 [ 72.171916][ T4220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.245874][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.264589][ T4236] loop0: detected capacity change from 0 to 512 [ 72.304488][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.362714][ T4236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.378985][ T4236] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.469620][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.596909][ T4255] loop3: detected capacity change from 0 to 128 [ 72.603846][ T4255] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.529950][ T4255] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.642938][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 73.642956][ T28] audit: type=1326 audit(1771539181.284:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5674c629 code=0x7ffc0000 [ 73.724733][ T28] audit: type=1326 audit(1771539181.324:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5674c629 code=0x7ffc0000 [ 73.766674][ T28] audit: type=1326 audit(1771539181.324:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5674c629 code=0x7ffc0000 [ 73.870288][ T28] audit: type=1326 audit(1771539181.324:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5674c629 code=0x7ffc0000 [ 73.894677][ T28] audit: type=1326 audit(1771539181.324:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7eff5674c629 code=0x7ffc0000 [ 73.974838][ T28] audit: type=1326 audit(1771539181.324:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5674c629 code=0x7ffc0000 [ 74.032857][ T28] audit: type=1326 audit(1771539181.324:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5674c629 code=0x7ffc0000 [ 74.077360][ T28] audit: type=1326 audit(1771539181.324:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5674c629 code=0x7ffc0000 [ 74.101290][ T28] audit: type=1326 audit(1771539181.324:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7eff5674c629 code=0x7ffc0000 [ 74.296195][ T4293] loop2: detected capacity change from 0 to 4096 [ 74.363163][ T4293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.606627][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.672826][ T28] audit: type=1326 audit(1771539181.324:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7eff5674c629 code=0x7ffc0000 [ 76.663095][ T4330] No control pipe specified [ 76.807048][ T4331] loop1: detected capacity change from 0 to 4096 [ 76.844413][ T4331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.116780][ T4337] netlink: 'syz.0.210': attribute type 4 has an invalid length. [ 77.205736][ T4340] loop5: detected capacity change from 0 to 512 [ 77.259535][ T4340] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.212: invalid indirect mapped block 256 (level 2) [ 77.290387][ T4340] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 77.290905][ T4340] EXT4-fs (loop5): 2 truncates cleaned up [ 77.300374][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 77.300394][ C0] EXT4-fs (loop5): initial error at time 1771539184: ext4_free_branches:1023: inode 11 [ 77.300450][ C0] EXT4-fs (loop5): last error at time 1771539184: ext4_free_branches:1023: inode 11 [ 77.300863][ T4344] loop2: detected capacity change from 0 to 1024 [ 77.331538][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.340510][ T4340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.361197][ T4344] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 77.500056][ T4344] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.511596][ T4344] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 77.521774][ T4344] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 77.633407][ T4344] EXT4-fs error (device loop2): ext4_get_journal_inode:5865: inode #17: comm syz.2.213: iget: bad i_size value: 4398046511204 [ 77.708795][ T4344] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 77.709547][ T4344] EXT4-fs (loop2): no journal found [ 77.718796][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 77.718813][ C1] EXT4-fs (loop2): initial error at time 1771539185: ext4_get_journal_inode:5865: inode 17 [ 77.718864][ C1] EXT4-fs (loop2): last error at time 1771539185: ext4_get_journal_inode:5865: inode 17 [ 77.857635][ T4348] loop3: detected capacity change from 0 to 128 [ 77.971920][ T4349] syz.3.215: attempt to access beyond end of device [ 77.971920][ T4349] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 78.036727][ T4349] syz.3.215: attempt to access beyond end of device [ 78.036727][ T4349] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 78.066951][ T4349] syz.3.215: attempt to access beyond end of device [ 78.066951][ T4349] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 78.089990][ T4349] syz.3.215: attempt to access beyond end of device [ 78.089990][ T4349] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 78.108138][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.149786][ T4349] syz.3.215: attempt to access beyond end of device [ 78.149786][ T4349] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 78.225062][ T4349] syz.3.215: attempt to access beyond end of device [ 78.225062][ T4349] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 78.285012][ T4349] syz.3.215: attempt to access beyond end of device [ 78.285012][ T4349] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 78.314468][ T4358] netlink: 28 bytes leftover after parsing attributes in process `syz.5.217'. [ 78.337185][ T4358] netlink: 28 bytes leftover after parsing attributes in process `syz.5.217'. [ 78.361408][ T4364] loop2: detected capacity change from 0 to 128 [ 78.400101][ T4364] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.417188][ T4349] syz.3.215: attempt to access beyond end of device [ 78.417188][ T4349] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 78.440209][ T4364] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.503222][ T4364] lo speed is unknown, defaulting to 1000 [ 78.771688][ T4367] lo speed is unknown, defaulting to 1000 [ 78.884899][ T4349] syz.3.215: attempt to access beyond end of device [ 78.884899][ T4349] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 78.922178][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 78.922196][ T28] audit: type=1400 audit(1771539186.554:322): avc: denied { create } for pid=4361 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.992937][ T4349] syz.3.215: attempt to access beyond end of device [ 78.992937][ T4349] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 79.120452][ T28] audit: type=1400 audit(1771539186.554:323): avc: denied { setopt } for pid=4361 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.143716][ T28] audit: type=1400 audit(1771539186.604:324): avc: denied { write } for pid=4370 comm="syz.5.220" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.162735][ T4369] lo speed is unknown, defaulting to 1000 [ 79.166962][ T28] audit: type=1400 audit(1771539186.744:325): avc: denied { write } for pid=4361 comm="syz.2.219" path="socket:[8210]" dev="sockfs" ino=8210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.360444][ T28] audit: type=1400 audit(1771539186.924:326): avc: denied { bind } for pid=4370 comm="syz.5.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 79.380517][ T28] audit: type=1400 audit(1771539186.994:327): avc: denied { listen } for pid=4370 comm="syz.5.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 80.479644][ T4396] loop0: detected capacity change from 0 to 128 [ 80.570435][ T28] audit: type=1326 audit(1771539188.164:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc486e1c629 code=0x7ffc0000 [ 80.594214][ T28] audit: type=1326 audit(1771539188.164:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc486e1c629 code=0x7ffc0000 [ 80.618203][ T28] audit: type=1326 audit(1771539188.164:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc486e1c629 code=0x7ffc0000 [ 80.642587][ T28] audit: type=1326 audit(1771539188.164:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc486e1c629 code=0x7ffc0000 [ 81.217939][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.372544][ T4410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.230'. [ 81.390628][ T4410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.230'. [ 81.443625][ T4396] FAT-fs (loop0): error, clusters badly computed (2 != 0) [ 81.742942][ T4419] lo speed is unknown, defaulting to 1000 [ 81.945615][ T4396] FAT-fs (loop0): Filesystem has been set read-only [ 81.981322][ T4396] FAT-fs (loop0): error, clusters badly computed (3 != 1) [ 82.702774][ T4447] lo speed is unknown, defaulting to 1000 [ 82.868576][ T4452] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 83.102649][ T4458] dvmrp0: entered allmulticast mode [ 83.920197][ T4452] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 84.270517][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 84.270538][ T28] audit: type=1400 audit(1771539191.894:345): avc: denied { create } for pid=4461 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.340818][ T4455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.349186][ T4453] dvmrp0: left allmulticast mode [ 84.435498][ T4452] bond_slave_0: entered promiscuous mode [ 84.441264][ T4452] bond_slave_1: entered promiscuous mode [ 84.446942][ T4452] syz_tun: entered promiscuous mode [ 84.454804][ T4452] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.470730][ T4452] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 84.491165][ T4471] loop2: detected capacity change from 0 to 512 [ 84.496927][ T4452] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 84.511436][ T28] audit: type=1326 audit(1771539192.154:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc486e1c629 code=0x7ffc0000 [ 84.516669][ T4471] ext4: Unknown parameter 'subj_user' [ 84.540691][ T4452] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 84.552773][ T4468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.248'. [ 84.569756][ T28] audit: type=1326 audit(1771539192.154:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc486e1c629 code=0x7ffc0000 [ 84.602284][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 84.602599][ T4468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.248'. [ 84.640469][ T28] audit: type=1326 audit(1771539192.154:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc486e1c629 code=0x7ffc0000 [ 84.720566][ T28] audit: type=1326 audit(1771539192.154:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc486e1c629 code=0x7ffc0000 [ 84.762598][ T4482] loop0: detected capacity change from 0 to 128 [ 84.797700][ T28] audit: type=1326 audit(1771539192.154:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fc486e1c629 code=0x7ffc0000 [ 84.805261][ T4482] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.821324][ T28] audit: type=1326 audit(1771539192.154:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc486e1c629 code=0x7ffc0000 [ 84.857663][ T28] audit: type=1326 audit(1771539192.154:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc486e1c629 code=0x7ffc0000 [ 84.884822][ T4484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 84.896250][ T28] audit: type=1326 audit(1771539192.174:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc486e1c629 code=0x7ffc0000 [ 84.922001][ T28] audit: type=1326 audit(1771539192.174:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.3.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc486e1c629 code=0x7ffc0000 [ 84.942978][ T4482] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.046187][ T4482] lo speed is unknown, defaulting to 1000 [ 85.599307][ T4498] lo speed is unknown, defaulting to 1000 [ 85.799131][ T4500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 85.825731][ T4500] tc_dump_action: action bad kind [ 85.879473][ T4500] netlink: 830 bytes leftover after parsing attributes in process `syz.1.259'. [ 85.891966][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 85.992317][ T4507] loop5: detected capacity change from 0 to 128 [ 86.056211][ T4507] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.140282][ T4512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 86.162287][ T4507] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.166469][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.221712][ T4507] lo speed is unknown, defaulting to 1000 [ 87.451829][ T4532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 87.636832][ T4538] loop3: detected capacity change from 0 to 512 [ 87.645645][ T4538] ext4: Unknown parameter 'subj_user' [ 87.957711][ T4543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 88.283806][ T4547] loop0: detected capacity change from 0 to 512 [ 88.300309][ T4547] ext4: Unknown parameter 'subj_user' [ 88.488150][ T4553] loop1: detected capacity change from 0 to 128 [ 88.531595][ T4553] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.579537][ T4553] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.603993][ T4553] lo speed is unknown, defaulting to 1000 [ 88.863925][ T3675] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.067485][ T1031] IPVS: starting estimator thread 0... [ 89.169976][ T4568] IPVS: using max 2064 ests per chain, 103200 per kthread [ 89.602360][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.096576][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 90.691460][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 90.691477][ T28] audit: type=1326 audit(1771539198.334:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd3cfc629 code=0x7ffc0000 [ 91.047536][ T28] audit: type=1326 audit(1771539198.364:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd3cfc629 code=0x7ffc0000 [ 91.086957][ T28] audit: type=1326 audit(1771539198.364:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fafd3cfc629 code=0x7ffc0000 [ 91.120206][ T28] audit: type=1326 audit(1771539198.364:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd3cfc629 code=0x7ffc0000 [ 91.144142][ T28] audit: type=1326 audit(1771539198.364:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd3cfc629 code=0x7ffc0000 [ 91.215696][ T28] audit: type=1326 audit(1771539198.364:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd3cfc629 code=0x7ffc0000 [ 91.269981][ T28] audit: type=1326 audit(1771539198.364:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fafd3cfc629 code=0x7ffc0000 [ 91.350970][ T28] audit: type=1326 audit(1771539198.364:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd3cfc629 code=0x7ffc0000 [ 91.374744][ T28] audit: type=1326 audit(1771539198.364:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4597 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fafd3cfc629 code=0x7ffc0000 [ 91.382448][ T4618] loop2: detected capacity change from 0 to 512 [ 91.410643][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 91.453333][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.300'. [ 91.536511][ T4618] ext4: Unknown parameter 'subj_user' [ 92.380467][ T4648] loop3: detected capacity change from 0 to 256 [ 92.659718][ T4650] lo speed is unknown, defaulting to 1000 [ 93.229985][ T4648] FAT-fs (loop3): Directory bread(block 64) failed [ 93.236592][ T4648] FAT-fs (loop3): Directory bread(block 65) failed [ 93.243177][ T4648] FAT-fs (loop3): Directory bread(block 66) failed [ 93.250588][ T4648] FAT-fs (loop3): Directory bread(block 67) failed [ 93.257135][ T4648] FAT-fs (loop3): Directory bread(block 68) failed [ 93.263718][ T4648] FAT-fs (loop3): Directory bread(block 69) failed [ 93.270314][ T4648] FAT-fs (loop3): Directory bread(block 70) failed [ 93.276848][ T4648] FAT-fs (loop3): Directory bread(block 71) failed [ 93.283621][ T4648] FAT-fs (loop3): Directory bread(block 72) failed [ 93.290365][ T4648] FAT-fs (loop3): Directory bread(block 73) failed [ 93.493853][ T4654] loop5: detected capacity change from 0 to 1024 [ 93.510396][ T4654] EXT4-fs: Ignoring removed orlov option [ 93.528009][ T4660] loop3: detected capacity change from 0 to 1024 [ 93.557236][ T4660] EXT4-fs: Ignoring removed orlov option [ 93.563846][ T4654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.603014][ T4662] loop1: detected capacity change from 0 to 4096 [ 93.690692][ T4660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.735525][ T4662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.073458][ T4672] lo speed is unknown, defaulting to 1000 [ 94.535926][ T28] audit: type=1400 audit(1771539201.464:398): avc: denied { setattr } for pid=4661 comm="syz.1.312" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.588006][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.770700][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.813815][ T4684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.316'. [ 94.832356][ T4684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.316'. [ 94.952379][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.968456][ T4691] loop1: detected capacity change from 0 to 256 [ 94.988750][ T4691] FAT-fs (loop1): Directory bread(block 64) failed [ 94.995678][ T4691] FAT-fs (loop1): Directory bread(block 65) failed [ 95.002754][ T4691] FAT-fs (loop1): Directory bread(block 66) failed [ 95.009483][ T4691] FAT-fs (loop1): Directory bread(block 67) failed [ 95.016495][ T4691] FAT-fs (loop1): Directory bread(block 68) failed [ 95.023397][ T4691] FAT-fs (loop1): Directory bread(block 69) failed [ 95.030281][ T4691] FAT-fs (loop1): Directory bread(block 70) failed [ 95.037004][ T4691] FAT-fs (loop1): Directory bread(block 71) failed [ 95.043799][ T4691] FAT-fs (loop1): Directory bread(block 72) failed [ 95.050653][ T4691] FAT-fs (loop1): Directory bread(block 73) failed [ 95.207642][ T4701] loop0: detected capacity change from 0 to 512 [ 95.233644][ T4701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.268182][ T4708] process 'syz.3.325' launched './file1' with NULL argv: empty string added [ 95.283624][ T4701] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.343519][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.404327][ T4715] loop2: detected capacity change from 0 to 2048 [ 95.413329][ T4717] loop1: detected capacity change from 0 to 1024 [ 95.423220][ T4717] EXT4-fs: Ignoring removed orlov option [ 95.448582][ T4723] netlink: 'syz.3.331': attribute type 21 has an invalid length. [ 95.460374][ T4723] netlink: 156 bytes leftover after parsing attributes in process `syz.3.331'. [ 95.470245][ T4717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.486063][ T4715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.568708][ T4727] loop3: detected capacity change from 0 to 1024 [ 95.596680][ T4727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.701429][ T4733] FAT-fs (loop0): Directory bread(block 64) failed [ 95.708076][ T4733] FAT-fs (loop0): Directory bread(block 65) failed [ 95.713820][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.714711][ T4733] FAT-fs (loop0): Directory bread(block 66) failed [ 95.730371][ T4733] FAT-fs (loop0): Directory bread(block 67) failed [ 95.736917][ T4733] FAT-fs (loop0): Directory bread(block 68) failed [ 95.743624][ T4733] FAT-fs (loop0): Directory bread(block 69) failed [ 95.750239][ T4733] FAT-fs (loop0): Directory bread(block 70) failed [ 95.756819][ T4733] FAT-fs (loop0): Directory bread(block 71) failed [ 95.761921][ T4735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.763472][ T4733] FAT-fs (loop0): Directory bread(block 72) failed [ 95.783314][ T4733] FAT-fs (loop0): Directory bread(block 73) failed [ 95.783645][ T4735] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.906219][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.956906][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 95.956923][ T28] audit: type=1400 audit(1771539203.594:405): avc: denied { name_bind } for pid=4745 comm="syz.0.338" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 96.005962][ T4752] FAULT_INJECTION: forcing a failure. [ 96.005962][ T4752] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.019347][ T28] audit: type=1400 audit(1771539203.644:406): avc: denied { create } for pid=4751 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.033334][ T4753] EXT4-fs: Ignoring removed nobh option [ 96.045121][ T4753] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.052438][ T4753] ext4: Bad value for 'max_batch_time' [ 96.055697][ T4752] CPU: 0 UID: 0 PID: 4752 Comm: syz.5.337 Not tainted syzkaller #0 PREEMPT(full) [ 96.055724][ T4752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 96.055736][ T4752] Call Trace: [ 96.055744][ T4752] [ 96.055753][ T4752] __dump_stack+0x1d/0x30 [ 96.055780][ T4752] dump_stack_lvl+0x95/0xd0 [ 96.055832][ T4752] dump_stack+0x15/0x1b [ 96.055854][ T4752] should_fail_ex+0x263/0x280 [ 96.055935][ T4752] should_fail+0xb/0x20 [ 96.055953][ T4752] should_fail_usercopy+0x1a/0x20 [ 96.055984][ T4752] _copy_from_iter+0xcf/0xea0 [ 96.056015][ T4752] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 96.056115][ T4752] ? __build_skb+0x43/0x220 [ 96.056138][ T4752] ? __build_skb+0x1b3/0x220 [ 96.056158][ T4752] ? is_vmalloc_addr+0x37/0x90 [ 96.056179][ T4752] netlink_sendmsg+0x4ae/0x6f0 [ 96.056245][ T4752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.056271][ T4752] ____sys_sendmsg+0x5af/0x600 [ 96.056318][ T4752] ___sys_sendmsg+0x195/0x1e0 [ 96.056388][ T4752] __x64_sys_sendmsg+0xd4/0x160 [ 96.056496][ T4752] x64_sys_call+0x194c/0x3020 [ 96.056521][ T4752] do_syscall_64+0x12c/0x370 [ 96.056656][ T4752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.056677][ T4752] RIP: 0033:0x7f08b37fc629 [ 96.056699][ T4752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.056717][ T4752] RSP: 002b:00007f08b224f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.056739][ T4752] RAX: ffffffffffffffda RBX: 00007f08b3a75fa0 RCX: 00007f08b37fc629 [ 96.056754][ T4752] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 96.056823][ T4752] RBP: 00007f08b224f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.056837][ T4752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.056849][ T4752] R13: 00007f08b3a76038 R14: 00007f08b3a75fa0 R15: 00007ffc4aae5bc8 [ 96.056892][ T4752] [ 96.193223][ T4763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.292430][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.302630][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.360696][ T3675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.386683][ T4770] EXT4-fs: Ignoring removed orlov option [ 96.397725][ T4770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.429164][ T4767] set_capacity_and_notify: 5 callbacks suppressed [ 96.429185][ T4767] loop1: detected capacity change from 0 to 8192 [ 96.633395][ T4781] Zero length message leads to an empty skb [ 96.961792][ T4786] lo speed is unknown, defaulting to 1000 [ 97.178050][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.196029][ T4791] loop0: detected capacity change from 0 to 256 [ 97.216502][ T4791] FAT-fs (loop0): Directory bread(block 64) failed [ 97.223199][ T4791] FAT-fs (loop0): Directory bread(block 65) failed [ 97.229944][ T4791] FAT-fs (loop0): Directory bread(block 66) failed [ 97.236500][ T4791] FAT-fs (loop0): Directory bread(block 67) failed [ 97.243123][ T4791] FAT-fs (loop0): Directory bread(block 68) failed [ 97.249640][ T4791] FAT-fs (loop0): Directory bread(block 69) failed [ 97.256206][ T4791] FAT-fs (loop0): Directory bread(block 70) failed [ 97.262852][ T4791] FAT-fs (loop0): Directory bread(block 71) failed [ 97.269458][ T4791] FAT-fs (loop0): Directory bread(block 72) failed [ 97.276111][ T4791] FAT-fs (loop0): Directory bread(block 73) failed [ 97.374303][ T4796] loop3: detected capacity change from 0 to 256 [ 97.374470][ T4794] loop0: detected capacity change from 0 to 2048 [ 97.456064][ T4794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.493734][ T28] audit: type=1400 audit(1771539205.124:407): avc: denied { setopt } for pid=4801 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.530534][ T4806] SELinux: Context system_u:object_r:klogd_var_run_t:s0 is not valid (left unmapped). [ 97.547617][ T4800] loop2: detected capacity change from 0 to 4096 [ 97.560084][ T28] audit: type=1400 audit(1771539205.174:408): avc: denied { relabelfrom } for pid=4801 comm="syz.3.355" name="XDP" dev="sockfs" ino=8995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.583139][ T28] audit: type=1400 audit(1771539205.174:409): avc: denied { mac_admin } for pid=4801 comm="syz.3.355" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 97.611931][ T28] audit: type=1400 audit(1771539205.224:410): avc: denied { relabelto } for pid=4801 comm="syz.3.355" name="XDP" dev="sockfs" ino=8995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=xdp_socket permissive=1 trawcon="system_u:object_r:klogd_var_run_t:s0" [ 97.662915][ T28] audit: type=1400 audit(1771539205.224:411): avc: denied { bind } for pid=4801 comm="syz.3.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.677848][ T4800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.718204][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.787158][ T4824] loop3: detected capacity change from 0 to 256 [ 97.813355][ T4824] FAT-fs (loop3): Directory bread(block 64) failed [ 97.820235][ T4824] FAT-fs (loop3): Directory bread(block 65) failed [ 97.826794][ T4824] FAT-fs (loop3): Directory bread(block 66) failed [ 97.833452][ T4824] FAT-fs (loop3): Directory bread(block 67) failed [ 97.840138][ T4824] FAT-fs (loop3): Directory bread(block 68) failed [ 97.846714][ T4824] FAT-fs (loop3): Directory bread(block 69) failed [ 97.853830][ T4824] FAT-fs (loop3): Directory bread(block 70) failed [ 97.860729][ T4824] FAT-fs (loop3): Directory bread(block 71) failed [ 97.867519][ T4824] FAT-fs (loop3): Directory bread(block 72) failed [ 97.874269][ T4824] FAT-fs (loop3): Directory bread(block 73) failed [ 98.673413][ T4838] FAULT_INJECTION: forcing a failure. [ 98.673413][ T4838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.740422][ T4838] CPU: 1 UID: 0 PID: 4838 Comm: syz.2.369 Not tainted syzkaller #0 PREEMPT(full) [ 98.740456][ T4838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.740470][ T4838] Call Trace: [ 98.740477][ T4838] [ 98.740485][ T4838] __dump_stack+0x1d/0x30 [ 98.740514][ T4838] dump_stack_lvl+0x95/0xd0 [ 98.740545][ T4838] dump_stack+0x15/0x1b [ 98.740647][ T4838] should_fail_ex+0x263/0x280 [ 98.740671][ T4838] should_fail+0xb/0x20 [ 98.740716][ T4838] should_fail_usercopy+0x1a/0x20 [ 98.740741][ T4838] _copy_to_user+0x20/0xa0 [ 98.740789][ T4838] simple_read_from_buffer+0xb5/0x130 [ 98.740815][ T4838] proc_fail_nth_read+0x10e/0x150 [ 98.740847][ T4838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.740877][ T4838] vfs_read+0x1ab/0x7f0 [ 98.740912][ T4838] ? __rcu_read_unlock+0x4e/0x70 [ 98.740935][ T4838] ? __fget_files+0x184/0x1c0 [ 98.740959][ T4838] ? mutex_lock+0x57/0x90 [ 98.741062][ T4838] ksys_read+0xdc/0x1a0 [ 98.741095][ T4838] __x64_sys_read+0x40/0x50 [ 98.741124][ T4838] x64_sys_call+0x2886/0x3020 [ 98.741168][ T4838] do_syscall_64+0x12c/0x370 [ 98.741203][ T4838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.741279][ T4838] RIP: 0033:0x7f5bf810cece [ 98.741297][ T4838] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.741376][ T4838] RSP: 002b:00007f5bf6b9efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.741399][ T4838] RAX: ffffffffffffffda RBX: 00007f5bf6b9f6c0 RCX: 00007f5bf810cece [ 98.741415][ T4838] RDX: 000000000000000f RSI: 00007f5bf6b9f0a0 RDI: 0000000000000004 [ 98.741429][ T4838] RBP: 00007f5bf6b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.741443][ T4838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.741456][ T4838] R13: 00007f5bf83c6038 R14: 00007f5bf83c5fa0 R15: 00007ffefcdcd7d8 [ 98.741527][ T4838] [ 98.972002][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.027962][ T4846] loop5: detected capacity change from 0 to 512 [ 99.050456][ T4848] capability: warning: `syz.0.373' uses deprecated v2 capabilities in a way that may be insecure [ 99.071404][ T4846] ext4: Unknown parameter 'subj_user' [ 99.115681][ T4848] FAULT_INJECTION: forcing a failure. [ 99.115681][ T4848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.147470][ T4853] loop2: detected capacity change from 0 to 128 [ 99.157473][ T4840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'. [ 99.168494][ T4848] CPU: 0 UID: 0 PID: 4848 Comm: syz.0.373 Not tainted syzkaller #0 PREEMPT(full) [ 99.168559][ T4848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.168573][ T4848] Call Trace: [ 99.168581][ T4848] [ 99.168591][ T4848] __dump_stack+0x1d/0x30 [ 99.168700][ T4848] dump_stack_lvl+0x95/0xd0 [ 99.168763][ T4848] dump_stack+0x15/0x1b [ 99.168783][ T4848] should_fail_ex+0x263/0x280 [ 99.168866][ T4848] should_fail+0xb/0x20 [ 99.168883][ T4848] should_fail_usercopy+0x1a/0x20 [ 99.168909][ T4848] _copy_from_user+0x1c/0xb0 [ 99.168939][ T4848] ___sys_sendmsg+0xc1/0x1e0 [ 99.169038][ T4848] __x64_sys_sendmsg+0xd4/0x160 [ 99.169070][ T4848] x64_sys_call+0x194c/0x3020 [ 99.169141][ T4848] do_syscall_64+0x12c/0x370 [ 99.169245][ T4848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.169271][ T4848] RIP: 0033:0x7eff5674c629 [ 99.169290][ T4848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.169311][ T4848] RSP: 002b:00007eff5519f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.169337][ T4848] RAX: ffffffffffffffda RBX: 00007eff569c5fa0 RCX: 00007eff5674c629 [ 99.169350][ T4848] RDX: 0000000020048010 RSI: 0000200000000280 RDI: 0000000000000004 [ 99.169458][ T4848] RBP: 00007eff5519f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.169502][ T4848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.169513][ T4848] R13: 00007eff569c6038 R14: 00007eff569c5fa0 R15: 00007ffe208f9488 [ 99.169534][ T4848] [ 99.498518][ T4853] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.512056][ T4853] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.862570][ T4864] lo speed is unknown, defaulting to 1000 [ 100.108972][ T4853] lo speed is unknown, defaulting to 1000 [ 100.183131][ T4867] loop0: detected capacity change from 0 to 256 [ 100.362647][ T4866] lo speed is unknown, defaulting to 1000 [ 100.432855][ T4871] loop3: detected capacity change from 0 to 2048 [ 100.463999][ T4867] FAT-fs (loop0): Directory bread(block 64) failed [ 100.502777][ T4871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.515389][ T4867] FAT-fs (loop0): Directory bread(block 65) failed [ 100.535546][ T4867] FAT-fs (loop0): Directory bread(block 66) failed [ 100.546555][ T4867] FAT-fs (loop0): Directory bread(block 67) failed [ 100.554909][ T4867] FAT-fs (loop0): Directory bread(block 68) failed [ 100.562236][ T4867] FAT-fs (loop0): Directory bread(block 69) failed [ 100.569215][ T4867] FAT-fs (loop0): Directory bread(block 70) failed [ 100.576390][ T4867] FAT-fs (loop0): Directory bread(block 71) failed [ 100.584947][ T4877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 100.626612][ T4877] netlink: 'syz.1.379': attribute type 12 has an invalid length. [ 100.635021][ T4867] FAT-fs (loop0): Directory bread(block 72) failed [ 100.685722][ T4867] FAT-fs (loop0): Directory bread(block 73) failed [ 100.706473][ T30] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.706529][ T4877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 100.726681][ T30] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.754095][ T4877] netlink: 'syz.1.379': attribute type 12 has an invalid length. [ 100.797180][ T30] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.827634][ T30] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.118701][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.206274][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.248701][ T4887] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 101.346839][ T4894] netlink: 'syz.1.384': attribute type 3 has an invalid length. [ 101.440005][ T4905] loop5: detected capacity change from 0 to 128 [ 101.448709][ T28] audit: type=1400 audit(1771539209.084:412): avc: denied { bind } for pid=4895 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.502228][ T28] audit: type=1400 audit(1771539209.084:413): avc: denied { node_bind } for pid=4895 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 101.522699][ T28] audit: type=1400 audit(1771539209.084:414): avc: denied { setopt } for pid=4895 comm="syz.2.385" lport=44374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.546701][ T4913] loop1: detected capacity change from 0 to 512 [ 101.546885][ T4905] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.553712][ T4913] ext4: Unknown parameter 'subj_user' [ 101.580164][ T4905] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.636359][ T4905] lo speed is unknown, defaulting to 1000 [ 101.646505][ T4919] loop2: detected capacity change from 0 to 2048 [ 101.716480][ T4919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.931205][ T4906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.035053][ T4935] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.122102][ T4939] loop3: detected capacity change from 0 to 512 [ 102.137997][ T4939] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.161070][ T4939] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.183220][ T4939] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #15: block 1803188595: comm syz.3.396: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 102.209968][ T4939] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.210238][ T4939] EXT4-fs (loop3): mount failed [ 102.224719][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 102.224737][ C1] EXT4-fs (loop3): initial error at time 1771539209: ext4_map_blocks:776: inode 15: block 1803188595 [ 102.224785][ C1] EXT4-fs (loop3): last error at time 1771539209: ext4_map_blocks:776: inode 15: block 1803188595 [ 102.378354][ T3675] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.444717][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.470890][ T28] audit: type=1400 audit(1771539210.114:415): avc: denied { ioctl } for pid=4941 comm="syz.2.398" path="socket:[9621]" dev="sockfs" ino=9621 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.517628][ T4945] IPv6: Can't replace route, no match found [ 102.571072][ T28] audit: type=1400 audit(1771539210.214:416): avc: denied { write } for pid=4941 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.666480][ T4957] FAULT_INJECTION: forcing a failure. [ 102.666480][ T4957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.680416][ T4957] CPU: 1 UID: 0 PID: 4957 Comm: syz.2.401 Not tainted syzkaller #0 PREEMPT(full) [ 102.680442][ T4957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.680503][ T4957] Call Trace: [ 102.680513][ T4957] [ 102.680521][ T4957] __dump_stack+0x1d/0x30 [ 102.680547][ T4957] dump_stack_lvl+0x95/0xd0 [ 102.680574][ T4957] dump_stack+0x15/0x1b [ 102.680599][ T4957] should_fail_ex+0x263/0x280 [ 102.680626][ T4957] should_fail+0xb/0x20 [ 102.680668][ T4957] should_fail_usercopy+0x1a/0x20 [ 102.680689][ T4957] _copy_from_user+0x1c/0xb0 [ 102.680713][ T4957] __se_sys_mount+0x10d/0x2e0 [ 102.680737][ T4957] ? fput+0x8f/0xc0 [ 102.680784][ T4957] ? ksys_write+0x194/0x1a0 [ 102.680813][ T4957] __x64_sys_mount+0x67/0x80 [ 102.680837][ T4957] x64_sys_call+0x2d61/0x3020 [ 102.680868][ T4957] do_syscall_64+0x12c/0x370 [ 102.680966][ T4957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.680990][ T4957] RIP: 0033:0x7f5bf814c629 [ 102.681009][ T4957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.681044][ T4957] RSP: 002b:00007f5bf6b7e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.681067][ T4957] RAX: ffffffffffffffda RBX: 00007f5bf83c6090 RCX: 00007f5bf814c629 [ 102.681081][ T4957] RDX: 0000200000004380 RSI: 0000200000000300 RDI: 0000000000000000 [ 102.681094][ T4957] RBP: 00007f5bf6b7e090 R08: 00002000000004c0 R09: 0000000000000000 [ 102.681163][ T4957] R10: 0000000001814800 R11: 0000000000000246 R12: 0000000000000001 [ 102.681178][ T4957] R13: 00007f5bf83c6128 R14: 00007f5bf83c6090 R15: 00007ffefcdcd7d8 [ 102.681200][ T4957] [ 102.915488][ T4957] 9p: Could not find request transport: 0xffffffffffffffff [ 103.213029][ T4967] loop1: detected capacity change from 0 to 1024 [ 103.220762][ T28] audit: type=1400 audit(1771539210.764:417): avc: denied { read } for pid=4964 comm="syz.3.403" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.500325][ T28] audit: type=1400 audit(1771539210.764:418): avc: denied { open } for pid=4964 comm="syz.3.403" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.532444][ T4975] loop2: detected capacity change from 0 to 512 [ 103.557277][ T4979] loop5: detected capacity change from 0 to 128 [ 103.575289][ T28] audit: type=1400 audit(1771539210.774:419): avc: denied { mount } for pid=4964 comm="syz.3.403" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 103.575574][ T4967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.621721][ T28] audit: type=1400 audit(1771539211.164:420): avc: denied { shutdown } for pid=4971 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.633065][ T4979] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.665486][ T4975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.705294][ T4975] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.716042][ T4979] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.831566][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.891138][ T4979] lo speed is unknown, defaulting to 1000 [ 104.199760][ T4994] lo speed is unknown, defaulting to 1000 [ 104.366329][ T4972] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.405: corrupted inode contents [ 104.391421][ T4972] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.405: mark_inode_dirty error [ 104.404391][ T4997] loop1: detected capacity change from 0 to 512 [ 104.416325][ T4972] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.405: corrupted inode contents [ 104.435557][ T4972] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.405: mark_inode_dirty error [ 104.441159][ T4997] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294967295)! [ 104.449592][ T4975] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.405: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 104.449592][ T4975] [ 104.501297][ T4997] EXT4-fs (loop1): group descriptors corrupted! [ 104.659498][ T4993] lo speed is unknown, defaulting to 1000 [ 104.681190][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.691972][ T28] audit: type=1400 audit(1771539212.334:421): avc: denied { load_policy } for pid=4996 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 104.695160][ T4997] SELinux: ebitmap: truncated map [ 104.719832][ T4997] SELinux: failed to load policy [ 104.834342][ T5009] loop2: detected capacity change from 0 to 512 [ 104.854222][ T5011] netlink: 'syz.1.413': attribute type 322 has an invalid length. [ 104.862998][ T5009] ext4: Unknown parameter 'subj_user' [ 105.301453][ T5013] loop3: detected capacity change from 0 to 512 [ 105.315861][ T5013] EXT4-fs: Ignoring removed oldalloc option [ 105.356774][ T3675] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.378593][ T5013] EXT4-fs (loop3): 1 truncate cleaned up [ 105.385251][ T5013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.483818][ T5021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.500415][ T5023] netlink: 56 bytes leftover after parsing attributes in process `syz.5.416'. [ 105.518649][ T5021] ext4 filesystem being mounted at /84/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.535635][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.551857][ T5021] IPVS: Unknown mcast interface: pimreg [ 105.676036][ T3311] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 105.724790][ T3311] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 105.751031][ T3311] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 105.764997][ T5032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 105.774912][ T3311] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 105.790365][ T3311] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 105.813772][ T3311] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 105.827563][ T5038] FAULT_INJECTION: forcing a failure. [ 105.827563][ T5038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.840374][ T3311] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 105.841070][ T5038] CPU: 1 UID: 0 PID: 5038 Comm: syz.1.422 Not tainted syzkaller #0 PREEMPT(full) [ 105.841098][ T5038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.841110][ T5038] Call Trace: [ 105.841117][ T5038] [ 105.841126][ T5038] __dump_stack+0x1d/0x30 [ 105.841153][ T5038] dump_stack_lvl+0x95/0xd0 [ 105.841182][ T5038] dump_stack+0x15/0x1b [ 105.841269][ T5038] should_fail_ex+0x263/0x280 [ 105.841337][ T5038] should_fail+0xb/0x20 [ 105.841356][ T5038] should_fail_usercopy+0x1a/0x20 [ 105.841379][ T5038] _copy_from_iter+0xcf/0xea0 [ 105.841403][ T5038] ? __alloc_skb+0x4f6/0x690 [ 105.841453][ T5038] ? __alloc_skb+0x200/0x690 [ 105.841550][ T5038] netlink_sendmsg+0x4ae/0x6f0 [ 105.841658][ T5038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.841685][ T5038] ____sys_sendmsg+0x5af/0x600 [ 105.841773][ T5038] ___sys_sendmsg+0x195/0x1e0 [ 105.841809][ T5038] __x64_sys_sendmsg+0xd4/0x160 [ 105.841841][ T5038] x64_sys_call+0x194c/0x3020 [ 105.841867][ T5038] do_syscall_64+0x12c/0x370 [ 105.841968][ T5038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.841991][ T5038] RIP: 0033:0x7fafd3cfc629 [ 105.842024][ T5038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.842043][ T5038] RSP: 002b:00007fafd2757028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.842145][ T5038] RAX: ffffffffffffffda RBX: 00007fafd3f75fa0 RCX: 00007fafd3cfc629 [ 105.842159][ T5038] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 105.842173][ T5038] RBP: 00007fafd2757090 R08: 0000000000000000 R09: 0000000000000000 [ 105.842186][ T5038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.842198][ T5038] R13: 00007fafd3f76038 R14: 00007fafd3f75fa0 R15: 00007fff5c17aa98 [ 105.842219][ T5038] [ 105.874475][ T5040] EXT4-fs: Ignoring removed orlov option [ 105.900257][ T3311] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 106.073050][ T3311] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 106.195840][ T3311] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 106.196088][ T5040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.238011][ T3311] bond0: (slave syz_tun): Releasing backup interface [ 106.606575][ T5057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.427'. [ 106.885723][ T1995] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.902829][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.913013][ T5053] lo speed is unknown, defaulting to 1000 [ 106.990367][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.003218][ T1995] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.096542][ T1995] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.196034][ T1995] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.255736][ T5077] lo speed is unknown, defaulting to 1000 [ 107.301108][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 107.301125][ T28] audit: type=1400 audit(1771539214.944:427): avc: denied { read } for pid=3038 comm="dhcpcd" name="n30" dev="tmpfs" ino=3544 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.334334][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 107.343867][ T28] audit: type=1400 audit(1771539214.954:428): avc: denied { open } for pid=3038 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=3544 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.368397][ T28] audit: type=1400 audit(1771539214.954:429): avc: denied { getattr } for pid=3038 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=3544 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.394420][ T1995] bridge_slave_1: left allmulticast mode [ 107.401343][ T1995] bridge_slave_1: left promiscuous mode [ 107.407379][ T1995] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.416624][ T1995] bridge_slave_0: left allmulticast mode [ 107.422627][ T1995] bridge_slave_0: left promiscuous mode [ 107.428560][ T1995] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.444039][ T1995] bond_slave_0: left promiscuous mode [ 107.459651][ T1995] bond_slave_1: left promiscuous mode [ 107.586711][ T28] audit: type=1400 audit(1771539215.224:430): avc: denied { create } for pid=5106 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.609576][ T5123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 107.620017][ T28] audit: type=1400 audit(1771539215.224:431): avc: denied { write } for pid=5106 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=3557 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.646250][ T28] audit: type=1400 audit(1771539215.224:432): avc: denied { append } for pid=5106 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=3557 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.671057][ T28] audit: type=1400 audit(1771539215.254:433): avc: denied { unlink } for pid=5124 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=3557 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.671177][ T1995] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 107.703691][ T1995] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 107.723249][ T1995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.734907][ T1995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.745487][ T1995] bond0 (unregistering): Released all slaves [ 107.755421][ T1995] bond1 (unregistering): Released all slaves [ 107.808659][ T5077] chnl_net:caif_netlink_parms(): no params data found [ 107.826486][ T5133] netlink: 228 bytes leftover after parsing attributes in process `syz.1.443'. [ 107.835990][ T28] audit: type=1400 audit(1771539215.464:434): avc: denied { create } for pid=5132 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=xdp_socket permissive=1 [ 107.863124][ T28] audit: type=1400 audit(1771539215.464:435): avc: denied { create } for pid=5132 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 107.884849][ T28] audit: type=1400 audit(1771539215.464:436): avc: denied { write } for pid=5132 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 107.940290][ T1995] hsr_slave_0: left promiscuous mode [ 107.951359][ T1995] hsr_slave_1: left promiscuous mode [ 107.957193][ T1995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.974274][ T1995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.991185][ T1995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.000291][ T1995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.010823][ T1995] veth1_macvtap: left promiscuous mode [ 108.016421][ T1995] veth0_macvtap: left promiscuous mode [ 108.022104][ T1995] veth1_vlan: left promiscuous mode [ 108.362996][ T1995] veth0_vlan: left promiscuous mode [ 108.573984][ T5153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.449'. [ 108.601104][ T1995] team0 (unregistering): Port device team_slave_1 removed [ 108.611592][ T1995] team0 (unregistering): Port device team_slave_0 removed [ 108.716984][ T5143] lo speed is unknown, defaulting to 1000 [ 108.788250][ T5168] set_capacity_and_notify: 2 callbacks suppressed [ 108.788318][ T5168] loop2: detected capacity change from 0 to 128 [ 108.804768][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.816259][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.824886][ T5077] bridge_slave_0: entered allmulticast mode [ 108.831591][ T5077] bridge_slave_0: entered promiscuous mode [ 108.833883][ T5168] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.838560][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.857049][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.864738][ T5077] bridge_slave_1: entered allmulticast mode [ 108.871473][ T5168] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.898660][ T5077] bridge_slave_1: entered promiscuous mode [ 108.938157][ T5183] netlink: 'syz.3.453': attribute type 3 has an invalid length. [ 108.954675][ T5168] lo speed is unknown, defaulting to 1000 [ 108.969456][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.011458][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.068779][ T5192] lo speed is unknown, defaulting to 1000 [ 109.084717][ T5184] lo speed is unknown, defaulting to 1000 [ 109.091604][ T5194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 109.095246][ T5077] team0: Port device team_slave_0 added [ 109.117565][ T5077] team0: Port device team_slave_1 added [ 109.149332][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.161876][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.216531][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.272838][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.294661][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.353821][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.389074][ T5201] tap0: tun_chr_ioctl cmd 35111 [ 109.471292][ T5077] hsr_slave_0: entered promiscuous mode [ 109.483034][ T5077] hsr_slave_1: entered promiscuous mode [ 109.498181][ T5077] debugfs: 'hsr0' already exists in 'hsr' [ 109.515087][ T5077] Cannot create hsr debugfs directory [ 109.784059][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.873884][ T5197] lo speed is unknown, defaulting to 1000 [ 109.913506][ T5244] FAULT_INJECTION: forcing a failure. [ 109.913506][ T5244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.980091][ T5244] CPU: 0 UID: 0 PID: 5244 Comm: syz.5.461 Not tainted syzkaller #0 PREEMPT(full) [ 109.980241][ T5244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.980255][ T5244] Call Trace: [ 109.980262][ T5244] [ 109.980270][ T5244] __dump_stack+0x1d/0x30 [ 109.980300][ T5244] dump_stack_lvl+0x95/0xd0 [ 109.980325][ T5244] dump_stack+0x15/0x1b [ 109.980348][ T5244] should_fail_ex+0x263/0x280 [ 109.980406][ T5244] should_fail+0xb/0x20 [ 109.980425][ T5244] should_fail_usercopy+0x1a/0x20 [ 109.980506][ T5244] _copy_to_user+0x20/0xa0 [ 109.980550][ T5244] simple_read_from_buffer+0xb5/0x130 [ 109.980573][ T5244] proc_fail_nth_read+0x10e/0x150 [ 109.980600][ T5244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.980624][ T5244] vfs_read+0x1ab/0x7f0 [ 109.980704][ T5244] ? __rcu_read_unlock+0x4e/0x70 [ 109.980736][ T5244] ? __fget_files+0x184/0x1c0 [ 109.980756][ T5244] ? mutex_lock+0x57/0x90 [ 109.980784][ T5244] ksys_read+0xdc/0x1a0 [ 109.980812][ T5244] __x64_sys_read+0x40/0x50 [ 109.980848][ T5244] x64_sys_call+0x2886/0x3020 [ 109.980877][ T5244] do_syscall_64+0x12c/0x370 [ 109.980996][ T5244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.981016][ T5244] RIP: 0033:0x7f08b37bcece [ 109.981034][ T5244] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.981052][ T5244] RSP: 002b:00007f08b224efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.981117][ T5244] RAX: ffffffffffffffda RBX: 00007f08b224f6c0 RCX: 00007f08b37bcece [ 109.981134][ T5244] RDX: 000000000000000f RSI: 00007f08b224f0a0 RDI: 0000000000000003 [ 109.981148][ T5244] RBP: 00007f08b224f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.981160][ T5244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.981171][ T5244] R13: 00007f08b3a76038 R14: 00007f08b3a75fa0 R15: 00007ffc4aae5bc8 [ 109.981193][ T5244] [ 109.991508][ T5077] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 110.172401][ T5255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 110.207820][ T5077] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 110.843997][ T5266] lo speed is unknown, defaulting to 1000 [ 111.200664][ T5077] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 111.220618][ T5077] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 111.271917][ T5261] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 111.383823][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.407063][ T5077] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.418407][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.425749][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.445781][ T5077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.456790][ T5077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.470854][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.477941][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.505782][ T5283] FAULT_INJECTION: forcing a failure. [ 111.505782][ T5283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.519306][ T5283] CPU: 1 UID: 0 PID: 5283 Comm: syz.1.468 Not tainted syzkaller #0 PREEMPT(full) [ 111.519337][ T5283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.519383][ T5283] Call Trace: [ 111.519407][ T5283] [ 111.519463][ T5283] __dump_stack+0x1d/0x30 [ 111.519490][ T5283] dump_stack_lvl+0x95/0xd0 [ 111.519511][ T5283] dump_stack+0x15/0x1b [ 111.519530][ T5283] should_fail_ex+0x263/0x280 [ 111.519566][ T5283] should_fail+0xb/0x20 [ 111.519588][ T5283] should_fail_usercopy+0x1a/0x20 [ 111.519614][ T5283] _copy_to_user+0x20/0xa0 [ 111.519681][ T5283] simple_read_from_buffer+0xb5/0x130 [ 111.519747][ T5283] proc_fail_nth_read+0x10e/0x150 [ 111.519778][ T5283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.519873][ T5283] vfs_read+0x1ab/0x7f0 [ 111.519913][ T5283] ? __rcu_read_unlock+0x4e/0x70 [ 111.519938][ T5283] ? __fget_files+0x184/0x1c0 [ 111.519999][ T5283] ? mutex_lock+0x57/0x90 [ 111.520024][ T5283] ksys_read+0xdc/0x1a0 [ 111.520118][ T5283] __x64_sys_read+0x40/0x50 [ 111.520161][ T5283] x64_sys_call+0x2886/0x3020 [ 111.520216][ T5283] do_syscall_64+0x12c/0x370 [ 111.520252][ T5283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.520278][ T5283] RIP: 0033:0x7fafd3cbcece [ 111.520341][ T5283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.520360][ T5283] RSP: 002b:00007fafd2756fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.520385][ T5283] RAX: ffffffffffffffda RBX: 00007fafd27576c0 RCX: 00007fafd3cbcece [ 111.520425][ T5283] RDX: 000000000000000f RSI: 00007fafd27570a0 RDI: 0000000000000004 [ 111.520440][ T5283] RBP: 00007fafd2757090 R08: 0000000000000000 R09: 0000000000000000 [ 111.520453][ T5283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.520465][ T5283] R13: 00007fafd3f76038 R14: 00007fafd3f75fa0 R15: 00007fff5c17aa98 [ 111.520485][ T5283] [ 111.732786][ T5285] loop5: detected capacity change from 0 to 128 [ 111.772155][ T5285] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.792782][ T5285] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.825883][ T5285] lo speed is unknown, defaulting to 1000 [ 111.840785][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.888223][ T5302] loop2: detected capacity change from 0 to 512 [ 111.907074][ T5302] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.473: inode has both inline data and extents flags [ 111.929758][ T5302] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.929954][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 111.946379][ C0] EXT4-fs (loop2): initial error at time 1771539475: ext4_orphan_get:1391: inode 15 [ 111.956150][ C0] EXT4-fs (loop2): last error at time 1771539475: ext4_orphan_get:1391: inode 15 [ 111.975895][ T5302] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.473: couldn't read orphan inode 15 (err -117) [ 111.993295][ T5302] loop2: lost filesystem error report for type 5 error -117 [ 111.994155][ T5302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 112.034966][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 112.094219][ T5314] loop2: detected capacity change from 0 to 2048 [ 112.121624][ T5314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.232650][ T5304] lo speed is unknown, defaulting to 1000 [ 112.257130][ T5325] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 112.605567][ T5327] lo speed is unknown, defaulting to 1000 [ 112.831202][ T5331] netlink: 'syz.3.478': attribute type 5 has an invalid length. [ 112.896718][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 112.896780][ T28] audit: type=1400 audit(1771539476.531:450): avc: denied { connect } for pid=5336 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 113.020918][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.051344][ T5077] veth0_vlan: entered promiscuous mode [ 113.099718][ T5077] veth1_vlan: entered promiscuous mode [ 113.126014][ T5077] veth0_macvtap: entered promiscuous mode [ 113.144906][ T5077] veth1_macvtap: entered promiscuous mode [ 113.155978][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.165891][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.219569][ T314] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.249789][ T314] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.259089][ T314] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.284599][ T314] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.372808][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 113.444702][ T3675] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.524760][ T5367] loop3: detected capacity change from 0 to 512 [ 113.527156][ T28] audit: type=1400 audit(1771539477.161:451): avc: denied { mount } for pid=5366 comm="syz.3.489" name="/" dev="ramfs" ino=11698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 113.725395][ T5367] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.791847][ T5367] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.489: corrupted in-inode xattr: invalid ea_ino [ 113.896856][ T5367] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.898598][ T5367] EXT4-fs (loop3): Remounting filesystem read-only [ 113.907891][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 113.907913][ C1] EXT4-fs (loop3): initial error at time 1771539477: ext4_iget_extra_inode:5025: inode 15 [ 113.907946][ C1] EXT4-fs (loop3): last error at time 1771539477: ext4_iget_extra_inode:5025: inode 15 [ 114.049737][ T5367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.121269][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.255142][ T5386] loop3: detected capacity change from 0 to 512 [ 114.269560][ T5388] loop1: detected capacity change from 0 to 256 [ 114.276595][ T5388] vfat: Deprecated parameter 'posix' [ 114.294664][ T5386] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 3: comm syz.3.494: lblock 0 mapped to illegal pblock 3 (length 1) [ 114.297515][ T5388] FAT-fs: "posix" option is obsolete, not supported now [ 114.340376][ T5386] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 114.356760][ T5386] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.494: error -117 reading directory block [ 114.365879][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 114.365902][ C0] EXT4-fs (loop3): initial error at time 1771539477: ext4_map_blocks:776: inode 2: block 3 [ 114.365940][ C0] EXT4-fs (loop3): last error at time 1771539477: ext4_map_blocks:776: inode 2: block 3 [ 114.445270][ T5386] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 114.445366][ T5393] loop6: detected capacity change from 0 to 512 [ 114.454618][ T5386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.482638][ T5386] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #2: block 3: comm syz.3.494: lblock 0 mapped to illegal pblock 3 (length 1) [ 114.483213][ T5395] loop1: detected capacity change from 0 to 128 [ 114.510213][ T5386] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.494: error -117 reading directory block [ 114.544583][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.554549][ T5393] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #2: block 3: comm syz.6.497: lblock 0 mapped to illegal pblock 3 (length 1) [ 114.569354][ T5393] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 114.569976][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 114.585637][ T5393] EXT4-fs warning (device loop6): dx_probe:791: inode #2: lblock 0: comm syz.6.497: error -117 reading directory block [ 114.586102][ C1] EXT4-fs (loop6): initial error at time 1771539478: ext4_map_blocks:776: inode 2: block 3 [ 114.599882][ T5395] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.608913][ C1] EXT4-fs (loop6): last error at time 1771539478: ext4_map_blocks:776: inode 2: block 3 [ 114.631556][ T5395] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.646378][ T5393] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 114.680389][ T5393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.736988][ T5395] lo speed is unknown, defaulting to 1000 [ 114.772134][ T5393] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #2: block 3: comm syz.6.497: lblock 0 mapped to illegal pblock 3 (length 1) [ 114.816668][ T5393] forcing mempool usage for fserror_report+0x1b4/0x500 [ 114.888512][ T5393] EXT4-fs warning (device loop6): dx_probe:791: inode #2: lblock 0: comm syz.6.497: error -117 reading directory block [ 114.909987][ T5289] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 114.975194][ T5407] lo speed is unknown, defaulting to 1000 [ 115.049145][ T5410] random: crng reseeded on system resumption [ 115.140805][ T28] audit: type=1400 audit(1771539478.681:452): avc: denied { write } for pid=5404 comm="syz.5.502" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 115.335489][ T28] audit: type=1400 audit(1771539478.681:453): avc: denied { open } for pid=5404 comm="syz.5.502" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 115.379280][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 115.403218][ T5077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.697911][ T5422] FAULT_INJECTION: forcing a failure. [ 115.697911][ T5422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.746529][ T5422] CPU: 1 UID: 0 PID: 5422 Comm: syz.3.505 Not tainted syzkaller #0 PREEMPT(full) [ 115.746560][ T5422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.746574][ T5422] Call Trace: [ 115.746581][ T5422] [ 115.746589][ T5422] __dump_stack+0x1d/0x30 [ 115.746618][ T5422] dump_stack_lvl+0x95/0xd0 [ 115.746703][ T5422] dump_stack+0x15/0x1b [ 115.746727][ T5422] should_fail_ex+0x263/0x280 [ 115.746750][ T5422] should_fail+0xb/0x20 [ 115.746770][ T5422] should_fail_usercopy+0x1a/0x20 [ 115.746827][ T5422] _copy_from_iter+0xcf/0xea0 [ 115.746851][ T5422] ? __alloc_skb+0x4f6/0x690 [ 115.746875][ T5422] ? __alloc_skb+0x200/0x690 [ 115.746900][ T5422] netlink_sendmsg+0x4ae/0x6f0 [ 115.746978][ T5422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.747006][ T5422] ____sys_sendmsg+0x5af/0x600 [ 115.747098][ T5422] ___sys_sendmsg+0x195/0x1e0 [ 115.747135][ T5422] __x64_sys_sendmsg+0xd4/0x160 [ 115.747166][ T5422] x64_sys_call+0x194c/0x3020 [ 115.747194][ T5422] do_syscall_64+0x12c/0x370 [ 115.747354][ T5422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.747377][ T5422] RIP: 0033:0x7fc486e1c629 [ 115.747396][ T5422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.747415][ T5422] RSP: 002b:00007fc48586f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.747439][ T5422] RAX: ffffffffffffffda RBX: 00007fc487095fa0 RCX: 00007fc486e1c629 [ 115.747454][ T5422] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 115.747525][ T5422] RBP: 00007fc48586f090 R08: 0000000000000000 R09: 0000000000000000 [ 115.747561][ T5422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.747575][ T5422] R13: 00007fc487096038 R14: 00007fc487095fa0 R15: 00007ffe588f3cf8 [ 115.747596][ T5422] [ 115.969122][ T5431] loop3: detected capacity change from 0 to 512 [ 116.000969][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.074746][ T5433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.507'. [ 116.110060][ T28] audit: type=1400 audit(1771539479.741:454): avc: denied { ioctl } for pid=5432 comm="syz.1.507" path="socket:[12423]" dev="sockfs" ino=12423 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.120948][ T5433] syzkaller0: entered promiscuous mode [ 116.191550][ T5433] syzkaller0: entered allmulticast mode [ 116.217532][ T5438] futex_wake_op: syz.5.512 tries to shift op by -1; fix this program [ 116.676226][ T5448] lo speed is unknown, defaulting to 1000 [ 117.043422][ T5456] loop1: detected capacity change from 0 to 128 [ 117.110131][ T5456] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.148206][ T5456] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.170476][ T28] audit: type=1400 audit(1771539480.801:455): avc: denied { ioctl } for pid=5430 comm="syz.3.510" path="socket:[12483]" dev="sockfs" ino=12483 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.203831][ T5469] loop6: detected capacity change from 0 to 1024 [ 117.204923][ T5431] mmap: syz.3.510 (5431) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.210897][ T5469] EXT4-fs: Ignoring removed orlov option [ 117.225080][ T5456] lo speed is unknown, defaulting to 1000 [ 117.262870][ T5446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.515'. [ 117.269267][ T5470] lo speed is unknown, defaulting to 1000 [ 117.286047][ T5434] loop3: detected capacity change from 0 to 1024 [ 117.294109][ T5434] EXT4-fs: Ignoring removed bh option [ 117.299528][ T5434] EXT4-fs: dax option not supported [ 117.305847][ T5469] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.667952][ T5481] loop2: detected capacity change from 0 to 256 [ 117.744970][ T5484] netlink: 40 bytes leftover after parsing attributes in process `syz.5.524'. [ 117.748870][ T5481] FAT-fs (loop2): Directory bread(block 64) failed [ 117.776074][ T5481] FAT-fs (loop2): Directory bread(block 65) failed [ 117.785701][ T5481] FAT-fs (loop2): Directory bread(block 66) failed [ 117.792613][ T5481] FAT-fs (loop2): Directory bread(block 67) failed [ 117.799360][ T5481] FAT-fs (loop2): Directory bread(block 68) failed [ 117.806722][ T5481] FAT-fs (loop2): Directory bread(block 69) failed [ 117.813787][ T5481] FAT-fs (loop2): Directory bread(block 70) failed [ 117.820574][ T5481] FAT-fs (loop2): Directory bread(block 71) failed [ 117.827242][ T5481] FAT-fs (loop2): Directory bread(block 72) failed [ 117.842283][ T5481] FAT-fs (loop2): Directory bread(block 73) failed [ 117.933175][ T5077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.006113][ T5493] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 118.015199][ T5493] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 118.033034][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.085344][ T5498] loop1: detected capacity change from 0 to 1024 [ 118.137965][ T5498] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 118.151509][ T5498] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 118.170253][ T5498] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 118.182127][ T5498] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 118.270172][ T5498] EXT4-fs error (device loop1): ext4_get_journal_inode:5865: inode #17: comm syz.1.528: iget: bad i_size value: 4398046511204 [ 118.287931][ T5498] loop1: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 118.296752][ T5498] EXT4-fs (loop1): no journal found [ 118.306003][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 118.306025][ C1] EXT4-fs (loop1): initial error at time 1771539481: ext4_get_journal_inode:5865: inode 17 [ 118.306054][ C1] EXT4-fs (loop1): last error at time 1771539481: ext4_get_journal_inode:5865: inode 17 [ 118.828662][ T5507] lo speed is unknown, defaulting to 1000 [ 119.372098][ T5517] netlink: 32 bytes leftover after parsing attributes in process `syz.5.534'. [ 119.411611][ T5517] bond1: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 119.438171][ T5517] bond1 (unregistering): Released all slaves [ 119.742515][ T28] audit: type=1400 audit(1771539483.381:456): avc: denied { read write } for pid=5531 comm="syz.6.538" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 119.776704][ T28] audit: type=1400 audit(1771539483.381:457): avc: denied { open } for pid=5531 comm="syz.6.538" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 120.095936][ T5534] lo speed is unknown, defaulting to 1000 [ 120.303953][ T5536] loop6: detected capacity change from 0 to 128 [ 120.352383][ T5536] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.419278][ T5536] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.548928][ T5549] loop5: detected capacity change from 0 to 512 [ 120.567683][ T5536] lo speed is unknown, defaulting to 1000 [ 120.584298][ T5549] FAT-fs (loop5): IO charset utfѾh$#ww9C= Y撳t EŒ&y3_@rRhB&5dxpO߁up@HX[曖[7VG1 y{vX)P1u&-@=6 not found [ 122.780402][ T5566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.547'. [ 122.863686][ T5558] lo speed is unknown, defaulting to 1000 [ 123.195457][ T5566] syzkaller0: entered promiscuous mode [ 123.218863][ T5566] syzkaller0: entered allmulticast mode [ 123.281508][ T28] audit: type=1400 audit(1771539486.911:458): avc: denied { getopt } for pid=5576 comm="syz.5.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.318278][ T5077] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.869858][ T5635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.559'. [ 123.873656][ T5639] FAULT_INJECTION: forcing a failure. [ 123.873656][ T5639] name failslab, interval 1, probability 0, space 0, times 0 [ 123.893597][ T5635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.559'. [ 123.906724][ T5639] CPU: 0 UID: 0 PID: 5639 Comm: syz.1.560 Not tainted syzkaller #0 PREEMPT(full) [ 123.906756][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.906769][ T5639] Call Trace: [ 123.906778][ T5639] [ 123.906786][ T5639] __dump_stack+0x1d/0x30 [ 123.906819][ T5639] dump_stack_lvl+0x95/0xd0 [ 123.906846][ T5639] dump_stack+0x15/0x1b [ 123.906870][ T5639] should_fail_ex+0x263/0x280 [ 123.906903][ T5639] should_failslab+0x8c/0xb0 [ 123.906925][ T5639] kmem_cache_alloc_noprof+0x66/0x400 [ 123.906979][ T5639] ? security_inode_alloc+0x37/0x100 [ 123.907037][ T5639] security_inode_alloc+0x37/0x100 [ 123.907065][ T5639] inode_init_always_gfp+0x4b7/0x500 [ 123.907088][ T5639] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 123.907119][ T5639] alloc_inode+0x58/0x170 [ 123.907155][ T5639] new_inode+0x1d/0xe0 [ 123.907180][ T5639] shmem_get_inode+0x246/0x750 [ 123.907208][ T5639] __shmem_file_setup+0x112/0x210 [ 123.907237][ T5639] shmem_file_setup+0x3b/0x50 [ 123.907335][ T5639] memfd_alloc_file+0x4e/0x300 [ 123.907364][ T5639] __se_sys_memfd_create+0x2e1/0x3b0 [ 123.907453][ T5639] __x64_sys_memfd_create+0x31/0x40 [ 123.907485][ T5639] x64_sys_call+0x1f22/0x3020 [ 123.907513][ T5639] do_syscall_64+0x12c/0x370 [ 123.907556][ T5639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.907618][ T5639] RIP: 0033:0x7fafd3cfc629 [ 123.907720][ T5639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.907739][ T5639] RSP: 002b:00007fafd2756e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 123.907763][ T5639] RAX: ffffffffffffffda RBX: 00000000000005eb RCX: 00007fafd3cfc629 [ 123.907777][ T5639] RDX: 00007fafd2756ee0 RSI: 0000000000000000 RDI: 00007fafd3d92d19 [ 123.907837][ T5639] RBP: 0000200000000c00 R08: 00000000ffffffff R09: 0000000000000000 [ 123.907852][ T5639] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000005c0 [ 123.907867][ T5639] R13: 00007fafd2756ee0 R14: 00007fafd2756ea0 R15: 0000200000000040 [ 123.907896][ T5639] [ 123.922740][ T5635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.559'. [ 124.160429][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.167887][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.187863][ T5650] loop3: detected capacity change from 0 to 128 [ 124.235973][ T5650] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.259348][ T5650] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.313713][ T5648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.325001][ T5666] loop6: detected capacity change from 0 to 512 [ 124.339230][ T5666] ext4: Unknown parameter 'subj_user' [ 124.346654][ T5648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.401829][ T1995] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.422508][ T1995] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.468165][ T5667] lo speed is unknown, defaulting to 1000 [ 124.474651][ T1995] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.497551][ T1995] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.561821][ T5650] lo speed is unknown, defaulting to 1000 [ 124.577860][ T1995] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.603733][ T1995] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.629179][ T1995] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.663422][ T1995] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.776420][ T5677] lo speed is unknown, defaulting to 1000 [ 124.995211][ T5688] random: crng reseeded on system resumption [ 125.508163][ T5700] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 125.532969][ T5700] syzkaller0: entered promiscuous mode [ 125.805907][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.106308][ T5718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 126.551554][ T5745] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 126.551554][ T5745] Ue[%#s' [ 126.615751][ T28] audit: type=1400 audit(1771539490.191:459): avc: denied { mounton } for pid=5735 comm="syz.3.580" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 126.733441][ T28] audit: type=1400 audit(1771539490.371:460): avc: denied { ioctl } for pid=5752 comm="syz.5.585" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.819805][ T5758] loop1: detected capacity change from 0 to 128 [ 126.891920][ T5758] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.914677][ T5758] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.946609][ T5767] netlink: 40 bytes leftover after parsing attributes in process `syz.3.590'. [ 126.979436][ T5772] loop2: detected capacity change from 0 to 512 [ 126.985554][ T5758] lo speed is unknown, defaulting to 1000 [ 126.991566][ T28] audit: type=1400 audit(1771539490.621:461): avc: denied { execute } for pid=5766 comm="syz.3.590" path="/124/file1" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.029252][ T5772] ext4: Unknown parameter 'subj_user' [ 127.487610][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.593'. [ 127.801360][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.876485][ T28] audit: type=1400 audit(1771539491.511:462): avc: denied { sqpoll } for pid=5781 comm="syz.5.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 128.035183][ T5793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.599'. [ 128.235841][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.598'. [ 128.342255][ T5806] loop3: detected capacity change from 0 to 128 [ 128.474333][ T5806] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.515218][ T5806] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.539698][ T5806] lo speed is unknown, defaulting to 1000 [ 128.698095][ T5816] loop5: detected capacity change from 0 to 256 [ 128.816930][ T5816] FAT-fs (loop5): Directory bread(block 64) failed [ 128.837097][ T5818] loop1: detected capacity change from 0 to 2048 [ 128.852653][ T5816] FAT-fs (loop5): Directory bread(block 65) failed [ 128.896191][ T5816] FAT-fs (loop5): Directory bread(block 66) failed [ 128.913683][ T5818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.950754][ T5816] FAT-fs (loop5): Directory bread(block 67) failed [ 129.000706][ T5816] FAT-fs (loop5): Directory bread(block 68) failed [ 129.032263][ T5816] FAT-fs (loop5): Directory bread(block 69) failed [ 129.073733][ T5816] FAT-fs (loop5): Directory bread(block 70) failed [ 129.106370][ T5816] FAT-fs (loop5): Directory bread(block 71) failed [ 129.127417][ T5816] FAT-fs (loop5): Directory bread(block 72) failed [ 129.150452][ T5816] FAT-fs (loop5): Directory bread(block 73) failed [ 129.261259][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.339237][ T5825] loop3: detected capacity change from 0 to 512 [ 129.384733][ T5825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.442868][ T5825] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.483972][ T5809] syz.6.605 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 129.527197][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.550256][ T5809] CPU: 1 UID: 0 PID: 5809 Comm: syz.6.605 Not tainted syzkaller #0 PREEMPT(full) [ 129.550283][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.550297][ T5809] Call Trace: [ 129.550304][ T5809] [ 129.550312][ T5809] __dump_stack+0x1d/0x30 [ 129.550350][ T5809] dump_stack_lvl+0x95/0xd0 [ 129.550374][ T5809] dump_stack+0x15/0x1b [ 129.550393][ T5809] dump_header+0x80/0x240 [ 129.550413][ T5809] oom_kill_process+0x295/0x350 [ 129.550440][ T5809] out_of_memory+0x97d/0xb80 [ 129.550464][ T5809] try_charge_memcg+0x62e/0xa10 [ 129.550557][ T5809] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 129.550589][ T5809] __swap_cache_prepare_and_add+0x386/0x530 [ 129.550690][ T5809] swap_cache_alloc_folio+0xa2/0x120 [ 129.550803][ T5809] swap_cluster_readahead+0x36b/0x3d0 [ 129.550840][ T5809] swapin_readahead+0xde/0x840 [ 129.550886][ T5809] ? _raw_spin_unlock+0x9/0x30 [ 129.550909][ T5809] ? swap_put_entries_cluster+0x385/0x3a0 [ 129.550942][ T5809] ? swap_put_entries_cluster+0x131/0x3a0 [ 129.550972][ T5809] ? __rcu_read_unlock+0x4e/0x70 [ 129.551073][ T5809] ? swap_cache_get_folio+0x26f/0x280 [ 129.551104][ T5809] do_swap_page+0x309/0x2210 [ 129.551136][ T5809] ? css_rstat_updated+0xbb/0x280 [ 129.551215][ T5809] ? __rcu_read_lock+0x36/0x50 [ 129.551311][ T5809] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 129.551337][ T5809] handle_mm_fault+0xb40/0x3020 [ 129.551372][ T5809] ? vma_start_read+0x1c7/0x2c0 [ 129.551403][ T5809] do_user_addr_fault+0x62f/0x1050 [ 129.551493][ T5809] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 129.551555][ T5809] ? trace_page_fault_user+0x1f/0xe0 [ 129.551590][ T5809] exc_page_fault+0x62/0xa0 [ 129.551621][ T5809] asm_exc_page_fault+0x26/0x30 [ 129.551677][ T5809] RIP: 0033:0x7f7fee5f07c0 [ 129.551697][ T5809] Code: 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 [ 129.551717][ T5809] RSP: 002b:00007ffe5e9dfb68 EFLAGS: 00010246 [ 129.551738][ T5809] RAX: 0000000000000000 RBX: ffffffff813c7222 RCX: 0000000000000000 [ 129.551782][ T5809] RDX: 0000000000001222 RSI: ffffffff813c7222 RDI: 000000000000000f [ 129.551803][ T5809] RBP: 0000000000000001 R08: 00007f7fee9a0000 R09: 00007f7fee9a2000 [ 129.551815][ T5809] R10: 00000000813c7226 R11: 000000000000000f R12: 00007f7fee9b6038 [ 129.551828][ T5809] R13: 0000000000000001 R14: ffffffff813c7ea6 R15: 00007f7fef4e5720 [ 129.551840][ T5809] ? __se_sys_prctl+0x36/0x13f0 [ 129.551866][ T5809] ? getrusage+0x542/0xba0 [ 129.551948][ T5809] ? getrusage+0x542/0xba0 [ 129.551973][ T5809] [ 129.551981][ T5809] memory: usage 307200kB, limit 307200kB, failcnt 290 [ 129.815570][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.836941][ T5834] syzkaller0: entered promiscuous mode [ 129.842571][ T5834] syzkaller0: entered allmulticast mode [ 129.849979][ T5809] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 129.858695][ T5809] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 129.876490][ T5809] Memory cgroup stats for /syz6: [ 129.876740][ T5809] cache 0 [ 129.895052][ T5809] rss 4096 [ 129.898491][ T5809] shmem 0 [ 129.900642][ T5837] loop2: detected capacity change from 0 to 512 [ 129.902289][ T5809] mapped_file 0 [ 129.918077][ T5809] dirty 0 [ 129.932308][ T5809] writeback 0 [ 129.935637][ T5809] workingset_refault_anon 72 [ 129.940818][ T5837] ext4: Unknown parameter 'subj_user' [ 129.966564][ T5809] workingset_refault_file 0 [ 129.971362][ T5809] swap 184320 [ 129.974960][ T5809] swapcached 188416 [ 129.982130][ T5809] pgpgin 18947 [ 129.985794][ T5809] pgpgout 18946 [ 129.989603][ T5809] pgfault 21518 [ 129.993337][ T5809] pgmajfault 35 [ 129.997022][ T5809] inactive_anon 0 [ 130.001988][ T5809] active_anon 4096 [ 130.005912][ T5809] inactive_file 0 [ 130.009841][ T5809] active_file 0 [ 130.014104][ T5809] unevictable 0 [ 130.017708][ T5809] hierarchical_memory_limit 314572800 [ 130.024520][ T5809] hierarchical_memsw_limit 9223372036854771712 [ 130.031121][ T5809] total_cache 0 [ 130.037290][ T28] audit: type=1400 audit(1771539493.671:463): avc: denied { append } for pid=5846 comm="syz.1.614" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 130.061411][ T5809] total_rss 4096 [ 130.065724][ T5809] total_shmem 0 [ 130.069297][ T5809] total_mapped_file 0 [ 130.073608][ T5809] total_dirty 0 [ 130.077244][ T5809] total_writeback 0 [ 130.081445][ T5809] total_workingset_refault_anon 72 [ 130.086609][ T5809] total_workingset_refault_file 0 [ 130.094689][ T5809] total_swap 184320 [ 130.108238][ T5809] total_swapcached 188416 [ 130.112983][ T5809] total_pgpgin 18947 [ 130.116974][ T5809] total_pgpgout 18946 [ 130.121395][ T5809] total_pgfault 21518 [ 130.125448][ T5809] total_pgmajfault 35 [ 130.129815][ T5809] total_inactive_anon 0 [ 130.134574][ T5809] total_active_anon 4096 [ 130.138892][ T5809] total_inactive_file 0 [ 130.143373][ T5809] total_active_file 0 [ 130.147573][ T5809] total_unevictable 0 [ 130.152061][ T5809] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.605,pid=5809,uid=0 [ 130.167125][ T5809] Memory cgroup out of memory: Killed process 5809 (syz.6.605) total-vm:96208kB, anon-rss:1236kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 130.300947][ T5810] syz.6.605 (5810) used greatest stack depth: 9400 bytes left [ 130.589249][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.615'. [ 130.826413][ T5862] FAULT_INJECTION: forcing a failure. [ 130.826413][ T5862] name failslab, interval 1, probability 0, space 0, times 0 [ 130.878252][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: syz.6.617 Not tainted syzkaller #0 PREEMPT(full) [ 130.878298][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 130.878312][ T5862] Call Trace: [ 130.878326][ T5862] [ 130.878337][ T5862] __dump_stack+0x1d/0x30 [ 130.878391][ T5862] dump_stack_lvl+0x95/0xd0 [ 130.878425][ T5862] dump_stack+0x15/0x1b [ 130.878445][ T5862] should_fail_ex+0x263/0x280 [ 130.878465][ T5862] should_failslab+0x8c/0xb0 [ 130.878591][ T5862] kmem_cache_alloc_noprof+0x66/0x400 [ 130.878612][ T5862] ? security_file_alloc+0x32/0xf0 [ 130.878640][ T5862] security_file_alloc+0x32/0xf0 [ 130.878668][ T5862] init_file+0x5b/0x1b0 [ 130.878696][ T5862] alloc_empty_file+0x8b/0x200 [ 130.878766][ T5862] path_openat+0x65/0x2050 [ 130.878854][ T5862] ? _parse_integer_limit+0x170/0x190 [ 130.878915][ T5862] ? _parse_integer+0x27/0x40 [ 130.878943][ T5862] ? kstrtoull+0x111/0x140 [ 130.878978][ T5862] ? kstrtouint+0x76/0xc0 [ 130.879139][ T5862] do_file_open+0x16c/0x290 [ 130.879172][ T5862] do_sys_openat2+0x94/0x130 [ 130.879251][ T5862] __x64_sys_open+0xe6/0x110 [ 130.879274][ T5862] x64_sys_call+0x14b9/0x3020 [ 130.879302][ T5862] do_syscall_64+0x12c/0x370 [ 130.879440][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.879466][ T5862] RIP: 0033:0x7f7fee73c629 [ 130.879531][ T5862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.879553][ T5862] RSP: 002b:00007f7fed197028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 130.879640][ T5862] RAX: ffffffffffffffda RBX: 00007f7fee9b5fa0 RCX: 00007f7fee73c629 [ 130.879661][ T5862] RDX: 0000000000000010 RSI: 0000000000149040 RDI: 00002000009e1000 [ 130.879674][ T5862] RBP: 00007f7fed197090 R08: 0000000000000000 R09: 0000000000000000 [ 130.879754][ T5862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.879767][ T5862] R13: 00007f7fee9b6038 R14: 00007f7fee9b5fa0 R15: 00007ffe5e9dfad8 [ 130.879788][ T5862] [ 131.318157][ T5874] loop1: detected capacity change from 0 to 2048 [ 131.475423][ T5874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.616794][ T5883] loop2: detected capacity change from 0 to 164 [ 131.679696][ T5883] isofs_fill_super: bread failed, dev=loop2, iso_blknum=41, block=82 [ 131.757299][ T5886] random: crng reseeded on system resumption [ 132.096379][ T5891] loop2: detected capacity change from 0 to 128 [ 132.176561][ T5891] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.210366][ T5891] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.225639][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.288290][ T5891] lo speed is unknown, defaulting to 1000 [ 132.402922][ T28] audit: type=1400 audit(1771539496.041:464): avc: denied { mounton } for pid=5899 comm="syz.3.628" path="/133/file0" dev="tmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.426687][ T5896] lo speed is unknown, defaulting to 1000 [ 132.952642][ T5917] loop3: detected capacity change from 0 to 512 [ 132.970348][ T5917] ext4: Unknown parameter 'subj_user' [ 133.101195][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.499444][ T5926] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 133.499444][ T5926] Ue[%#s' [ 133.871216][ T5927] lo speed is unknown, defaulting to 1000 [ 134.475776][ T5932] loop2: detected capacity change from 0 to 2048 [ 134.523936][ T5932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.695360][ T5940] loop1: detected capacity change from 0 to 164 [ 134.738324][ T5940] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=82 [ 134.983768][ T2999] ================================================================== [ 134.992178][ T2999] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 135.000187][ T2999] [ 135.002779][ T2999] write to 0xffff88811ac460f0 of 8 bytes by task 3304 on cpu 1: [ 135.010522][ T2999] dentry_unlink_inode+0x65/0x260 [ 135.015572][ T2999] d_delete+0xc8/0xe0 [ 135.019663][ T2999] d_delete_notify+0x32/0x100 [ 135.024437][ T2999] vfs_unlink+0x289/0x490 [ 135.028959][ T2999] filename_unlinkat+0x1e2/0x410 [ 135.033913][ T2999] __se_sys_unlink+0x2b/0xe0 [ 135.038784][ T2999] __x64_sys_unlink+0x1f/0x30 [ 135.043512][ T2999] x64_sys_call+0x2eb6/0x3020 [ 135.048293][ T2999] do_syscall_64+0x12c/0x370 [ 135.053121][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.059112][ T2999] [ 135.061437][ T2999] read to 0xffff88811ac460f0 of 8 bytes by task 2999 on cpu 0: [ 135.068983][ T2999] step_into_slowpath+0x12c/0x4c0 [ 135.074015][ T2999] path_lookupat+0x330/0x500 [ 135.078611][ T2999] filename_lookup+0x190/0x390 [ 135.083377][ T2999] do_readlinkat+0x74/0x2f0 [ 135.087974][ T2999] __x64_sys_readlink+0x47/0x60 [ 135.093207][ T2999] x64_sys_call+0x2b51/0x3020 [ 135.097985][ T2999] do_syscall_64+0x12c/0x370 [ 135.102934][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.108832][ T2999] [ 135.111152][ T2999] value changed: 0xffff88811b47d4d8 -> 0x0000000000000000 [ 135.118352][ T2999] [ 135.120706][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 135.126856][ T2999] CPU: 0 UID: 0 PID: 2999 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 135.135730][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 135.145786][ T2999] ================================================================== [ 135.263306][ T5949] random: crng reseeded on system resumption [ 135.797311][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.