last executing test programs: 3.142371657s ago: executing program 3 (id=2388): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1c14744, &(0x7f0000000080), 0x2, 0x4bb, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}]}, 0xb8}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9f08000000000000006beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9ab97800001022f987617c31850000000000000000000900008000", 0x3a}, 0x60) recvmsg(r1, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x101) semget$private(0x0, 0x3, 0x82) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffeb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000001100)='./file0\x00', 0x0, 0x989046, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff65}, [@printk={@lli, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000080)=0x100) socket$netlink(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x6c3, &(0x7f0000003940)={@broadcast, @empty, @void, {@x25={0x805, {0x2, 0x7c, 0xf, "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"}}}}, 0x0) 3.013273755s ago: executing program 3 (id=2390): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x6025, 0x4007, 0xb, 0x4, 0x1, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x40003, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @private, @multicast1}, &(0x7f0000000540)=0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x7, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x8}, @enum={0x2, 0x9, 0x0, 0x6, 0x4, [{0x1, 0x5}, {0x1, 0x5}, {0x4, 0x6}, {0x10, 0xffff}, {0x1, 0x5}, {0xb, 0x1}, {0x1}, {0xa}, {0x3, 0x1}]}, @func={0xf, 0x0, 0x0, 0xc, 0x3}, @enum64={0x3, 0x7, 0x0, 0x13, 0x0, 0x4, [{0xf, 0x101, 0x9}, {0xb, 0x2, 0x7}, {0xb, 0x24e, 0x6}, {0xc, 0x2, 0x1000}, {0xd, 0x2, 0x5}, {0x9, 0x79, 0x2}, {0x3, 0x5, 0x7}]}, @ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa, 0xffffffff}]}, @ptr={0x3}]}, {0x0, [0x5f, 0x5f, 0x30, 0x30, 0xc883bcb250fec731]}}, &(0x7f0000000680)=""/188, 0x11b, 0xbc, 0x1, 0x6, 0x10000, @value=r0}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000980)={0xfffffffe, 0x0}, 0x8) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x1a, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffff801}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x1, 0xdd, &(0x7f0000000b00)=""/221, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0xb, 0x8, 0xb}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x4, 0x5, 0x3, 0xa}, {0x3, 0x5, 0xa, 0x7}, {0x4, 0x2, 0x2, 0xc}, {0x4, 0x2, 0x1, 0x8}], 0x10, 0x6}, 0x94) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') dup3(r10, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x17, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x2, 0x1, 0x6, 0x0, 0x4, 0x30, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x1, 0xb, 0x3, 0xfffffffffffffff8, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xae8c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', r5, @cgroup_sysctl, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0x10, 0x7, 0x7}, 0x10, r7, r8, 0x6, &(0x7f0000000dc0)=[r10], &(0x7f0000000e00)=[{0x1, 0x2, 0x2, 0xc}, {0x0, 0x5, 0xe}, {0x3, 0x3, 0x9, 0xb}, {0x0, 0x4, 0x7, 0x9}, {0x3, 0x101, 0xa, 0x2}, {0x3, 0x3, 0xd, 0xb}], 0x10, 0x5}, 0x94) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x203}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r11) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_subtree(r13, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r14, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) r15 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r15, 0x29, 0x0, 0x0, 0x0) write$cgroup_subtree(r14, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5) io_uring_enter(r1, 0xdb4, 0xf258, 0x5, 0x0, 0x0) 2.783041568s ago: executing program 0 (id=2392): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000480), 0x11, 0x5aa, &(0x7f00000007c0)="$eJzs3U9oHNUfAPDvzGabNs3vlwoKKj0UFSqUbpL+0eqpvYqFQA+CFw2bbSjZZEs20SYETO9F7EFUeqk3PXhUPHgQLx69elE8C8UGhaYHXdnsbrpNd2MSs9ma/XxgkvdmJvN9b2a/LzvDDBNAzzpW/ZFGPBMRY0nEUNOyvqgvPFZbb3VlKX9/ZSmfRKVy6bckkoi4t7KUb6yf1H8fjojliHg6Ir7LRpxI1zd5oFEoLyxOjReLhdl6fXhu+upweWHx5JXp8cnCZGHm9MuvnD135uzoqdHm5t6vNNey2+vrjZ9vvn/jh9du3/z8i6PL+Q/Hkzgfg/Vlzf3YTbV9ko3zG+af6USwLkq63QB2JFPP82oqPRVDkalnfSuV5sGhf0+aB3RQpT+isi4qlWr6V4DekDyU7tIfekfje0D1/Lcx7eX3jzsXaicg1birK0v596IRv692bSIOrp2bDPyePHRmUj3fPLKXDWVfWr4eESN9fY9+/pP652/nRnajgXTUtxdqB+rR45+ujz/RYvwZbFw7/Zca499qffxbbRE/02b8G9tijD/f/OWTtvGv98ezLeMn6/GTFvHTiHh7Q3vaufXG1+faLat8GnE8Wsdv3vYm14eHL18pFkZqP1vG+Ob40Vfb9z9ioE382jXbg2sNae7/gXqb0k363Oyr7798bnmT+C8+v/nxb7X/D0XEB1uM/8S9z15vt+zO9eRu9VvAdo9/Etm4vcX4L50/9lO96KohAAAAAAAAAADsonTtXrYkza2X0zSXqz3D+2QMpMVSee7E5dL8zETtnrcjkU0bd1oN1epJtT5avx+3UT+1oX46Uw+YObRWz+VLxYku9x0AAAAAAAAAAAAAAAAAAAAeF4c3PP//R2bt+f+Nr6sG9qv2r/wG9jv5D73r4fzf7FWOwH7j/z/0rIr8h94l/6F3yX/oXfIfepf8h94l/6F3yX8AAAAAAAAAAAAAAAAAAAAAAAAAAOiIsYsXq1Pl/spSvlqf6FuYnyq9c3KiUJ7KTc/nc/nS7NXcZKk0WSzk8qXpf9peUipdHYmZ+WvDc4Xy3HB5YfGt6dL8TOOdooVsx3sEAAAAAAAAAAAAAAAAAAAA/z2Da1OS5iKytXqa5nIR/4uII0kkl68UCyMR8f+I+DGT7a/WR7vdaAAAAAAAAAAAAAAAAAAAANhnyguLU+PFYmG2c4W+eqgOhth6oW87K0fE8u42o7rFbf9Vtr4Du7zr9kchs5PPYXZsaOBxaPxeFro4KAEAAAAAAAAAAAAAAAAAQI968NDvVv/ir842CAAAAAAAAAAAAAAAAAAAAHpS+msSEdXp+NALgxuXHkhWM2u/I+LdW5c+ujY+Nzc7Wp1/d33+3Mf1+ae60X5gqxp5mkZENY8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB8oLi1PjxWJhdoeF/i2s0+0+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzE3wEAAP//C5/FIQ==") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x1800, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000008000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000f5007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r4, &(0x7f0000000d40)=""/43, 0x2b) preadv(r1, &(0x7f00000012c0)=[{&(0x7f0000002080)=""/4080, 0xff0}], 0x1, 0x806, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000030900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f4000000006201200000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000f4110380f011008008000340"], 0x12b4}, 0x1, 0x0, 0x0, 0x40814}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$inet6(0xa, 0x3, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB="7552ee77c9dfd6d99de600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x7c, 0x4) sendmmsg$inet6(r6, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x20}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r9, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) 2.523153544s ago: executing program 4 (id=2396): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r1 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x801) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x1}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c40000001b000100feffffff00004000e0000002000000000000678ddb2aee030f56000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005a073500c0000000"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r5 = mq_open(&(0x7f00000000c0)='\x00', 0x40, 0x83, &(0x7f0000000140)={0xf64, 0x2, 0x9, 0x81}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) geteuid() mq_notify(r5, &(0x7f0000000200)={0x0, 0x19, 0x2}) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10, 0x80c00) sendmmsg$sock(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000002300)="dce4c739", 0x4}], 0x1}}], 0x1, 0x20000000) 2.298178596s ago: executing program 1 (id=2397): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1f, 0x3, 0x0) memfd_secret(0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000800) sendmsg$nl_route_sched(r0, 0x0, 0x20008010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 2.216807751s ago: executing program 1 (id=2398): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) write$UHID_DESTROY(r1, &(0x7f0000000300), 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) listen(r0, 0x1ff) (async) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x5, 0x5, 0xffff, 0xfc00}, 0x8) (async) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 2.209711872s ago: executing program 4 (id=2399): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 2.162294964s ago: executing program 1 (id=2400): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000000000000000000000000000000000000000000000000007b1ca52c685478b3fe00a7cf4d0d320e327ef8663e45c289487b701310c241d145c75243c91da5c33db6e4cc0c0800000000000000b8f5d7f54aa9476c94b073f6c94fc54d40f01fd8274144600a2e5a2d29d434b6c1ad950fc7373c7bc7f861fc18c6d7a160386b4e5d1d2bf22569ba23cd48a8a93952b2a0a049123a8efcbdbbd20376ebc2"]) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) sendmsg$netlink(r2, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0xa5dfdbff, 0x800000}, 0xc, &(0x7f0000000000)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="40000000030105000000000000000000020000002c000280140001800800010000000000080002007f00000106000340000300000c0002800500010095000000dd9666f8c7b2d8caccce0dc6e7bacef718a4bb556fc124760c97795eb6f458d9efd495ad15679be1dd01bd17e9273974912703faa00c0c3404c3d1191f47d787dda13014f997a587ddd86ead335b2dad523135d7acd88ce8ee3a35df1e3404b364a1c03d933061cb5b85c1a8a572b3b1b8a3e8a1"], 0x40}, 0x1, 0x0, 0x0, 0x4000085}, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xee1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) io_uring_enter(r4, 0x625, 0x4c1, 0xc1, 0x0, 0x0) 2.118914547s ago: executing program 4 (id=2401): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.090774458s ago: executing program 3 (id=2403): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x106200, 0x10003, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 2.071108249s ago: executing program 3 (id=2404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r5, &(0x7f0000000240)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x610003d5) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x40000000) inotify_add_watch(r6, &(0x7f0000001080)='./file0\x00', 0xe70002c1) r7 = fsmount(0xffffffffffffffff, 0x0, 0x82) ioctl$EVIOCSABS20(r7, 0x401845e0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x7, 0x1, 0x0, 0xa, {{0x9, 0x4, 0x3, 0x1, 0x24, 0x67, 0x0, 0x7e, 0x4719bc8cfeaecbe1, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x7, 0x2}, @ssrr={0x89, 0xb, 0x23, [@multicast2, @multicast2]}, @end]}}}}}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x7fff}], 0x1f4, 0x0) 2.070727119s ago: executing program 4 (id=2405): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000007c0)={0x0, 0x8, 0x1, [0x797d, 0xb88, 0xfffffffffffffffa, 0x1, 0x5], [0x0, 0x86, 0x7, 0x8, 0x8, 0x4, 0x80000001, 0xeebd, 0x0, 0x30, 0x5, 0x2, 0x4, 0x1001, 0x9, 0x8, 0x8, 0x1fb, 0x4, 0xf, 0x7, 0x3, 0x6, 0x4, 0x1, 0x9, 0x3, 0x20002000000, 0x4, 0x42, 0x2, 0x0, 0x0, 0x4, 0x7fffffff, 0x1000, 0xa5, 0x5, 0x2, 0xffffffff, 0xc, 0x40, 0x25ba, 0x5, 0x101, 0xd, 0xfffffffffffffff8, 0xd13, 0xf1d, 0x7f, 0x9, 0x5, 0x4, 0x6, 0xffffffffffffffd0, 0x3, 0x4, 0x0, 0xd, 0x2b9b00000, 0x3, 0x0, 0xff, 0x197400000000000, 0x8, 0x2, 0xf00, 0x4, 0x756ad617, 0xb4, 0x8000, 0x5, 0x6c2, 0x0, 0x0, 0x1, 0x8, 0x8, 0x8001, 0x1, 0x0, 0x81, 0x4, 0x9, 0x400, 0x6, 0x2b4, 0x5, 0xd, 0x5, 0x80, 0xfd3, 0x0, 0x3, 0x5387, 0x4, 0x0, 0x401, 0x196, 0x401, 0x1, 0x4, 0x7fffffffffffffff, 0x1, 0x100, 0x0, 0x4, 0x4, 0x2b5b, 0x0, 0x5, 0x3, 0x2, 0xffffffffffffffff, 0x7fff, 0x100000001, 0x8, 0x8, 0xfffffffffffffff7, 0x3, 0x4]}) tkill(r1, 0x2d) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/103, 0x67}], 0x1, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) openat$cgroup_procs(r6, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) timer_create(0x5, 0x0, &(0x7f0000000040)) 1.982283185s ago: executing program 1 (id=2407): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x12, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) mount$bpf(0x0, 0x0, 0x0, 0x2008012, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xf}, 0x200, 0x0, 0x1, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000007e000000010000004000", @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r5}, 0x38) 1.511838822s ago: executing program 0 (id=2408): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1f, 0x3, 0x0) memfd_secret(0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000800) sendmsg$nl_route_sched(r0, 0x0, 0x20008010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 1.291464045s ago: executing program 0 (id=2410): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0xb37a, 0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 1.128134094s ago: executing program 1 (id=2411): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80214, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f000001a200)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$ptp(r2, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540), &(0x7f00000005c0)}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023893) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c0800034000000008080007406064001d080006"], 0xe4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@inlinecrypt}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000019200)=""/4096, 0x1000, 0x100, 0x0, 0x0) open_by_handle_at(r9, &(0x7f0000000000)=ANY=[@ANYRESDEC=r9], 0x71d37f48) 991.575452ms ago: executing program 3 (id=2412): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80214, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f000001a200)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$ptp(r2, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540), &(0x7f00000005c0)}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023893) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c0800034000000008080007406064001d080006"], 0xe4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@inlinecrypt}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000019200)=""/4096, 0x1000, 0x100, 0x0, 0x0) open_by_handle_at(r9, &(0x7f0000000000)=ANY=[@ANYRESDEC=r9], 0x71d37f48) 904.034567ms ago: executing program 2 (id=2413): r0 = request_key(&(0x7f0000000540)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000000400)='*\x00\x00\x00\x00\x00\x000\x00\xa5^y\xa9n\x00\xe3\xa3\x89\x90&)\bT\x91\x14\xba\x190\xb3\x00\x00:\xb2\xbe\x1d\x00', 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0x8, 0x0, 0x0, 0x1, 0x25}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0xfffffff9, 0x0, 0x0, 0x0, 0x4}, 0x94) 807.053813ms ago: executing program 2 (id=2414): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x106200, 0x10003, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) 801.043653ms ago: executing program 0 (id=2415): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 800.695503ms ago: executing program 2 (id=2416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0xf, 0x6, 0x3, 0x0, 0x2000000, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) 767.317995ms ago: executing program 2 (id=2417): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000000000000000000000000000000000000000000000000007b1ca52c685478b3fe00a7cf4d0d320e327ef8663e45c289487b701310c241d145c75243c91da5c33db6e4cc0c0800000000000000b8f5d7f54aa9476c94b073f6c94fc54d40f01fd8274144600a2e5a2d29d434b6c1ad950fc7373c7bc7f861fc18c6d7a160386b4e5d1d2bf22569ba23cd48a8a93952b2a0a049123a8efcbdbbd20376ebc2"]) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) sendmsg$netlink(r2, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0xa5dfdbff, 0x800000}, 0xc, &(0x7f0000000000)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="40000000030105000000000000000000020000002c000280140001800800010000000000080002007f00000106000340000300000c0002800500010095000000dd9666f8c7b2d8caccce0dc6e7bacef718a4bb556fc124760c97795eb6f458d9efd495ad15679be1dd01bd17e9273974912703faa00c0c3404c3d1191f47d787dda13014f997a587ddd86ead335b2dad523135d7acd88ce8ee3a35df1e3404b364a1c03d933061cb5b85c1a8a572b3b1b8a3e8a1"], 0x40}, 0x1, 0x0, 0x0, 0x4000085}, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xee1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) io_uring_enter(r4, 0x625, 0x4c1, 0xc1, 0x0, 0x0) 702.493179ms ago: executing program 0 (id=2418): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="000000000000024100", 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x200040c5}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 582.816306ms ago: executing program 2 (id=2419): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x2) fchdir(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M9vVEUcAPDve/2B8rMqKiDRKjE2/mhpQeXgRaOJB4waPaCealsIoVBDa2IJgWoMXkwMiZ7Vo4l/gTcvRj2ZmHjSuyEhykU0Hta8t+/Bdtul27rdLeznkyw7szNvZ2bnzb55M2wD6FqD2T9JxNaI+DUidlSjizMMVp+uXjk78feVsxNJVCqv/ZHkef+6cnaizFoet6WIDKUR6YdJUchis/NnToxPT0+dLuIjcyffGZmdP/PE8ZPjx6aOTZ0aO3To4IHRp58ae7Il7czruufczN7dL75x8aWJIxff/uHrrL5bi/TadqxJ/9KXBrOG/1nJ1ac9HLf/r+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8kNU4GbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFo9qSm+kRZ6+uvvbVhqMiCML/3yePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1DGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vi3UqnUtT+59kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O2ua8GZUPky4pFq/y9EXftLydL9yf5t1/cnR26L6an9I+VZsdSPP114pVH5zbd/fWT9v3nx+V+kfDFfBAbeqt2vnY0GO5dbG5Zx4bePGt7TrPX8709ez7+Pym3X98bn5k6PRvQnh/P4otfHrh9bxsv8WfuH9mUpZfvLI9P8Oy6K/r8vIvYW+2X3R8QDRd0fjIiHImJfw9ZHfP9c47SN0P+TNf2fRP35v+tc9bns//lVB3pOfPdNo/Kb6/+DeWioeCX//ltBsxVc+ycHAAAAN480X7lJ0uFr4TQdHq7+x96dsTmdnpmde+zozLunJqsrPAPRl5YrXTtq1kNHk4XiHavxsWKtuEw/UKwbf9oTeXx4YmZ6ssNth263pcH4z/ze0+naAetuuX20sWV+0AbceurHf7o4ev7ldlYGaCu/14butcL4T9tVD6D9XP+hey03/s/Xxe0FwK3J9R+6l/EP3cv4h+5VN/574pdO1QRoozX8nF9gwwReHV7NUZuilaVHukE+hCYCzf89iPUOvLkxqtFEoNPfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//PNXrGg==") 582.193626ms ago: executing program 2 (id=2420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r5, &(0x7f0000000240)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x610003d5) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000040)='./file0\x00', 0x40000000) inotify_add_watch(r6, &(0x7f0000001080)='./file0\x00', 0xe70002c1) fsmount(0xffffffffffffffff, 0x0, 0x82) semget(0x1, 0x4, 0x39c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) 505.56275ms ago: executing program 4 (id=2421): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28) syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200000000e1ff", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) setxattr$incfs_id(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x200) r3 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) close(0x3) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000a80)) r7 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000001bc0)=""/4109, 0xb24, 0x0, &(0x7f0000001a80)=""/261, 0x105}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000027c0), r8) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 425.174674ms ago: executing program 0 (id=2422): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1c14744, &(0x7f0000000080), 0x2, 0x4bb, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}]}, 0xb8}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9f08000000000000006beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9ab97800001022f987617c31850000000000000000000900008000", 0x3a}, 0x60) recvmsg(r1, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x101) semget$private(0x0, 0x3, 0x82) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffeb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000001100)='./file0\x00', 0x0, 0x989046, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff65}, [@printk={@lli, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6b}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000080)=0x100) socket$netlink(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x6c3, &(0x7f0000003940)={@broadcast, @empty, @void, {@x25={0x805, {0x2, 0x7c, 0xf, "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"}}}}, 0x0) 374.858708ms ago: executing program 4 (id=2423): r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000530401fffffffe00000000000500000a14000000eb03"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 87.109325ms ago: executing program 1 (id=2424): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000907000000000000000000000005001a"], 0x38}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004001400000000c910fe"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket(0x10, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000016c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x1, '\x00', r7, r8, 0x1, 0x1, 0x1}, 0x50) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 0s ago: executing program 3 (id=2425): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x2) fchdir(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffff7ffffffff, 0xffffffffffffffff, 0xb) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@numtail}, {@shortname_lower}, {@shortname_win95}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_win95}, {@shortname_mixed}, {@shortname_win95}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_win95}, {@numtail}, {@numtail}, {@fat=@discard}, {@nonumtail}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0x36b, &(0x7f0000000a00)="$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") syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a2471a, &(0x7f0000000340)={[{}], [{@smackfshat}, {@smackfstransmute={'smackfstransmute', 0x3d, 'bf\x00\x00\x00'}}, {@subj_role={'subj_role', 0x3d, '(@-'}}, {@fowner_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'usefree'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'nnonumtail=1'}}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") kernel console output (not intermixed with test programs): 5051] __dump_stack+0x1d/0x30 [ 83.395347][ T5051] dump_stack_lvl+0x95/0xd0 [ 83.395377][ T5051] dump_stack+0x15/0x1b [ 83.395407][ T5051] should_fail_ex+0x263/0x280 [ 83.395454][ T5051] should_fail+0xb/0x20 [ 83.395475][ T5051] should_fail_usercopy+0x1a/0x20 [ 83.395504][ T5051] _copy_from_user+0x1c/0xb0 [ 83.395541][ T5051] __sys_bpf+0x183/0x7e0 [ 83.395606][ T5051] __x64_sys_bpf+0x41/0x50 [ 83.395645][ T5051] x64_sys_call+0x10cb/0x3020 [ 83.395683][ T5051] do_syscall_64+0x12c/0x370 [ 83.395764][ T5051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.395785][ T5051] RIP: 0033:0x7f3dd6e9bf79 [ 83.395801][ T5051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.395850][ T5051] RSP: 002b:00007f3dd58ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.395875][ T5051] RAX: ffffffffffffffda RBX: 00007f3dd7115fa0 RCX: 00007f3dd6e9bf79 [ 83.395894][ T5051] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 0000000000000000 [ 83.395911][ T5051] RBP: 00007f3dd58ef090 R08: 0000000000000000 R09: 0000000000000000 [ 83.395927][ T5051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.395940][ T5051] R13: 00007f3dd7116038 R14: 00007f3dd7115fa0 R15: 00007ffe39574878 [ 83.396000][ T5051] [ 83.794128][ T5067] syzkaller0: entered promiscuous mode [ 83.809385][ T5069] loop4: detected capacity change from 0 to 1024 [ 83.817306][ T5067] syzkaller0: entered allmulticast mode [ 83.828697][ T5069] EXT4-fs: Ignoring removed orlov option [ 83.899036][ T5069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.073427][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.283598][ T28] audit: type=1400 audit(1771158621.563:1306): avc: denied { write } for pid=5088 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.325669][ T5103] loop3: detected capacity change from 0 to 512 [ 84.335507][ T5103] EXT4-fs: inline encryption not supported [ 84.712634][ T28] audit: type=1326 audit(1771158622.093:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5107 comm="syz.2.478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e9eacbf79 code=0x0 [ 84.820501][ T5103] EXT4-fs (loop3): 1 orphan inode deleted [ 84.828600][ T5103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.828791][ T5103] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.857083][ T1700] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 84.857112][ T1700] EXT4-fs error (device loop3): ext4_release_dquot:7039: comm kworker/u8:7: Failed to release dquot type 1 [ 85.029835][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.078372][ T5117] netlink: 'syz.3.480': attribute type 7 has an invalid length. [ 85.086266][ T5117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.480'. [ 85.095804][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 85.112908][ T28] audit: type=1400 audit(1771158622.493:1308): avc: denied { create } for pid=5116 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 85.136247][ T5117] loop3: detected capacity change from 0 to 512 [ 85.168224][ T5117] EXT4-fs: Ignoring removed orlov option [ 85.187603][ T5117] EXT4-fs: Ignoring removed i_version option [ 85.211547][ T28] audit: type=1400 audit(1771158622.543:1309): avc: denied { bind } for pid=5112 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.231853][ T28] audit: type=1400 audit(1771158622.543:1310): avc: denied { listen } for pid=5112 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.247206][ T5123] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 85.251917][ T5117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.268419][ T5123] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 85.271003][ T5117] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.284046][ T5117] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.480: bg 0: block 248: padding at end of block bitmap is not set [ 85.296488][ T5123] netlink: 2 bytes leftover after parsing attributes in process `syz.4.484'. [ 85.298618][ T28] audit: type=1400 audit(1771158622.543:1311): avc: denied { ioctl } for pid=5112 comm="syz.0.479" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 85.307793][ T5117] loop3: lost filesystem error report for type 5 error -117 [ 85.332537][ T28] audit: type=1400 audit(1771158622.563:1312): avc: denied { write } for pid=5118 comm="syz.4.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.359924][ T28] audit: type=1326 audit(1771158622.723:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.1.483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x0 [ 85.373810][ T5117] Quota error (device loop3): write_blk: dquota write failed [ 85.390256][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 85.390281][ C0] EXT4-fs (loop3): last error at time 1771158622: ext4_validate_block_bitmap:441 [ 85.423030][ T5117] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.480: Failed to acquire dquot type 1 [ 85.458325][ T5117] loop3: lost filesystem error report for type 5 error -117 [ 85.458904][ T5117] EXT4-fs (loop3): 1 truncate cleaned up [ 85.471776][ T5131] FAULT_INJECTION: forcing a failure. [ 85.471776][ T5131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.474577][ T5117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.485294][ T5131] CPU: 1 UID: 0 PID: 5131 Comm: syz.4.485 Not tainted syzkaller #0 PREEMPT(full) [ 85.485399][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 85.485434][ T5131] Call Trace: [ 85.485464][ T5131] [ 85.485493][ T5131] __dump_stack+0x1d/0x30 [ 85.485618][ T5131] dump_stack_lvl+0x95/0xd0 [ 85.485753][ T5131] dump_stack+0x15/0x1b [ 85.485819][ T5131] should_fail_ex+0x263/0x280 [ 85.485883][ T5131] should_fail+0xb/0x20 [ 85.485954][ T5131] should_fail_usercopy+0x1a/0x20 [ 85.486037][ T5131] _copy_from_user+0x1c/0xb0 [ 85.486176][ T5131] kstrtouint_from_user+0x69/0xf0 [ 85.486263][ T5131] proc_fail_nth_write+0x50/0x160 [ 85.486356][ T5131] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 85.486448][ T5131] vfs_write+0x269/0x9f0 [ 85.486535][ T5131] ? __rcu_read_unlock+0x4e/0x70 [ 85.486607][ T5131] ? __fget_files+0x184/0x1c0 [ 85.486688][ T5131] ? mutex_lock+0x57/0x90 [ 85.486801][ T5131] ksys_write+0xdc/0x1a0 [ 85.486987][ T5131] __x64_sys_write+0x40/0x50 [ 85.487083][ T5131] x64_sys_call+0x27e1/0x3020 [ 85.487180][ T5131] do_syscall_64+0x12c/0x370 [ 85.487333][ T5131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.487416][ T5131] RIP: 0033:0x7f3b1263c84e [ 85.487549][ T5131] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 85.487613][ T5131] RSP: 002b:00007f3b110d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.487694][ T5131] RAX: ffffffffffffffda RBX: 00007f3b110d76c0 RCX: 00007f3b1263c84e [ 85.487762][ T5131] RDX: 0000000000000001 RSI: 00007f3b110d70a0 RDI: 0000000000000004 [ 85.487843][ T5131] RBP: 00007f3b110d7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.487885][ T5131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.487927][ T5131] R13: 00007f3b128f6038 R14: 00007f3b128f5fa0 R15: 00007ffdf1653308 [ 85.488012][ T5131] [ 85.761076][ T5144] loop0: detected capacity change from 0 to 2048 [ 85.803160][ T5144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.833297][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.877383][ T5146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'. [ 85.913790][ T5144] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.491: bg 0: block 234: padding at end of block bitmap is not set [ 85.915111][ T5144] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1360 with error 28 [ 85.915142][ T5144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 85.915142][ T5144] [ 85.915235][ T5144] EXT4-fs (loop0): Total free blocks count 0 [ 85.915250][ T5144] EXT4-fs (loop0): Free/Dirty block details [ 85.915264][ T5144] EXT4-fs (loop0): free_blocks=0 [ 85.915279][ T5144] EXT4-fs (loop0): dirty_blocks=1360 [ 85.915293][ T5144] EXT4-fs (loop0): Block reservation details [ 85.915307][ T5144] EXT4-fs (loop0): i_reserved_data_blocks=85 [ 86.064479][ T5152] loop4: detected capacity change from 0 to 512 [ 86.080605][ T5152] EXT4-fs: inline encryption not supported [ 86.178724][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.249734][ T5152] EXT4-fs (loop4): 1 orphan inode deleted [ 86.250182][ T5152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.268855][ T3848] EXT4-fs error (device loop4): ext4_release_dquot:7039: comm kworker/u8:14: Failed to release dquot type 1 [ 86.268887][ T3848] loop4: lost filesystem error report for type 5 error -117 [ 86.358790][ T5180] loop0: detected capacity change from 0 to 2048 [ 86.381118][ T5180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.389290][ T5152] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.465388][ T5180] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.498: bg 0: block 234: padding at end of block bitmap is not set [ 86.478296][ T5180] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 630 with error 28 [ 86.478412][ T5180] EXT4-fs (loop0): This should not happen!! Data will be lost [ 86.478412][ T5180] [ 86.478429][ T5180] EXT4-fs (loop0): Total free blocks count 0 [ 86.478480][ T5180] EXT4-fs (loop0): Free/Dirty block details [ 86.478494][ T5180] EXT4-fs (loop0): free_blocks=0 [ 86.478510][ T5180] EXT4-fs (loop0): dirty_blocks=640 [ 86.478522][ T5180] EXT4-fs (loop0): Block reservation details [ 86.478532][ T5180] EXT4-fs (loop0): i_reserved_data_blocks=40 [ 86.513780][ T5188] loop3: detected capacity change from 0 to 2048 [ 86.564816][ T5188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.828953][ T5201] netlink: 124 bytes leftover after parsing attributes in process `syz.1.506'. [ 86.840157][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.849833][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.861239][ T5188] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.501: bg 0: block 234: padding at end of block bitmap is not set [ 86.879136][ T5188] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1472 with error 28 [ 86.892815][ T5188] EXT4-fs (loop3): This should not happen!! Data will be lost [ 86.892815][ T5188] [ 86.903042][ T5188] EXT4-fs (loop3): Total free blocks count 0 [ 86.914512][ T5188] EXT4-fs (loop3): Free/Dirty block details [ 86.921533][ T5188] EXT4-fs (loop3): free_blocks=0 [ 86.926733][ T5188] EXT4-fs (loop3): dirty_blocks=1488 [ 86.932121][ T5188] EXT4-fs (loop3): Block reservation details [ 86.938790][ T5188] EXT4-fs (loop3): i_reserved_data_blocks=93 [ 87.058166][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.347651][ T5236] netlink: 'syz.0.517': attribute type 1 has an invalid length. [ 87.362200][ T5236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.390340][ T5236] bond1: (slave veth3): Enslaving as an active interface with a down link [ 87.399662][ T5223] netlink: 399 bytes leftover after parsing attributes in process `syz.4.505'. [ 87.417280][ T5223] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 87.436100][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 87.458016][ T5242] bond1: (slave batadv1): making interface the new active one [ 87.481464][ T5242] batadv1: entered promiscuous mode [ 87.486987][ T5242] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 87.794510][ T5271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'. [ 87.845396][ T5273] netlink: 44 bytes leftover after parsing attributes in process `syz.1.530'. [ 88.164429][ T5282] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 88.195843][ T5282] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 88.206714][ T5282] netlink: 2 bytes leftover after parsing attributes in process `syz.4.534'. [ 88.243305][ T5288] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 88.259579][ T5288] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 88.273352][ T5288] netlink: 2 bytes leftover after parsing attributes in process `syz.0.533'. [ 88.286472][ T5289] @0Ù: renamed from dummy0 [ 88.450066][ T5308] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 88.475538][ T5308] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 88.588370][ T5312] loop4: detected capacity change from 0 to 2048 [ 88.620907][ T5312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.642703][ T5320] netlink: 'syz.0.544': attribute type 2 has an invalid length. [ 88.658634][ T5320] netlink: 'syz.0.544': attribute type 3 has an invalid length. [ 88.721820][ T5312] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.542: bg 0: block 234: padding at end of block bitmap is not set [ 88.739478][ T5312] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1136 with error 28 [ 88.752310][ T5312] EXT4-fs (loop4): This should not happen!! Data will be lost [ 88.752310][ T5312] [ 88.762103][ T5312] EXT4-fs (loop4): Total free blocks count 0 [ 88.768250][ T5312] EXT4-fs (loop4): Free/Dirty block details [ 88.774250][ T5312] EXT4-fs (loop4): free_blocks=0 [ 88.779319][ T5312] EXT4-fs (loop4): dirty_blocks=1152 [ 88.784621][ T5312] EXT4-fs (loop4): Block reservation details [ 88.790796][ T5312] EXT4-fs (loop4): i_reserved_data_blocks=72 [ 88.858307][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.939177][ T5326] FAULT_INJECTION: forcing a failure. [ 88.939177][ T5326] name failslab, interval 1, probability 0, space 0, times 0 [ 88.951872][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.4.545 Not tainted syzkaller #0 PREEMPT(full) [ 88.951936][ T5326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 88.951947][ T5326] Call Trace: [ 88.951955][ T5326] [ 88.951962][ T5326] __dump_stack+0x1d/0x30 [ 88.951986][ T5326] dump_stack_lvl+0x95/0xd0 [ 88.952006][ T5326] dump_stack+0x15/0x1b [ 88.952085][ T5326] should_fail_ex+0x263/0x280 [ 88.952127][ T5326] should_failslab+0x8c/0xb0 [ 88.952156][ T5326] kmem_cache_alloc_noprof+0x66/0x400 [ 88.952213][ T5326] ? radix_tree_node_alloc+0x8a/0x1f0 [ 88.952240][ T5326] radix_tree_node_alloc+0x8a/0x1f0 [ 88.952283][ T5326] idr_get_free+0x1fa/0x550 [ 88.952310][ T5326] idr_alloc_u32+0xf2/0x1a0 [ 88.952341][ T5326] idr_alloc_cyclic+0x7b/0x140 [ 88.952445][ T5326] bpf_map_alloc_id+0x41/0xf0 [ 88.952475][ T5326] map_create+0xcd5/0xda0 [ 88.952501][ T5326] ? security_bpf+0x2b/0x90 [ 88.952556][ T5326] __sys_bpf+0x5c8/0x7e0 [ 88.952601][ T5326] __x64_sys_bpf+0x41/0x50 [ 88.952630][ T5326] x64_sys_call+0x10cb/0x3020 [ 88.952659][ T5326] do_syscall_64+0x12c/0x370 [ 88.952732][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.952781][ T5326] RIP: 0033:0x7f3b1267bf79 [ 88.952795][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.952813][ T5326] RSP: 002b:00007f3b110b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.952831][ T5326] RAX: ffffffffffffffda RBX: 00007f3b128f6090 RCX: 00007f3b1267bf79 [ 88.952843][ T5326] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000000 [ 88.952854][ T5326] RBP: 00007f3b110b6090 R08: 0000000000000000 R09: 0000000000000000 [ 88.952865][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.952876][ T5326] R13: 00007f3b128f6128 R14: 00007f3b128f6090 R15: 00007ffdf1653308 [ 88.952959][ T5326] [ 89.235884][ T5337] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 89.235906][ T5337] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 89.265899][ T5338] loop3: detected capacity change from 0 to 512 [ 89.272683][ T5338] EXT4-fs: inline encryption not supported [ 89.311989][ T5338] EXT4-fs (loop3): 1 orphan inode deleted [ 89.312483][ T5338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.316754][ T5338] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.327246][ T3844] __quota_error: 11 callbacks suppressed [ 89.327266][ T3844] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 89.327290][ T3844] EXT4-fs error (device loop3): ext4_release_dquot:7039: comm kworker/u8:12: Failed to release dquot type 1 [ 89.490828][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.126392][ T5420] __nla_validate_parse: 4 callbacks suppressed [ 91.126486][ T5420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'. [ 91.148429][ T5420] netlink: 92 bytes leftover after parsing attributes in process `syz.2.573'. [ 91.370550][ T5440] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 91.382920][ T5440] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 91.394382][ T5440] netlink: 2 bytes leftover after parsing attributes in process `syz.3.580'. [ 91.619853][ T5452] loop0: detected capacity change from 0 to 2048 [ 91.647599][ T5452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.733422][ T5452] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.584: bg 0: block 234: padding at end of block bitmap is not set [ 91.755514][ T5452] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1178 with error 28 [ 91.778595][ T5452] EXT4-fs (loop0): This should not happen!! Data will be lost [ 91.778595][ T5452] [ 91.795377][ T5452] EXT4-fs (loop0): Total free blocks count 0 [ 91.805581][ T5452] EXT4-fs (loop0): Free/Dirty block details [ 91.822311][ T5452] EXT4-fs (loop0): free_blocks=0 [ 91.827369][ T5452] EXT4-fs (loop0): dirty_blocks=1184 [ 91.832806][ T5452] EXT4-fs (loop0): Block reservation details [ 91.839008][ T5452] EXT4-fs (loop0): i_reserved_data_blocks=74 [ 91.971414][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.100140][ T5481] loop4: detected capacity change from 0 to 512 [ 92.114730][ T5481] EXT4-fs: inline encryption not supported [ 92.277087][ T5487] loop0: detected capacity change from 0 to 2048 [ 92.303613][ T5487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.332815][ T5481] EXT4-fs (loop4): 1 orphan inode deleted [ 92.333475][ T5481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.345962][ T3842] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 92.345990][ T3842] EXT4-fs error (device loop4): ext4_release_dquot:7039: comm kworker/u8:11: Failed to release dquot type 1 [ 92.346058][ T3842] loop4: lost filesystem error report for type 5 error -117 [ 92.368471][ T5487] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.594: bg 0: block 234: padding at end of block bitmap is not set [ 92.369595][ T5487] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 266 with error 28 [ 92.370267][ T5487] EXT4-fs (loop0): This should not happen!! Data will be lost [ 92.370267][ T5487] [ 92.370298][ T5487] EXT4-fs (loop0): Total free blocks count 0 [ 92.370456][ T5487] EXT4-fs (loop0): Free/Dirty block details [ 92.370568][ T5487] EXT4-fs (loop0): free_blocks=0 [ 92.370639][ T5487] EXT4-fs (loop0): dirty_blocks=272 [ 92.370651][ T5487] EXT4-fs (loop0): Block reservation details [ 92.370868][ T5487] EXT4-fs (loop0): i_reserved_data_blocks=17 [ 92.396821][ T5481] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.603956][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.737784][ T5501] loop0: detected capacity change from 0 to 2048 [ 92.765380][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.828467][ T5501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.203866][ T28] audit: type=1400 audit(1771158630.583:1323): avc: denied { cpu } for pid=5511 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 93.244579][ T28] audit: type=1400 audit(1771158630.583:1324): avc: denied { create } for pid=5511 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 93.285083][ T28] audit: type=1400 audit(1771158630.603:1325): avc: denied { write } for pid=5511 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 93.285700][ T5512] netlink: 104 bytes leftover after parsing attributes in process `syz.3.601'. [ 93.360366][ T5515] loop3: detected capacity change from 0 to 2048 [ 93.393377][ T5515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.527337][ T5501] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.597: bg 0: block 234: padding at end of block bitmap is not set [ 93.589407][ T5501] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 93.604218][ T5515] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.602: bg 0: block 234: padding at end of block bitmap is not set [ 93.618909][ T5515] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1340 with error 28 [ 93.631458][ T5515] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.631458][ T5515] [ 93.641360][ T5515] EXT4-fs (loop3): Total free blocks count 0 [ 93.647654][ T5515] EXT4-fs (loop3): Free/Dirty block details [ 93.653578][ T5515] EXT4-fs (loop3): free_blocks=0 [ 93.663574][ T5501] EXT4-fs (loop0): This should not happen!! Data will be lost [ 93.663574][ T5501] [ 93.673737][ T5515] EXT4-fs (loop3): dirty_blocks=1344 [ 93.679211][ T5515] EXT4-fs (loop3): Block reservation details [ 93.682447][ T5501] EXT4-fs (loop0): Total free blocks count 0 [ 93.687411][ T5515] EXT4-fs (loop3): i_reserved_data_blocks=84 [ 93.691808][ T5501] EXT4-fs (loop0): Free/Dirty block details [ 93.706238][ T5501] EXT4-fs (loop0): free_blocks=0 [ 93.711397][ T5501] EXT4-fs (loop0): dirty_blocks=8192 [ 93.718156][ T5501] EXT4-fs (loop0): Block reservation details [ 93.724223][ T5501] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 93.901837][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.013851][ T3848] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 94.107678][ T5535] loop4: detected capacity change from 0 to 512 [ 94.170567][ T5535] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.208880][ T5535] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 94.240162][ T5535] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 94.287699][ T5535] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 94.298381][ T28] audit: type=1400 audit(1771158631.683:1326): avc: denied { read } for pid=5539 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 94.341896][ T5535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.355670][ T28] audit: type=1400 audit(1771158631.703:1327): avc: denied { name_connect } for pid=5539 comm="syz.3.607" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 94.459399][ T5549] loop3: detected capacity change from 0 to 512 [ 94.486675][ T5549] EXT4-fs: dax option not supported [ 94.677356][ T5557] hub 8-0:1.0: USB hub found [ 94.682139][ T5557] hub 8-0:1.0: 8 ports detected [ 94.700515][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 95.104036][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.174427][ T5562] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 95.191563][ T5562] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 95.200995][ T5562] netlink: 2 bytes leftover after parsing attributes in process `syz.3.615'. [ 95.230329][ T5564] loop4: detected capacity change from 0 to 128 [ 95.262983][ T28] audit: type=1400 audit(1771158632.643:1328): avc: denied { write } for pid=5563 comm="syz.4.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.332647][ T5569] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.339199][ T28] audit: type=1400 audit(1771158632.643:1329): avc: denied { read } for pid=5563 comm="syz.4.616" lport=64964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.360752][ T28] audit: type=1400 audit(1771158632.723:1330): avc: denied { read } for pid=5563 comm="syz.4.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.386998][ T5571] loop3: detected capacity change from 0 to 512 [ 95.417186][ T28] audit: type=1400 audit(1771158632.783:1331): avc: denied { read } for pid=5563 comm="syz.4.616" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 95.440278][ T5571] EXT4-fs: Ignoring removed orlov option [ 95.454517][ T28] audit: type=1400 audit(1771158632.783:1332): avc: denied { open } for pid=5563 comm="syz.4.616" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 95.479079][ T5571] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 95.505517][ T5571] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 95.523999][ T5571] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.619: corrupted in-inode xattr: e_value size too large [ 95.527519][ T28] audit: type=1400 audit(1771158632.783:1333): avc: denied { ioctl } for pid=5563 comm="syz.4.616" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 95.563943][ T5571] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.564182][ T5571] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.619: couldn't read orphan inode 15 (err -117) [ 95.573406][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 95.573423][ C1] EXT4-fs (loop3): initial error at time 1771158632: ext4_iget_extra_inode:5025: inode 15 [ 95.573473][ C1] EXT4-fs (loop3): last error at time 1771158632: ext4_iget_extra_inode:5025: inode 15 [ 95.611839][ T5571] loop3: lost filesystem error report for type 5 error -117 [ 95.612465][ T5571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.663649][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.727443][ T5594] netlink: 'syz.1.626': attribute type 4 has an invalid length. [ 95.833562][ T5598] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 95.853595][ T5588] loop3: detected capacity change from 0 to 128 [ 95.855119][ T5598] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 95.884066][ T5598] netlink: 2 bytes leftover after parsing attributes in process `syz.1.628'. [ 96.042909][ T5588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 96.097844][ T28] audit: type=1400 audit(1771158633.483:1334): avc: denied { create } for pid=5609 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 96.122101][ T5610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.632'. [ 96.415617][ T28] audit: type=1400 audit(1771158633.503:1335): avc: denied { ioctl } for pid=5609 comm="syz.4.632" path="socket:[12390]" dev="sockfs" ino=12390 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 96.845295][ T5638] loop0: detected capacity change from 0 to 512 [ 96.854293][ T5638] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 96.875605][ T5638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 96.883854][ T5638] EXT4-fs (loop0): orphan cleanup on readonly fs [ 96.895987][ T5638] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.640: bad orphan inode 267 [ 96.913888][ T5638] loop0: lost filesystem error report for type 5 error -117 [ 96.914979][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 96.928825][ C1] EXT4-fs (loop0): initial error at time 1771158634: ext4_orphan_get:1417 [ 96.937474][ C1] EXT4-fs (loop0): last error at time 1771158634: ext4_orphan_get:1417 [ 96.974709][ T5638] EXT4-fs (loop0): Remounting filesystem read-only [ 96.981891][ T5638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 96.995299][ T5642] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.640: dx entry: limit 0 != root limit 125 [ 97.007836][ T28] audit: type=1400 audit(1771158634.383:1336): avc: denied { setopt } for pid=5637 comm="syz.0.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.038089][ T5642] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.640: Corrupt directory, running e2fsck is recommended [ 97.218145][ T5651] loop3: detected capacity change from 0 to 128 [ 97.236801][ T5651] FAT-fs (loop3): Invalid FSINFO signature: 0x6d9058eb, 0x00000000 (sector = 6) [ 97.278887][ T5651] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 97.296619][ T5651] FAT-fs (loop3): Filesystem has been set read-only [ 97.562861][ T5679] tap0: tun_chr_ioctl cmd 1074025676 [ 97.571153][ T5679] tap0: owner set to 0 [ 97.620329][ T5682] loop3: detected capacity change from 0 to 764 [ 97.632919][ T5682] rock: directory entry would overflow storage [ 97.639940][ T5682] rock: sig=0x4654, size=5, remaining=4 [ 97.645311][ T5685] tap0: tun_chr_ioctl cmd 35108 [ 97.659552][ T5685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.654'. [ 97.775391][ T5685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'. [ 98.448040][ T5711] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 98.456379][ T5711] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 98.493313][ T5711] netlink: 2 bytes leftover after parsing attributes in process `syz.2.661'. [ 98.675317][ T5733] netdevsim netdevsim1 ì: renamed from netdevsim0 (while UP) [ 99.145792][ T3842] batadv1: left promiscuous mode [ 99.171507][ T5753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.675'. [ 99.194811][ T5762] loop4: detected capacity change from 0 to 2048 [ 99.514262][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 99.514280][ T28] audit: type=1400 audit(1771158636.893:1342): avc: denied { connect } for pid=5775 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.529165][ T5762] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.677: bg 0: block 234: padding at end of block bitmap is not set [ 99.565804][ T5762] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1210 with error 28 [ 99.605103][ T28] audit: type=1400 audit(1771158636.953:1343): avc: denied { getopt } for pid=5775 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.667960][ T5762] EXT4-fs (loop4): This should not happen!! Data will be lost [ 99.667960][ T5762] [ 99.670194][ T28] audit: type=1400 audit(1771158636.953:1344): avc: denied { listen } for pid=5775 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.695294][ T5762] EXT4-fs (loop4): Total free blocks count 0 [ 99.717737][ T5762] EXT4-fs (loop4): Free/Dirty block details [ 99.733850][ T5762] EXT4-fs (loop4): free_blocks=0 [ 99.766715][ T5762] EXT4-fs (loop4): dirty_blocks=1216 [ 99.771645][ T28] audit: type=1400 audit(1771158636.963:1345): avc: denied { read } for pid=5775 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.776852][ T5762] EXT4-fs (loop4): Block reservation details [ 99.837284][ T5762] EXT4-fs (loop4): i_reserved_data_blocks=76 [ 100.009111][ T3317] EXT4-fs unmount: 2 callbacks suppressed [ 100.009125][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.721577][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 100.795370][ T28] audit: type=1400 audit(1771158638.183:1346): avc: denied { sqpoll } for pid=5831 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 100.963191][ T28] audit: type=1400 audit(1771158638.343:1347): avc: denied { create } for pid=5846 comm="syz.1.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.988294][ T5847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.701'. [ 101.029058][ T5852] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.702'. [ 101.062716][ T5852] netlink: zone id is out of range [ 101.068194][ T5852] netlink: zone id is out of range [ 101.074039][ T5852] netlink: zone id is out of range [ 101.079334][ T5852] netlink: zone id is out of range [ 101.084454][ T5852] netlink: del zone limit has 8 unknown bytes [ 101.595756][ T28] audit: type=1326 audit(1771158638.983:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5881 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05ccbf79 code=0x7ffc0000 [ 101.625855][ T5885] 9pnet_fd: Insufficient options for proto=fd [ 101.765039][ T28] audit: type=1326 audit(1771158638.983:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5881 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05ccbf79 code=0x7ffc0000 [ 101.789291][ T28] audit: type=1326 audit(1771158638.983:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5881 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05ccbf79 code=0x7ffc0000 [ 101.814769][ T28] audit: type=1326 audit(1771158638.983:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5881 comm="syz.3.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05ccbf79 code=0x7ffc0000 [ 102.001134][ T5909] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 102.009691][ T5909] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 102.227919][ T5921] loop0: detected capacity change from 0 to 128 [ 102.460955][ T5921] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.554445][ T5921] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.684026][ T5921] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.731: No space for directory leaf checksum. Please run e2fsck -D. [ 102.760117][ T5921] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.731: Directory block failed checksum [ 102.882273][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.957493][ T5943] xt_TPROXY: Can be used only with -p tcp or -p udp [ 103.838735][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 103.852662][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 103.863730][ T5977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.748'. [ 103.937360][ T5985] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 103.960994][ T5985] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 103.978386][ T5987] netlink: 2 bytes leftover after parsing attributes in process `syz.4.752'. [ 104.348797][ T6020] loop0: detected capacity change from 0 to 512 [ 104.358147][ T6020] EXT4-fs: dax option not supported [ 104.510513][ T6031] loop0: detected capacity change from 0 to 512 [ 104.878703][ T28] kauditd_printk_skb: 168 callbacks suppressed [ 104.878729][ T28] audit: type=1400 audit(1771158642.263:1518): avc: denied { mounton } for pid=6035 comm="syz.1.766" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.146293][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.769'. [ 105.149774][ T6051] xt_l2tp: wrong L2TP version: 0 [ 105.320169][ T6063] loop4: detected capacity change from 0 to 512 [ 105.460935][ T6063] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.502954][ T6063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.067255][ T6093] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 106.102019][ T6093] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 106.115723][ T6093] netlink: 2 bytes leftover after parsing attributes in process `syz.0.784'. [ 106.280545][ T6106] netlink: 'syz.2.788': attribute type 10 has an invalid length. [ 106.292686][ T6106] team0: Port device netdevsim1 added [ 106.485652][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.698682][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.714395][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.925886][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.073004][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.161674][ T6145] netlink: 'syz.4.802': attribute type 4 has an invalid length. [ 107.282159][ T6153] loop4: detected capacity change from 0 to 2048 [ 107.299381][ T6153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.528528][ T6153] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.805: bg 0: block 234: padding at end of block bitmap is not set [ 107.749921][ T6153] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 107.836616][ T6153] EXT4-fs (loop4): This should not happen!! Data will be lost [ 107.836616][ T6153] [ 107.947400][ T6153] EXT4-fs (loop4): Total free blocks count 0 [ 107.985600][ T6153] EXT4-fs (loop4): Free/Dirty block details [ 108.034577][ T6153] EXT4-fs (loop4): free_blocks=0 [ 108.039625][ T6153] EXT4-fs (loop4): dirty_blocks=3328 [ 108.045086][ T6153] EXT4-fs (loop4): Block reservation details [ 108.051125][ T6153] EXT4-fs (loop4): i_reserved_data_blocks=208 [ 108.083237][ T28] audit: type=1326 audit(1771158645.463:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05ccbf79 code=0x7ffc0000 [ 108.129675][ T28] audit: type=1326 audit(1771158645.493:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2c05ccbf79 code=0x7ffc0000 [ 108.157954][ T28] audit: type=1326 audit(1771158645.493:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2c05ccbce2 code=0x7ffc0000 [ 108.181733][ T28] audit: type=1326 audit(1771158645.493:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2c05ccbce2 code=0x7ffc0000 [ 108.183169][ T3848] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 3074 with max blocks 250 with error 28 [ 108.237220][ T28] audit: type=1326 audit(1771158645.493:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05ccbf79 code=0x7ffc0000 [ 108.260931][ T28] audit: type=1326 audit(1771158645.493:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05ccbf79 code=0x7ffc0000 [ 108.290985][ T28] audit: type=1326 audit(1771158645.503:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2c05ccbf79 code=0x7ffc0000 [ 108.325674][ T28] audit: type=1326 audit(1771158645.503:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05ccbf79 code=0x7ffc0000 [ 108.359107][ T6192] loop4: detected capacity change from 0 to 512 [ 108.436323][ T6192] loop4: detected capacity change from 0 to 2048 [ 108.449581][ T28] audit: type=1326 audit(1771158645.503:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz.3.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c05ccbf79 code=0x7ffc0000 [ 108.483210][ T6206] netlink: 2 bytes leftover after parsing attributes in process `syz.1.821'. [ 108.501261][ T3306] GPT:first_usable_lbas don't match. [ 108.506811][ T3306] GPT:34 != 290 [ 108.510345][ T3306] GPT: Use GNU Parted to correct GPT errors. [ 108.537280][ T3306] loop4: p1 p2 p3 [ 108.546485][ T6192] GPT:first_usable_lbas don't match. [ 108.552683][ T6192] GPT:34 != 290 [ 108.556509][ T6192] GPT: Use GNU Parted to correct GPT errors. [ 108.562647][ T6192] loop4: p1 p2 p3 [ 108.620351][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 108.736483][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 108.750115][ T4556] udevd[4556]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 108.760447][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 108.798868][ T6222] loop4: detected capacity change from 0 to 2048 [ 108.844814][ T6222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.880307][ T3844] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:12: bg 0: block 234: padding at end of block bitmap is not set [ 108.905661][ T3844] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 376 with error 28 [ 108.934437][ T3844] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.934437][ T3844] [ 108.982860][ T3844] EXT4-fs (loop4): Total free blocks count 0 [ 109.004346][ T3844] EXT4-fs (loop4): Free/Dirty block details [ 109.022784][ T3844] EXT4-fs (loop4): free_blocks=0 [ 109.033571][ T3844] EXT4-fs (loop4): dirty_blocks=384 [ 109.044735][ T3844] EXT4-fs (loop4): Block reservation details [ 109.059012][ T3844] EXT4-fs (loop4): i_reserved_data_blocks=24 [ 109.118427][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.190827][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.830'. [ 109.242048][ T6246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6246 comm=syz.4.830 [ 109.350475][ T6256] FAULT_INJECTION: forcing a failure. [ 109.350475][ T6256] name failslab, interval 1, probability 0, space 0, times 0 [ 109.364373][ T6256] CPU: 1 UID: 0 PID: 6256 Comm: syz.4.834 Not tainted syzkaller #0 PREEMPT(full) [ 109.364446][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.364475][ T6256] Call Trace: [ 109.364483][ T6256] [ 109.364493][ T6256] __dump_stack+0x1d/0x30 [ 109.364527][ T6256] dump_stack_lvl+0x95/0xd0 [ 109.364608][ T6256] dump_stack+0x15/0x1b [ 109.364630][ T6256] should_fail_ex+0x263/0x280 [ 109.364748][ T6256] should_failslab+0x8c/0xb0 [ 109.364783][ T6256] kmem_cache_alloc_noprof+0x66/0x400 [ 109.364830][ T6256] ? skb_clone+0x151/0x1f0 [ 109.364904][ T6256] skb_clone+0x151/0x1f0 [ 109.364935][ T6256] netlink_trim+0x101/0x1c0 [ 109.364971][ T6256] netlink_broadcast_filtered+0x5c/0xd10 [ 109.365000][ T6256] ? gnet_stats_finish_copy+0x24b/0x2b0 [ 109.365070][ T6256] ? tc_fill_qdisc+0x7f6/0x990 [ 109.365089][ T6256] ? tc_fill_qdisc+0x960/0x990 [ 109.365134][ T6256] nlmsg_notify+0xcf/0x170 [ 109.365192][ T6256] rtnetlink_send+0x48/0x60 [ 109.365257][ T6256] qdisc_notify+0x244/0x280 [ 109.365299][ T6256] tc_modify_qdisc+0x1329/0x14f0 [ 109.365338][ T6256] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 109.365435][ T6256] rtnetlink_rcv_msg+0x6a7/0x720 [ 109.365473][ T6256] ? avc_has_perm_noaudit+0xab/0x130 [ 109.365546][ T6256] netlink_rcv_skb+0x123/0x220 [ 109.365578][ T6256] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.365624][ T6256] rtnetlink_rcv+0x1c/0x30 [ 109.365651][ T6256] netlink_unicast+0x5c0/0x690 [ 109.365698][ T6256] netlink_sendmsg+0x5c8/0x6f0 [ 109.365740][ T6256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.365770][ T6256] ____sys_sendmsg+0x5af/0x600 [ 109.365865][ T6256] ___sys_sendmsg+0x195/0x1e0 [ 109.365903][ T6256] __x64_sys_sendmsg+0xd4/0x160 [ 109.365940][ T6256] x64_sys_call+0x194c/0x3020 [ 109.365990][ T6256] do_syscall_64+0x12c/0x370 [ 109.366028][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.366056][ T6256] RIP: 0033:0x7f3b1267bf79 [ 109.366089][ T6256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.366107][ T6256] RSP: 002b:00007f3b110d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.366126][ T6256] RAX: ffffffffffffffda RBX: 00007f3b128f5fa0 RCX: 00007f3b1267bf79 [ 109.366142][ T6256] RDX: 0000000000044080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 109.366210][ T6256] RBP: 00007f3b110d7090 R08: 0000000000000000 R09: 0000000000000000 [ 109.366226][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.366242][ T6256] R13: 00007f3b128f6038 R14: 00007f3b128f5fa0 R15: 00007ffdf1653308 [ 109.366266][ T6256] [ 109.649708][ T6210] syz.0.823 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 109.681353][ T6210] CPU: 1 UID: 0 PID: 6210 Comm: syz.0.823 Not tainted syzkaller #0 PREEMPT(full) [ 109.681385][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.681400][ T6210] Call Trace: [ 109.681407][ T6210] [ 109.681415][ T6210] __dump_stack+0x1d/0x30 [ 109.681458][ T6210] dump_stack_lvl+0x95/0xd0 [ 109.681570][ T6210] dump_stack+0x15/0x1b [ 109.681616][ T6210] dump_header+0x80/0x240 [ 109.681643][ T6210] oom_kill_process+0x295/0x350 [ 109.681705][ T6210] out_of_memory+0x97d/0xb80 [ 109.681771][ T6210] try_charge_memcg+0x62e/0xa10 [ 109.681851][ T6210] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 109.681930][ T6210] __swap_cache_prepare_and_add+0x386/0x530 [ 109.682030][ T6210] swap_cache_alloc_folio+0xa2/0x120 [ 109.682062][ T6210] swap_cluster_readahead+0x26e/0x3d0 [ 109.682098][ T6210] swapin_readahead+0xde/0x840 [ 109.682171][ T6210] ? _raw_spin_unlock+0x9/0x30 [ 109.682196][ T6210] ? swap_put_entries_cluster+0x385/0x3a0 [ 109.682228][ T6210] ? swap_put_entries_cluster+0x161/0x3a0 [ 109.682334][ T6210] ? __rcu_read_unlock+0x4e/0x70 [ 109.682357][ T6210] ? swap_cache_get_folio+0x26f/0x280 [ 109.682387][ T6210] do_swap_page+0x309/0x2210 [ 109.682442][ T6210] ? css_rstat_updated+0xbb/0x280 [ 109.682480][ T6210] ? __rcu_read_lock+0x36/0x50 [ 109.682501][ T6210] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 109.682539][ T6210] handle_mm_fault+0xb40/0x3020 [ 109.682595][ T6210] ? vma_start_read+0x1c7/0x2c0 [ 109.682624][ T6210] do_user_addr_fault+0x62f/0x1050 [ 109.682667][ T6210] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 109.682712][ T6210] ? trace_page_fault_user+0x1f/0xe0 [ 109.682815][ T6210] exc_page_fault+0x62/0xa0 [ 109.682848][ T6210] asm_exc_page_fault+0x26/0x30 [ 109.682872][ T6210] RIP: 0033:0x7f3dd6d69a3e [ 109.682955][ T6210] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 76 e3 3a 00 85 c0 0f 8e 53 fd ff ff 6d 87 fe ff 49 39 c4 73 88 48 8d 1d 51 c5 3a 00 83 3d 56 e3 3a [ 109.682973][ T6210] RSP: 002b:00007ffe395749e0 EFLAGS: 00010202 [ 109.683037][ T6210] RAX: 0000000000000001 RBX: 00007f3dd7117da0 RCX: 0000555574aee808 [ 109.683055][ T6210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.683070][ T6210] RBP: 00007f3dd7117da0 R08: 0000000000000000 R09: 0000000000000000 [ 109.683144][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001ab36 [ 109.683216][ T6210] R13: 00007f3dd711609c R14: 000000000001a878 R15: 00007f3dd7116090 [ 109.683236][ T6210] [ 109.683263][ T6210] memory: usage 307200kB, limit 307200kB, failcnt 387 [ 109.907396][ T6262] loop4: detected capacity change from 0 to 1024 [ 109.919231][ T6210] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 109.933111][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 109.933157][ T28] audit: type=1400 audit(1771158647.313:1546): avc: denied { mounton } for pid=6261 comm="syz.4.837" path="/156/file0" dev="tmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.938297][ T6210] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 109.938315][ T6210] Memory cgroup stats for /syz0 [ 109.955070][ T6262] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 109.996666][ T6210] : [ 109.998353][ T6210] cache 0 [ 110.003919][ T6210] rss 0 [ 110.006802][ T6262] EXT4-fs (loop4): group descriptors corrupted! [ 110.014226][ T6210] shmem 0 [ 110.027636][ T6210] mapped_file 0 [ 110.031152][ T6210] dirty 0 [ 110.034108][ T6210] writeback 0 [ 110.043408][ T28] audit: type=1400 audit(1771158647.423:1547): avc: denied { setattr } for pid=6261 comm="syz.4.837" name="NETLINK" dev="sockfs" ino=13541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.073431][ T6210] workingset_refault_anon 24 [ 110.080124][ T6210] workingset_refault_file 163 [ 110.093278][ T6210] swap 196608 [ 110.098102][ T6210] swapcached 16936960 [ 110.106296][ T6266] netlink: 64 bytes leftover after parsing attributes in process `syz.4.837'. [ 110.113152][ T6210] pgpgin 81403 [ 110.118820][ T6210] pgpgout 81402 [ 110.122395][ T6210] pgfault 94111 [ 110.134994][ T6210] pgmajfault 26 [ 110.138646][ T6210] inactive_anon 0 [ 110.142441][ T6210] active_anon 4096 [ 110.152590][ T6210] inactive_file 0 [ 110.167301][ T6210] active_file 0 [ 110.171173][ T6210] unevictable 0 [ 110.174753][ T6210] hierarchical_memory_limit 314572800 [ 110.194891][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.839'. [ 110.204922][ T6210] hierarchical_memsw_limit 9223372036854771712 [ 110.211392][ T6210] total_cache 0 [ 110.214926][ T6210] total_rss 0 [ 110.215244][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.839'. [ 110.225810][ T6210] total_shmem 0 [ 110.230889][ T6210] total_mapped_file 0 [ 110.235011][ T6210] total_dirty 0 [ 110.235759][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.839'. [ 110.247419][ T6210] total_writeback 0 [ 110.253009][ T6210] total_workingset_refault_anon 24 [ 110.258240][ T6210] total_workingset_refault_file 163 [ 110.263534][ T6210] total_swap 196608 [ 110.264287][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.839'. [ 110.268126][ T6210] total_swapcached 16936960 [ 110.281164][ T6210] total_pgpgin 81403 [ 110.281430][ T28] audit: type=1400 audit(1771158647.663:1548): avc: denied { setopt } for pid=6268 comm="syz.4.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.316286][ T6210] total_pgpgout 81402 [ 110.320463][ T6210] total_pgfault 94111 [ 110.330173][ T6210] total_pgmajfault 26 [ 110.334236][ T6210] total_inactive_anon 0 [ 110.338629][ T6210] total_active_anon 4096 [ 110.342907][ T6210] total_inactive_file 0 [ 110.347394][ T6210] total_active_file 0 [ 110.351522][ T6210] total_unevictable 0 [ 110.356099][ T6210] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.823,pid=6210,uid=0 [ 110.371110][ T6210] Memory cgroup out of memory: Killed process 6210 (syz.0.823) total-vm:96204kB, anon-rss:1228kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 110.395192][ T6211] syz.0.823 (6211) used greatest stack depth: 7464 bytes left [ 110.533625][ T28] audit: type=1400 audit(1771158647.903:1549): avc: denied { listen } for pid=6279 comm="syz.0.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.541745][ T6291] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 110.590737][ T28] audit: type=1400 audit(1771158647.903:1550): avc: denied { setopt } for pid=6279 comm="syz.0.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.610919][ T6291] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 110.636793][ T6297] loop0: detected capacity change from 0 to 512 [ 110.683514][ T6297] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.714409][ T6297] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 110.748980][ T6297] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 110.779905][ T6297] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 110.813072][ T6297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.020944][ T28] audit: type=1326 audit(1771158648.403:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.4.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1267bf79 code=0x7fc00000 [ 111.164514][ T6305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.851'. [ 111.182959][ T6307] netlink: 'syz.1.853': attribute type 10 has an invalid length. [ 111.221427][ T6307] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 111.259928][ T6307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.276255][ T28] audit: type=1400 audit(1771158648.663:1552): avc: denied { execute } for pid=6312 comm="syz.3.856" path="/174/memory.events" dev="tmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.301287][ T6313] ref_ctr increment failed for inode: 0x3a7 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104998d80 [ 111.316636][ T6307] bond_slave_0: entered promiscuous mode [ 111.322341][ T6307] bond_slave_1: entered promiscuous mode [ 111.328039][ T6307] syz_tun: entered promiscuous mode [ 111.333753][ T6307] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.341404][ T6307] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 111.351272][ T6307] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 111.359504][ T6307] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 111.378402][ T6312] uprobe: syz.3.856:6312 failed to unregister, leaking uprobe [ 111.395421][ T6080] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 111.428048][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.694094][ T6347] hub 8-0:1.0: USB hub found [ 111.694268][ T6347] hub 8-0:1.0: 8 ports detected [ 111.753535][ T6345] loop0: detected capacity change from 0 to 512 [ 111.866621][ T6345] EXT4-fs: inline encryption not supported [ 111.929604][ T6345] EXT4-fs (loop0): 1 orphan inode deleted [ 111.972034][ T6345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.973210][ T6345] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.153096][ T3848] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 112.187041][ T3848] EXT4-fs error (device loop0): ext4_release_dquot:7039: comm kworker/u8:14: Failed to release dquot type 1 [ 112.370182][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.483323][ T6369] loop0: detected capacity change from 0 to 2048 [ 112.523672][ T6369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.550003][ T6385] netlink: 2 bytes leftover after parsing attributes in process `syz.1.875'. [ 112.639182][ T6369] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.871: bg 0: block 234: padding at end of block bitmap is not set [ 112.687854][ T6369] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 990 with error 28 [ 112.702266][ T6369] EXT4-fs (loop0): This should not happen!! Data will be lost [ 112.702266][ T6369] [ 112.712379][ T6369] EXT4-fs (loop0): Total free blocks count 0 [ 112.719719][ T6369] EXT4-fs (loop0): Free/Dirty block details [ 112.726066][ T6369] EXT4-fs (loop0): free_blocks=0 [ 112.731101][ T6369] EXT4-fs (loop0): dirty_blocks=992 [ 112.736715][ T6369] EXT4-fs (loop0): Block reservation details [ 112.742708][ T6369] EXT4-fs (loop0): i_reserved_data_blocks=62 [ 112.822853][ T6402] xt_CT: You must specify a L4 protocol and not use inversions on it [ 113.013402][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.093020][ T6413] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 113.101763][ T6413] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 113.209632][ T28] audit: type=1400 audit(1771158650.583:1553): avc: denied { ioctl } for pid=6421 comm="syz.1.888" path="socket:[14735]" dev="sockfs" ino=14735 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 113.241412][ T6419] pim6reg1: entered promiscuous mode [ 113.247042][ T6419] pim6reg1: entered allmulticast mode [ 113.256169][ T6419] loop0: detected capacity change from 0 to 128 [ 113.275538][ T6419] FAT-fs (loop0): Invalid FSINFO signature: 0x6d9058eb, 0x00000000 (sector = 6) [ 113.310325][ T6419] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 113.318940][ T6419] FAT-fs (loop0): Filesystem has been set read-only [ 113.341732][ T6427] netlink: 2 bytes leftover after parsing attributes in process `syz.1.890'. [ 113.429136][ T3409] kernel write not supported for file bpf-prog (pid: 3409 comm: kworker/1:3) [ 114.010540][ T6464] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 114.019279][ T6464] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 114.029839][ T6464] netlink: 2 bytes leftover after parsing attributes in process `syz.0.903'. [ 114.278943][ T6472] loop0: detected capacity change from 0 to 512 [ 114.305236][ T6472] EXT4-fs: inline encryption not supported [ 114.412682][ T6472] EXT4-fs (loop0): 1 orphan inode deleted [ 114.413104][ T6472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.419809][ T6472] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.434447][ T3848] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 114.434557][ T3848] EXT4-fs error (device loop0): ext4_release_dquot:7039: comm kworker/u8:14: Failed to release dquot type 1 [ 115.071360][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.148287][ T6501] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 115.157034][ T6501] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 115.167602][ T6501] netlink: 2 bytes leftover after parsing attributes in process `syz.2.915'. [ 116.110025][ T6543] netlink: 'syz.2.930': attribute type 4 has an invalid length. [ 116.672080][ T6570] IPVS: length: 61 != 8 [ 116.705670][ T6572] loop0: detected capacity change from 0 to 512 [ 116.714430][ T6572] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 117.040358][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 117.040377][ T28] audit: type=1400 audit(1771158654.423:1555): avc: denied { connect } for pid=6599 comm="syz.2.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.585039][ T28] audit: type=1400 audit(1771158654.423:1556): avc: denied { read } for pid=6599 comm="syz.2.947" path="socket:[14976]" dev="sockfs" ino=14976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.624190][ T28] audit: type=1400 audit(1771158654.423:1557): avc: denied { ioctl } for pid=6599 comm="syz.2.947" path="socket:[14976]" dev="sockfs" ino=14976 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.690635][ T6612] loop0: detected capacity change from 0 to 512 [ 117.712789][ T6612] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.730102][ T6612] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 117.740503][ T6612] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 117.751407][ T6612] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 117.765770][ T6612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.826912][ T6609] loop4: detected capacity change from 0 to 1024 [ 117.867540][ T6609] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.930127][ T6609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 117.945017][ T6609] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.979822][ T6609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 118.240325][ T6631] loop4: detected capacity change from 0 to 764 [ 118.277366][ T6631] rock: directory entry would overflow storage [ 118.283771][ T6631] rock: sig=0x4654, size=5, remaining=4 [ 118.465823][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.551134][ T6646] loop0: detected capacity change from 0 to 1024 [ 118.579529][ T6646] EXT4-fs: Ignoring removed nobh option [ 118.602813][ T6646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.630562][ T6646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.648893][ T28] audit: type=1400 audit(1771158656.033:1558): avc: denied { map } for pid=6645 comm="syz.0.962" path="/179/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.676859][ T6646] FAULT_INJECTION: forcing a failure. [ 118.676859][ T6646] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 118.691284][ T6646] CPU: 0 UID: 0 PID: 6646 Comm: syz.0.962 Not tainted syzkaller #0 PREEMPT(full) [ 118.691326][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.691340][ T6646] Call Trace: [ 118.691347][ T6646] [ 118.691357][ T6646] __dump_stack+0x1d/0x30 [ 118.691391][ T6646] dump_stack_lvl+0x95/0xd0 [ 118.691432][ T6646] dump_stack+0x15/0x1b [ 118.691507][ T6646] should_fail_ex+0x263/0x280 [ 118.691538][ T6646] should_fail_alloc_page+0xf2/0x100 [ 118.691754][ T6646] __alloc_frozen_pages_noprof+0x108/0x360 [ 118.691847][ T6646] alloc_pages_mpol+0xb3/0x260 [ 118.691874][ T6646] alloc_migration_target_by_mpol+0x11b/0x2a0 [ 118.691906][ T6646] migrate_pages_batch+0x399/0x2400 [ 118.691979][ T6646] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 118.692014][ T6646] ? __walk_page_range+0x324/0x340 [ 118.692092][ T6646] ? mas_ascend+0x1d7/0x540 [ 118.692111][ T6646] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 118.692141][ T6646] ? find_vma+0x6c/0xa0 [ 118.692201][ T6646] migrate_pages+0x1031/0x18c0 [ 118.692229][ T6646] ? mas_next_slot+0x69b/0x6f0 [ 118.692325][ T6646] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 118.692366][ T6646] __se_sys_mbind+0xc9c/0xde0 [ 118.692396][ T6646] __x64_sys_mbind+0x78/0x90 [ 118.692455][ T6646] x64_sys_call+0x2b72/0x3020 [ 118.692557][ T6646] do_syscall_64+0x12c/0x370 [ 118.692598][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.692625][ T6646] RIP: 0033:0x7f3dd6e9bf79 [ 118.692673][ T6646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.692692][ T6646] RSP: 002b:00007f3dd58ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 118.692729][ T6646] RAX: ffffffffffffffda RBX: 00007f3dd7115fa0 RCX: 00007f3dd6e9bf79 [ 118.692747][ T6646] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 118.692764][ T6646] RBP: 00007f3dd58ef090 R08: 0000000000000000 R09: 0000000000000002 [ 118.692780][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.692861][ T6646] R13: 00007f3dd7116038 R14: 00007f3dd7115fa0 R15: 00007ffe39574878 [ 118.692906][ T6646] [ 118.693050][ T28] audit: type=1400 audit(1771158656.033:1559): avc: denied { execute } for pid=6645 comm="syz.0.962" path="/179/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.032338][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.083616][ T28] audit: type=1400 audit(1771158656.463:1560): avc: denied { map } for pid=6666 comm="syz.0.966" path="socket:[14102]" dev="sockfs" ino=14102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.264791][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.966'. [ 119.709717][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.966'. [ 120.044494][ T6712] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 120.064749][ T6712] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 120.085686][ T6716] netlink: 2 bytes leftover after parsing attributes in process `syz.2.983'. [ 120.095460][ T6712] netlink: 2 bytes leftover after parsing attributes in process `syz.0.981'. [ 120.184972][ T28] audit: type=1400 audit(1771158657.563:1561): avc: denied { create } for pid=6720 comm="syz.3.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 120.235406][ T6725] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 120.256029][ T6725] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 120.264932][ T28] audit: type=1400 audit(1771158657.563:1562): avc: denied { write } for pid=6720 comm="syz.3.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 120.289425][ T6730] loop0: detected capacity change from 0 to 512 [ 120.324998][ T6730] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.344518][ T6730] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 120.366644][ T6730] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 120.403777][ T6730] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006] [ 120.413599][ T6730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.480332][ T28] audit: type=1400 audit(1771158657.863:1563): avc: denied { ioctl } for pid=6746 comm="syz.4.992" path="socket:[15232]" dev="sockfs" ino=15232 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.517026][ T6749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.993'. [ 120.526061][ T6749] netlink: 32 bytes leftover after parsing attributes in process `syz.2.993'. [ 120.576324][ T6756] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 120.585218][ T6756] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 120.594072][ T6756] netlink: 2 bytes leftover after parsing attributes in process `syz.3.997'. [ 120.642171][ T6759] netlink: 2 bytes leftover after parsing attributes in process `syz.4.998'. [ 120.722177][ T6772] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1000'. [ 120.909207][ T6805] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1009'. [ 121.206181][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.808993][ T6859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=6859 comm=syz.3.1024 [ 121.824214][ T6859] netlink: 'syz.3.1024': attribute type 39 has an invalid length. [ 122.016549][ T28] audit: type=1400 audit(1771158659.403:1564): avc: denied { bind } for pid=6857 comm="syz.4.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.559861][ T6875] loop0: detected capacity change from 0 to 1764 [ 122.605814][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'. [ 122.879359][ T6897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1041'. [ 122.973090][ T6901] hub 8-0:1.0: USB hub found [ 122.977855][ T6901] hub 8-0:1.0: 8 ports detected [ 123.341967][ T6909] bpf: Bad value for 'gid' [ 123.425239][ T6909] IPVS: length: 24 != 16106127384 [ 123.482983][ T6918] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 123.814409][ T28] audit: type=1400 audit(1771158661.193:1565): avc: denied { bind } for pid=6942 comm="syz.0.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.865060][ T28] audit: type=1400 audit(1771158661.193:1566): avc: denied { write } for pid=6942 comm="syz.0.1056" path="socket:[15432]" dev="sockfs" ino=15432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.973288][ T6950] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1058'. [ 124.284528][ T6971] loop0: detected capacity change from 0 to 764 [ 124.319637][ T6971] rock: directory entry would overflow storage [ 124.335599][ T6971] rock: sig=0x4654, size=5, remaining=4 [ 125.195691][ T7007] xt_hashlimit: size too large, truncated to 1048576 [ 125.730813][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1097'. [ 125.766058][ T7059] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1097'. [ 126.382953][ T28] audit: type=1400 audit(1771158663.763:1567): avc: denied { bind } for pid=7087 comm="syz.2.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.384167][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'. [ 126.444887][ T7088] team1: entered promiscuous mode [ 126.450212][ T7088] team1: entered allmulticast mode [ 126.465220][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'. [ 126.483350][ T7094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=784 sclass=netlink_route_socket pid=7094 comm=syz.2.1107 [ 126.496088][ T7088] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 126.511217][ T7088] team2: entered promiscuous mode [ 126.516450][ T7088] team2: entered allmulticast mode [ 126.558336][ T28] audit: type=1400 audit(1771158663.943:1568): avc: denied { ioctl } for pid=7100 comm="syz.4.1112" path="socket:[17003]" dev="sockfs" ino=17003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.776983][ T7119] bond2: Removing last ns target with arp_interval on [ 126.814846][ T28] audit: type=1400 audit(1771158664.193:1569): avc: denied { ioctl } for pid=7125 comm="syz.0.1121" path="socket:[17039]" dev="sockfs" ino=17039 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.337182][ T7108] Set syz1 is full, maxelem 65536 reached [ 127.379698][ T28] audit: type=1400 audit(1771158664.763:1570): avc: denied { getopt } for pid=7139 comm="syz.2.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.609404][ T7154] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 127.762919][ T7154] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 127.816572][ T7161] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1131'. [ 129.120729][ T7176] Set syz1 is full, maxelem 65536 reached [ 129.409221][ T7203] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 129.472232][ T7203] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 129.581069][ T7211] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1147'. [ 129.878378][ T7174] Process accounting resumed [ 130.431582][ T7251] IPVS: Error connecting to the multicast addr [ 130.440815][ T28] audit: type=1400 audit(1771158667.813:1571): avc: denied { setopt } for pid=7243 comm="syz.0.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.499883][ T7262] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1165'. [ 130.518691][ T7259] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1164'. [ 130.888334][ T28] audit: type=1400 audit(1771158668.273:1572): avc: denied { ioctl } for pid=7282 comm="syz.2.1172" path="socket:[17291]" dev="sockfs" ino=17291 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 131.494106][ T7299] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 131.502446][ T7299] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 131.511484][ T7299] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1177'. [ 132.123969][ T28] audit: type=1400 audit(1771158669.503:1573): avc: denied { setopt } for pid=7328 comm="syz.0.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.159815][ T7327] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1187'. [ 133.139589][ T7365] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 133.148185][ T7365] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 133.157948][ T7365] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1200'. [ 133.404984][ T7357] veth0: entered promiscuous mode [ 133.410407][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 133.422497][ T7357] veth0 (unregistering): left promiscuous mode [ 133.852325][ T7378] Set syz1 is full, maxelem 65536 reached [ 133.968625][ T7401] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 133.976086][ T28] audit: type=1400 audit(1771158671.363:1574): avc: denied { getopt } for pid=7400 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.041334][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1217'. [ 134.098990][ T7414] bond1: entered promiscuous mode [ 134.104358][ T7414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.147281][ T7414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.165945][ T7414] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 134.186511][ T7414] bond1: (slave sit1): Error -95 calling set_mac_address [ 134.382873][ T28] audit: type=1400 audit(1771158671.763:1575): avc: denied { block_suspend } for pid=7429 comm="syz.0.1221" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.454914][ T28] audit: type=1400 audit(1771158671.833:1576): avc: denied { create } for pid=7429 comm="syz.0.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 134.675336][ T7465] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 134.683550][ T7465] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 134.706493][ T7465] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1232'. [ 134.870305][ T7476] xt_cgroup: xt_cgroup: no path or classid specified [ 134.967965][ T7488] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1237'. [ 135.087881][ T7500] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 135.096202][ T7500] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 135.105300][ T7500] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1252'. [ 135.169155][ T7502] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1243'. [ 135.863653][ T7538] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 135.883643][ T7538] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 135.892838][ T7538] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1255'. [ 136.596113][ T28] audit: type=1400 audit(1771158673.983:1577): avc: denied { accept } for pid=7563 comm="syz.0.1265" path="socket:[17713]" dev="sockfs" ino=17713 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.914191][ T28] audit: type=1400 audit(1771158674.293:1578): avc: denied { create } for pid=7591 comm="syz.4.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.153842][ T7571] Set syz1 is full, maxelem 65536 reached [ 137.205225][ T28] audit: type=1400 audit(1771158674.583:1579): avc: denied { read } for pid=7606 comm="syz.0.1284" path="socket:[18753]" dev="sockfs" ino=18753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 137.221816][ T7611] 9p: Bad value for 'wfdno' [ 137.255483][ T7611] 9p: Bad value for 'wfdno' [ 137.268666][ T7611] 9p: Bad value for 'wfdno' [ 137.273339][ T7611] 9p: Bad value for 'wfdno' [ 137.279682][ T7611] 9p: Bad value for 'wfdno' [ 137.284296][ T7611] 9p: Bad value for 'wfdno' [ 137.289275][ T7611] 9p: Bad value for 'wfdno' [ 137.293932][ T7611] 9p: Bad value for 'wfdno' [ 137.338136][ T7621] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1288'. [ 137.471512][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 137.503590][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 137.686334][ T28] audit: type=1400 audit(1771158675.073:1580): avc: denied { setopt } for pid=7653 comm="syz.1.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 137.687099][ T7658] lo: entered promiscuous mode [ 137.712114][ T28] audit: type=1400 audit(1771158675.093:1581): avc: denied { ioctl } for pid=7653 comm="syz.1.1299" path="socket:[18802]" dev="sockfs" ino=18802 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 138.077564][ T7673] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1304'. [ 138.245000][ T28] audit: type=1400 audit(1771158675.623:1582): avc: denied { mount } for pid=7680 comm="syz.2.1306" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 138.276951][ T28] audit: type=1400 audit(1771158675.663:1583): avc: denied { ioctl } for pid=7674 comm="syz.0.1305" path="socket:[17907]" dev="sockfs" ino=17907 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 138.363438][ T28] audit: type=1400 audit(1771158675.733:1584): avc: denied { getopt } for pid=7688 comm="syz.1.1309" laddr=fe80::10 lport=50846 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 138.442939][ T28] audit: type=1400 audit(1771158675.803:1585): avc: denied { create } for pid=7683 comm="syz.2.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 138.464877][ T28] audit: type=1400 audit(1771158675.823:1586): avc: denied { create } for pid=7696 comm="syz.1.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.544273][ T7708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1310'. [ 138.582813][ T7709] : renamed from bond_slave_0 [ 138.638052][ T7711] sctp: [Deprecated]: syz.2.1314 (pid 7711) Use of int in maxseg socket option. [ 138.638052][ T7711] Use struct sctp_assoc_value instead [ 138.771887][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'. [ 139.033024][ T7739] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 139.050504][ T7739] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 139.068168][ T7739] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1322'. [ 139.127751][ T7741] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1323'. [ 139.253151][ T7745] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 139.261340][ T7746] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 139.710728][ T7752] netlink: 'syz.3.1326': attribute type 1 has an invalid length. [ 139.719101][ T7752] netlink: 'syz.3.1326': attribute type 1 has an invalid length. [ 140.100079][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1327'. [ 140.397787][ T7764] Set syz1 is full, maxelem 65536 reached [ 140.403806][ T7757] Set syz1 is full, maxelem 65536 reached [ 141.311410][ T7823] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 141.362780][ T7816] netlink: 'syz.2.1349': attribute type 6 has an invalid length. [ 141.372092][ T7816] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1349'. [ 141.684155][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 141.684173][ T28] audit: type=1400 audit(1771158679.063:1596): avc: denied { execute } for pid=7855 comm="syz.2.1364" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 141.931017][ T7875] sctp: [Deprecated]: syz.1.1371 (pid 7875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.931017][ T7875] Use struct sctp_sack_info instead [ 142.249544][ T7878] tc_dump_action: action bad kind [ 142.485431][ T7892] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 142.514054][ T7892] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 142.569572][ T7903] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 142.597522][ T7903] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.638260][ T7903] bond2: (slave gretap1): making interface the new active one [ 142.646766][ T7903] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 142.719272][ T7909] netlink: 'syz.3.1380': attribute type 21 has an invalid length. [ 142.787686][ T7853] syz.4.1363 (7853) used greatest stack depth: 5944 bytes left [ 142.810172][ T7920] __nla_validate_parse: 1 callbacks suppressed [ 142.810194][ T7920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1383'. [ 142.921016][ T28] audit: type=1400 audit(1771158680.303:1597): avc: denied { map } for pid=7930 comm="syz.3.1386" path="socket:[18273]" dev="sockfs" ino=18273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 143.002462][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.026221][ T28] audit: type=1400 audit(1771158680.413:1598): avc: denied { ioctl } for pid=7919 comm="syz.1.1383" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19040 ioctlcmd=0x54da scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 143.196299][ T28] audit: type=1400 audit(1771158680.583:1599): avc: denied { remount } for pid=7901 comm="syz.0.1378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 143.258332][ T28] audit: type=1326 audit(1771158680.643:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.0.1388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3dd6e9bf79 code=0x0 [ 143.614535][ T7967] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7967 comm=syz.4.1394 [ 143.628420][ T7967] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7967 comm=syz.4.1394 [ 143.704883][ T28] audit: type=1400 audit(1771158681.063:1601): avc: denied { bind } for pid=7959 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.837091][ T28] audit: type=1400 audit(1771158681.063:1602): avc: denied { listen } for pid=7959 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.888600][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1397'. [ 143.945492][ T28] audit: type=1400 audit(1771158681.063:1603): avc: denied { accept } for pid=7959 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 144.216043][ T7993] pimreg: entered allmulticast mode [ 144.222713][ T7993] netlink: 'syz.1.1404': attribute type 1 has an invalid length. [ 144.231710][ T7993] pimreg: left allmulticast mode [ 144.302012][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1405'. [ 144.645837][ T28] audit: type=1400 audit(1771158682.023:1604): avc: denied { connect } for pid=8023 comm="syz.0.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.675779][ T28] audit: type=1400 audit(1771158682.023:1605): avc: denied { ioctl } for pid=8023 comm="syz.0.1415" path="socket:[19185]" dev="sockfs" ino=19185 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.851137][ T8022] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1414'. [ 144.927655][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1419'. [ 145.337174][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1433'. [ 145.415391][ T8079] xt_cluster: you have exceeded the maximum number of cluster nodes (3131 > 32) [ 146.248327][ T8129] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1450'. [ 146.693082][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 146.693138][ T28] audit: type=1400 audit(1771158684.073:1613): avc: denied { create } for pid=8133 comm="syz.1.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 146.793069][ T8144] netlink: 'syz.0.1458': attribute type 2 has an invalid length. [ 146.804046][ T8144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1458'. [ 146.974746][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1460'. [ 148.142085][ T8199] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1481'. [ 148.356915][ T28] audit: type=1400 audit(1771158685.733:1614): avc: denied { getopt } for pid=8203 comm="syz.1.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.456925][ T8210] SET target dimension over the limit! [ 148.516096][ T8214] netlink: 'syz.2.1486': attribute type 13 has an invalid length. [ 148.525444][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 148.539727][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 148.689935][ T28] audit: type=1400 audit(1771158686.073:1615): avc: denied { write } for pid=8215 comm="syz.4.1487" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 148.779046][ T8228] team0: entered promiscuous mode [ 148.784191][ T8228] team_slave_0: entered promiscuous mode [ 148.795113][ T8228] team_slave_1: entered promiscuous mode [ 148.801298][ T8228] dummy0: entered promiscuous mode [ 148.807340][ T8228] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.828614][ T8232] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1494'. [ 149.365980][ T3838] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.374305][ T3838] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.382822][ T3838] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.391361][ T3838] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.418593][ T8270] tipc: Started in network mode [ 149.423561][ T8270] tipc: Node identity , cluster identity 4711 [ 149.429940][ T8270] tipc: Failed to set node id, please configure manually [ 149.437242][ T8270] tipc: Enabling of bearer rejected, failed to enable media [ 149.826764][ T8279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.100090][ T28] audit: type=1400 audit(1771158687.483:1616): avc: denied { watch } for pid=8280 comm="syz.1.1510" path="/326/file0" dev="tmpfs" ino=1748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.126316][ T8288] netlink: 'syz.0.1512': attribute type 1 has an invalid length. [ 151.645732][ T28] audit: type=1326 audit(1771158689.033:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 151.669551][ T8313] Set syz1 is full, maxelem 65536 reached [ 151.677257][ T28] audit: type=1326 audit(1771158689.033:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 151.701488][ T28] audit: type=1326 audit(1771158689.033:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 151.725489][ T28] audit: type=1326 audit(1771158689.033:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 151.773331][ T28] audit: type=1326 audit(1771158689.033:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 151.799139][ T28] audit: type=1326 audit(1771158689.033:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 151.823045][ T28] audit: type=1326 audit(1771158689.033:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 151.847135][ T28] audit: type=1326 audit(1771158689.033:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 151.870934][ T28] audit: type=1326 audit(1771158689.033:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 151.895087][ T28] audit: type=1326 audit(1771158689.033:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 151.919883][ T28] audit: type=1326 audit(1771158689.033:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 151.943583][ T28] audit: type=1326 audit(1771158689.033:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.1.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 152.465785][ T8367] raw_sendmsg: syz.3.1534 forgot to set AF_INET. Fix it! [ 152.586818][ T8364] delete_channel: no stack [ 152.815821][ T8380] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 152.844112][ T8380] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 152.956489][ T8391] netlink: 'syz.0.1543': attribute type 5 has an invalid length. [ 153.515359][ T8425] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 153.535090][ T8425] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 153.679928][ T8441] xt_l2tp: missing protocol rule (udp|l2tpip) [ 154.770120][ T8473] process 'syz.4.1570' launched '/dev/fd/3' with NULL argv: empty string added [ 154.972962][ T8480] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1573'. [ 155.281977][ T8509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.527912][ T8527] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1588'. [ 155.596095][ T8534] bridge0: mtu less than device minimum [ 155.751759][ T8549] sctp: [Deprecated]: syz.2.1593 (pid 8549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.751759][ T8549] Use struct sctp_sack_info instead [ 155.849354][ T8515] 9p: Bad value for 'wfdno' [ 156.155460][ T8570] mmap: syz.1.1601 (8570) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 156.356724][ T8584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1606'. [ 156.399392][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1608'. [ 156.409559][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1608'. [ 156.487788][ T8597] mmap: syz.1.1611 (8597): VmData 29077504 exceed data ulimit 9868. Update limits or use boot option ignore_rlimit_data. [ 156.931022][ T8607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1614'. [ 156.984313][ T8607] bond3: option primary_reselect: invalid value (5) [ 156.992290][ T8607] bond3 (unregistering): Released all slaves [ 157.089562][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 157.089578][ T28] audit: type=1400 audit(1771158694.473:1678): avc: denied { rename } for pid=8616 comm="syz.0.1618" name="file0" dev="tmpfs" ino=1562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 157.130775][ T28] audit: type=1400 audit(1771158694.473:1679): avc: denied { unlink } for pid=8616 comm="syz.0.1618" name="file0" dev="tmpfs" ino=1562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 157.195934][ T8621] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len [ 157.593521][ T28] audit: type=1326 audit(1771158694.973:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.1.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 157.619898][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1623'. [ 157.628965][ T8635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.660270][ T8635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.672732][ T28] audit: type=1326 audit(1771158694.973:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.1.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 157.721420][ T28] audit: type=1326 audit(1771158695.003:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.1.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 157.745635][ T28] audit: type=1326 audit(1771158695.003:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.1.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 157.769471][ T28] audit: type=1326 audit(1771158695.003:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.1.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 157.793153][ T28] audit: type=1326 audit(1771158695.003:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.1.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 157.825210][ T28] audit: type=1326 audit(1771158695.003:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.1.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 157.857938][ T28] audit: type=1326 audit(1771158695.003:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8634 comm="syz.1.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 158.311457][ T8670] netlink: 'syz.2.1635': attribute type 10 has an invalid length. [ 158.319561][ T8670] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1635'. [ 158.629662][ T8700] syz.4.1648 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 159.252272][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1659'. [ 159.409982][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1666'. [ 159.531513][ T8760] bridge_slave_0: left allmulticast mode [ 159.537984][ T8760] bridge_slave_0: left promiscuous mode [ 159.545502][ T8760] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.062723][ T8795] netlink: 'syz.2.1678': attribute type 10 has an invalid length. [ 160.076664][ T8795] team0: Port device dummy0 added [ 160.262054][ T8812] bond0: entered promiscuous mode [ 160.277613][ T8812] bond0: left promiscuous mode [ 160.787178][ T8862] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 160.795685][ T8862] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 161.166510][ T3848] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.176231][ T3848] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.191199][ T3848] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.208281][ T3848] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.412431][ T8911] __nla_validate_parse: 2 callbacks suppressed [ 161.412450][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'. [ 163.288296][ T8963] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 163.335427][ T8961] netlink: 'syz.1.1740': attribute type 45 has an invalid length. [ 163.389057][ T8967] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1743'. [ 163.414997][ T8967] netlink: zone id is out of range [ 163.435006][ T8967] netlink: zone id is out of range [ 163.448080][ T8967] netlink: zone id is out of range [ 163.487939][ T8967] netlink: set zone limit has 8 unknown bytes [ 163.650374][ T8979] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1747'. [ 163.708236][ T8979] team0: Port device dummy0 removed [ 163.897706][ T8999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1756'. [ 163.919869][ T8999] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8999 comm=syz.3.1756 [ 163.955092][ T9001] ªªªªªª: renamed from vlan0 [ 164.021906][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 164.021942][ T28] audit: type=1326 audit(1771158701.403:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 164.062163][ T28] audit: type=1326 audit(1771158701.433:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 164.088630][ T28] audit: type=1326 audit(1771158701.433:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 164.115393][ T28] audit: type=1326 audit(1771158701.433:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 164.139190][ T28] audit: type=1326 audit(1771158701.433:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 164.178812][ T28] audit: type=1326 audit(1771158701.433:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 164.210936][ T28] audit: type=1326 audit(1771158701.433:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 164.252255][ T28] audit: type=1326 audit(1771158701.433:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 164.277165][ T28] audit: type=1326 audit(1771158701.523:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 164.307210][ T28] audit: type=1326 audit(1771158701.523:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9005 comm="syz.1.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309d45bf79 code=0x7ffc0000 [ 164.334346][ T9022] team0: left promiscuous mode [ 164.354969][ T9022] team_slave_0: left promiscuous mode [ 164.360898][ T9022] team_slave_1: left promiscuous mode [ 164.371035][ T9022] dummy0: left promiscuous mode [ 164.386904][ T79] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.397253][ T79] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.414893][ T79] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.423963][ T79] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.860631][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'. [ 164.965331][ T9042] bond0: entered promiscuous mode [ 164.986581][ T9042] bond_slave_0: entered promiscuous mode [ 164.996226][ T9042] bond_slave_1: entered promiscuous mode [ 165.006850][ T9042] bridge_slave_1: entered promiscuous mode [ 165.016709][ T9042] batadv_slave_0: entered promiscuous mode [ 165.023776][ T9042] batadv_slave_0: left promiscuous mode [ 165.030126][ T9042] bond0: left promiscuous mode [ 165.035627][ T9042] bond_slave_0: left promiscuous mode [ 165.041238][ T9042] bond_slave_1: left promiscuous mode [ 165.048405][ T9042] bridge_slave_1: left promiscuous mode [ 165.144696][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'. [ 165.155815][ T9055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=107 sclass=netlink_route_socket pid=9055 comm= [ 165.268432][ T9060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1778'. [ 165.315326][ T9063] netlink: 'syz.0.1781': attribute type 2 has an invalid length. [ 165.325655][ T9063] netlink: 16174 bytes leftover after parsing attributes in process `syz.0.1781'. [ 165.335484][ T9062] netlink: 'syz.0.1781': attribute type 2 has an invalid length. [ 165.343439][ T9062] netlink: 16174 bytes leftover after parsing attributes in process `syz.0.1781'. [ 165.672703][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'. [ 165.718363][ T9083] nft_compat: unsupported protocol 0 [ 165.749919][ T9087] vlan2: entered promiscuous mode [ 165.755277][ T9087] vlan2: entered allmulticast mode [ 165.760509][ T9087] hsr_slave_1: entered allmulticast mode [ 166.682544][ T9128] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9128 comm=syz.4.1799 [ 166.935573][ T9145] __nla_validate_parse: 1 callbacks suppressed [ 166.935593][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1806'. [ 167.158807][ T9157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1810'. [ 167.169314][ T9157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1810'. [ 167.178928][ T9157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1810'. [ 167.196477][ T9157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1810'. [ 167.959555][ T3409] IPVS: starting estimator thread 0... [ 168.265044][ T9230] IPVS: using max 2256 ests per chain, 112800 per kthread [ 168.428695][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1824'. [ 168.446124][ T9270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.909547][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1832'. [ 170.489984][ T9353] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1850'. [ 170.535999][ T9360] netlink: 'syz.3.1851': attribute type 10 has an invalid length. [ 170.544095][ T9360] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.554958][ T9360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.565706][ T9360] hsr0: entered promiscuous mode [ 171.281540][ T9391] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 171.388722][ T9391] bond2: entered promiscuous mode [ 171.393965][ T9391] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.414850][ T9399] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 171.444419][ T9399] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 171.458156][ T9401] sctp: [Deprecated]: syz.0.1865 (pid 9401) Use of int in maxseg socket option. [ 171.458156][ T9401] Use struct sctp_assoc_value instead [ 171.505010][ T9399] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 171.626437][ T9407] tipc: Started in network mode [ 171.651673][ T9407] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 171.671861][ T9407] tipc: Enabling of bearer rejected, failed to enable media [ 171.803718][ T9416] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1871'. [ 172.241758][ T9440] netlink: 'syz.1.1879': attribute type 10 has an invalid length. [ 172.255484][ T9440] team0: Port device dummy0 added [ 172.263016][ T9440] netlink: 'syz.1.1879': attribute type 10 has an invalid length. [ 172.276684][ T9440] team0: Port device dummy0 removed [ 172.284830][ T9440] dummy0: entered promiscuous mode [ 172.291572][ T9440] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 173.009618][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 173.009637][ T28] audit: type=1400 audit(1771158710.393:1767): avc: denied { read } for pid=9483 comm="syz.0.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 174.053846][ T9535] xfrm0: entered promiscuous mode [ 174.547157][ T28] audit: type=1400 audit(1771158711.933:1768): avc: denied { accept } for pid=9550 comm="syz.4.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 174.905452][ T9577] tipc: Enabling of bearer rejected, already enabled [ 174.913956][ T9577] Cannot find add_set index 0 as target [ 175.580050][ T28] audit: type=1400 audit(1771158712.963:1769): avc: denied { map } for pid=9601 comm="syz.3.1933" path="socket:[23519]" dev="sockfs" ino=23519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 176.135963][ T9642] xt_CT: No such helper "netbios-ns" [ 178.322619][ T9697] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1968'. [ 178.832732][ T28] audit: type=1400 audit(1771158716.213:1770): avc: denied { relabelto } for pid=9729 comm="syz.4.1980" name="398" dev="tmpfs" ino=2134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 178.916213][ T9732] netlink: 'syz.4.1981': attribute type 16 has an invalid length. [ 178.934329][ T9732] netlink: 'syz.4.1981': attribute type 17 has an invalid length. [ 178.977111][ T9732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.987328][ T9732] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.999489][ T9732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.530019][ T9752] cgroup: fork rejected by pids controller in /syz1 [ 180.358490][ T9994] delete_channel: no stack [ 180.364406][ T9994] delete_channel: no stack [ 180.375436][ T9994] netlink: 'syz.1.2005': attribute type 1 has an invalid length. [ 180.392584][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2005'. [ 180.424985][ T28] audit: type=1400 audit(1771158717.713:1771): avc: denied { shutdown } for pid=9990 comm="syz.4.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.895722][ T28] audit: type=1400 audit(1771158718.273:1772): avc: denied { getopt } for pid=10012 comm="syz.3.2013" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.470466][ T28] audit: type=1400 audit(1771158718.753:1773): avc: denied { cmd } for pid=10053 comm="syz.3.2031" path="socket:[24190]" dev="sockfs" ino=24190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 182.189567][T10079] 9p: Bad value for 'rfdno' [ 182.580134][T10129] syz_tun: entered allmulticast mode [ 182.586610][T10128] syz_tun: left allmulticast mode [ 182.657430][T10135] batadv_slave_0: entered promiscuous mode [ 182.663744][T10134] batadv_slave_0: left promiscuous mode [ 182.780202][T10116] cgroup: fork rejected by pids controller in /syz2 [ 183.568076][T10410] tipc: Can't bind to reserved service type 2 [ 183.585788][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2065'. [ 183.613546][ T28] audit: type=1400 audit(1771158720.993:1774): avc: denied { nlmsg_write } for pid=10413 comm="syz.1.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 183.647360][ T28] audit: type=1400 audit(1771158721.033:1775): avc: denied { getopt } for pid=10409 comm="syz.3.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.943948][T10422] Set syz1 is full, maxelem 65536 reached [ 184.056595][T10443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2076'. [ 184.413000][T10476] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2082'. [ 184.947921][T10480] Set syz1 is full, maxelem 65536 reached [ 185.205778][T10531] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 186.060415][T10551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2108'. [ 187.391437][T10591] Set syz1 is full, maxelem 65536 reached [ 188.367668][T10622] bond1: entered allmulticast mode [ 188.378450][T10621] bond1: left allmulticast mode [ 192.588271][T10755] Set syz1 is full, maxelem 65536 reached [ 192.682148][T10773] syz_tun: entered allmulticast mode [ 192.694223][T10769] syz_tun: left allmulticast mode [ 192.705520][T10775] netlink: 'syz.1.2180': attribute type 3 has an invalid length. [ 193.205451][ T28] audit: type=1326 audit(1771158730.563:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.4.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1267bf79 code=0x7ffc0000 [ 193.342837][T10809] netlink: 'syz.3.2187': attribute type 29 has an invalid length. [ 193.383893][ T28] audit: type=1326 audit(1771158730.563:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.4.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1267bf79 code=0x7ffc0000 [ 193.409046][T10809] netlink: 'syz.3.2187': attribute type 29 has an invalid length. [ 193.439020][T10809] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2187'. [ 193.448650][T10809] unsupported nla_type 66 [ 193.453158][ T28] audit: type=1326 audit(1771158730.563:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.4.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f3b1267bf79 code=0x7ffc0000 [ 193.480360][ T28] audit: type=1326 audit(1771158730.563:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.4.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1267bf79 code=0x7ffc0000 [ 193.513919][ T28] audit: type=1326 audit(1771158730.573:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.4.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1267bf79 code=0x7ffc0000 [ 193.537886][ T28] audit: type=1326 audit(1771158730.573:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.4.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f3b1267bf79 code=0x7ffc0000 [ 193.562035][ T28] audit: type=1326 audit(1771158730.573:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.4.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1267bf79 code=0x7ffc0000 [ 193.591369][ T28] audit: type=1326 audit(1771158730.573:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.4.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1267bf79 code=0x7ffc0000 [ 193.615150][ T28] audit: type=1326 audit(1771158730.573:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.4.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f3b1267bf79 code=0x7ffc0000 [ 193.639393][ T28] audit: type=1326 audit(1771158730.573:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.4.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1267bf79 code=0x7ffc0000 [ 193.671903][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2189'. [ 193.763254][T10818] syz_tun: entered allmulticast mode [ 193.769010][T10817] syz_tun: left allmulticast mode [ 196.994364][T10945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2225'. [ 197.448490][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2232'. [ 198.277805][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2244'. [ 198.841358][T11059] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11059 comm=syz.2.2255 [ 199.208321][T11016] Set syz1 is full, maxelem 65536 reached [ 199.937862][T11097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2269'. [ 200.312947][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2277'. [ 200.585657][T11103] Set syz1 is full, maxelem 65536 reached [ 200.882038][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 200.882054][ T28] audit: type=1400 audit(1771158994.266:1809): avc: denied { getopt } for pid=11126 comm="syz.0.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 201.870749][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2288'. [ 202.054832][ T28] audit: type=1400 audit(1771158995.436:1810): avc: denied { listen } for pid=11159 comm="syz.4.2290" path=006162353639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 204.071659][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2300'. [ 204.836135][T11202] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2301'. [ 204.883811][T11226] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2307'. [ 204.892981][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2301'. [ 204.916139][T11202] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2301'. [ 204.990092][ T28] audit: type=1400 audit(1771158998.376:1811): avc: denied { connect } for pid=11235 comm="syz.1.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 204.991677][T11237] netlink: 'syz.1.2308': attribute type 10 has an invalid length. [ 205.842887][ T28] audit: type=1400 audit(1771158999.226:1812): avc: denied { shutdown } for pid=11254 comm="syz.1.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 205.910043][ T28] audit: type=1326 audit(1771158999.286:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11258 comm="syz.0.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd6e9bf79 code=0x7ffc0000 [ 205.934033][ T28] audit: type=1326 audit(1771158999.286:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11258 comm="syz.0.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd6e9bf79 code=0x7ffc0000 [ 205.959019][T11261] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2318'. [ 205.968528][ T28] audit: type=1326 audit(1771158999.286:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11258 comm="syz.0.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd6e9bf79 code=0x7ffc0000 [ 206.007354][ T28] audit: type=1326 audit(1771158999.286:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11258 comm="syz.0.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3dd6e9bf79 code=0x7ffc0000 [ 206.031572][ T28] audit: type=1326 audit(1771158999.286:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11258 comm="syz.0.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd6e9bf79 code=0x7ffc0000 [ 206.191332][ T28] audit: type=1326 audit(1771158999.286:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11258 comm="syz.0.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd6e9bf79 code=0x7ffc0000 [ 206.215092][ T28] audit: type=1326 audit(1771158999.286:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11258 comm="syz.0.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd6e9bf79 code=0x7ffc0000 [ 206.239012][ T28] audit: type=1326 audit(1771158999.286:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11258 comm="syz.0.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd6e9bf79 code=0x7ffc0000 [ 206.289419][ T28] audit: type=1326 audit(1771158999.286:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11258 comm="syz.0.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dd6e9bf79 code=0x7ffc0000 [ 206.313188][ T28] audit: type=1326 audit(1771158999.286:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11258 comm="syz.0.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3dd6e9bf79 code=0x7ffc0000 [ 206.908531][T11296] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2329'. [ 207.104036][T11315] tipc: Failed to remove unknown binding: 66,0,0/0:2868471138/2868471140 [ 207.112830][T11315] tipc: Failed to remove unknown binding: 66,0,0/0:2868471138/2868471139 [ 207.511237][T11335] batadv1: entered promiscuous mode [ 207.824147][T11321] cgroup: fork rejected by pids controller in /syz0 [ 208.983717][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'. [ 209.036203][T11404] netlink: 'syz.2.2359': attribute type 8 has an invalid length. [ 209.860573][T11431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11431 comm=syz.1.2370 [ 210.929008][T11469] netlink: 'syz.3.2384': attribute type 8 has an invalid length. [ 210.967471][T11469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2384'. [ 210.988290][T11469] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2384'. [ 212.022708][T11484] cgroup: fork rejected by pids controller in /syz3 [ 214.235587][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 214.235603][ T28] audit: type=1400 audit(1771159007.626:1892): avc: denied { audit_write } for pid=11659 comm="syz.4.2423" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 214.292907][ T28] audit: type=1107 audit(1771159007.646:1893): pid=11659 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 214.860322][ T3316] ================================================================== [ 214.868478][ T3316] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 214.876428][ T3316] [ 214.878776][ T3316] read-write to 0xffff88811db12240 of 8 bytes by task 11663 on cpu 1: [ 214.886964][ T3316] shmem_add_to_page_cache+0x4b2/0x5b0 [ 214.892451][ T3316] shmem_get_folio_gfp+0x4f3/0xd60 [ 214.897584][ T3316] shmem_write_begin+0xfc/0x1f0 [ 214.902506][ T3316] generic_perform_write+0x183/0x490 [ 214.907827][ T3316] shmem_file_write_iter+0xc5/0xf0 [ 214.912968][ T3316] __kernel_write_iter+0x319/0x590 [ 214.918138][ T3316] dump_user_range+0xa7d/0xdb0 [ 214.922933][ T3316] elf_core_dump+0x21a2/0x2330 [ 214.927732][ T3316] coredump_write+0xacf/0xdf0 [ 214.932437][ T3316] vfs_coredump+0x26c7/0x3130 [ 214.937166][ T3316] get_signal+0xd80/0xf60 [ 214.941545][ T3316] arch_do_signal_or_restart+0x96/0x450 [ 214.947135][ T3316] irqentry_exit+0xf7/0x520 [ 214.951693][ T3316] asm_exc_page_fault+0x26/0x30 [ 214.956578][ T3316] [ 214.958920][ T3316] read to 0xffff88811db12240 of 8 bytes by task 3316 on cpu 0: [ 214.966491][ T3316] shmem_getattr+0x68/0x200 [ 214.971029][ T3316] vfs_getattr_nosec+0x146/0x1e0 [ 214.976001][ T3316] vfs_getattr+0x48/0x60 [ 214.980269][ T3316] vfs_statx_path+0x28/0x140 [ 214.984890][ T3316] vfs_statx+0xc4/0x170 [ 214.989080][ T3316] vfs_fstatat+0x118/0x170 [ 214.993560][ T3316] __se_sys_newfstatat+0x55/0x3e0 [ 214.998619][ T3316] __x64_sys_newfstatat+0x55/0x70 [ 215.003672][ T3316] x64_sys_call+0x2c64/0x3020 [ 215.008477][ T3316] do_syscall_64+0x12c/0x370 [ 215.013112][ T3316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.019045][ T3316] [ 215.021478][ T3316] value changed: 0x0000000000003556 -> 0x000000000000355a [ 215.028611][ T3316] [ 215.030955][ T3316] Reported by Kernel Concurrency Sanitizer on: [ 215.037145][ T3316] CPU: 0 UID: 0 PID: 3316 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 215.046737][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.056830][ T3316] ==================================================================