last executing test programs: 15.579516492s ago: executing program 2 (id=734): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80182, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xa8) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x5, 0x0, 0x100}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001fc0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000026c0)=ANY=[@ANYRES16=r2, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fedbdf2503000000580001"], 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20040084) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000440006803c00040067636d0c6165732900000000000000000000000000000000150000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r5, 0x0, 0x4040084) sendmsg$nl_route_sched(r4, 0x0, 0x4000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r9, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x1a}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) 15.320766654s ago: executing program 2 (id=737): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x65}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0xfff2}, {}, {0xe, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080d8}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r11, 0x501, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20010000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r3, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x1a}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6d}}}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x15}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000900)=@ethtool_link_settings={0x4c, 0x4, 0x0, 0xe, 0x3, 0x0, 0x8, 0x0, 0x0, 0x4, [0x0, 0x0, 0x6, 0x4, 0x6, 0xffffffff, 0xfffffffa]}}) 14.7697294s ago: executing program 2 (id=739): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="95beea750e486994", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r1], 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffc732, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0xbe, &(0x7f00000001c0)=""/190, 0x41100, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x8, 0x38, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x5, 0x4, 0x0, 0x9}], 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x37, 0x0, @val=@netkit={@void, @value=r2, @void, @void, r1}}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)='%)', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@fallback, 0xffffffffffffffff, 0x38, 0x30, 0x0, @void, @void, @void, @value=r3, r1}, 0x20) r4 = syz_ublk_setup_io_uring(0x2021, &(0x7f0000000180)={0x0, 0x545f, 0x1000, 0x1, 0x1d5}, &(0x7f0000000240), &(0x7f00000003c0), &(0x7f0000000400)) pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@fallback=r4, 0xffffffffffffffff, 0x2b, 0x8, 0x0, @void, @value=r5, @void, @void, r1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x388, 0x41d9fda7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x0, 0x96, 0x0, 0x3}, 0x28) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000000000040000000000007aece3a24af68ec313cea730cc79ec884bad44c378267826c050f6b819ff888cd7d85e0bda95057746336073e7e1c858deecde8a0def100039e1e20b38361bd7e1099e1eb6d3af84e093f66b8b6e7642776de67c78ea3dfed50ee76ee8d627c1408e73b597e90984fe9aca0c355ebd4d83e68365ea4318b9255a4127146f38146ea980f8a80490448eaf37bd1ff27f06e82536c2a62d5265ba2527503408411b360df4ee3e6dc94a39a379c14c657f20f0c047df00f324f1f94f1a14"], 0x0, 0x26}, 0x20) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r11, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 13.836867289s ago: executing program 2 (id=744): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x1, 0x0, 0x2, 0x1444, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x4, 0x2}, 0x10414a, 0x1, 0x6, 0x1, 0x3, 0x6, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001500010027bd7000fcdbdf2502", @ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x40020c5}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x281}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="02000000010000000000000004eaffffffffffff0f6e8bc1dc0000002000000000000000"], 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100028cb13dada15e6ed066907941db70f8c554bb47e5000400"/52], 0x24, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c01000001010102000000000000000000000000080007400000000fdc000e800c00028005000100010000000c00028005000100840000002c00018014000300fe80000000000000000000000004001114000400fc00000000000000000000190000000014000180080001000a010102080002007f0000012c00018014000300fc01000000000000000014000400ff0100000000000000000000000000011400018008000100ac1e000108000200ac1414bb14000180080001007f00000108000200e00000022c0001801400030000000000000000000000000000000000140004002001000000000000000000000000000134001880080001400000000108000240000000070800024000000002080001400000000208000340000000030800024000000040"], 0x12c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 13.083215467s ago: executing program 2 (id=748): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 11.949429319s ago: executing program 2 (id=757): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="665c6c6f63aafcbe745406676d00", @ANYRES16=r0, @ANYRES8=r0], 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getrlimit(0x5, &(0x7f00000000c0)) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000080)={0x81, 0x1, 0x1000}) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="67440500000000000400000004000000a0587ca2484450584b063a7a7c4cd725696064079f3c1daac3604ead3700841ec72e7e83189d273b4600000000000000000000b959703cff21dec99f22377c525181bfab3497c7fc4b3c56f059f39fdcf0615f2c408a0c0aaab444d779d8e69881f3845751fd05cfc050c6cb383672baa7b3bc322ec08aad761a8adc1443663d9a42e1cff69b43a066315ccec9a4e287f6d805d81e3ef6a96ee4f8e4a79d25ae52d9"], 0x10) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x3, 0x0, 0x20, 0x0, 0x20, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_bp={&(0x7f0000000400), 0x4}, 0x0, 0x204, 0x0, 0x3, 0x1000, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x401000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2b168c6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000000) socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, 0x0, 0x40000132) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0xce24}, 0x6e) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @broadcast}, 0x178, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000640)={[{@grpjquota}, {@nouid32}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}], [{@measure}, {@seclabel}, {@subj_role={'subj_role', 0x3d, '--}#%$#]*'}}, {@context={'context', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") chdir(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1a031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x7, 'vlan1\x00', {0xa}, 0x2}) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) 11.938539969s ago: executing program 32 (id=757): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="665c6c6f63aafcbe745406676d00", @ANYRES16=r0, @ANYRES8=r0], 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getrlimit(0x5, &(0x7f00000000c0)) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000080)={0x81, 0x1, 0x1000}) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="67440500000000000400000004000000a0587ca2484450584b063a7a7c4cd725696064079f3c1daac3604ead3700841ec72e7e83189d273b4600000000000000000000b959703cff21dec99f22377c525181bfab3497c7fc4b3c56f059f39fdcf0615f2c408a0c0aaab444d779d8e69881f3845751fd05cfc050c6cb383672baa7b3bc322ec08aad761a8adc1443663d9a42e1cff69b43a066315ccec9a4e287f6d805d81e3ef6a96ee4f8e4a79d25ae52d9"], 0x10) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x3, 0x0, 0x20, 0x0, 0x20, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_bp={&(0x7f0000000400), 0x4}, 0x0, 0x204, 0x0, 0x3, 0x1000, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x401000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2b168c6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000000) socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, 0x0, 0x40000132) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0xce24}, 0x6e) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @broadcast}, 0x178, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000640)={[{@grpjquota}, {@nouid32}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}], [{@measure}, {@seclabel}, {@subj_role={'subj_role', 0x3d, '--}#%$#]*'}}, {@context={'context', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") chdir(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x1a031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x7, 'vlan1\x00', {0xa}, 0x2}) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) 2.703679042s ago: executing program 3 (id=818): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x28) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x3ff) (fail_nth: 1) shutdown(r0, 0x0) 2.352932206s ago: executing program 3 (id=820): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0xf2, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x10000000000002eb, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002ec0)=@newtaction={0xf38, 0x30, 0xb, 0x0, 0x0, {}, [{0xf24, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xbf2, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xecc, 0x2, 0x0, 0x0, {{0xa}, {0xea0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xffffff00, 0x12a6, 0x5, 0xd, 0x7}, 0xa, 0x0, [{0xfffff801, 0x2b3, 0x0, 0x2, 0x1ff, 0x80000001}, {0x4, 0x400, 0x5, 0x1, 0x5, 0x8}, {0x2, 0x1, 0xfff, 0x7fff, 0x5, 0xe0f}, {0x4, 0x2, 0x9, 0x4, 0xfffffffa, 0x9}, {0xd, 0x7f, 0x4, 0x5, 0xcbb21a0, 0x2}]}, [{0xffffffae, 0x80000001, 0x0, 0x7, 0x8, 0xffffff33}, {0x3, 0x7, 0x1, 0x2c2, 0xa}, {0xfffffa99, 0x8, 0x6, 0x92, 0x4}, {0x9, 0x1, 0x40, 0xfffffffc, 0x5, 0x9}, {0x0, 0x200, 0x10, 0x4, 0x40, 0x2bbd}, {0xffffffff, 0x1ff, 0x917, 0x3, 0x9, 0x3}, {0x87f, 0x75, 0xc4, 0x2, 0x6, 0xff}, {0x7, 0x2cf6, 0x7, 0x6, 0x6e13, 0x7}, {0x2, 0x51, 0x9, 0x9, 0xfffffff4, 0x1}, {0x5, 0x9, 0x2, 0x101, 0xff, 0x92}, {0x5, 0x3, 0x2, 0x3, 0x9ce3, 0x5}, {0x1, 0x8, 0xbe32, 0x4, 0xc53609c, 0x6}, {0x4, 0x3, 0x10, 0x7, 0x7, 0x5ee8}, {0xcfa, 0x8, 0x0, 0x8, 0x101, 0x100}, {0x7ff, 0x940, 0x8, 0x7, 0x13}, {0x6, 0x5, 0x9, 0xb, 0x3, 0xfffff001}, {0x7a18, 0x5, 0x2, 0x0, 0xc, 0x6d}, {0xffffffff, 0x10, 0x7ff, 0x3, 0x1, 0x10000}, {0x4, 0x5, 0xa, 0x1ff, 0x10001, 0x6}, {0x5, 0x6, 0x7, 0x6, 0x7fffffff, 0xa}, {0x0, 0x8, 0x40, 0x2, 0x6, 0x3}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x8, 0x5db, 0x4c, 0x7, 0x7f, 0x4236}, {0x5, 0x3, 0x9, 0x1, 0x1, 0x94e}, {0x100000, 0x7, 0x7f, 0x1, 0x0, 0xff}, {0x3ff, 0xfffffe00, 0x3, 0x6, 0x7, 0x2}, {0x7fff, 0x10, 0x9, 0xfcc, 0x0, 0x40000000}, {0x3, 0x2, 0xffffffff, 0x7, 0x9, 0x7}, {0xa, 0xa2f, 0x4, 0xc, 0x0, 0x7}, {0xa, 0x5, 0xffff74ea, 0x30000000, 0x3, 0x8}, {0x9, 0x3, 0x3, 0x800, 0x1000, 0x8}, {0x1, 0x4, 0x4, 0x7, 0x9976, 0x8ad}, {0x6, 0x6, 0x0, 0x80000001, 0x7}, {0x1, 0x2386, 0x8001, 0x81, 0x9, 0x8}, {0x5, 0x5, 0xf4, 0x30b2, 0xd, 0x4}, {0x8, 0x3, 0x9, 0x6, 0x400, 0x9}, {0x1, 0x0, 0x8001, 0x0, 0x4, 0x31}, {0x33e8, 0x7, 0xfffffff7, 0x7, 0x3, 0x3ff}, {0x7, 0x7, 0x40000, 0x58ed, 0x80000000, 0x40}, {0x5, 0x3, 0x8, 0x4, 0x200, 0x9}, {0x37e5, 0x3, 0xd25a, 0x7ff, 0x10, 0x5}, {0x3, 0x5, 0xe9a, 0x6, 0x951, 0x9064}, {0x0, 0x1, 0x1, 0x3, 0x6, 0x3}, {0x4, 0x0, 0x3, 0x7, 0x5, 0x9}, {0x80000001, 0x6, 0x6, 0x9, 0x8, 0x268}, {0x86d0, 0x8, 0x9, 0xff, 0x24, 0x1}, {0xfffffff5, 0x2, 0x2, 0x6, 0x10, 0x6}, {0x0, 0x5, 0x6, 0x7, 0x1, 0xffffffff}, {0x4, 0xfffff2cb, 0x6, 0x6, 0xbb, 0x4}, {0x2, 0x6, 0x10, 0x6, 0x1, 0x7}, {0x8, 0x0, 0x5, 0xf1b, 0x0, 0x2}, {0x5, 0x2, 0x0, 0xb11, 0x7, 0x6}, {0x7, 0x9672, 0x7e1a, 0x0, 0x8}, {0x7f, 0xf1, 0x80000001, 0x3, 0x7fff, 0xc}, {0x5, 0xfffffffa, 0x4, 0x9, 0x6, 0x58000}, {0x9, 0x6, 0x3, 0x6, 0xfffffc00, 0x54}, {0x1, 0x9, 0x9, 0x4, 0x7, 0x1}, {0x64, 0x6, 0x1, 0x2, 0x8, 0x80000000}, {0x194b, 0x3, 0x6, 0x7f, 0x8, 0xf}, {0xf, 0x3, 0x7fffffff, 0x8, 0x4, 0x2}, {0x4, 0xcba, 0xb8, 0x91, 0x74, 0xffffffff}, {0x800, 0xffffff4b, 0x0, 0x6, 0x3, 0x8}, {0x9, 0x3f4, 0x6, 0x7, 0xb1, 0xffff3a58}, {0x3, 0x5, 0x3, 0x9, 0x8, 0x80}, {0x3667, 0x6, 0xfff, 0x3ff, 0x9, 0x5}, {0x5, 0x8, 0x80000001, 0x1, 0x3, 0x9e5}, {0x5, 0x0, 0x1, 0x7332, 0xfffffffc}, {0xa5a, 0x2, 0x4, 0x10000, 0x2, 0x1}, {0x6, 0x4, 0xffffffff, 0x1, 0xa}, {0x8, 0x2, 0x8, 0x8, 0x100, 0x7}, {0x7fff, 0x4, 0x800, 0x2, 0xc28, 0x8001}, {0x4, 0x40, 0x3, 0x1, 0x6, 0x8b0d}, {0xfffffff9, 0x4, 0x80000000, 0x1ff, 0x0, 0x1}, {0x0, 0x8, 0x6, 0xb6, 0x80000000, 0x5}, {0x8001, 0x0, 0xb8, 0x1, 0x0, 0x100}, {0x3, 0x7, 0x2, 0x9, 0x4, 0x9}, {0xd2c, 0x5, 0x9, 0x9, 0x9, 0x8}, {0x3, 0xff, 0x387c, 0x1, 0xd, 0x7}, {0x5, 0xbe82, 0x9, 0xb67d, 0x6, 0x5}, {0x7, 0x0, 0x2, 0xf5, 0x8, 0x10000}, {0x80000000, 0x2, 0x6, 0x1, 0x3, 0x5}, {0x5, 0x7f, 0x100, 0x5, 0x16, 0x1}, {0x26, 0x8, 0x2, 0xf8, 0x2, 0x20000000}, {0x8000, 0x7, 0x7, 0xd3, 0x80000000, 0xdc4}, {0x7, 0x0, 0x6, 0x95, 0xe, 0x12}, {0x7f, 0x2, 0x73c6, 0x9, 0x2, 0x7f}, {0x6, 0x3, 0x4, 0x4, 0x2, 0x7}, {0x9, 0xb83, 0x6, 0x3fa, 0x68, 0x2}, {0x0, 0xbc3, 0x2, 0x70, 0x1d, 0x9}, {0x265a, 0xd4c, 0xe, 0x8, 0xff, 0x80}, {0x8, 0x5, 0xfff, 0x3, 0x4, 0x3}, {0x40, 0x10000, 0x4, 0x7, 0x401, 0x5}, {0x7, 0x8dc0, 0x4, 0x8, 0xffffffc0, 0xfff}, {0x9, 0x4, 0x5, 0xfff, 0x6, 0x7}, {0x5172a866, 0x5, 0x3, 0x9, 0x0, 0x7}, {0x5a3, 0x1, 0x7, 0xd, 0x8, 0xfffffffd}, {0x6, 0x0, 0x2, 0x5c, 0x22, 0xb4}, {0x2, 0x4, 0x5, 0x7f, 0x1, 0x800}, {0xfffffffa, 0x9, 0x8ac0, 0x9, 0x7ff, 0xffffff75}, {0x9, 0x0, 0x9, 0x6c, 0xf65d, 0xa985}, {0x1, 0x81, 0x7dea, 0x8, 0xc24, 0x9}, {0x2, 0x0, 0x2, 0x50, 0x0, 0x8}, {0x7, 0x6, 0x2, 0x8, 0x6, 0x6}, {0x7, 0x2, 0x4, 0x6, 0x2, 0xfffffff9}, {0x8, 0x0, 0x80000001, 0x10, 0xa5ee, 0x5cf}, {0xffffffff, 0x81, 0x4, 0x511, 0x2, 0x71d}, {0x6, 0x100, 0x1, 0x800, 0x6, 0x200}, {0x5, 0x8, 0x800, 0x6, 0x4, 0x6}, {0x800, 0x9, 0x3, 0x49c, 0x5, 0xffff71f4}, {0x67, 0x4, 0xb887, 0x3, 0x0, 0xe}, {0x9, 0x40, 0x9, 0x5, 0x5, 0x5c8b}, {0x9, 0x7, 0x3ff, 0x0, 0x0, 0x1}, {0x8, 0x3, 0x0, 0x10000, 0x9, 0x40}, {0x2, 0x800, 0x2, 0x7e9c, 0xea51, 0x80}, {0x6, 0xfff, 0x4, 0x3, 0x7, 0x35ce594}, {0x6, 0xc2, 0x5, 0x80, 0x8, 0x8}, {0x7, 0x3, 0x3ff, 0xd, 0x0, 0x4}, {0xffffffff, 0x7, 0x5, 0x6, 0x8, 0x8}, {0x8, 0xff, 0x7fffffff, 0x3ff, 0x3, 0x9}, {0xffff, 0x101, 0x10, 0x10, 0xc6c8, 0x9}, {0x6d, 0x8b, 0xd, 0x9, 0x1000, 0xfff}, {0x3fc0, 0xf4f, 0x1ff, 0x1, 0xffffffff, 0x33}, {0x45a, 0x4, 0x401, 0x401, 0xffffffff, 0xb016}, {0x0, 0x1, 0x19f, 0x7, 0x1, 0x3}, {0x81, 0x6, 0x7f, 0x3, 0x1000, 0x9}, {0xe0000000, 0x4, 0x4, 0x4, 0x8000, 0x2}, {0x2, 0x4, 0xffda, 0x3, 0x100, 0x1}, {0xc2d0, 0x400, 0x3, 0x3, 0x81, 0x240000}], [{0x2, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x2}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x2b29d1b9d2bbf963}, {0x2}, {0x0, 0x1}, {0x2}, {0x5}, {0x1}, {0x3}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x3}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x4}, {0x0, 0x95d60819eb3d20b3}, {0x3, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {}, {0x6}, {0x2}, {0x3}, {0x4}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0x2, 0x5) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffff) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a01010000001c000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800642d784e500010000fa000008000340000000011400000011000100000000000000000001c8000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e24, @multicast1}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 2.280418106s ago: executing program 4 (id=822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x69a702, 0x20}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x2008c040}, 0x0) (fail_nth: 4) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) pipe2(0x0, 0x80) prctl$PR_GET_KEEPCAPS(0x7) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x1000000) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 2.227932927s ago: executing program 4 (id=823): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008454) sendmsg$nfc_llcp(r1, &(0x7f0000001d40)={&(0x7f0000000240)={0x27, r5, 0x0, 0x7, 0xc6, 0x3, "88c59b845131985572b68a862c4df4763d8f4cefae2ffaaed3f2c2e49ffccd163c8bc89b9b595a3da0d1eff973e695d3fff954c1e1c609b0fbc9bd60117dba", 0x1f}, 0x60, &(0x7f0000001c80)=[{&(0x7f0000000300)="3f59ad6ec07e8fcd2167ca89c82e3c0a74f1c85306634f03c3e914dd14359fc300c942ed54a3dda68b12792b7b20f1c31aba4e3ab9cfc2366f0c258e1801a9f41548e62ff722dd65c91130d79e8487c3ffbb", 0x52}, {&(0x7f0000000380)="c20805e03f979f", 0x7}, {&(0x7f0000000c80)="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", 0x1000}], 0x3, &(0x7f0000001cc0)={0x68, 0x110, 0x9, "bd57562e416027c52a03e2d9ad2a535f1899da9cdd88dad3f9d9bae600866ea531a83a270fa20281c445b2ddcfa65cff977594e58b054698e1432002066a8439c0e494d64d663db8e7088a36b4b14f919deabdd8d6a32b"}, 0x68, 0x11}, 0x20000000) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f0000000c40)={&(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x80c5) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) setuid(0xee00) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="e665d29b54740a2e70d61987000200000085000000000000d01197d2164c111446a48ee1ed47c7cdd392da817c4e8100cd3add030e4925569b833df834bc3c1f324c414a5fc87608b7087111af2b8176a62ceaac382b6f4d663b367ab775e2ad0d558a20bda594a6cb97af7b4853e6d3e89394d9c26154ca30ebea0a5a752922146f9a51e6d7602118d0dcccd1f2f83385569fbe4e2a29e8a935ff5bc461c8b5327d9ca0f0d11cfdc9689819b3da0f765c18fd303873601c7cac1df81a6e670e551b981173f8db95df61c4d7b9c87a8072f08fa9ad6e847331fb4736412c35f797a28894d893a55d338fc9e02d00f2e300"/252], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) 2.227237507s ago: executing program 5 (id=824): r0 = open(&(0x7f0000000240)='./file0\x00', 0x6ebc2, 0x91) io_setup(0x43, &(0x7f0000000440)=0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000006f00008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x18, 0x8, 0x0, r0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x2}]) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x7, 0x7fff0000}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xffffffff) r5 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo.', 0x0) 2.133813048s ago: executing program 4 (id=825): socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/tcp6\x00') read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x2}, 0xc854) 2.130400658s ago: executing program 5 (id=826): r0 = memfd_secret(0x80000) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x103}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x40, 0x18, 0x1, 0x70bdac, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x21, 'pedit\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x65, 0x10, 0x0, 0x0, 0x0, 0x5, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0xb}, 0x1004, 0x0, 0x10000, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = io_uring_setup(0x6e97, &(0x7f0000000040)={0x0, 0x2424, 0x2, 0x5, 0x172}) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000000)="fd", 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) inotify_init1(0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f00000000c0)=ANY=[@ANYBLOB="02cc164acad44f0c"], 0x12, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) 2.112651868s ago: executing program 1 (id=827): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x65}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0xfff2}, {}, {0xe, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080d8}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r11, 0x501, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20010000) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6d}}}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x15}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000900)=@ethtool_link_settings={0x4c, 0x4, 0x0, 0xe, 0x3, 0x0, 0x8, 0x0, 0x0, 0x4, [0x0, 0x0, 0x6, 0x4, 0x6, 0xffffffff, 0xfffffffa]}}) 2.110446539s ago: executing program 4 (id=828): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001c00)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6, 0x8}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0x8, 0xb709, 0x0, [{0x8, 0x1, 0x10, 0x4}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.016348879s ago: executing program 1 (id=829): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xa, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000002c0)}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, 0xffffffffffffffff) write$sndseq(r3, 0x0, 0x0) mmap(&(0x7f00003a6000/0x1000)=nil, 0x1000, 0x6, 0x128071, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000005c0), 0x10) recvmmsg(r8, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1, 0x0, 0x0, 0x8000000}, 0x9}], 0x1, 0x10002, 0x0) 1.709125142s ago: executing program 0 (id=831): syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0xd386, 0x0, 0x3, 0x7f}, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001300)=""/115) (fail_nth: 1) 1.667894243s ago: executing program 5 (id=832): openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r4, 0x0) close(0x4) 1.436661475s ago: executing program 5 (id=833): r0 = memfd_secret(0x80000) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x103}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x54, 0x18, 0x1, 0x70bdac, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x21, 'pedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = io_uring_setup(0x6e97, &(0x7f0000000040)={0x0, 0x2424, 0x2, 0x5, 0x172}) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000000)="fd", 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) inotify_init1(0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f00000000c0)=ANY=[@ANYBLOB="02cc164acad44f0c"], 0x12, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) 1.372821036s ago: executing program 0 (id=834): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_extract_tcp_res(0x0, 0x4, 0x7) bind(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = open(&(0x7f0000000080)='./file0\x00', 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7, 0x1}}, './file0\x00'}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x9, 0x4008, 0x27, @loopback, @mcast2, 0x22, 0x10, 0x4000002, 0x66f}}) 1.372383826s ago: executing program 3 (id=835): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2181}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}}, 0x0) 1.305808666s ago: executing program 0 (id=836): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 4) 1.305159696s ago: executing program 3 (id=837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001c00)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6, 0x8}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0x8, 0xb709, 0x0, [{0x8, 0x1, 0x10, 0x4}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.281596736s ago: executing program 0 (id=838): socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/tcp6\x00') read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {0x0}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) 1.231848097s ago: executing program 0 (id=839): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x65}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0xfff2}, {}, {0xe, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080d8}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r11, 0x501, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20010000) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6d}}}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x15}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000900)=@ethtool_link_settings={0x4c, 0x4, 0x0, 0xe, 0x3, 0x0, 0x8, 0x0, 0x0, 0x4, [0x0, 0x0, 0x6, 0x4, 0x6, 0xffffffff, 0xfffffffa]}}) 1.148369038s ago: executing program 0 (id=840): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xa, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r6, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x83, 0x9}, &(0x7f00000003c0)=0xa0000000000000, 0x0, 0x8, 0x8000000000000001, 0x3, 0x4843, 0x74bd180309d768c, 0x5051}}], 0x58}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000000040)='cgroup2\x00', 0x0, 0xffffffffffffffff) write$sndseq(r4, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, 0x0, 0x0) sendmmsg$inet6(r9, 0x0, 0x0, 0x20002040) 1.041467079s ago: executing program 5 (id=841): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") syz_open_dev$usbfs(&(0x7f00000000c0), 0x81, 0x200800) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000000)='./bus\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10002}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1d}, @FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 873.694011ms ago: executing program 5 (id=842): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x7, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0xfff) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r4, 0x4, 0x40800) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) r5 = getpgid(r1) syz_pidfd_open(r5, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x4}, 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0xfffffffffffffda8}, 0x48) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'lblcr\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r4, r7, 0x0, 0x7ffff004) 795.624531ms ago: executing program 1 (id=843): openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6(0xa, 0x1, 0x0) r4 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r4, 0x0) close(0x4) 739.524692ms ago: executing program 1 (id=844): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x481, &(0x7f0000003380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(0xffffffffffffffff, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1e) 660.867873ms ago: executing program 1 (id=845): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x99f}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r2, 0x1dc0000}, &(0x7f0000000100)=0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r3, 0x0, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) lchown(0x0, 0xee00, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) (async) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) (async) lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:devicekit_exec_t:s0\x00', 0x26, 0x0) (async) syz_read_part_table(0x5d6, &(0x7f0000000300)="$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") 547.729644ms ago: executing program 1 (id=846): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0xf2, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x10000000000002eb, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002ec0)=@newtaction={0xf38, 0x30, 0xb, 0x0, 0x0, {}, [{0xf24, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xbf2, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xecc, 0x2, 0x0, 0x0, {{0xa}, {0xea0, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xffffff00, 0x12a6, 0x5, 0xd, 0x7}, 0xa, 0x0, [{0xfffff801, 0x2b3, 0x0, 0x2, 0x1ff, 0x80000001}, {0x4, 0x400, 0x5, 0x1, 0x5, 0x8}, {0x2, 0x1, 0xfff, 0x7fff, 0x5, 0xe0f}, {0x4, 0x2, 0x9, 0x4, 0xfffffffa, 0x9}, {0xd, 0x7f, 0x4, 0x5, 0xcbb21a0, 0x2}]}, [{0xffffffae, 0x80000001, 0x0, 0x7, 0x8, 0xffffff33}, {0x3, 0x7, 0x1, 0x2c2, 0xa}, {0xfffffa99, 0x8, 0x6, 0x92, 0x4}, {0x9, 0x1, 0x40, 0xfffffffc, 0x5, 0x9}, {0x0, 0x200, 0x10, 0x4, 0x40, 0x2bbd}, {0xffffffff, 0x1ff, 0x917, 0x3, 0x9, 0x3}, {0x87f, 0x75, 0xc4, 0x2, 0x6, 0xff}, {0x7, 0x2cf6, 0x7, 0x6, 0x6e13, 0x7}, {0x2, 0x51, 0x9, 0x9, 0xfffffff4, 0x1}, {0x5, 0x9, 0x2, 0x101, 0xff, 0x92}, {0x5, 0x3, 0x2, 0x3, 0x9ce3, 0x5}, {0x1, 0x8, 0xbe32, 0x4, 0xc53609c, 0x6}, {0x4, 0x3, 0x10, 0x7, 0x7, 0x5ee8}, {0xcfa, 0x8, 0x0, 0x8, 0x101, 0x100}, {0x7ff, 0x940, 0x8, 0x7, 0x13}, {0x6, 0x5, 0x9, 0xb, 0x3, 0xfffff001}, {0x7a18, 0x5, 0x2, 0x0, 0xc, 0x6d}, {0xffffffff, 0x10, 0x7ff, 0x3, 0x1, 0x10000}, {0x4, 0x5, 0xa, 0x1ff, 0x10001, 0x6}, {0x5, 0x6, 0x7, 0x6, 0x7fffffff, 0xa}, {0x0, 0x8, 0x40, 0x2, 0x6, 0x3}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x8, 0x5db, 0x4c, 0x7, 0x7f, 0x4236}, {0x5, 0x3, 0x9, 0x1, 0x1, 0x94e}, {0x100000, 0x7, 0x7f, 0x1, 0x0, 0xff}, {0x3ff, 0xfffffe00, 0x3, 0x6, 0x7, 0x2}, {0x7fff, 0x10, 0x9, 0xfcc, 0x0, 0x40000000}, {0x3, 0x2, 0xffffffff, 0x7, 0x9, 0x7}, {0xa, 0xa2f, 0x4, 0xc, 0x0, 0x7}, {0xa, 0x5, 0xffff74ea, 0x30000000, 0x3, 0x8}, {0x9, 0x3, 0x3, 0x800, 0x1000, 0x8}, {0x1, 0x4, 0x4, 0x7, 0x9976, 0x8ad}, {0x6, 0x6, 0x0, 0x80000001, 0x7}, {0x1, 0x2386, 0x8001, 0x81, 0x9, 0x8}, {0x5, 0x5, 0xf4, 0x30b2, 0xd, 0x4}, {0x8, 0x3, 0x9, 0x6, 0x400, 0x9}, {0x1, 0x0, 0x8001, 0x0, 0x4, 0x31}, {0x33e8, 0x7, 0xfffffff7, 0x7, 0x3, 0x3ff}, {0x7, 0x7, 0x40000, 0x58ed, 0x80000000, 0x40}, {0x5, 0x3, 0x8, 0x4, 0x200, 0x9}, {0x37e5, 0x3, 0xd25a, 0x7ff, 0x10, 0x5}, {0x3, 0x5, 0xe9a, 0x6, 0x951, 0x9064}, {0x0, 0x1, 0x1, 0x3, 0x6, 0x3}, {0x4, 0x0, 0x3, 0x7, 0x5, 0x9}, {0x80000001, 0x6, 0x6, 0x9, 0x8, 0x268}, {0x86d0, 0x8, 0x9, 0xff, 0x24, 0x1}, {0xfffffff5, 0x2, 0x2, 0x6, 0x10, 0x6}, {0x0, 0x5, 0x6, 0x7, 0x1, 0xffffffff}, {0x4, 0xfffff2cb, 0x6, 0x6, 0xbb, 0x4}, {0x2, 0x6, 0x10, 0x6, 0x1, 0x7}, {0x8, 0x0, 0x5, 0xf1b, 0x0, 0x2}, {0x5, 0x2, 0x0, 0xb11, 0x7, 0x6}, {0x7, 0x9672, 0x7e1a, 0x0, 0x8}, {0x7f, 0xf1, 0x80000001, 0x3, 0x7fff, 0xc}, {0x5, 0xfffffffa, 0x4, 0x9, 0x6, 0x58000}, {0x9, 0x6, 0x3, 0x6, 0xfffffc00, 0x54}, {0x1, 0x9, 0x9, 0x4, 0x7, 0x1}, {0x64, 0x6, 0x1, 0x2, 0x8, 0x80000000}, {0x194b, 0x3, 0x6, 0x7f, 0x8, 0xf}, {0xf, 0x3, 0x7fffffff, 0x8, 0x4, 0x2}, {0x4, 0xcba, 0xb8, 0x91, 0x74, 0xffffffff}, {0x800, 0xffffff4b, 0x0, 0x6, 0x3, 0x8}, {0x9, 0x3f4, 0x6, 0x7, 0xb1, 0xffff3a58}, {0x3, 0x5, 0x3, 0x9, 0x8, 0x80}, {0x3667, 0x6, 0xfff, 0x3ff, 0x9, 0x5}, {0x5, 0x8, 0x80000001, 0x1, 0x3, 0x9e5}, {0x5, 0x0, 0x1, 0x7332, 0xfffffffc}, {0xa5a, 0x2, 0x4, 0x10000, 0x2, 0x1}, {0x6, 0x4, 0xffffffff, 0x1, 0xa}, {0x8, 0x2, 0x8, 0x8, 0x100, 0x7}, {0x7fff, 0x4, 0x800, 0x2, 0xc28, 0x8001}, {0x4, 0x40, 0x3, 0x1, 0x6, 0x8b0d}, {0xfffffff9, 0x4, 0x80000000, 0x1ff, 0x0, 0x1}, {0x0, 0x8, 0x6, 0xb6, 0x80000000, 0x5}, {0x8001, 0x0, 0xb8, 0x1, 0x0, 0x100}, {0x3, 0x7, 0x2, 0x9, 0x4, 0x9}, {0xd2c, 0x5, 0x9, 0x9, 0x9, 0x8}, {0x3, 0xff, 0x387c, 0x1, 0xd, 0x7}, {0x5, 0xbe82, 0x9, 0xb67d, 0x6, 0x5}, {0x7, 0x0, 0x2, 0xf5, 0x8, 0x10000}, {0x80000000, 0x2, 0x6, 0x1, 0x3, 0x5}, {0x5, 0x7f, 0x100, 0x5, 0x16, 0x1}, {0x26, 0x8, 0x2, 0xf8, 0x2, 0x20000000}, {0x8000, 0x7, 0x7, 0xd3, 0x80000000, 0xdc4}, {0x7, 0x0, 0x6, 0x95, 0xe, 0x12}, {0x7f, 0x2, 0x73c6, 0x9, 0x2, 0x7f}, {0x6, 0x3, 0x4, 0x4, 0x2, 0x7}, {0x9, 0xb83, 0x6, 0x3fa, 0x68, 0x2}, {0x0, 0xbc3, 0x2, 0x70, 0x1d, 0x9}, {0x265a, 0xd4c, 0xe, 0x8, 0xff, 0x80}, {0x8, 0x5, 0xfff, 0x3, 0x4, 0x3}, {0x40, 0x10000, 0x4, 0x7, 0x401, 0x5}, {0x7, 0x8dc0, 0x4, 0x8, 0xffffffc0, 0xfff}, {0x9, 0x4, 0x5, 0xfff, 0x6, 0x7}, {0x5172a866, 0x5, 0x3, 0x9, 0x0, 0x7}, {0x5a3, 0x1, 0x7, 0xd, 0x8, 0xfffffffd}, {0x6, 0x0, 0x2, 0x5c, 0x22, 0xb4}, {0x2, 0x4, 0x5, 0x7f, 0x1, 0x800}, {0xfffffffa, 0x9, 0x8ac0, 0x9, 0x7ff, 0xffffff75}, {0x9, 0x0, 0x9, 0x6c, 0xf65d, 0xa985}, {0x1, 0x81, 0x7dea, 0x8, 0xc24, 0x9}, {0x2, 0x0, 0x2, 0x50, 0x0, 0x8}, {0x7, 0x6, 0x2, 0x8, 0x6, 0x6}, {0x7, 0x2, 0x4, 0x6, 0x2, 0xfffffff9}, {0x8, 0x0, 0x80000001, 0x10, 0xa5ee, 0x5cf}, {0xffffffff, 0x81, 0x4, 0x511, 0x2, 0x71d}, {0x6, 0x100, 0x1, 0x800, 0x6, 0x200}, {0x5, 0x8, 0x800, 0x6, 0x4, 0x6}, {0x800, 0x9, 0x3, 0x49c, 0x5, 0xffff71f4}, {0x67, 0x4, 0xb887, 0x3, 0x0, 0xe}, {0x9, 0x40, 0x9, 0x5, 0x5, 0x5c8b}, {0x9, 0x7, 0x3ff, 0x0, 0x0, 0x1}, {0x8, 0x3, 0x0, 0x10000, 0x9, 0x40}, {0x2, 0x800, 0x2, 0x7e9c, 0xea51, 0x80}, {0x6, 0xfff, 0x4, 0x3, 0x7, 0x35ce594}, {0x6, 0xc2, 0x5, 0x80, 0x8, 0x8}, {0x7, 0x3, 0x3ff, 0xd, 0x0, 0x4}, {0xffffffff, 0x7, 0x5, 0x6, 0x8, 0x8}, {0x8, 0xff, 0x7fffffff, 0x3ff, 0x3, 0x9}, {0xffff, 0x101, 0x10, 0x10, 0xc6c8, 0x9}, {0x6d, 0x8b, 0xd, 0x9, 0x1000, 0xfff}, {0x3fc0, 0xf4f, 0x1ff, 0x1, 0xffffffff, 0x33}, {0x45a, 0x4, 0x401, 0x401, 0xffffffff, 0xb016}, {0x0, 0x1, 0x19f, 0x7, 0x1, 0x3}, {0x81, 0x6, 0x7f, 0x3, 0x1000, 0x9}, {0xe0000000, 0x4, 0x4, 0x4, 0x8000, 0x2}, {0x2, 0x4, 0xffda, 0x3, 0x100, 0x1}, {0xc2d0, 0x400, 0x3, 0x3, 0x81, 0x240000}], [{0x2, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x2}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x2b29d1b9d2bbf963}, {0x2}, {0x0, 0x1}, {0x2}, {0x5}, {0x1}, {0x3}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x3}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x4}, {0x0, 0x95d60819eb3d20b3}, {0x3, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {}, {0x6}, {0x2}, {0x3}, {0x4}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0x2, 0x5) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffff) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a01010000001c000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800642d784e500010000fa000008000340000000011400000011000100000000000000000001c8000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e24, @multicast1}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 540.809074ms ago: executing program 4 (id=847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x7c}}, 0x1000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) eventfd2(0x8, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4051) writev(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x9, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x65}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0xfff2}, {}, {0xe, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080d8}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r3, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x1a}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6d}}}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x15}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000900)=@ethtool_link_settings={0x4c, 0x4, 0x0, 0xe, 0x3, 0x0, 0x8, 0x0, 0x0, 0x4, [0x0, 0x0, 0x6, 0x4, 0x6, 0xffffffff, 0xfffffffa]}}) kernel console output (not intermixed with test programs): time 1778129768: ext4_iget_extra_inode:5128: inode 15 [ 171.977051][ T5513] FAT-fs (loop1): bogus sectors per cluster 0 [ 171.986519][ T5500] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.475: couldn't read orphan inode 15 (err -117) [ 171.994117][ T5513] FAT-fs (loop1): Can't find a valid FAT filesystem [ 172.008707][ T5500] loop3: lost filesystem error report for type 5 error -117 [ 172.014883][ T5500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.057340][ T5513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.080984][ T5513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.101278][ T5513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.121171][ T5513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.856953][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.113632][ T5540] loop2: detected capacity change from 0 to 128 [ 175.272308][ T5551] loop1: detected capacity change from 0 to 128 [ 175.284090][ T5551] FAT-fs (loop1): bogus sectors per cluster 0 [ 175.299902][ T5551] FAT-fs (loop1): Can't find a valid FAT filesystem [ 175.320194][ T5551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.342028][ T5551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.355476][ T5551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.368207][ T5551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.675726][ T5554] loop0: detected capacity change from 0 to 128 [ 175.702426][ T5554] FAT-fs (loop0): bogus sectors per cluster 0 [ 175.720213][ T5554] FAT-fs (loop0): Can't find a valid FAT filesystem [ 175.732117][ T5556] loop2: detected capacity change from 0 to 128 [ 175.744021][ T5556] FAT-fs (loop2): bogus sectors per cluster 0 [ 175.760025][ T5556] FAT-fs (loop2): Can't find a valid FAT filesystem [ 175.769841][ T5554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.789700][ T5556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.798798][ T5554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.818678][ T5556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.826840][ T5554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.843480][ T5556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.852919][ T5554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.868767][ T5556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.068148][ T5562] loop1: detected capacity change from 0 to 128 [ 176.172819][ T5562] bio_check_eod: 34 callbacks suppressed [ 176.172841][ T5562] syz.1.493: attempt to access beyond end of device [ 176.172841][ T5562] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 176.238047][ T5562] syz.1.493: attempt to access beyond end of device [ 176.238047][ T5562] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 176.277691][ T5562] syz.1.493: attempt to access beyond end of device [ 176.277691][ T5562] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 176.316914][ T5562] syz.1.493: attempt to access beyond end of device [ 176.316914][ T5562] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 176.354037][ T5562] syz.1.493: attempt to access beyond end of device [ 176.354037][ T5562] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 176.397184][ T5562] syz.1.493: attempt to access beyond end of device [ 176.397184][ T5562] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 176.426547][ T5562] syz.1.493: attempt to access beyond end of device [ 176.426547][ T5562] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 176.466565][ T5562] syz.1.493: attempt to access beyond end of device [ 176.466565][ T5562] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 176.513296][ T5562] syz.1.493: attempt to access beyond end of device [ 176.513296][ T5562] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 176.576554][ T5562] syz.1.493: attempt to access beyond end of device [ 176.576554][ T5562] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 178.453458][ T5577] netlink: 'syz.4.499': attribute type 21 has an invalid length. [ 178.481659][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 178.836112][ T5590] loop1: detected capacity change from 0 to 128 [ 179.451773][ T5598] loop2: detected capacity change from 0 to 128 [ 179.508034][ T5598] FAT-fs (loop2): bogus sectors per cluster 0 [ 179.544185][ T5598] FAT-fs (loop2): Can't find a valid FAT filesystem [ 179.581274][ T5598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.618590][ T5598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.650874][ T5598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.676687][ T5598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.697863][ T5601] loop0: detected capacity change from 0 to 256 [ 179.728910][ T5601] vfat: Unknown parameter '18446744073709551615' [ 180.371985][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 180.423078][ T5606] netlink: 104 bytes leftover after parsing attributes in process `syz.2.506'. [ 181.386046][ T5613] loop3: detected capacity change from 0 to 1024 [ 181.454583][ T5613] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 181.477669][ T5613] System zones: 0-1, 3-36 [ 181.549857][ T5613] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.508: bad orphan inode 134217728 [ 181.568295][ T5613] loop3: lost filesystem error report for type 5 error -117 [ 181.576489][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 181.590303][ C0] EXT4-fs (loop3): initial error at time 1778129778: ext4_orphan_get:1423 [ 181.598871][ C0] EXT4-fs (loop3): last error at time 1778129778: ext4_orphan_get:1423 [ 181.618214][ T5626] loop0: detected capacity change from 0 to 512 [ 181.627369][ T5626] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.642795][ T5626] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.512: corrupted in-inode xattr: e_value size too large [ 181.657022][ T5626] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.658372][ T5626] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.512: couldn't read orphan inode 15 (err -117) [ 181.667553][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 181.667569][ C0] EXT4-fs (loop0): initial error at time 1778129778: ext4_iget_extra_inode:5128: inode 15 [ 181.667593][ C0] EXT4-fs (loop0): last error at time 1778129778: ext4_iget_extra_inode:5128: inode 15 [ 181.692296][ T5613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.697755][ T5626] loop0: lost filesystem error report for type 5 error -117 [ 181.726088][ T5626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.749532][ T5629] loop1: detected capacity change from 0 to 128 [ 181.802147][ T5629] FAT-fs (loop1): bogus sectors per cluster 0 [ 181.844047][ T28] audit: type=1400 audit(1778129778.751:259): avc: denied { write } for pid=5612 comm="syz.3.508" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.872766][ T5629] FAT-fs (loop1): Can't find a valid FAT filesystem [ 181.916033][ T5631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 181.954287][ T5629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.153416][ T5629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.193963][ T5629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.277956][ T5629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.671889][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.739302][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.785043][ T5643] loop0: detected capacity change from 0 to 512 [ 182.793246][ T5643] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.808644][ T5643] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.517: corrupted in-inode xattr: e_value size too large [ 182.823321][ T5643] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 182.823558][ T5643] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.517: couldn't read orphan inode 15 (err -117) [ 182.832769][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 182.832791][ C1] EXT4-fs (loop0): initial error at time 1778129779: ext4_iget_extra_inode:5128: inode 15 [ 182.832817][ C1] EXT4-fs (loop0): last error at time 1778129779: ext4_iget_extra_inode:5128: inode 15 [ 182.877665][ T5643] loop0: lost filesystem error report for type 5 error -117 [ 182.878357][ T5643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.901890][ T5643] EXT4-fs (loop0): shut down requested (2) [ 184.456564][ T5659] loop4: detected capacity change from 0 to 256 [ 184.475583][ T5659] vfat: Unknown parameter '18446744073709551615' [ 184.827079][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.912143][ T5673] loop0: detected capacity change from 0 to 512 [ 184.929560][ T5673] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.953197][ T5673] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.523: corrupted in-inode xattr: e_value size too large [ 185.037072][ T5673] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.038695][ T5673] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.523: couldn't read orphan inode 15 (err -117) [ 185.047929][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 185.047951][ C1] EXT4-fs (loop0): initial error at time 1778129781: ext4_iget_extra_inode:5128: inode 15 [ 185.048033][ C1] EXT4-fs (loop0): last error at time 1778129781: ext4_iget_extra_inode:5128: inode 15 [ 185.086199][ T5673] loop0: lost filesystem error report for type 5 error -117 [ 185.088639][ T5673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.147231][ T5673] EXT4-fs (loop0): shut down requested (2) [ 185.216958][ T5671] loop1: detected capacity change from 0 to 1024 [ 185.227078][ T5677] loop3: detected capacity change from 0 to 128 [ 185.309099][ T5668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 185.339634][ T5671] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 185.378926][ T5671] System zones: 0-1, 3-36 [ 185.415505][ T5677] bio_check_eod: 9 callbacks suppressed [ 185.415593][ T5677] syz.3.525: attempt to access beyond end of device [ 185.415593][ T5677] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 185.483468][ T5671] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.524: bad orphan inode 134217728 [ 185.530548][ T5671] loop1: lost filesystem error report for type 5 error -117 [ 185.536495][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 185.550352][ C0] EXT4-fs (loop1): initial error at time 1778129782: ext4_orphan_get:1423 [ 185.558952][ C0] EXT4-fs (loop1): last error at time 1778129782: ext4_orphan_get:1423 [ 185.564390][ T5677] syz.3.525: attempt to access beyond end of device [ 185.564390][ T5677] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 185.642043][ T5677] syz.3.525: attempt to access beyond end of device [ 185.642043][ T5677] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 185.671225][ T5671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.736454][ T5677] syz.3.525: attempt to access beyond end of device [ 185.736454][ T5677] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 185.753256][ T28] audit: type=1400 audit(1778129782.641:260): avc: denied { write } for pid=5670 comm="syz.1.524" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.784019][ T5692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 185.795980][ T5677] syz.3.525: attempt to access beyond end of device [ 185.795980][ T5677] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 185.872834][ T5677] syz.3.525: attempt to access beyond end of device [ 185.872834][ T5677] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 185.932456][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.953707][ T5691] loop2: detected capacity change from 0 to 1024 [ 185.965245][ T5677] syz.3.525: attempt to access beyond end of device [ 185.965245][ T5677] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 186.041384][ T5691] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 186.049841][ T5677] syz.3.525: attempt to access beyond end of device [ 186.049841][ T5677] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 186.061639][ T5691] System zones: 0-1, 3-36 [ 186.100067][ T5677] syz.3.525: attempt to access beyond end of device [ 186.100067][ T5677] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 186.113742][ T5677] syz.3.525: attempt to access beyond end of device [ 186.113742][ T5677] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 186.144640][ T5691] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.527: bad orphan inode 134217728 [ 186.176343][ T5695] loop1: detected capacity change from 0 to 1024 [ 186.192517][ T5691] loop2: lost filesystem error report for type 5 error -117 [ 186.207679][ T5698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.529'. [ 186.228224][ T5695] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 186.260194][ T5695] System zones: 0-1, 3-36 [ 186.301794][ T5691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.396109][ T28] audit: type=1400 audit(1778129783.301:261): avc: denied { write } for pid=5690 comm="syz.2.527" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.424497][ T5704] netlink: 'syz.4.531': attribute type 21 has an invalid length. [ 186.433229][ T5695] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.528: bad orphan inode 134217728 [ 186.446851][ T5704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 186.456995][ T5695] loop1: lost filesystem error report for type 5 error -117 [ 186.460219][ T5691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.527'. [ 186.478116][ T5695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.549474][ T28] audit: type=1400 audit(1778129783.451:262): avc: denied { write } for pid=5694 comm="syz.1.528" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.591601][ T5708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.528'. [ 186.813756][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.968548][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.991381][ T5715] loop2: detected capacity change from 0 to 512 [ 187.007048][ T5715] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.050647][ T5715] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.535: corrupted in-inode xattr: e_value size too large [ 187.113446][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.125540][ T5715] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.125789][ T5715] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.535: couldn't read orphan inode 15 (err -117) [ 187.134972][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 187.135010][ C0] EXT4-fs (loop2): initial error at time 1778129784: ext4_iget_extra_inode:5128: inode 15 [ 187.135046][ C0] EXT4-fs (loop2): last error at time 1778129784: ext4_iget_extra_inode:5128: inode 15 [ 187.140088][ T5719] loop3: detected capacity change from 0 to 256 [ 187.191649][ T5719] vfat: Unknown parameter '18446744073709551615' [ 187.212765][ T5715] loop2: lost filesystem error report for type 5 error -117 [ 187.213563][ T5715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.227484][ T5722] netlink: 'syz.0.537': attribute type 21 has an invalid length. [ 187.260117][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 188.052077][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.768197][ T5725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 190.425087][ T5751] netlink: 104 bytes leftover after parsing attributes in process `syz.2.545'. [ 190.439032][ T5748] netlink: 'syz.4.543': attribute type 21 has an invalid length. [ 190.460823][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 190.887982][ T5762] loop0: detected capacity change from 0 to 128 [ 190.947664][ T5756] loop1: detected capacity change from 0 to 256 [ 191.010312][ T5756] vfat: Unknown parameter '18446744073709551615' [ 191.088676][ T5758] syz.0.547: attempt to access beyond end of device [ 191.088676][ T5758] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 191.102598][ T5758] syz.0.547: attempt to access beyond end of device [ 191.102598][ T5758] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 191.116570][ T5758] syz.0.547: attempt to access beyond end of device [ 191.116570][ T5758] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 191.130073][ T5758] syz.0.547: attempt to access beyond end of device [ 191.130073][ T5758] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 191.159812][ T5758] syz.0.547: attempt to access beyond end of device [ 191.159812][ T5758] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 191.259923][ T5758] syz.0.547: attempt to access beyond end of device [ 191.259923][ T5758] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 191.306670][ T5758] syz.0.547: attempt to access beyond end of device [ 191.306670][ T5758] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 191.340357][ T5758] syz.0.547: attempt to access beyond end of device [ 191.340357][ T5758] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 191.378816][ T5758] syz.0.547: attempt to access beyond end of device [ 191.378816][ T5758] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 191.398556][ T5760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 191.412271][ T5773] loop4: detected capacity change from 0 to 512 [ 191.427812][ T5773] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.438447][ T5758] syz.0.547: attempt to access beyond end of device [ 191.438447][ T5758] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 191.453627][ T5773] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.550: corrupted in-inode xattr: e_value size too large [ 191.503051][ T5773] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.503395][ T5773] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.550: couldn't read orphan inode 15 (err -117) [ 191.512639][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 191.512656][ C0] EXT4-fs (loop4): initial error at time 1778129788: ext4_iget_extra_inode:5128: inode 15 [ 191.512691][ C0] EXT4-fs (loop4): last error at time 1778129788: ext4_iget_extra_inode:5128: inode 15 [ 191.590631][ T5773] loop4: lost filesystem error report for type 5 error -117 [ 191.591432][ T5773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.652496][ T5773] EXT4-fs (loop4): shut down requested (2) [ 193.499480][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.640807][ T5804] loop4: detected capacity change from 0 to 128 [ 193.801256][ T5804] FAT-fs (loop4): bogus sectors per cluster 0 [ 193.829001][ T5804] FAT-fs (loop4): Can't find a valid FAT filesystem [ 193.886848][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.911187][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.923321][ T5810] loop1: detected capacity change from 0 to 256 [ 194.140996][ T5810] vfat: Unknown parameter '18446744073709551615' [ 194.159826][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.282749][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.520704][ T5804] xt_hashlimit: size too large, truncated to 1048576 [ 194.737682][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 195.672416][ T5828] loop3: detected capacity change from 0 to 128 [ 195.775125][ T5835] loop4: detected capacity change from 0 to 512 [ 195.809901][ T5835] EXT4-fs: Ignoring removed mblk_io_submit option [ 195.846782][ T5835] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.567: corrupted in-inode xattr: e_value size too large [ 195.872825][ T5825] loop1: detected capacity change from 0 to 1764 [ 195.886594][ T5835] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 195.888661][ T5835] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.567: couldn't read orphan inode 15 (err -117) [ 195.898000][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 195.898017][ C1] EXT4-fs (loop4): initial error at time 1778129792: ext4_iget_extra_inode:5128: inode 15 [ 195.898070][ C1] EXT4-fs (loop4): last error at time 1778129792: ext4_iget_extra_inode:5128: inode 15 [ 195.936111][ T5835] loop4: lost filesystem error report for type 5 error -117 [ 195.975216][ T5835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.040660][ T5835] EXT4-fs (loop4): shut down requested (2) [ 196.096903][ T5848] loop2: detected capacity change from 0 to 128 [ 196.254648][ T5840] bio_check_eod: 58 callbacks suppressed [ 196.254676][ T5840] syz.2.568: attempt to access beyond end of device [ 196.254676][ T5840] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 196.375474][ T5840] syz.2.568: attempt to access beyond end of device [ 196.375474][ T5840] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 196.397989][ T5852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.570'. [ 196.464776][ T5840] syz.2.568: attempt to access beyond end of device [ 196.464776][ T5840] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 196.522830][ T5840] syz.2.568: attempt to access beyond end of device [ 196.522830][ T5840] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 196.547722][ T5840] syz.2.568: attempt to access beyond end of device [ 196.547722][ T5840] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 196.670729][ T5840] syz.2.568: attempt to access beyond end of device [ 196.670729][ T5840] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 196.737801][ T5840] syz.2.568: attempt to access beyond end of device [ 196.737801][ T5840] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 198.270602][ T5861] loop1: detected capacity change from 0 to 256 [ 198.285494][ T5861] vfat: Unknown parameter '18446744073709551615' [ 198.328606][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.447402][ T28] audit: type=1400 audit(1778129795.361:263): avc: denied { mount } for pid=5863 comm="syz.4.573" name="/" dev="configfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 198.498408][ T5867] Driver unsupported XDP return value 0 on prog (id 228) dev N/A, expect packet loss! [ 198.505911][ T28] audit: type=1400 audit(1778129795.361:264): avc: denied { search } for pid=5863 comm="syz.4.573" name="/" dev="configfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.589130][ T5874] loop4: detected capacity change from 0 to 512 [ 198.599450][ T28] audit: type=1400 audit(1778129795.381:265): avc: denied { search } for pid=5863 comm="syz.4.573" name="/" dev="configfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.652453][ T5874] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.579: iget: bad extra_isize 58 (inode size 256) [ 198.671927][ T5878] loop0: detected capacity change from 0 to 1024 [ 198.677898][ T28] audit: type=1400 audit(1778129795.381:266): avc: denied { search } for pid=5863 comm="syz.4.573" name="/" dev="configfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.735927][ T5874] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 198.736539][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 198.752244][ C0] EXT4-fs (loop4): initial error at time 1778129795: ext4_xattr_inode_iget:441: inode 11 [ 198.762111][ C0] EXT4-fs (loop4): last error at time 1778129795: ext4_xattr_inode_iget:441: inode 11 [ 198.773070][ T5874] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.579: error while reading EA inode 11 err=-117 [ 198.796626][ T5874] loop4: lost filesystem error report for type 5 error -117 [ 198.796822][ T5874] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 198.806224][ T28] audit: type=1400 audit(1778129795.481:267): avc: denied { create } for pid=5873 comm="syz.4.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.819869][ T5878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.851970][ T28] audit: type=1400 audit(1778129795.481:268): avc: denied { write } for pid=5873 comm="syz.4.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.872160][ T28] audit: type=1400 audit(1778129795.481:269): avc: denied { nlmsg_write } for pid=5873 comm="syz.4.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.893533][ T5874] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.579: iget: bad extra_isize 58 (inode size 256) [ 198.893546][ T28] audit: type=1400 audit(1778129795.491:270): avc: denied { write } for pid=5873 comm="syz.4.579" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 198.893582][ T28] audit: type=1400 audit(1778129795.531:271): avc: denied { remount } for pid=5866 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 198.946343][ T5874] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 198.947571][ T28] audit: type=1400 audit(1778129795.541:272): avc: denied { connect } for pid=5876 comm="syz.0.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 198.947582][ T5874] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.579: error while reading EA inode 11 err=-117 [ 198.989270][ T5874] loop4: lost filesystem error report for type 5 error -117 [ 198.989474][ T5874] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.579: iget: bad extra_isize 58 (inode size 256) [ 199.026592][ T5874] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 199.026867][ T5874] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.579: error while reading EA inode 18 err=-117 [ 199.060278][ T5874] loop4: lost filesystem error report for type 5 error -117 [ 199.062310][ T5874] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.579: iget: bad extra_isize 58 (inode size 256) [ 199.093574][ T5874] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 199.093937][ T5874] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.579: error while reading EA inode 18 err=-117 [ 199.117552][ T5874] loop4: lost filesystem error report for type 5 error -117 [ 199.117860][ T5874] EXT4-fs (loop4): 1 orphan inode deleted [ 199.138336][ T5874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.153460][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 201.434344][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.523957][ T5898] loop3: detected capacity change from 0 to 512 [ 201.552310][ T5898] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.585279][ T5898] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.583: corrupted in-inode xattr: e_value size too large [ 201.628213][ T5898] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 201.630600][ T5898] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.583: couldn't read orphan inode 15 (err -117) [ 201.636556][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 201.658030][ C1] EXT4-fs (loop3): initial error at time 1778129798: ext4_iget_extra_inode:5128: inode 15 [ 201.668022][ C1] EXT4-fs (loop3): last error at time 1778129798: ext4_iget_extra_inode:5128: inode 15 [ 201.697311][ T5898] loop3: lost filesystem error report for type 5 error -117 [ 201.697992][ T5898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.743090][ T5898] EXT4-fs (loop3): shut down requested (2) [ 202.061221][ T5908] loop1: detected capacity change from 0 to 1024 [ 202.190220][ T5908] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 202.234157][ T5908] System zones: 0-1, 3-36 [ 202.310660][ T5908] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.586: bad orphan inode 134217728 [ 202.351002][ T5908] loop1: lost filesystem error report for type 5 error -117 [ 202.356523][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 202.370428][ C1] EXT4-fs (loop1): initial error at time 1778129799: ext4_orphan_get:1423 [ 202.379036][ C1] EXT4-fs (loop1): last error at time 1778129799: ext4_orphan_get:1423 [ 202.432459][ T5908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.559215][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 202.590809][ T5925] netlink: 104 bytes leftover after parsing attributes in process `syz.4.588'. [ 203.090677][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.858459][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.214673][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 204.214691][ T28] audit: type=1400 audit(1778129801.121:277): avc: denied { create } for pid=5941 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 204.234246][ T28] audit: type=1400 audit(1778129801.141:278): avc: denied { write } for pid=5941 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 204.320358][ T28] audit: type=1400 audit(1778129801.211:279): avc: denied { setopt } for pid=5941 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 204.469801][ T5955] loop1: detected capacity change from 0 to 1024 [ 204.550550][ T5955] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 204.554485][ T5955] System zones: 0-1, 3-36 [ 204.615854][ T5955] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.597: bad orphan inode 134217728 [ 204.620965][ T5955] loop1: lost filesystem error report for type 5 error -117 [ 204.660720][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 204.686500][ C0] EXT4-fs (loop1): initial error at time 1778129801: ext4_orphan_get:1423 [ 204.697189][ C0] EXT4-fs (loop1): last error at time 1778129801: ext4_orphan_get:1423 [ 204.799717][ T5955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.977345][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.597'. [ 204.989065][ T28] audit: type=1400 audit(1778129801.871:280): avc: denied { write } for pid=5954 comm="syz.1.597" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.320426][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.363720][ T5967] loop3: detected capacity change from 0 to 1024 [ 205.392360][ T5969] loop1: detected capacity change from 0 to 128 [ 205.425126][ T5967] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 205.439145][ T5967] System zones: 0-1, 3-36 [ 205.449200][ T5969] FAT-fs (loop1): bogus sectors per cluster 0 [ 205.469384][ T5969] FAT-fs (loop1): Can't find a valid FAT filesystem [ 205.480902][ T5967] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.598: bad orphan inode 134217728 [ 205.494901][ T5967] loop3: lost filesystem error report for type 5 error -117 [ 205.496227][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.503075][ T5942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 205.504062][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.507114][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.525046][ T5967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.530779][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.555836][ T5969] xt_hashlimit: size too large, truncated to 1048576 [ 205.679199][ T28] audit: type=1400 audit(1778129802.571:281): avc: denied { write } for pid=5966 comm="syz.3.598" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.719800][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.598'. [ 205.941972][ T5978] netlink: 'syz.0.601': attribute type 1 has an invalid length. [ 205.985212][ T5978] bond1: entered promiscuous mode [ 206.006962][ T5978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.033881][ T28] audit: type=1400 audit(1778129802.941:282): avc: denied { write } for pid=5977 comm="syz.0.601" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 206.061244][ T28] audit: type=1400 audit(1778129802.971:283): avc: denied { map } for pid=5977 comm="syz.0.601" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 206.086700][ T5978] vhci_hcd vhci_hcd.2: invalid port number 96 [ 206.112687][ T5978] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 206.265083][ T5978] bond1: (slave bridge1): making interface the new active one [ 206.294726][ T5978] bridge1: entered promiscuous mode [ 206.316316][ T5978] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 206.407815][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.556604][ T5986] netlink: 'syz.3.602': attribute type 21 has an invalid length. [ 206.574702][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 207.167410][ T28] audit: type=1400 audit(1778129804.081:284): avc: denied { getopt } for pid=5997 comm="syz.0.605" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.241877][ T28] audit: type=1400 audit(1778129804.121:285): avc: denied { firmware_load } for pid=5997 comm="syz.0.605" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 207.420796][ T28] audit: type=1400 audit(1778129804.331:286): avc: denied { name_connect } for pid=6006 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 207.599150][ T5998] syz.0.605 (5998) used greatest stack depth: 9912 bytes left [ 207.672105][ T6011] loop3: detected capacity change from 0 to 512 [ 207.687305][ T6011] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.717716][ T6011] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.610: corrupted in-inode xattr: e_value size too large [ 207.746534][ T6011] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 207.749313][ T6011] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.610: couldn't read orphan inode 15 (err -117) [ 207.758599][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 207.758616][ C1] EXT4-fs (loop3): initial error at time 1778129804: ext4_iget_extra_inode:5128: inode 15 [ 207.758647][ C1] EXT4-fs (loop3): last error at time 1778129804: ext4_iget_extra_inode:5128: inode 15 [ 207.796540][ T6011] loop3: lost filesystem error report for type 5 error -117 [ 207.797176][ T6011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.522481][ T6025] loop2: detected capacity change from 0 to 512 [ 208.553399][ T6025] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #11: block 327694: comm syz.2.613: lblock 0 mapped to illegal pblock 327694 (length 1) [ 208.606665][ T6025] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 208.610484][ T6025] ------------[ cut here ]------------ [ 208.619701][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 208.619721][ C1] EXT4-fs (loop2): initial error at time 1778129805: ext4_map_blocks:791: inode 11: block 327694 [ 208.619751][ C1] EXT4-fs (loop2): last error at time 1778129805: ext4_map_blocks:791: inode 11: block 327694 [ 208.652610][ T6025] EA inode 11 i_nlink=2 [ 208.652664][ T6025] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.2.613/6025 [ 208.667631][ T6025] Modules linked in: [ 208.671655][ T6025] CPU: 1 UID: 0 PID: 6025 Comm: syz.2.613 Not tainted syzkaller #0 PREEMPT(full) [ 208.681047][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.691182][ T6025] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 208.698003][ T6025] Code: 14 5e 98 ff 4c 8d 2d bd 64 5c 05 49 8d 7e 40 e8 64 1c b6 ff 49 8b 6e 40 4c 89 e7 e8 98 17 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 cf 96 d7 03 66 66 66 66 66 66 2e [ 208.717701][ T6025] RSP: 0018:ffffc90000f1f778 EFLAGS: 00010246 [ 208.723837][ T6025] RAX: ffff8881021c2cf8 RBX: ffff88810717c178 RCX: ffffffff81c0d078 [ 208.731876][ T6025] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3520 [ 208.740013][ T6025] RBP: 000000000000000b R08: 000188810717c12b R09: 0000000000000000 [ 208.748143][ T6025] R10: ffffc90000f1f6a8 R11: 0001c90000f1f6a8 R12: ffff88810717c128 [ 208.756210][ T6025] R13: ffffffff871d3520 R14: ffff88810717c0e0 R15: 0000000000000001 [ 208.764260][ T6025] FS: 00007fe57dc1f6c0(0000) GS:ffff8882ae9fe000(0000) knlGS:0000000000000000 [ 208.773276][ T6025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.779962][ T6025] CR2: 0000200000d6b030 CR3: 000000012139c000 CR4: 00000000003506f0 [ 208.787988][ T6025] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 208.796065][ T6025] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 208.804087][ T6025] Call Trace: [ 208.807488][ T6025] [ 208.810479][ T6025] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 208.816539][ T6025] ? errseq_check+0x2c/0x50 [ 208.821174][ T6025] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 208.826800][ T6025] ? ext4_truncate+0x89f/0xa10 [ 208.831617][ T6025] ext4_evict_inode+0xb16/0xe30 [ 208.836547][ T6025] ? __pfx_ext4_evict_inode+0x10/0x10 [ 208.841976][ T6025] evict+0x2af/0x510 [ 208.845922][ T6025] ? __dquot_initialize+0x146/0x7c0 [ 208.851201][ T6025] iput+0x41a/0x580 [ 208.855102][ T6025] ext4_process_orphan+0x1a9/0x1c0 [ 208.860366][ T6025] ext4_orphan_cleanup+0x69c/0x9f0 [ 208.865564][ T6025] ext4_fill_super+0x3408/0x37c0 [ 208.870588][ T6025] ? set_blocksize+0x14c/0x270 [ 208.875405][ T6025] ? setup_bdev_super+0x30e/0x370 [ 208.880486][ T6025] ? __pfx_ext4_fill_super+0x10/0x10 [ 208.885811][ T6025] get_tree_bdev_flags+0x291/0x300 [ 208.891129][ T6025] ? __pfx_ext4_fill_super+0x10/0x10 [ 208.896661][ T6025] get_tree_bdev+0x1f/0x30 [ 208.901365][ T6025] ext4_get_tree+0x1c/0x30 [ 208.905989][ T6025] vfs_get_tree+0x57/0x1d0 [ 208.910544][ T6025] do_new_mount+0x288/0x8d0 [ 208.915123][ T6025] path_mount+0x4d0/0xbc0 [ 208.919569][ T6025] __se_sys_mount+0x28c/0x2e0 [ 208.924489][ T6025] __x64_sys_mount+0x67/0x80 [ 208.929215][ T6025] x64_sys_call+0x2d61/0x3020 [ 208.933995][ T6025] do_syscall_64+0x12c/0x3b0 [ 208.938655][ T6025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.944662][ T6025] RIP: 0033:0x7fe57f1ce04a [ 208.949243][ T6025] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.969004][ T6025] RSP: 002b:00007fe57dc1ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 208.977533][ T6025] RAX: ffffffffffffffda RBX: 00007fe57dc1eee0 RCX: 00007fe57f1ce04a [ 208.985555][ T6025] RDX: 0000200000000080 RSI: 00002000000001c0 RDI: 00007fe57dc1eea0 [ 208.993582][ T6025] RBP: 0000200000000080 R08: 00007fe57dc1eee0 R09: 0000000000800718 [ 209.001617][ T6025] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 209.009662][ T6025] R13: 00007fe57dc1eea0 R14: 000000000000048a R15: 0000200000000000 [ 209.017699][ T6025] [ 209.020741][ T6025] ---[ end trace 0000000000000000 ]--- [ 209.027301][ T6025] EXT4-fs (loop2): 1 orphan inode deleted [ 209.046765][ T6025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.389693][ T6036] loop1: detected capacity change from 0 to 512 [ 209.412477][ T6036] EXT4-fs: Ignoring removed oldalloc option [ 209.445883][ T6036] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.529558][ T6036] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.616: iget: bad i_size value: 38620345925642 [ 209.553779][ T6036] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 209.554029][ T6036] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.616: couldn't read orphan inode 15 (err -117) [ 209.563235][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 209.563260][ C0] EXT4-fs (loop1): initial error at time 1778129806: ext4_orphan_get:1397: inode 15 [ 209.563299][ C0] EXT4-fs (loop1): last error at time 1778129806: ext4_orphan_get:1397: inode 15 [ 209.606558][ T6036] loop1: lost filesystem error report for type 5 error -117 [ 209.639871][ T6036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.689304][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 209.689353][ T28] audit: type=1400 audit(1778129806.601:294): avc: denied { read } for pid=6035 comm="syz.1.616" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 209.720751][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.616'. [ 209.736433][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.781178][ T28] audit: type=1400 audit(1778129806.601:295): avc: denied { open } for pid=6035 comm="syz.1.616" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 209.854761][ T6041] loop2: detected capacity change from 0 to 2048 [ 210.761368][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.776277][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.789102][ T6041] loop2: p1 p2 p3 [ 210.794047][ T6041] loop2: p2 size 458752 extends beyond EOD, truncated [ 210.805151][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'. [ 210.821898][ T6041] loop2: p3 start 65280 is beyond EOD, truncated [ 210.848492][ T2981] loop2: p1 p2 p3 [ 210.854555][ T2981] loop2: p2 size 458752 extends beyond EOD, truncated [ 210.863210][ T2981] loop2: p3 start 65280 is beyond EOD, truncated [ 211.030793][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 211.044181][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 211.232568][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 211.243385][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 211.325442][ T6064] loop1: detected capacity change from 0 to 512 [ 211.355955][ T6064] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.400972][ T6064] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.626: corrupted in-inode xattr: e_value size too large [ 211.434644][ T6064] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.436478][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 211.452160][ C1] EXT4-fs (loop1): initial error at time 1778129808: ext4_iget_extra_inode:5128: inode 15 [ 211.462128][ C1] EXT4-fs (loop1): last error at time 1778129808: ext4_iget_extra_inode:5128: inode 15 [ 211.472672][ T6064] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.626: couldn't read orphan inode 15 (err -117) [ 211.501775][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 211.543868][ T6064] loop1: lost filesystem error report for type 5 error -117 [ 211.544458][ T6064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.579569][ T6064] EXT4-fs (loop1): shut down requested (2) [ 212.151122][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.628'. [ 212.178411][ T28] audit: type=1400 audit(1778129809.091:296): avc: denied { bind } for pid=6077 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 212.259306][ T28] audit: type=1400 audit(1778129809.091:297): avc: denied { write } for pid=6077 comm="syz.0.628" name="ptype" dev="proc" ino=4026532506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 212.282361][ T6075] loop4: detected capacity change from 0 to 1024 [ 212.334130][ T6075] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 212.376011][ T6075] System zones: 0-1, 3-36 [ 212.423825][ T6083] loop2: detected capacity change from 0 to 512 [ 212.486431][ T6083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.515273][ T6075] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.627: bad orphan inode 134217728 [ 212.527985][ T6083] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.566793][ T6083] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.630: corrupted inode contents [ 212.582841][ T28] audit: type=1400 audit(1778129809.471:298): avc: denied { write } for pid=6082 comm="syz.2.630" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.636559][ T6075] loop4: lost filesystem error report for type 5 error -117 [ 212.638558][ T6083] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #2: comm syz.2.630: mark_inode_dirty error [ 212.665662][ T6075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.689197][ T28] audit: type=1400 audit(1778129809.471:299): avc: denied { create } for pid=6082 comm="syz.2.630" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 212.720151][ T6083] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.630: corrupted inode contents [ 212.763174][ T28] audit: type=1400 audit(1778129809.541:300): avc: denied { map } for pid=6082 comm="syz.2.630" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 212.783952][ T6083] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.630: mark_inode_dirty error [ 212.806391][ T6095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.627'. [ 212.816157][ T28] audit: type=1400 audit(1778129809.541:301): avc: denied { read } for pid=6082 comm="syz.2.630" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 212.849333][ T6092] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.630: corrupted inode contents [ 212.866790][ T28] audit: type=1400 audit(1778129809.671:302): avc: denied { write } for pid=6074 comm="syz.4.627" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.888648][ T28] audit: type=1400 audit(1778129809.671:303): avc: denied { setattr } for pid=6082 comm="syz.2.630" path="/134/bus" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.996539][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.034604][ T6099] netlink: 'syz.2.635': attribute type 12 has an invalid length. [ 213.064031][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.635'. [ 214.092580][ T6106] SET target dimension over the limit! [ 214.134825][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.135696][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.349549][ T6131] netlink: 'syz.1.643': attribute type 21 has an invalid length. [ 214.375896][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 214.728911][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 214.728930][ T28] audit: type=1400 audit(1778129811.641:311): avc: denied { ioctl } for pid=6158 comm="syz.0.644" path="socket:[12478]" dev="sockfs" ino=12478 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 214.837750][ T28] audit: type=1400 audit(1778129811.751:312): avc: denied { listen } for pid=6170 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.882239][ T28] audit: type=1400 audit(1778129811.771:313): avc: denied { connect } for pid=6170 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.902565][ T28] audit: type=1400 audit(1778129811.771:314): avc: denied { write } for pid=6170 comm="syz.1.646" path="socket:[12216]" dev="sockfs" ino=12216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 214.926716][ T28] audit: type=1400 audit(1778129811.771:315): avc: denied { accept } for pid=6170 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 215.383515][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'. [ 215.480560][ T6255] loop1: detected capacity change from 0 to 512 [ 215.491292][ T6251] loop2: detected capacity change from 0 to 2048 [ 215.508638][ T6255] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.531116][ T6251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.556698][ T6255] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.650: corrupted in-inode xattr: e_value size too large [ 215.587182][ T6255] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 215.587450][ T6255] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.650: couldn't read orphan inode 15 (err -117) [ 215.596788][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 215.596832][ C1] EXT4-fs (loop1): initial error at time 1778129812: ext4_iget_extra_inode:5128: inode 15 [ 215.596872][ C1] EXT4-fs (loop1): last error at time 1778129812: ext4_iget_extra_inode:5128: inode 15 [ 215.610482][ T28] audit: type=1400 audit(1778129812.501:316): avc: denied { write } for pid=6246 comm="syz.2.649" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.615202][ T6255] loop1: lost filesystem error report for type 5 error -117 [ 215.616812][ T6255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.706484][ T28] audit: type=1400 audit(1778129812.501:317): avc: denied { read write } for pid=6246 comm="syz.2.649" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.763217][ T6255] EXT4-fs (loop1): shut down requested (2) [ 215.901037][ T28] audit: type=1400 audit(1778129812.501:318): avc: denied { open } for pid=6246 comm="syz.2.649" path="/138/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.931684][ T28] audit: type=1400 audit(1778129812.841:319): avc: denied { read } for pid=6246 comm="syz.2.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 216.158782][ T6278] loop3: detected capacity change from 0 to 256 [ 216.175859][ T6278] vfat: Unknown parameter '18446744073709551615' [ 216.432721][ T6285] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.690915][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 217.478687][ T6201] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 217.494747][ T6290] netlink: 'syz.0.655': attribute type 21 has an invalid length. [ 217.509505][ T6201] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 200 with error 28 [ 217.531446][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 217.551395][ T6201] EXT4-fs (loop2): This should not happen!! Data will be lost [ 217.551395][ T6201] [ 217.561662][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.575510][ T6201] EXT4-fs (loop2): Total free blocks count 0 [ 217.582990][ T6201] EXT4-fs (loop2): Free/Dirty block details [ 217.594137][ T6294] loop4: detected capacity change from 0 to 512 [ 217.601973][ T6201] EXT4-fs (loop2): free_blocks=2415919504 [ 217.617147][ T6201] EXT4-fs (loop2): dirty_blocks=208 [ 217.621667][ T6294] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.642213][ T6201] EXT4-fs (loop2): Block reservation details [ 217.654667][ T6201] EXT4-fs (loop2): i_reserved_data_blocks=13 [ 217.711709][ T3304] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 217.723267][ T6294] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.658: corrupted in-inode xattr: e_value size too large [ 217.737352][ T6294] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 217.737576][ T6294] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.658: couldn't read orphan inode 15 (err -117) [ 217.746848][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 217.746872][ C0] EXT4-fs (loop4): initial error at time 1778129814: ext4_iget_extra_inode:5128: inode 15 [ 217.746898][ C0] EXT4-fs (loop4): last error at time 1778129814: ext4_iget_extra_inode:5128: inode 15 [ 217.785442][ T6294] loop4: lost filesystem error report for type 5 error -117 [ 217.786081][ T6294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.821382][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.854497][ T6302] loop3: detected capacity change from 0 to 512 [ 218.220454][ T6315] loop2: detected capacity change from 0 to 512 [ 218.229373][ T28] audit: type=1400 audit(1778129815.141:320): avc: denied { perfmon } for pid=6293 comm="syz.4.658" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 218.260807][ T6315] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 218.297969][ T6315] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 218.327964][ T6315] EXT4-fs error (device loop2): ext4_init_orphan_info:618: comm syz.2.657: orphan file block 0: bad magic [ 218.349109][ T6315] loop2: lost filesystem error report for type 5 error -117 [ 218.349361][ T6315] EXT4-fs (loop2): mount failed [ 218.357000][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 218.357022][ C0] EXT4-fs (loop2): initial error at time 1778129815: ext4_init_orphan_info:618 [ 218.357067][ C0] EXT4-fs (loop2): last error at time 1778129815: ext4_init_orphan_info:618 [ 218.477786][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.071275][ T6356] netlink: 300 bytes leftover after parsing attributes in process `syz.0.666'. [ 219.117620][ T6356] netlink: 'syz.0.666': attribute type 1 has an invalid length. [ 219.135989][ T6356] IPv6: Can't replace route, no match found [ 220.617163][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.950458][ T6340] syz.2.665 (6340) used greatest stack depth: 9776 bytes left [ 221.494879][ T6380] loop1: detected capacity change from 0 to 128 [ 221.529236][ T6380] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.561774][ T6380] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 221.594523][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 221.594538][ T28] audit: type=1400 audit(1778129818.501:328): avc: denied { name_bind } for pid=6383 comm="syz.4.674" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 221.628920][ T6382] loop2: detected capacity change from 0 to 2048 [ 221.646602][ T28] audit: type=1400 audit(1778129818.551:329): avc: denied { write } for pid=6378 comm="syz.1.673" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.672913][ T6382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.695996][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.705186][ T28] audit: type=1400 audit(1778129818.581:330): avc: denied { setattr } for pid=6378 comm="syz.1.673" name="bus" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 221.745407][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 221.805236][ T28] audit: type=1400 audit(1778129818.581:331): avc: denied { write } for pid=6378 comm="syz.1.673" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.859792][ T28] audit: type=1400 audit(1778129818.581:332): avc: denied { append } for pid=6378 comm="syz.1.673" path="/134/mnt/blkio.bfq.io_merged_recursive" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 221.898735][ T6389] loop1: detected capacity change from 0 to 1024 [ 221.912673][ T28] audit: type=1400 audit(1778129818.641:333): avc: denied { write } for pid=6377 comm="syz.2.672" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.955435][ T28] audit: type=1400 audit(1778129818.641:334): avc: denied { create } for pid=6377 comm="syz.2.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 221.981835][ T6389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.999660][ T28] audit: type=1400 audit(1778129818.651:335): avc: denied { ioctl } for pid=6377 comm="syz.2.672" path="socket:[12632]" dev="sockfs" ino=12632 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 222.024637][ T28] audit: type=1400 audit(1778129818.801:336): avc: denied { read append } for pid=6392 comm="syz.0.676" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 222.049141][ T28] audit: type=1400 audit(1778129818.801:337): avc: denied { open } for pid=6392 comm="syz.0.676" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 222.084046][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.450638][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.321947][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 224.333347][ T6424] loop1: detected capacity change from 0 to 256 [ 224.407437][ T6424] vfat: Unknown parameter '18446744073709551615' [ 225.435378][ T6435] loop4: detected capacity change from 0 to 512 [ 225.516171][ T6435] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.625114][ T6435] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.688: corrupted in-inode xattr: e_value size too large [ 225.659473][ T6435] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 225.659691][ T6435] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.688: couldn't read orphan inode 15 (err -117) [ 225.668919][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 225.668945][ C1] EXT4-fs (loop4): initial error at time 1778129822: ext4_iget_extra_inode:5128: inode 15 [ 225.669017][ C1] EXT4-fs (loop4): last error at time 1778129822: ext4_iget_extra_inode:5128: inode 15 [ 225.721438][ T6435] loop4: lost filesystem error report for type 5 error -117 [ 225.722248][ T6435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.784376][ T6435] EXT4-fs (loop4): shut down requested (2) [ 226.601902][ T6455] loop2: detected capacity change from 0 to 512 [ 226.621980][ T6455] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.649272][ T6455] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.692: corrupted in-inode xattr: e_value size too large [ 226.676535][ T6455] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 226.676934][ T6455] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.692: couldn't read orphan inode 15 (err -117) [ 226.697978][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 226.698021][ C1] EXT4-fs (loop2): initial error at time 1778129823: ext4_iget_extra_inode:5128: inode 15 [ 226.698076][ C1] EXT4-fs (loop2): last error at time 1778129823: ext4_iget_extra_inode:5128: inode 15 [ 226.769337][ T6455] loop2: lost filesystem error report for type 5 error -117 [ 226.770045][ T6455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.821283][ T6455] EXT4-fs (loop2): shut down requested (2) [ 227.028550][ T6460] loop3: detected capacity change from 0 to 512 [ 227.036321][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.085818][ T6460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.157705][ T6466] loop2: detected capacity change from 0 to 1024 [ 227.164650][ T6460] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.218243][ T6466] EXT4-fs: test_dummy_encryption option not supported [ 227.404502][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 227.404520][ T28] audit: type=1400 audit(1778129824.311:344): avc: denied { mount } for pid=6459 comm="syz.3.693" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 227.434157][ T6467] FAULT_INJECTION: forcing a failure. [ 227.434157][ T6467] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 227.447559][ T6467] CPU: 0 UID: 0 PID: 6467 Comm: syz.3.693 Tainted: G W syzkaller #0 PREEMPT(full) [ 227.447598][ T6467] Tainted: [W]=WARN [ 227.447607][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.447685][ T6467] Call Trace: [ 227.447692][ T6467] [ 227.447701][ T6467] __dump_stack+0x1d/0x30 [ 227.447732][ T6467] dump_stack_lvl+0x95/0xd0 [ 227.447937][ T6467] dump_stack+0x15/0x1b [ 227.447958][ T6467] should_fail_ex+0x263/0x280 [ 227.447992][ T6467] should_fail+0xb/0x20 [ 227.448026][ T6467] should_fail_usercopy+0x1a/0x20 [ 227.448112][ T6467] _copy_from_user+0x1c/0xb0 [ 227.448147][ T6467] copy_bpf_fprog_from_user+0x106/0x1f0 [ 227.448174][ T6467] sk_setsockopt+0x14c6/0x2060 [ 227.448220][ T6467] sock_setsockopt+0x40/0x50 [ 227.448243][ T6467] __sys_setsockopt+0x13a/0x200 [ 227.448267][ T6467] __x64_sys_setsockopt+0x64/0x80 [ 227.448293][ T6467] x64_sys_call+0x2327/0x3020 [ 227.448368][ T6467] do_syscall_64+0x12c/0x3b0 [ 227.448398][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.448500][ T6467] RIP: 0033:0x7fc171fccdd9 [ 227.448518][ T6467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.448540][ T6467] RSP: 002b:00007fc170a06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 227.448562][ T6467] RAX: ffffffffffffffda RBX: 00007fc172246090 RCX: 00007fc171fccdd9 [ 227.448578][ T6467] RDX: 000000000000001a RSI: 0000000000000001 RDI: 000000000000000b [ 227.448593][ T6467] RBP: 00007fc170a06090 R08: 0000000000000010 R09: 0000000000000000 [ 227.448636][ T6467] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 227.448651][ T6467] R13: 00007fc172246128 R14: 00007fc172246090 R15: 00007ffd52e79118 [ 227.448672][ T6467] [ 227.469085][ T6462] loop1: detected capacity change from 0 to 1024 [ 227.742639][ T28] audit: type=1326 audit(1778129824.651:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6465 comm="syz.2.695" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe57f1ccdd9 code=0x0 [ 227.747394][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.754723][ T6462] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 227.755060][ T6462] System zones: 0-1, 3-36 [ 227.803356][ T6462] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.694: bad orphan inode 134217728 [ 227.803526][ T6462] loop1: lost filesystem error report for type 5 error -117 [ 227.805221][ T28] audit: type=1400 audit(1778129824.711:346): avc: denied { bind } for pid=6472 comm="syz.4.696" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 227.805543][ T28] audit: type=1400 audit(1778129824.711:347): avc: denied { name_bind } for pid=6472 comm="syz.4.696" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 227.806006][ T28] audit: type=1400 audit(1778129824.711:348): avc: denied { node_bind } for pid=6472 comm="syz.4.696" saddr=ff02::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 227.824890][ T28] audit: type=1400 audit(1778129824.731:349): avc: denied { ioctl } for pid=6472 comm="syz.4.696" path="socket:[13617]" dev="sockfs" ino=13617 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 227.841681][ T6462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.033642][ T28] audit: type=1400 audit(1778129824.941:350): avc: denied { write } for pid=6461 comm="syz.1.694" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.033794][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.100008][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.694'. [ 228.223704][ T6475] loop3: detected capacity change from 0 to 1024 [ 228.330170][ T6475] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 228.388754][ T6475] System zones: 0-1, 3-36 [ 228.417847][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.519290][ T6475] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.697: bad orphan inode 134217728 [ 228.553673][ T6475] loop3: lost filesystem error report for type 5 error -117 [ 228.580884][ T6475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.690546][ T28] audit: type=1400 audit(1778129825.601:351): avc: denied { write } for pid=6474 comm="syz.3.697" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.716850][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 229.343664][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 229.414895][ T6494] 9p: Bad value for 'wfdno' [ 229.419887][ T28] audit: type=1400 audit(1778129826.321:352): avc: denied { mounton } for pid=6493 comm="syz.1.702" path="/142/file0" dev="tmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.464691][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.535654][ T28] audit: type=1400 audit(1778129826.361:353): avc: denied { getopt } for pid=6493 comm="syz.1.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.766181][ T6506] loop3: detected capacity change from 0 to 1024 [ 229.904755][ T6506] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 229.923866][ T6506] System zones: 0-1, 3-36 [ 229.940259][ T6506] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.703: bad orphan inode 134217728 [ 229.951582][ T6506] loop3: lost filesystem error report for type 5 error -117 [ 229.985825][ T6518] FAULT_INJECTION: forcing a failure. [ 229.985825][ T6518] name failslab, interval 1, probability 0, space 0, times 0 [ 230.028476][ T6520] loop4: detected capacity change from 0 to 1024 [ 230.035289][ T6520] EXT4-fs: test_dummy_encryption option not supported [ 230.042351][ T6506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.066611][ T6518] CPU: 1 UID: 0 PID: 6518 Comm: syz.1.705 Tainted: G W syzkaller #0 PREEMPT(full) [ 230.066712][ T6518] Tainted: [W]=WARN [ 230.066719][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.066733][ T6518] Call Trace: [ 230.066743][ T6518] [ 230.066753][ T6518] __dump_stack+0x1d/0x30 [ 230.066786][ T6518] dump_stack_lvl+0x95/0xd0 [ 230.066815][ T6518] dump_stack+0x15/0x1b [ 230.066847][ T6518] should_fail_ex+0x263/0x280 [ 230.066876][ T6518] should_failslab+0x8c/0xb0 [ 230.066919][ T6518] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 230.067042][ T6518] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 230.067082][ T6518] kmemdup_nul+0x36/0xc0 [ 230.067115][ T6518] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 230.067159][ T6518] vfs_parse_monolithic_sep+0x16a/0x270 [ 230.067188][ T6518] generic_parse_monolithic+0x24/0x30 [ 230.067216][ T6518] parse_monolithic_mount_data+0x46/0x60 [ 230.067241][ T6518] do_new_mount+0x24e/0x8d0 [ 230.067300][ T6518] ? security_capable+0x7b/0x90 [ 230.067367][ T6518] path_mount+0x4d0/0xbc0 [ 230.067403][ T6518] __se_sys_mount+0x28c/0x2e0 [ 230.067525][ T6518] ? fput+0x8f/0xc0 [ 230.067550][ T6518] __x64_sys_mount+0x67/0x80 [ 230.067585][ T6518] x64_sys_call+0x2d61/0x3020 [ 230.067609][ T6518] do_syscall_64+0x12c/0x3b0 [ 230.067669][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.067692][ T6518] RIP: 0033:0x7faf6ccecdd9 [ 230.067712][ T6518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.067737][ T6518] RSP: 002b:00007faf6b73f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 230.067758][ T6518] RAX: ffffffffffffffda RBX: 00007faf6cf65fa0 RCX: 00007faf6ccecdd9 [ 230.067852][ T6518] RDX: 00002000000002c0 RSI: 0000200000000300 RDI: 0000000000000000 [ 230.067870][ T6518] RBP: 00007faf6b73f090 R08: 00002000000005c0 R09: 0000000000000000 [ 230.067900][ T6518] R10: 0000000000200480 R11: 0000000000000246 R12: 0000000000000002 [ 230.067913][ T6518] R13: 00007faf6cf66038 R14: 00007faf6cf65fa0 R15: 00007ffdbcc8e5f8 [ 230.067945][ T6518] [ 230.365777][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 230.728673][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'. [ 231.045505][ T6529] loop1: detected capacity change from 0 to 512 [ 231.130481][ T6529] EXT4-fs (loop1): 1 orphan inode deleted [ 231.147066][ T946] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 231.174068][ T6529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.215430][ T946] loop1: lost filesystem error report for type 5 error -117 [ 231.238965][ T6529] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.327390][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.449466][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.982956][ T6549] loop1: detected capacity change from 0 to 1024 [ 232.169936][ T6557] netlink: 104 bytes leftover after parsing attributes in process `syz.4.712'. [ 232.179374][ T6549] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 232.199299][ T6549] System zones: 0-1, 3-36 [ 232.259598][ T6549] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.709: bad orphan inode 134217728 [ 232.285984][ T6549] loop1: lost filesystem error report for type 5 error -117 [ 232.306504][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 232.320398][ C0] EXT4-fs (loop1): initial error at time 1778129829: ext4_orphan_get:1423 [ 232.329007][ C0] EXT4-fs (loop1): last error at time 1778129829: ext4_orphan_get:1423 [ 232.456785][ T6549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.517633][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 232.517729][ T28] audit: type=1400 audit(1778129829.431:364): avc: denied { write } for pid=6547 comm="syz.1.709" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.569119][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'. [ 232.712894][ T28] audit: type=1400 audit(1778129829.621:365): avc: denied { create } for pid=6561 comm="syz.0.713" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 232.839367][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.021282][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.028865][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.196476][ T6566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.228806][ T6566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.344665][ T946] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.356610][ T946] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.384544][ T946] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.404541][ T6581] syzkaller0: entered promiscuous mode [ 233.417281][ T6581] syzkaller0: entered allmulticast mode [ 233.424416][ T946] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.446886][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 233.531117][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 233.543126][ T6589] FAULT_INJECTION: forcing a failure. [ 233.543126][ T6589] name failslab, interval 1, probability 0, space 0, times 0 [ 233.591045][ T6589] CPU: 1 UID: 0 PID: 6589 Comm: syz.4.717 Tainted: G W syzkaller #0 PREEMPT(full) [ 233.591094][ T6589] Tainted: [W]=WARN [ 233.591104][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.591122][ T6589] Call Trace: [ 233.591132][ T6589] [ 233.591221][ T6589] __dump_stack+0x1d/0x30 [ 233.591255][ T6589] dump_stack_lvl+0x95/0xd0 [ 233.591285][ T6589] dump_stack+0x15/0x1b [ 233.591313][ T6589] should_fail_ex+0x263/0x280 [ 233.591354][ T6589] should_failslab+0x8c/0xb0 [ 233.591427][ T6589] kmem_cache_alloc_noprof+0x66/0x3f0 [ 233.591514][ T6589] ? skb_clone+0x151/0x1f0 [ 233.591548][ T6589] skb_clone+0x151/0x1f0 [ 233.591580][ T6589] __netlink_deliver_tap+0x2c9/0x500 [ 233.591698][ T6589] netlink_unicast+0x653/0x680 [ 233.591736][ T6589] netlink_sendmsg+0x5c8/0x6f0 [ 233.591786][ T6589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.591831][ T6589] ____sys_sendmsg+0x563/0x5b0 [ 233.591861][ T6589] ___sys_sendmsg+0x195/0x1e0 [ 233.591907][ T6589] __x64_sys_sendmsg+0xd4/0x160 [ 233.591962][ T6589] x64_sys_call+0x194c/0x3020 [ 233.591994][ T6589] do_syscall_64+0x12c/0x3b0 [ 233.592047][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.592078][ T6589] RIP: 0033:0x7f9c7752cdd9 [ 233.592116][ T6589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.592142][ T6589] RSP: 002b:00007f9c75f87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.592169][ T6589] RAX: ffffffffffffffda RBX: 00007f9c777a5fa0 RCX: 00007f9c7752cdd9 [ 233.592188][ T6589] RDX: 0000000024000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 233.592204][ T6589] RBP: 00007f9c75f87090 R08: 0000000000000000 R09: 0000000000000000 [ 233.592218][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.592235][ T6589] R13: 00007f9c777a6038 R14: 00007f9c777a5fa0 R15: 00007ffe7f120878 [ 233.592372][ T6589] [ 233.923008][ T6589] ip6gretap0: entered promiscuous mode [ 233.939625][ T6589] macvtap1: entered promiscuous mode [ 233.959406][ T6589] macvtap1: entered allmulticast mode [ 233.982128][ T6589] ip6gretap0: entered allmulticast mode [ 234.008146][ T6564] syzkaller0: entered promiscuous mode [ 234.026513][ T6564] syzkaller0: entered allmulticast mode [ 234.362688][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 234.392956][ T28] audit: type=1400 audit(1778129831.301:366): avc: denied { unlink } for pid=3296 comm="syz-executor" name="file0" dev="tmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 235.379253][ T6608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.722'. [ 235.460779][ T6608] IPv6: Can't replace route, no match found [ 235.572110][ T6610] loop3: detected capacity change from 0 to 1024 [ 235.658499][ T6610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.731801][ T28] audit: type=1400 audit(1778129832.641:367): avc: denied { write } for pid=6609 comm="syz.3.723" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.804246][ T6610] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 235.838887][ T28] audit: type=1400 audit(1778129832.661:368): avc: denied { create } for pid=6609 comm="syz.3.723" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 235.928004][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.944373][ T28] audit: type=1400 audit(1778129832.691:369): avc: denied { write } for pid=6609 comm="syz.3.723" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.022968][ T6616] loop2: detected capacity change from 0 to 1024 [ 236.066058][ T28] audit: type=1400 audit(1778129832.691:370): avc: denied { write } for pid=6609 comm="syz.3.723" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 236.147252][ T6616] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 236.189124][ T6616] System zones: 0-1, 3-36 [ 236.196167][ T28] audit: type=1400 audit(1778129832.691:371): avc: denied { write } for pid=6609 comm="syz.3.723" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.267821][ T6616] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.724: bad orphan inode 134217728 [ 236.313747][ T28] audit: type=1400 audit(1778129832.691:372): avc: denied { remove_name } for pid=6609 comm="syz.3.723" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.344205][ T6616] loop2: lost filesystem error report for type 5 error -117 [ 236.399606][ T6616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.429989][ T28] audit: type=1400 audit(1778129832.691:373): avc: denied { rename } for pid=6609 comm="syz.3.723" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.570937][ T6627] netlink: 'syz.0.727': attribute type 10 has an invalid length. [ 236.598658][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 236.693870][ T6631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6631 comm=syz.1.729 [ 236.750224][ T6631] macvtap1: entered promiscuous mode [ 236.755630][ T6631] ip6gretap0: entered promiscuous mode [ 236.761545][ T6631] macvtap1: entered allmulticast mode [ 236.767180][ T6631] ip6gretap0: entered allmulticast mode [ 236.911792][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.002136][ T6645] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 237.026112][ T6646] netlink: 'syz.1.735': attribute type 1 has an invalid length. [ 237.298545][ T6653] netlink: 'syz.2.737': attribute type 1 has an invalid length. [ 237.739474][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 238.274438][ T6669] FAULT_INJECTION: forcing a failure. [ 238.274438][ T6669] name failslab, interval 1, probability 0, space 0, times 0 [ 238.319611][ T6669] CPU: 0 UID: 0 PID: 6669 Comm: syz.4.742 Tainted: G W syzkaller #0 PREEMPT(full) [ 238.319656][ T6669] Tainted: [W]=WARN [ 238.319665][ T6669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.319696][ T6669] Call Trace: [ 238.319705][ T6669] [ 238.319715][ T6669] __dump_stack+0x1d/0x30 [ 238.319744][ T6669] dump_stack_lvl+0x95/0xd0 [ 238.319772][ T6669] dump_stack+0x15/0x1b [ 238.319825][ T6669] should_fail_ex+0x263/0x280 [ 238.319937][ T6669] should_failslab+0x8c/0xb0 [ 238.319979][ T6669] __kmalloc_noprof+0xb8/0x4d0 [ 238.320079][ T6669] ? iter_file_splice_write+0x101/0xa80 [ 238.320128][ T6669] iter_file_splice_write+0x101/0xa80 [ 238.320171][ T6669] ? atime_needs_update+0x3be/0x3e0 [ 238.320204][ T6669] ? touch_atime+0x106/0x330 [ 238.320306][ T6669] ? shmem_file_splice_read+0x55a/0x5a0 [ 238.320411][ T6669] ? __pfx_iter_file_splice_write+0x10/0x10 [ 238.320505][ T6669] direct_splice_actor+0x156/0x2a0 [ 238.320658][ T6669] ? shmem_file_write_iter+0x61/0xf0 [ 238.320697][ T6669] splice_direct_to_actor+0x311/0x670 [ 238.320777][ T6669] ? __pfx_direct_splice_actor+0x10/0x10 [ 238.320816][ T6669] do_splice_direct+0x119/0x1a0 [ 238.320860][ T6669] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 238.320916][ T6669] do_sendfile+0x382/0x650 [ 238.320946][ T6669] __x64_sys_sendfile64+0xb8/0x150 [ 238.320986][ T6669] x64_sys_call+0x2dc4/0x3020 [ 238.321036][ T6669] do_syscall_64+0x12c/0x3b0 [ 238.321073][ T6669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.321103][ T6669] RIP: 0033:0x7f9c7752cdd9 [ 238.321124][ T6669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.321217][ T6669] RSP: 002b:00007f9c75f87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 238.321248][ T6669] RAX: ffffffffffffffda RBX: 00007f9c777a5fa0 RCX: 00007f9c7752cdd9 [ 238.321268][ T6669] RDX: 0000200000001000 RSI: 0000000000000003 RDI: 0000000000000003 [ 238.321286][ T6669] RBP: 00007f9c75f87090 R08: 0000000000000000 R09: 0000000000000000 [ 238.321304][ T6669] R10: 0000000000000fec R11: 0000000000000246 R12: 0000000000000001 [ 238.321321][ T6669] R13: 00007f9c777a6038 R14: 00007f9c777a5fa0 R15: 00007ffe7f120878 [ 238.321360][ T6669] [ 238.609328][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 238.609348][ T28] audit: type=1400 audit(1778129835.521:381): avc: denied { bind } for pid=6671 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 238.664333][ T28] audit: type=1400 audit(1778129835.521:382): avc: denied { node_bind } for pid=6671 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 238.713925][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.744'. [ 238.724204][ T6678] loop4: detected capacity change from 0 to 512 [ 238.752186][ T6676] loop2: detected capacity change from 0 to 128 [ 238.755122][ T6678] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.800140][ T6678] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.745: corrupted in-inode xattr: e_value size too large [ 238.839512][ T6676] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.856339][ T6678] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 238.856472][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 238.872256][ C1] EXT4-fs (loop4): initial error at time 1778129835: ext4_iget_extra_inode:5128: inode 15 [ 238.882264][ C1] EXT4-fs (loop4): last error at time 1778129835: ext4_iget_extra_inode:5128: inode 15 [ 238.905458][ T6676] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 238.915309][ T6678] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.745: couldn't read orphan inode 15 (err -117) [ 238.936501][ T6678] loop4: lost filesystem error report for type 5 error -117 [ 238.937369][ T6678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.979797][ T28] audit: type=1400 audit(1778129835.891:383): avc: denied { write } for pid=6675 comm="syz.2.744" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.042351][ T28] audit: type=1400 audit(1778129835.891:384): avc: denied { add_name } for pid=6675 comm="syz.2.744" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.062965][ T28] audit: type=1400 audit(1778129835.921:385): avc: denied { write } for pid=6675 comm="syz.2.744" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.097322][ T6686] FAULT_INJECTION: forcing a failure. [ 239.097322][ T6686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.140751][ T6686] CPU: 1 UID: 0 PID: 6686 Comm: syz.0.747 Tainted: G W syzkaller #0 PREEMPT(full) [ 239.140795][ T6686] Tainted: [W]=WARN [ 239.140804][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.140911][ T6686] Call Trace: [ 239.140919][ T6686] [ 239.140929][ T6686] __dump_stack+0x1d/0x30 [ 239.141059][ T6686] dump_stack_lvl+0x95/0xd0 [ 239.141087][ T6686] dump_stack+0x15/0x1b [ 239.141113][ T6686] should_fail_ex+0x263/0x280 [ 239.141174][ T6686] should_fail+0xb/0x20 [ 239.141244][ T6686] should_fail_usercopy+0x1a/0x20 [ 239.141336][ T6686] _copy_from_user+0x1c/0xb0 [ 239.141427][ T6686] ___sys_sendmsg+0xc1/0x1e0 [ 239.141470][ T6686] __x64_sys_sendmsg+0xd4/0x160 [ 239.141502][ T6686] x64_sys_call+0x194c/0x3020 [ 239.141536][ T6686] do_syscall_64+0x12c/0x3b0 [ 239.141599][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.141622][ T6686] RIP: 0033:0x7fc0fd22cdd9 [ 239.141641][ T6686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.141726][ T6686] RSP: 002b:00007fc0fbc7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.141752][ T6686] RAX: ffffffffffffffda RBX: 00007fc0fd4a5fa0 RCX: 00007fc0fd22cdd9 [ 239.141768][ T6686] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000004 [ 239.141781][ T6686] RBP: 00007fc0fbc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 239.141795][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.141807][ T6686] R13: 00007fc0fd4a6038 R14: 00007fc0fd4a5fa0 R15: 00007ffd7cf593f8 [ 239.141870][ T6686] [ 239.350139][ T3304] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /152/mnt/lost+found: directory fails checksum at offset 1024 [ 239.366765][ T3304] EXT4-fs error (device loop2): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 239.379981][ T28] audit: type=1400 audit(1778129836.281:386): avc: denied { write } for pid=3304 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.402467][ T28] audit: type=1400 audit(1778129836.281:387): avc: denied { remove_name } for pid=3304 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.404509][ T3304] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /152/mnt/lost+found: directory fails checksum at offset 1024 [ 239.427262][ T28] audit: type=1400 audit(1778129836.281:388): avc: denied { rmdir } for pid=3304 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.507042][ T28] audit: type=1400 audit(1778129836.421:389): avc: denied { write } for pid=3304 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.507057][ T3304] EXT4-fs error (device loop2): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 239.544221][ T3304] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /152/mnt/lost+found: directory fails checksum at offset 1024 [ 239.562187][ T3304] EXT4-fs error (device loop2): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 239.575253][ T28] audit: type=1400 audit(1778129836.471:390): avc: denied { write } for pid=3304 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.750420][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.760118][ T3304] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /152/mnt/lost+found: directory fails checksum at offset 1024 [ 239.776988][ T3304] EXT4-fs error (device loop2): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 239.815636][ T3304] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path /152/mnt/lost+found: directory fails checksum at offset 1024 [ 239.831769][ T3304] EXT4-fs error (device loop2): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 239.976097][ T6702] loop3: detected capacity change from 0 to 512 [ 239.999975][ T6702] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 240.092145][ T6704] loop1: detected capacity change from 0 to 1024 [ 240.190616][ T6704] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 240.249259][ T6662] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.286118][ T6704] System zones: 0-1, 3-36 [ 240.305543][ T6704] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.753: bad orphan inode 134217728 [ 240.343043][ T6704] loop1: lost filesystem error report for type 5 error -117 [ 240.345409][ T6704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.409476][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.753'. [ 240.449348][ T6708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.755'. [ 240.467566][ T6710] FAULT_INJECTION: forcing a failure. [ 240.467566][ T6710] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 240.481595][ T6710] CPU: 0 UID: 0 PID: 6710 Comm: syz.4.756 Tainted: G W syzkaller #0 PREEMPT(full) [ 240.481641][ T6710] Tainted: [W]=WARN [ 240.481650][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.481666][ T6710] Call Trace: [ 240.481678][ T6710] [ 240.481687][ T6710] __dump_stack+0x1d/0x30 [ 240.481786][ T6710] dump_stack_lvl+0x95/0xd0 [ 240.481814][ T6710] dump_stack+0x15/0x1b [ 240.481875][ T6710] should_fail_ex+0x263/0x280 [ 240.482027][ T6710] should_fail_alloc_page+0xf2/0x100 [ 240.482178][ T6710] __alloc_frozen_pages_noprof+0x108/0x350 [ 240.482269][ T6710] alloc_pages_mpol+0xb3/0x260 [ 240.482362][ T6710] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 240.482480][ T6710] do_wp_page+0x70e/0x2040 [ 240.482539][ T6710] ? __rcu_read_lock+0x36/0x50 [ 240.482615][ T6710] handle_mm_fault+0x8b9/0x2e70 [ 240.482720][ T6710] ? vma_start_read+0x1c7/0x2c0 [ 240.482870][ T6710] do_user_addr_fault+0x62f/0x1050 [ 240.483069][ T6710] ? __x64_sys_sendto+0x76/0x90 [ 240.483167][ T6710] ? trace_page_fault_user+0x1f/0xa0 [ 240.483351][ T6710] exc_page_fault+0x62/0xa0 [ 240.483432][ T6710] asm_exc_page_fault+0x26/0x30 [ 240.483562][ T6710] RIP: 0033:0x7f9c774ecbc5 [ 240.483636][ T6710] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 240.483755][ T6710] RSP: 002b:00007f9c75f85de0 EFLAGS: 00010293 [ 240.483831][ T6710] RAX: 0000000000000008 RBX: 00007f9c782d7e20 RCX: 0000000000000000 [ 240.483876][ T6710] RDX: 0000000000000000 RSI: 00007f9c775e002f RDI: 00007f9c782d7e20 [ 240.483961][ T6710] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 240.484069][ T6710] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c775dfd47 [ 240.484132][ T6710] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007f9c775e002f [ 240.484200][ T6710] [ 240.501299][ T6710] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 240.527717][ T946] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.584383][ T946] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.664031][ T946] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.729299][ T946] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.894910][ T946] bridge_slave_1: left allmulticast mode [ 240.894949][ T946] bridge_slave_1: left promiscuous mode [ 240.895150][ T946] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.896925][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.898712][ T946] bridge_slave_0: left allmulticast mode [ 240.898753][ T946] bridge_slave_0: left promiscuous mode [ 240.898844][ T946] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.886028][ T946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.900983][ T946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.926144][ T946] bond0 (unregistering): Released all slaves [ 242.111711][ T946] IPVS: stopping master sync thread 4178 ... [ 242.132468][ T946] hsr_slave_0: left promiscuous mode [ 242.150117][ T946] hsr_slave_1: left promiscuous mode [ 242.161326][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.175497][ T946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.191560][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.204526][ T946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.229937][ T946] veth1_macvtap: left promiscuous mode [ 242.243370][ T946] veth0_macvtap: left promiscuous mode [ 242.257738][ T946] veth1_vlan: left promiscuous mode [ 242.269154][ T946] veth0_vlan: left promiscuous mode [ 242.399837][ T946] team0 (unregistering): Port device team_slave_1 removed [ 242.418294][ T946] team0 (unregistering): Port device team_slave_0 removed [ 242.484661][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 242.538961][ T6781] FAULT_INJECTION: forcing a failure. [ 242.538961][ T6781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.570927][ T6781] CPU: 1 UID: 0 PID: 6781 Comm: syz.1.772 Tainted: G W syzkaller #0 PREEMPT(full) [ 242.570968][ T6781] Tainted: [W]=WARN [ 242.570986][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.570999][ T6781] Call Trace: [ 242.571005][ T6781] [ 242.571044][ T6781] __dump_stack+0x1d/0x30 [ 242.571075][ T6781] dump_stack_lvl+0x95/0xd0 [ 242.571099][ T6781] dump_stack+0x15/0x1b [ 242.571155][ T6781] should_fail_ex+0x263/0x280 [ 242.571194][ T6781] should_fail+0xb/0x20 [ 242.571225][ T6781] should_fail_usercopy+0x1a/0x20 [ 242.571266][ T6781] _copy_from_iter+0xcf/0xea0 [ 242.571375][ T6781] ? __alloc_skb+0x4f6/0x690 [ 242.571398][ T6781] ? __alloc_skb+0x200/0x690 [ 242.571424][ T6781] netlink_sendmsg+0x4ae/0x6f0 [ 242.571469][ T6781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.571522][ T6781] ____sys_sendmsg+0x563/0x5b0 [ 242.571557][ T6781] ___sys_sendmsg+0x195/0x1e0 [ 242.571604][ T6781] __x64_sys_sendmsg+0xd4/0x160 [ 242.571641][ T6781] x64_sys_call+0x194c/0x3020 [ 242.571674][ T6781] do_syscall_64+0x12c/0x3b0 [ 242.571721][ T6781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.571743][ T6781] RIP: 0033:0x7faf6ccecdd9 [ 242.571760][ T6781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.571785][ T6781] RSP: 002b:00007faf6b73f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.571885][ T6781] RAX: ffffffffffffffda RBX: 00007faf6cf65fa0 RCX: 00007faf6ccecdd9 [ 242.571900][ T6781] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 242.571913][ T6781] RBP: 00007faf6b73f090 R08: 0000000000000000 R09: 0000000000000000 [ 242.571926][ T6781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.571938][ T6781] R13: 00007faf6cf66038 R14: 00007faf6cf65fa0 R15: 00007ffdbcc8e5f8 [ 242.571977][ T6781] [ 242.854839][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.774'. [ 242.918855][ T6715] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.926076][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.936750][ T6715] bridge_slave_0: entered allmulticast mode [ 242.993151][ T6715] bridge_slave_0: entered promiscuous mode [ 243.000341][ T6715] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.007483][ T6715] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.014660][ T6715] bridge_slave_1: entered allmulticast mode [ 243.021405][ T6715] bridge_slave_1: entered promiscuous mode [ 243.039590][ T6715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.050654][ T6715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.109790][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.775'. [ 243.114490][ T6715] team0: Port device team_slave_0 added [ 243.127059][ T6715] team0: Port device team_slave_1 added [ 243.334140][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.779'. [ 243.357641][ T6715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.390477][ T6715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.560301][ T6715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.634145][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 243.801299][ T6715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.808831][ T6715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.848731][ T6715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.943495][ T6715] hsr_slave_0: entered promiscuous mode [ 243.963775][ T6715] hsr_slave_1: entered promiscuous mode [ 243.976016][ T6715] debugfs: 'hsr0' already exists in 'hsr' [ 243.984135][ T6715] Cannot create hsr debugfs directory [ 243.999644][ T6827] netlink: 'syz.4.782': attribute type 1 has an invalid length. [ 244.243254][ T6715] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 244.276872][ T6715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.296078][ T6715] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 244.308672][ T28] kauditd_printk_skb: 120 callbacks suppressed [ 244.308690][ T28] audit: type=1400 audit(1778129841.221:511): avc: denied { write } for pid=6839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.348376][ T6715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.364142][ T6715] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 244.383723][ T6715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 244.392366][ T28] audit: type=1400 audit(1778129841.271:512): avc: denied { setopt } for pid=6854 comm="GPL" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 244.417817][ T6715] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 244.442924][ T6715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 244.453851][ T28] audit: type=1400 audit(1778129841.341:513): avc: denied { write } for pid=6858 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.495454][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 244.608587][ T6715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.646159][ T6715] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.674896][ T6201] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.682063][ T6201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.855734][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.862876][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.913796][ T6868] loop4: detected capacity change from 0 to 1024 [ 245.138106][ T6868] EXT4-fs: Mount option(s) incompatible with ext3 [ 245.242846][ T28] audit: type=1400 audit(1778129841.661:514): avc: denied { read } for pid=6869 comm="syz.0.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.321121][ T6887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6887 comm=syz.3.790 [ 245.346463][ T28] audit: type=1400 audit(1778129842.251:515): avc: denied { write } for pid=6872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.405912][ T28] audit: type=1400 audit(1778129842.301:516): avc: denied { write } for pid=6893 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.450611][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 245.771477][ T6919] loop4: detected capacity change from 0 to 1024 [ 245.833205][ T6919] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 245.891005][ T6919] System zones: 0-1, 3-36 [ 245.952477][ T6919] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.793: bad orphan inode 134217728 [ 246.038332][ T6922] futex_wake_op: syz.1.795 tries to shift op by -1; fix this program [ 246.053080][ T6715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.070234][ T6919] loop4: lost filesystem error report for type 5 error -117 [ 246.075147][ T6919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.123158][ T6922] netlink: 'syz.1.795': attribute type 1 has an invalid length. [ 246.270293][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'. [ 246.279660][ T28] audit: type=1400 audit(1778129843.191:517): avc: denied { connect } for pid=6921 comm="syz.1.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 246.341756][ T28] audit: type=1400 audit(1778129843.251:518): avc: denied { write } for pid=6912 comm="syz.4.793" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.383246][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.793'. [ 246.547912][ T6944] loop1: detected capacity change from 0 to 128 [ 246.577849][ T6944] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.603644][ T6944] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.645556][ T28] audit: type=1400 audit(1778129843.541:519): avc: denied { write } for pid=6943 comm="syz.1.799" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.746217][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.813323][ T6957] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 246.844383][ T6715] veth0_vlan: entered promiscuous mode [ 246.869073][ T6715] veth1_vlan: entered promiscuous mode [ 246.897679][ T6715] veth0_macvtap: entered promiscuous mode [ 246.911895][ T6715] veth1_macvtap: entered promiscuous mode [ 246.937694][ T3300] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.939385][ T6715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.983767][ T6715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.001822][ T6964] loop1: detected capacity change from 0 to 512 [ 247.004711][ T6966] netlink: 104 bytes leftover after parsing attributes in process `syz.4.802'. [ 247.024746][ T6964] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.044815][ T6215] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.057610][ T6964] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.803: corrupted in-inode xattr: e_value size too large [ 247.073109][ T6215] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.084293][ T6215] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.091663][ T6964] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 247.093848][ T6964] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.803: couldn't read orphan inode 15 (err -117) [ 247.103060][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 247.103086][ C0] EXT4-fs (loop1): initial error at time 1778129844: ext4_iget_extra_inode:5128: inode 15 [ 247.103135][ C0] EXT4-fs (loop1): last error at time 1778129844: ext4_iget_extra_inode:5128: inode 15 [ 247.141151][ T6215] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.199007][ T6964] loop1: lost filesystem error report for type 5 error -117 [ 247.202029][ T6964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.978873][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.051998][ T6984] FAULT_INJECTION: forcing a failure. [ 248.051998][ T6984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.082210][ T6984] CPU: 0 UID: 0 PID: 6984 Comm: syz.4.806 Tainted: G W syzkaller #0 PREEMPT(full) [ 248.082296][ T6984] Tainted: [W]=WARN [ 248.082306][ T6984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.082324][ T6984] Call Trace: [ 248.082333][ T6984] [ 248.082343][ T6984] __dump_stack+0x1d/0x30 [ 248.082367][ T6984] dump_stack_lvl+0x95/0xd0 [ 248.082417][ T6984] dump_stack+0x15/0x1b [ 248.082442][ T6984] should_fail_ex+0x263/0x280 [ 248.082538][ T6984] should_fail+0xb/0x20 [ 248.082641][ T6984] should_fail_usercopy+0x1a/0x20 [ 248.082692][ T6984] strncpy_from_user+0x27/0x250 [ 248.082730][ T6984] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 248.082808][ T6984] do_getname+0x59/0x1c0 [ 248.082834][ T6984] getname_flags+0x1d/0x30 [ 248.082877][ T6984] do_sys_openat2+0x60/0x130 [ 248.082914][ T6984] __x64_sys_openat+0xf2/0x120 [ 248.083006][ T6984] x64_sys_call+0x1e39/0x3020 [ 248.083040][ T6984] do_syscall_64+0x12c/0x3b0 [ 248.083130][ T6984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.083154][ T6984] RIP: 0033:0x7f9c7752cdd9 [ 248.083170][ T6984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.083191][ T6984] RSP: 002b:00007f9c75f87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 248.083232][ T6984] RAX: ffffffffffffffda RBX: 00007f9c777a5fa0 RCX: 00007f9c7752cdd9 [ 248.083315][ T6984] RDX: 0000000000000000 RSI: 0000200000001880 RDI: ffffffffffffff9c [ 248.083334][ T6984] RBP: 00007f9c75f87090 R08: 0000000000000000 R09: 0000000000000000 [ 248.083352][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.083369][ T6984] R13: 00007f9c777a6038 R14: 00007f9c777a5fa0 R15: 00007ffe7f120878 [ 248.083515][ T6984] [ 248.666562][ T28] audit: type=1400 audit(1778129845.551:520): avc: denied { execute } for pid=6988 comm="syz.4.808" path="/170/blkio.bfq.io_serviced_recursive" dev="tmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 249.033461][ T6998] netlink: 112 bytes leftover after parsing attributes in process `syz.3.811'. [ 249.156508][ T7006] FAULT_INJECTION: forcing a failure. [ 249.156508][ T7006] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 249.214081][ T7006] CPU: 1 UID: 0 PID: 7006 Comm: syz.3.814 Tainted: G W syzkaller #0 PREEMPT(full) [ 249.214123][ T7006] Tainted: [W]=WARN [ 249.214132][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.214166][ T7006] Call Trace: [ 249.214173][ T7006] [ 249.214180][ T7006] __dump_stack+0x1d/0x30 [ 249.214211][ T7006] dump_stack_lvl+0x95/0xd0 [ 249.214239][ T7006] dump_stack+0x15/0x1b [ 249.214262][ T7006] should_fail_ex+0x263/0x280 [ 249.214363][ T7006] should_fail_alloc_page+0xf2/0x100 [ 249.214408][ T7006] __alloc_frozen_pages_noprof+0x108/0x350 [ 249.214471][ T7006] alloc_pages_mpol+0xb3/0x260 [ 249.214501][ T7006] ? lruvec_stat_mod_folio+0xbb/0x100 [ 249.214568][ T7006] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 249.214601][ T7006] handle_mm_fault+0x103e/0x2e70 [ 249.214634][ T7006] ? mt_find+0x8c1/0xa10 [ 249.214731][ T7006] ? check_vma_flags+0x26d/0x330 [ 249.214768][ T7006] __get_user_pages+0x1290/0x1f10 [ 249.214795][ T7006] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 249.214890][ T7006] __gup_longterm_locked+0x8d7/0xe30 [ 249.214998][ T7006] ? __import_iovec+0x1bb/0x530 [ 249.215052][ T7006] ? __tsan_read8+0x4a/0x190 [ 249.215085][ T7006] ? __import_iovec+0x321/0x530 [ 249.215201][ T7006] ? should_fail_ex+0xd9/0x280 [ 249.215238][ T7006] pin_user_pages_remote+0x7e/0xb0 [ 249.215273][ T7006] process_vm_rw+0x49b/0x9c0 [ 249.215419][ T7006] __x64_sys_process_vm_writev+0x78/0x90 [ 249.215458][ T7006] x64_sys_call+0x1592/0x3020 [ 249.215490][ T7006] do_syscall_64+0x12c/0x3b0 [ 249.215603][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.215631][ T7006] RIP: 0033:0x7fc171fccdd9 [ 249.215650][ T7006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.215723][ T7006] RSP: 002b:00007fc170a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 249.215749][ T7006] RAX: ffffffffffffffda RBX: 00007fc172245fa0 RCX: 00007fc171fccdd9 [ 249.215767][ T7006] RDX: 0000000000000310 RSI: 0000200000c22000 RDI: 0000000000000226 [ 249.215781][ T7006] RBP: 00007fc170a27090 R08: 0000000000000001 R09: 0000000000000000 [ 249.215793][ T7006] R10: 0000200000c22fa0 R11: 0000000000000246 R12: 0000000000000001 [ 249.215806][ T7006] R13: 00007fc172246038 R14: 00007fc172245fa0 R15: 00007ffd52e79118 [ 249.215829][ T7006] [ 249.471477][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 249.471494][ T28] audit: type=1400 audit(1778129846.381:538): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.527443][ T28] audit: type=1400 audit(1778129846.431:539): avc: denied { read write } for pid=7008 comm="syz.3.815" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 249.595853][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.816'. [ 249.607117][ T28] audit: type=1400 audit(1778129846.431:540): avc: denied { create } for pid=7008 comm="syz.3.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 249.661964][ T7012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.674499][ T28] audit: type=1400 audit(1778129846.431:541): avc: denied { execmem } for pid=7008 comm="syz.3.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 249.751431][ T28] audit: type=1400 audit(1778129846.441:542): avc: denied { open } for pid=7008 comm="syz.3.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 249.798232][ T7017] FAULT_INJECTION: forcing a failure. [ 249.798232][ T7017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.825443][ T28] audit: type=1400 audit(1778129846.441:543): avc: denied { prog_load } for pid=7008 comm="syz.3.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 249.851487][ T7017] CPU: 0 UID: 0 PID: 7017 Comm: syz.3.818 Tainted: G W syzkaller #0 PREEMPT(full) [ 249.851529][ T7017] Tainted: [W]=WARN [ 249.851537][ T7017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.851615][ T7017] Call Trace: [ 249.851623][ T7017] [ 249.851632][ T7017] __dump_stack+0x1d/0x30 [ 249.851664][ T7017] dump_stack_lvl+0x95/0xd0 [ 249.851691][ T7017] dump_stack+0x15/0x1b [ 249.851780][ T7017] should_fail_ex+0x263/0x280 [ 249.851816][ T7017] should_fail+0xb/0x20 [ 249.851843][ T7017] should_fail_usercopy+0x1a/0x20 [ 249.851882][ T7017] _copy_from_user+0x1c/0xb0 [ 249.851964][ T7017] do_sys_poll+0x140/0xc00 [ 249.852035][ T7017] ? avc_has_perm+0x101/0x190 [ 249.852075][ T7017] ? selinux_file_open+0x2e6/0x330 [ 249.852136][ T7017] ? timespec64_add_safe+0x106/0x150 [ 249.852167][ T7017] __x64_sys_poll+0x12c/0x230 [ 249.852293][ T7017] x64_sys_call+0x2891/0x3020 [ 249.852320][ T7017] do_syscall_64+0x12c/0x3b0 [ 249.852429][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.852451][ T7017] RIP: 0033:0x7fc171fccdd9 [ 249.852467][ T7017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.852489][ T7017] RSP: 002b:00007fc170a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 249.852612][ T7017] RAX: ffffffffffffffda RBX: 00007fc172245fa0 RCX: 00007fc171fccdd9 [ 249.852629][ T7017] RDX: 00000000000003ff RSI: 0000000000000001 RDI: 00002000000000c0 [ 249.852644][ T7017] RBP: 00007fc170a27090 R08: 0000000000000000 R09: 0000000000000000 [ 249.852660][ T7017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.852676][ T7017] R13: 00007fc172246038 R14: 00007fc172245fa0 R15: 00007ffd52e79118 [ 249.852764][ T7017] [ 250.034022][ T28] audit: type=1400 audit(1778129846.441:544): avc: denied { open } for pid=7008 comm="syz.3.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 250.053282][ T28] audit: type=1400 audit(1778129846.501:545): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.077548][ T28] audit: type=1400 audit(1778129846.601:546): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.106944][ T28] audit: type=1400 audit(1778129846.621:547): avc: denied { read write } for pid=7014 comm="syz.0.817" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.788952][ T7049] FAULT_INJECTION: forcing a failure. [ 250.788952][ T7049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.834623][ T7049] CPU: 0 UID: 0 PID: 7049 Comm: syz.0.831 Tainted: G W syzkaller #0 PREEMPT(full) [ 250.834733][ T7049] Tainted: [W]=WARN [ 250.834742][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.834759][ T7049] Call Trace: [ 250.834767][ T7049] [ 250.834777][ T7049] __dump_stack+0x1d/0x30 [ 250.834808][ T7049] dump_stack_lvl+0x95/0xd0 [ 250.834889][ T7049] dump_stack+0x15/0x1b [ 250.834915][ T7049] should_fail_ex+0x263/0x280 [ 250.834953][ T7049] should_fail+0xb/0x20 [ 250.835039][ T7049] should_fail_usercopy+0x1a/0x20 [ 250.835077][ T7049] _copy_to_user+0x20/0xa0 [ 250.835153][ T7049] simple_read_from_buffer+0xb5/0x130 [ 250.835197][ T7049] proc_fail_nth_read+0x10e/0x150 [ 250.835235][ T7049] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.835315][ T7049] vfs_read+0x1ab/0x7f0 [ 250.835347][ T7049] ? __rcu_read_unlock+0x4e/0x70 [ 250.835367][ T7049] ? __fget_files+0x184/0x1c0 [ 250.835386][ T7049] ? mutex_lock+0x57/0x90 [ 250.835471][ T7049] ksys_read+0xdc/0x1a0 [ 250.835508][ T7049] __x64_sys_read+0x40/0x50 [ 250.835545][ T7049] x64_sys_call+0x2886/0x3020 [ 250.835573][ T7049] do_syscall_64+0x12c/0x3b0 [ 250.835599][ T7049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.835662][ T7049] RIP: 0033:0x7fc0fd1ed60e [ 250.835698][ T7049] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 250.835720][ T7049] RSP: 002b:00007fc0fbc7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.835740][ T7049] RAX: ffffffffffffffda RBX: 00007fc0fbc7f6c0 RCX: 00007fc0fd1ed60e [ 250.835757][ T7049] RDX: 000000000000000f RSI: 00007fc0fbc7f0a0 RDI: 0000000000000003 [ 250.835771][ T7049] RBP: 00007fc0fbc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 250.835889][ T7049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.835906][ T7049] R13: 00007fc0fd4a6038 R14: 00007fc0fd4a5fa0 R15: 00007ffd7cf593f8 [ 250.835932][ T7049] [ 251.076159][ T7054] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.088498][ T7099] FAULT_INJECTION: forcing a failure. [ 252.088498][ T7099] name failslab, interval 1, probability 0, space 0, times 0 [ 252.146737][ T7099] CPU: 0 UID: 0 PID: 7099 Comm: syz.4.848 Tainted: G W syzkaller #0 PREEMPT(full) [ 252.146776][ T7099] Tainted: [W]=WARN [ 252.146784][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.146830][ T7099] Call Trace: [ 252.146839][ T7099] [ 252.146848][ T7099] __dump_stack+0x1d/0x30 [ 252.146877][ T7099] dump_stack_lvl+0x95/0xd0 [ 252.146900][ T7099] dump_stack+0x15/0x1b [ 252.146941][ T7099] should_fail_ex+0x263/0x280 [ 252.146979][ T7099] should_failslab+0x8c/0xb0 [ 252.147025][ T7099] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 252.147126][ T7099] ? __alloc_skb+0x2d6/0x690 [ 252.147156][ T7099] __alloc_skb+0x2d6/0x690 [ 252.147174][ T7099] ? __alloc_skb+0x200/0x690 [ 252.147202][ T7099] alloc_skb_with_frags+0x7e/0x3d0 [ 252.147224][ T7099] ? is_bpf_text_address+0x141/0x160 [ 252.147259][ T7099] ? kernel_text_address+0x94/0xb0 [ 252.147284][ T7099] sock_alloc_send_pskb+0x44d/0x500 [ 252.147375][ T7099] ? stack_depot_save_flags+0x4d4/0x8d0 [ 252.147468][ T7099] __ip_append_data+0x1817/0x23a0 [ 252.147518][ T7099] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 252.147570][ T7099] ? __rcu_read_unlock+0x4e/0x70 [ 252.147667][ T7099] ? ipv4_mtu+0x210/0x230 [ 252.147756][ T7099] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 252.147790][ T7099] ip_make_skb+0x150/0x2d0 [ 252.147836][ T7099] udp_sendmsg+0x1098/0x1500 [ 252.147941][ T7099] ? __pfx_udp_sendmsg+0x10/0x10 [ 252.147980][ T7099] inet_sendmsg+0xac/0xd0 [ 252.148013][ T7099] ? __pfx_inet_sendmsg+0x10/0x10 [ 252.148045][ T7099] ____sys_sendmsg+0x519/0x5b0 [ 252.148095][ T7099] ___sys_sendmsg+0x195/0x1e0 [ 252.148184][ T7099] ? path_openat+0x1b01/0x2050 [ 252.148259][ T7099] __sys_sendmmsg+0x185/0x320 [ 252.148302][ T7099] __x64_sys_sendmmsg+0x57/0x70 [ 252.148404][ T7099] x64_sys_call+0x27aa/0x3020 [ 252.148436][ T7099] do_syscall_64+0x12c/0x3b0 [ 252.148466][ T7099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.148501][ T7099] RIP: 0033:0x7f9c7752cdd9 [ 252.148590][ T7099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.148610][ T7099] RSP: 002b:00007f9c75f66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 252.148635][ T7099] RAX: ffffffffffffffda RBX: 00007f9c777a6090 RCX: 00007f9c7752cdd9 [ 252.148699][ T7099] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 252.148716][ T7099] RBP: 00007f9c75f66090 R08: 0000000000000000 R09: 0000000000000000 [ 252.148734][ T7099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.148750][ T7099] R13: 00007f9c777a6128 R14: 00007f9c777a6090 R15: 00007ffe7f120878 [ 252.148772][ T7099] [ 252.487863][ T7093] ================================================================== [ 252.496015][ T7093] BUG: KCSAN: data-race in touch_atime / touch_atime [ 252.502901][ T7093] [ 252.505258][ T7093] write to 0xffff888104a6b958 of 4 bytes by task 7096 on cpu 0: [ 252.512929][ T7093] touch_atime+0x1d7/0x330 [ 252.517388][ T7093] shmem_file_read_iter+0x3f4/0x4b0 [ 252.522628][ T7093] copy_splice_read+0x471/0x6c0 [ 252.527555][ T7093] splice_direct_to_actor+0x28f/0x670 [ 252.532963][ T7093] do_splice_direct+0x119/0x1a0 [ 252.537868][ T7093] do_sendfile+0x382/0x650 [ 252.542319][ T7093] __x64_sys_sendfile64+0x105/0x150 [ 252.547556][ T7093] x64_sys_call+0x2dc4/0x3020 [ 252.552272][ T7093] do_syscall_64+0x12c/0x3b0 [ 252.556901][ T7093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.562821][ T7093] [ 252.565177][ T7093] read to 0xffff888104a6b958 of 4 bytes by task 7093 on cpu 1: [ 252.572753][ T7093] touch_atime+0x16c/0x330 [ 252.577222][ T7093] shmem_file_read_iter+0x3f4/0x4b0 [ 252.582458][ T7093] copy_splice_read+0x471/0x6c0 [ 252.587360][ T7093] splice_direct_to_actor+0x28f/0x670 [ 252.592772][ T7093] do_splice_direct+0x119/0x1a0 [ 252.597668][ T7093] do_sendfile+0x382/0x650 [ 252.602109][ T7093] __x64_sys_sendfile64+0x105/0x150 [ 252.607346][ T7093] x64_sys_call+0x2dc4/0x3020 [ 252.612046][ T7093] do_syscall_64+0x12c/0x3b0 [ 252.616665][ T7093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.622603][ T7093] [ 252.624953][ T7093] value changed: 0x175b2251 -> 0x17f3b8d1 [ 252.630682][ T7093] [ 252.633022][ T7093] Reported by Kernel Concurrency Sanitizer on: [ 252.639225][ T7093] CPU: 1 UID: 0 PID: 7093 Comm: syz.1.846 Tainted: G W syzkaller #0 PREEMPT(full) [ 252.650029][ T7093] Tainted: [W]=WARN [ 252.653851][ T7093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.664029][ T7093] ================================================================== [ 256.561634][ T28] kauditd_printk_skb: 201 callbacks suppressed [ 256.561653][ T28] audit: type=1400 audit(1778129853.471:749): avc: denied { search } for pid=7107 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 256.590739][ T28] audit: type=1400 audit(1778129853.471:750): avc: denied { search } for pid=7108 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 256.613134][ T28] audit: type=1400 audit(1778129853.481:751): avc: denied { search } for pid=7108 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 256.635483][ T28] audit: type=1400 audit(1778129853.481:752): avc: denied { search } for pid=7108 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 256.657805][ T28] audit: type=1400 audit(1778129853.481:753): avc: denied { search } for pid=7108 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 256.680059][ T28] audit: type=1400 audit(1778129853.481:754): avc: denied { search } for pid=7108 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 256.702536][ T28] audit: type=1400 audit(1778129853.481:755): avc: denied { search } for pid=7108 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 256.724696][ T28] audit: type=1400 audit(1778129853.481:756): avc: denied { search } for pid=7108 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 256.747057][ T28] audit: type=1400 audit(1778129853.481:757): avc: denied { search } for pid=7108 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 256.756016][ T7115] audit: audit_backlog=65 > audit_backlog_limit=64