last executing test programs: 11.397376705s ago: executing program 2 (id=462): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x181240, 0x4e) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) (async) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000690000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000694000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) (async) r1 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SDREQ(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000b00)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) (async) ftruncate(r5, 0x2000009) sendfile(r0, r5, 0x0, 0x20000000000006) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000300)=0x2, 0x9, 0x3) r6 = syz_usbip_server_init(0x1) write$usbip_server(r6, &(0x7f0000000000)=ANY=[], 0xff2f) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) write$P9_RGETLOCK(r5, &(0x7f0000000100)={0x1f, 0x37, 0x2, {0x1, 0xe326, 0xef71, r7, 0x1, '\x00'}}, 0x1f) (async) write$P9_RGETLOCK(r5, &(0x7f0000000100)={0x1f, 0x37, 0x2, {0x1, 0xe326, 0xef71, r7, 0x1, '\x00'}}, 0x1f) 10.79494157s ago: executing program 2 (id=467): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x100000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="00000001", @ANYRES16=r0, @ANYBLOB="6d932cbd7000fadbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000080)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x80, 0xfff5, [@m_tunnel_key={0x7c, 0x1, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x96a3, 0x5, 0x6, 0x9, 0xffffff01}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x8000) 10.531810712s ago: executing program 2 (id=472): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x2000000000007, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x1160bb, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.396582668s ago: executing program 2 (id=493): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @remote}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="480500001500", 0x6}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f00000001c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@resuid}]}, 0x1, 0x625, &(0x7f0000000800)="$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") umount2(&(0x7f0000000840)='./file0\x00', 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 6.731174017s ago: executing program 2 (id=497): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r1, &(0x7f00000031c0)=[{{&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000400)=""/160, 0xa0}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000340)=""/50, 0x32}, {&(0x7f0000001600)=""/211, 0xd3}], 0x7}, 0x4}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001780)=""/127, 0x7f}, {&(0x7f0000001800)=""/57, 0x39}, {&(0x7f0000001840)=""/250, 0xfa}, {&(0x7f0000001940)=""/173, 0xad}, {&(0x7f0000001a00)=""/183, 0xb7}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/61, 0x3d}, {&(0x7f0000002b00)=""/98, 0x62}, {&(0x7f0000002b80)=""/89, 0x59}], 0x9, &(0x7f0000002cc0)=""/94, 0x5e}, 0x4}, {{&(0x7f0000002d40)=@rc={0x1f, @none}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002dc0)=""/215, 0xd7}, {&(0x7f0000002ec0)=""/207, 0xcf}, {&(0x7f0000002fc0)=""/135, 0x87}], 0x3, &(0x7f00000030c0)=""/214, 0xd6}, 0xa000000}], 0x3, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x4e20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x4d4, 0x3c}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000001c0)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x1, 0xfffffffffffffff3}}}}}}}, 0x3e) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r7, 0x200004) r8 = syz_open_pts(r4, 0x20000) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mprotect(&(0x7f000071b000/0x4000)=nil, 0x4000, 0x6) sendfile(r4, r7, 0x0, 0x80001d00c0d1) 6.58750416s ago: executing program 2 (id=498): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x7000, 0x3, 0x5e, 0x8}]}) r0 = syz_open_dev$evdev(&(0x7f0000000440), 0x2, 0x860881) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000100)=""/208) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x30}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000480)={0x51, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @period={0x5d, 0x65e5, 0x3, 0xc13, 0x81, {0x8, 0x3, 0xb, 0x2}, 0x3, &(0x7f00000004c0)=[0x3, 0xc0, 0x4d0]}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x8000000, 0x4, 0x3a8, 0xffffffff, 0x0, 0x1d0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'nicvf0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x11}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff000000, 0x0, 0xff], [0xff000000, 0xffffffff, 0xff000000], 'veth0_to_bond\x00', 'geneve1\x00', {}, {}, 0x21, 0x9, 0x6, 0x10}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xffffffff, 0xff, 0x100fffe00, 0xff000000], 0x4e20, 0x4e20, 0x4e21, 0x4e24, 0xdb, 0x8, 0x8, 0x0, 0x99}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r10 = openat(r7, &(0x7f0000000000)='./file2\x00', 0x101002, 0x2c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x2bce000) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0x10c, 0x150, 0x150, 0x0, 0xf8010000, 0x1d4, 0x238, 0x238, 0x1d4, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'tunl0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xff], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r10, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r12, 0x4b63, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 6.555055542s ago: executing program 32 (id=498): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x7000, 0x3, 0x5e, 0x8}]}) r0 = syz_open_dev$evdev(&(0x7f0000000440), 0x2, 0x860881) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000100)=""/208) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x30}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000480)={0x51, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @period={0x5d, 0x65e5, 0x3, 0xc13, 0x81, {0x8, 0x3, 0xb, 0x2}, 0x3, &(0x7f00000004c0)=[0x3, 0xc0, 0x4d0]}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x8000000, 0x4, 0x3a8, 0xffffffff, 0x0, 0x1d0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'nicvf0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x11}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff000000, 0x0, 0xff], [0xff000000, 0xffffffff, 0xff000000], 'veth0_to_bond\x00', 'geneve1\x00', {}, {}, 0x21, 0x9, 0x6, 0x10}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xffffffff, 0xff, 0x100fffe00, 0xff000000], 0x4e20, 0x4e20, 0x4e21, 0x4e24, 0xdb, 0x8, 0x8, 0x0, 0x99}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r10 = openat(r7, &(0x7f0000000000)='./file2\x00', 0x101002, 0x2c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x2bce000) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0x10c, 0x150, 0x150, 0x0, 0xf8010000, 0x1d4, 0x238, 0x238, 0x1d4, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'tunl0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xff], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r10, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x2f8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r12, 0x4b63, 0x1) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 4.414936282s ago: executing program 1 (id=511): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 4.389954776s ago: executing program 0 (id=514): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$evdev(0x0, 0x20000000, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000080)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) syz_io_uring_setup(0x1e02, &(0x7f00000000c0)={0x0, 0x1d86, 0x1000, 0x3, 0x152}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) io_setup(0xb, &(0x7f0000000300)) syz_io_uring_setup(0x788f, &(0x7f00000001c0)={0x0, 0x37dd, 0x1000, 0x3, 0x39f}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) 3.339951547s ago: executing program 0 (id=516): socket$netlink(0x10, 0x3, 0xf) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x58, 0x7, 0x80000000}, {0x6, 0x0, 0xe}]}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r4, 0x8000}], 0x1, 0x0, 0x0, 0x0) r5 = dup2(r3, r4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) fcntl$setown(r4, 0x8, r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) tkill(r2, 0x13) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x1) syz_emit_ethernet(0x173, &(0x7f0000000100)=ANY=[], 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x450000, 0x24) syz_emit_ethernet(0x14, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, 0x0) 3.339329926s ago: executing program 1 (id=517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000008000/0x1000)=nil, 0x3) getsockname$tipc(r1, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) r5 = accept$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x0, [0x7fff, 0xf25, 0xc]}, &(0x7f0000000280)=0x44) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x5, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xffff888237c0a080, 0x100000000}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x2e10}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 3.279713741s ago: executing program 4 (id=518): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200c80, 0x10c) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0x36, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c9b296e268bd0fabb3a4ba7534035", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) mknodat(r0, &(0x7f0000000180)='./file0\x00', 0xc0e99db6de761fc6, 0xa771) (async) openat(r0, &(0x7f0000000000)='./file0\x00', 0x50100, 0x118) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2c41, 0x0) 3.279468971s ago: executing program 4 (id=519): r0 = socket(0x40000000015, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x15, 0x2000000000000216, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af80e01000000bfa100000000000007010000f8ffffffb70200000800000600000095688526d4f47716c9e5e3fb4fdaa319c6ee406ed5d5a3069a65cf15"], 0x0, 0xf7ffffff, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x800, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000499000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x1, 0x81, &(0x7f00000004c0)}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x2010, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r4 = epoll_create1(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0x3) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x10, 0x1fe, 0x6}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, 0x0, 0x800) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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") 3.052096893s ago: executing program 1 (id=521): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xbaba, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000047000/0x4000)=nil, 0x4000, 0x0, 0x40010, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x28, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@llc={0x1a, 0x118, 0x1, 0x9, 0x6, 0xe, @local}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000380)="9a822051643512629305f91a4709b576b5e2b768c35a07c014bc82522e016d3405a00f408eddb6f8e6a840df99ef5b7505510dc2d7e1fe8386f2c74ee3dc3bdb433a532ef623bef85d8be5c6086f880d44f7ef2247a6f0666a6faece81429885390183b8d99280ea57fa4ba73c15704c03b2a26a12569b54ab", 0x79}, {&(0x7f0000000500)="ecc561d43d3b0c3989d9e9f6af74e905a6a0dbcf989b254cbef688a912a6e2c8bb1af53d38687c244ec51bcea92cc8326cf091c915acff82324408a2caadd161903987631d7a80ff44c736aa12fc70f193253e01dcdea509266c514716ab7e97e66667d0b3580c17138cc20152159ca16fdddca047e423d41accdf790cfc5888ac47877287142bd1c2fb73dcfe274da3e32bf1961b1e53", 0x97}, {&(0x7f0000000600)="baa1d5848647b2cd57b781f3cb4631867721ff623a5c6d5227bf64bf68b1e20769bb2f51ae0dd30cee3b98fca8479e189526444020a07c597bc30516ab064bb38f27c7248ba9f89282d45b8ae86c336d748ece476cef48493f704b3e48652f1ab35f3f633498424bc854602c9693fad082a13ae3e13f9c4f8df4ef38518c71872be25e74ab7c371bb30a5b65da54e3cca996c00b04ced6b3f9bb2cfbbfddc9207ab83ab69de7db7f", 0xa8}], 0x3}, 0x0, 0x8850}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x3a, 0x0, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2008052, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@errors_remount}, {@bsdgroups}]}, 0x3, 0x4cf, &(0x7f0000000740)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c11, &(0x7f00000000c0)={[{@usrquota, 0x4e}]}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x4, 0x101, 0x118}}) 2.933284012s ago: executing program 4 (id=524): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x7f, 0x10}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xa}, 0x10, 0x5, 0x43a1bd77, 0x7, 0xaa4, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.838664018s ago: executing program 1 (id=526): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}, 0x0, 0x3ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="1805"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x41}, 0x94) unshare(0x20000400) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000680)={0xffff8001}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8}]}, 0x24}}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = io_uring_setup(0x447e, &(0x7f00000004c0)={0x0, 0xb602, 0x200, 0x0, 0x7, 0x0, r3}) io_uring_enter(r6, 0x5dcd, 0x72c9, 0x70, &(0x7f0000000580)={[0xe96d]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xb1, 0x1c, &(0x7f0000000000)="e0b0a9556533b06d58ce162f5e12a8489f83136c223a425cea50d69dda02acdbbb4be8dc234576d1eb331fbb6325583544124c0363c67ce95882faf6e66c6dab9219e264bed5bc1f902a50867b1d27a5fff7bdc2c5a5913fd2ede74e0a42675cf2d130da212ec5a2bc342a4a7c1125d23133f67badc65e7bbc7f3cdc0279a3dd069fe84248bda18b22f71680c1fcdfaf88674728de90f2dd4a47b2818db05de8700336dd47603a302d4b5ca269ffd4a613", &(0x7f0000000100)=""/28, 0x3, 0x0, 0xfc0, 0x0, &(0x7f0000001340)="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", 0x0, 0x7, 0x0, 0x80000001}, 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) request_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x1}, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x304}, "3fc8b7f49e72aa10", "2f8012d4c440120043cc7b8308754035", "5eaca2ec", "662690d214c79ced"}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.796963437s ago: executing program 4 (id=527): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 2.446347717s ago: executing program 0 (id=528): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffebd) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX=r4, @ANYRES16=r5, @ANYRESDEC=r1, @ANYRES16=r1, @ANYRES16=0x0, @ANYRES8, @ANYRES8, @ANYRES64=r3, @ANYRES32=0x0, @ANYRES16=r1], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_socket_connect_nvme_tcp() perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00') perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x101d0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000001200005f00"], 0x0, 0x34}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000080000000000000000000000095000000000000009f870d484f25252acfab48de8536060639a5ae5c957fa957049540ddc1901878a59cb285ddca8c091e7c4498b151e97cd4fe6c3dba0e07e50ef31924e6e66c0ffe0d58cc6130f853ad6a384ac6762c94f4aa3c6b40b9"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r10, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0}}, 0x10) r11 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x100, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r11, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xe, 0x1) ioctl$TCSETSW(r8, 0x5403, 0x0) ioctl$VT_DISALLOCATE(r8, 0x5608) 2.011883246s ago: executing program 4 (id=529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) bind$tipc(r1, &(0x7f0000000400)=@name={0x1e, 0x2, 0x3, {{0x2, 0x1}, 0x1}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'\x00', 0x1000}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = epoll_create(0x752) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000002c0), 0x4) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000740), 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) fsetxattr(r2, 0x0, &(0x7f00000003c0)='security.capability\x00', 0x14, 0x2) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r6, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001200)=[0x0], &(0x7f0000001240)=[0x0], 0x0, 0x90, &(0x7f0000001280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) r8 = dup3(r3, r5, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="184a0000060000000000000000000000180000000f000003000000"], &(0x7f0000000380)='syzkaller\x00', 0x3, 0xac, &(0x7f0000001000)=""/172, 0x41100, 0x1, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001500)={0x0, 0x9, 0x5, 0x8000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001540)=[r1, r6, r1, r6, r8], &(0x7f0000001580)=[{0x4, 0x1, 0xd}, {0x8, 0x3, 0x2, 0x2}, {0x0, 0x4, 0xd, 0x6}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg$kcm(r10, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10040) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="8800000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000600012800e00010069703665727370616e0000004c00028008000100", @ANYRES32, @ANYBLOB="08000c0006000000050016000200000005000b00ff00000006000f0000800000060011004e230000040012"], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.428377796s ago: executing program 1 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff}, 0x9c) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (fail_nth: 2) socket$kcm(0xa, 0x546ed7d3482059e5, 0x88) bpf$ITER_CREATE(0x21, 0x0, 0x0) 441.094303ms ago: executing program 0 (id=532): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x810c03, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x20008a0, 0x0) 384.642008ms ago: executing program 0 (id=534): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000640)={0x13, &(0x7f0000000040)}) timerfd_create(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x0) 384.389578ms ago: executing program 1 (id=535): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x2000000000007, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x1160bb, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 382.835088ms ago: executing program 3 (id=536): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x7f, 0x10}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xa}, 0x10, 0x5, 0x43a1bd77, 0x7, 0xaa4, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 307.527719ms ago: executing program 0 (id=537): socket$netlink(0x10, 0x3, 0xf) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x58, 0x7, 0x80000000}, {0x6, 0x0, 0xe}]}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r4, 0x8000}], 0x1, 0x0, 0x0, 0x0) r5 = dup2(r3, r4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) fcntl$setown(r4, 0x8, r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) tkill(r2, 0x13) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x1) syz_emit_ethernet(0x173, &(0x7f0000000100)=ANY=[], 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x450000, 0x24) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, 0x0) 239.273611ms ago: executing program 4 (id=539): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 238.443831ms ago: executing program 3 (id=540): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000700)="b5", 0x1}], 0x1}}], 0x3, 0x1005) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0000010008003950323030302e75"], 0x15) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80202, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) socket(0x10, 0x803, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(r2, 0x10, &(0x7f0000000240)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b00000000ffdbdf250300000000000004080001000200000008000a"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x6) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x3419, &(0x7f0000000180)={0x0, 0x8656, 0x8, 0x3, 0x28}, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0xa08, &(0x7f0000008280)="$eJzs3c1vXOW9B/DvGduJMSgJkMvlRkAm4SYY8HVs55LciMW9iT1JzPXLle1IRHdBKHGqKG5pSSsBqtQgVV0VtVKrLtod6qorJDZlU7Frd+2qi0oV/wLqKlIruToz43hsjz2O69gmfD7WzJyX33me33l9NOOZ84Qvl8WDK8YWF+uPLY5f+fUOZMwedmHs848+/rB8fHAn+9KVV4rfJL1Jqkl3kqeTntGxmenJDgXdSq4l+SwpkuxP43VTrqX4cR5bHv8sxS/Lete1b7Ml08kiX2m7ffwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBeVIyODQ0NF/syPnXl9WpDUl1jdGxmusji4to5S8s0fFrv9bv4tGO9SVE+0tu71NX304eXZz+VpHo8zzTGnql3SJ7evP/oU4defbK7srT8etn8U/Zvvtjb771/682Fhfl3Hkgie9+l2tT47PT45PlLter47HT13JkzQ6cuX5ytXhyfqM1enZ2rTVZHZ2rn56Znqv2jL1aHz507Xa0NXp2+MnVpbHCitjTx7H+MDA2dqb42+H+18zOz01OnXhucHb08PjExPnWpHlPOLmPOlgfi/47PVedq5yer1Rs3F+ZPr8qpq350tUwog4Y7rUkZNNIpaGRoZGR4eGRk+INm79n3Jpx55dwrZ4eGuodWyci+VREP6KBlb3lk/d28/Rdx2KJKo/1PJjKeqVzJ69mXapu/0YxlJtP525lysbXzm5ba/xOnahvW29r+N1v57pbZR8qn43muOdq7TvvfNtOd/Lud9/J+buXNLGQh83ln1zPa2b9LqWUq45nNdMYzmfP1KdXmlGrO5UzOZChv5HKOZjbVXMx4JlLLbK5mNnOpZbJ+dM2klvOZy3RmUk1/RvNiqhnOuZzL6VRTy2CuZjpXMpVLGcv5eik3crO+3U9vkOO9oOHNBI1sELSmud9E+78yojwpdrQdYs/Z9ms4bNVis/3f1zm0f3QnEgIAAAC23b/9PgcOP/G7vyRFnq1/Ln9xfKI2tNtpAQAAANuo/nW9Z8qXnnLo2RTe/wMAAMDDpqj/xq5I0pejjaGlX0L5EAAAAAAeEvX//z+X4ujyBO//AQAA4CHT+R77HSOKgaXb/1avN16vNyMaY0XfxfGJ2uDo9MSrwzlZv8tA/ZcGa0rrSoqe+s8PXsqxRtSxvsZr33KJZZ29ZdTw4KvDeSnHmyvS/3z58nx/m8iRRuQLjcgXWiO7siLydBkJAA+74xu0x5tt/1/KQCNi4Ei9ye8+0qYNHtKyAsBecTy3m0PNLs3atP/NXnieW6/9/88N3v+XEU/kxtHGVwoG81bezkKuZyDNbxwcbVfqUm8Eja8hDHT4NKCv+ZWFP56tZGDN5wG999a1NXY+Ixlo+4lAS7lFeldsrK5t3vgAsEuOb9gOb679H+jw/n+5zd2/S2sJALS614N924FKM2qjmM4Du7yKAMAqWmkAAAAAAAAAAAAAAAAAAAAAAAAAAADYfpu6gf8fTiYLC/PJ1u7/v7WB3vvJcOOBSjaI+fvOrM7ODHQl2a3a/zv3vVS5j/fKpjOwcmCXL0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsiCLpaje9kuxPMpTk1M5n9eDc2e0Etkt1a4sVd3M37+bAdqcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBV17z/fyWN10cbk9JdSU4kuZbk/3c7x+10d7cT2DXfqD+33P+/kvRksUh3Y7en6Bkdm5meLHd/sb+c//lHH39YPjqXvbZXhbKAsoYVnUs0a2iZ0rNyqcfrS/WNzd++9Z23v1Udu1A/MC/MXZwYm7w08z/LgU8VnzS6QKgWyxOX8v3eid/+pKXQfc3KPynXtL3V9V6s1zu2tt5/bbf0OvVuws2F+ZGyprna63Pf/ebNd1tmPZFjyfP9Sf/Kmr5ePtap6djq7blS8UXxw+JAfp5r9f1fbo1isSh30cH6+j9y4+bC/OBbby9cv5fT91fkdChHk1xPejef09EU6+VTP+oqPWWtQ/Wg8ulwh/I21FLi8Drb9fH6YdN3X+tQXX8d6jps92ZGp9tm9NNvP5mT972nT3aosa3ii+LPxeX8KT9o6f+jUu7/E2l7drYpoh7ZcqS0zltxelUakfU1H2md8cbqMtc9K+95pGMEm/WjfC3/dW//V1qu/819VTYLD/561FJj+/Miuf/z4lcH17Qoy+ot0uFVLVLz6rPeMs08Dzei1snzX/Jy0n3kvq4oL3e4ojyo8/8XRX/+mjv6/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPa+IulqN72SnEhyKMnBcryaLK6OubOF+ip9xVbS3DZbyfnLp1h3RYu7uZt3c2CnMwIAAAAAAADgwbgw9vlHH39YPur/j+/Kv1eac6pJd5JDxc96Rsdmpic7FNSTXFv6l37v/eVwrXx6bHn8s3Ls6Q4L7e7XBwDgS+0fAQAA//9T8Gpj") r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 231.829989ms ago: executing program 5 (id=541): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x9000000, 0x3, 0x0, 0xd, 0x0, [{0x2}, {0x4, 0x3}, {0xd, 0x5}]}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000600)=""/156, 0x40, 0x9c, 0x1, 0xb}, 0x28) 215.578205ms ago: executing program 5 (id=542): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)="f8", 0x9}], 0x1, &(0x7f0000003a00)=[{0x10, 0x29, 0xd}], 0x10}}], 0x2, 0x40088c5) r2 = socket$kcm(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020400) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2c020400) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="dcf90c404e6a177be9766e43dae8a9b99c6c655ffa503ebf7bcb0a542cf1ce1d9c3166fb3cba6e4b9a72a7b2664b0a96be73847e7a7c8de94ca4187cf2efb6fd91b8bc63615bfcd75c87b6d43397553fb766ca047487a3c5848ea8d479625d4fbf78dd7edbdb083bf62a5efce972a08b0ea91e2be8ac14968d5e29c6e484f221321ef21004e148d4733568f2abaa2c6da7e8304c280fa11f4e4e7be02be4770409d117df", 0xa4}, {&(0x7f00000000c0)="14", 0x1}, {0xffffffffffffffff}, {&(0x7f0000003a40)="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", 0x1000}, {&(0x7f0000000400)="46838149ad53db20f5d9055b06c64be9c602328623f9dd532cfe678a9b45eb99a64817ebf1945244992bb86d7b1b5bf827faee587967edb6c56d9cb603cbf71724bb412263e9e6b8fb241f2769d7a6626b3896ad54ceef3db8af5e6b0d0f6e18449250d9fd6f15863ece22d4466043dabe2a3b46d35cc334416a4664c27b6af9900dce939cab063800970cb3bd5e4fa2a37717fd5991eebbc8ddb29d7bc520fbd9202f1b39cfd7dab419cee9069c44503ce184f9da8b9e6ec86e864aafe7d4e39057361b55cea2", 0xc7}, {&(0x7f0000000640)="ff2e2df27005a7a88534330d9aa69151a6de8b930cde93e05ea7d29d6f720ee62aab699d74a8796c7dcada3f3676e876b10ad4c1b830e942ff0b9eb872905e08571b65aeb3066e9020115560315ae9c0bc43205b2e097bc8d32b0b9dd3f1e348486d9d4ee55aa785332824029505935786cf124688c58ac2850c24a4a5a083a71cfb9df96a3242b46179922a1f3ff89625", 0x91}, {&(0x7f0000000700)="222350d797074f82e9bb2244551048e756e1eefd32d25b71c0574a3033b182e8eebcd2ef233d120d8727c8ed3e78b85f0912731e081d0424a6", 0x39}, {&(0x7f0000000240)="ce71824838f124b90f49d5b8a101ac8ca0c0134efbfe8c66c0abf07e52bf5ebc19168d2bd47c4a514520d2d69cc14beda13ae866d315252e0328ea984f766c67477ad1bbc82954", 0x47}, {&(0x7f0000000500)="5cf0f45a1141c58e07ce", 0xa}], 0x9}, 0x4001) r3 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) setsockopt$packet_int(r3, 0x107, 0x11, 0x0, 0x0) r4 = syz_open_dev$rtc(0x0, 0x7, 0x200100) ioctl$RTC_VL_READ(r4, 0x80047013, 0x0) sendmsg$inet(r2, 0x0, 0x400c040) sendmsg$inet(r2, 0x0, 0x8001) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) bind$rxrpc(r6, 0x0, 0x0) lseek(r7, 0xfeffffff00000000, 0x4) creat(&(0x7f0000000040)='./bus\x00', 0x8) 123.558231ms ago: executing program 3 (id=543): syz_emit_ethernet(0x56, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x40081) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 106.160487ms ago: executing program 5 (id=544): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x810c03, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x20008a0, 0x0) 76.796079ms ago: executing program 5 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a300000000009000300020000000000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a380000001b0a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c0002"], 0x60}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000cb9aeee87910000000000000a7000000080000009500000000000000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) 19.090634ms ago: executing program 5 (id=546): unshare(0x26020480) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000740)={{0x2, 0x4e24, @empty}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x4c, {0x2, 0x4e22, @empty}, 'ipvlan1\x00'}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x1, 0x0, 0x90, "ff00f7000000000000000020af88008300"}) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x401) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000280)={0x2, 0x1, 0x10000000, 0x4, 0xc3, "35e51ae99accd256fe69a7d6560fb6e858474e", 0xdf0, 0x69de}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x148, 0x111, 0x4b4, 0x0, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, [0xffffff00], [], 'ip6tnl0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) 18.628884ms ago: executing program 3 (id=547): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000640)={0x13, &(0x7f0000000040)}) timerfd_create(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x0) 18.280764ms ago: executing program 3 (id=548): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x4000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}], [], 0x6b}}) 262.309µs ago: executing program 5 (id=549): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0xc) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2}) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x25, 0x401}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="523d3968ab306866bf714548bbb8b062c2a7f89aa957d3cdb7350bac", 0x1c}], 0x1, 0x3ff7, 0xfffffffc, 0x22) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r4}, 0x0, 0x0}, 0x20) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0xf8d}}, 0x96d) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}]}, &(0x7f0000000080)='GPL\x00', 0xda68, 0x1a, &(0x7f0000000200)=""/26, 0x41100, 0x50, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x1, 0xa59c, 0xfffffff9}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000004c0)=[{0x1, 0x1, 0xe, 0x8}, {0x2, 0x2, 0xa, 0x1}, {0x2, 0x1, 0x7, 0x8}, {0x5, 0x4, 0xf, 0x6}, {0x5, 0x1, 0x1, 0xb}, {0x5, 0x3, 0xb, 0x2}, {0x0, 0x1, 0x0, 0x7}, {0x3, 0x1, 0x8, 0x9}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0xc) (async) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x2}) (async) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) (async) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x25, 0x401}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) (async) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="523d3968ab306866bf714548bbb8b062c2a7f89aa957d3cdb7350bac", 0x1c}], 0x1, 0x3ff7, 0xfffffffc, 0x22) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r4}, 0x0, 0x0}, 0x20) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) (async) dup(r5) (async) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f390768090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xf8d}}, 0x96d) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}]}, &(0x7f0000000080)='GPL\x00', 0xda68, 0x1a, &(0x7f0000000200)=""/26, 0x41100, 0x50, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x1, 0xa59c, 0xfffffff9}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000004c0)=[{0x1, 0x1, 0xe, 0x8}, {0x2, 0x2, 0xa, 0x1}, {0x2, 0x1, 0x7, 0x8}, {0x5, 0x4, 0xf, 0x6}, {0x5, 0x1, 0x1, 0xb}, {0x5, 0x3, 0xb, 0x2}, {0x0, 0x1, 0x0, 0x7}, {0x3, 0x1, 0x8, 0x9}], 0x10, 0x1}, 0x94) (async) 0s ago: executing program 3 (id=550): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x7f, 0x10}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xa}, 0x10, 0x5, 0x43a1bd77, 0x7, 0xaa4, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): med from eth2 [ 25.223637][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.244215][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.254266][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.263209][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.271584][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.309916][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.319293][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.336722][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.345295][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.385632][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.394883][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.407089][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.415647][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.427149][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.440480][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.452340][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.463201][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.476611][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.490170][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.497266][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.505880][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.512943][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.537240][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.545948][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.553020][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.563507][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.587449][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.595619][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.602741][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.627077][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.634204][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.649933][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.656955][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.680896][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.687959][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.702967][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.710093][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.747781][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.760117][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.798856][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.820149][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.836735][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.860380][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.869909][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.881248][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.888355][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.911210][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.933261][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.940378][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.967412][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.989136][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.034404][ T3311] veth0_vlan: entered promiscuous mode [ 26.057407][ T3317] veth0_vlan: entered promiscuous mode [ 26.065303][ T3311] veth1_vlan: entered promiscuous mode [ 26.098287][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.105872][ T3317] veth1_vlan: entered promiscuous mode [ 26.120364][ T3310] veth0_vlan: entered promiscuous mode [ 26.129470][ T3311] veth0_macvtap: entered promiscuous mode [ 26.143808][ T3317] veth0_macvtap: entered promiscuous mode [ 26.158085][ T3310] veth1_vlan: entered promiscuous mode [ 26.164565][ T3311] veth1_macvtap: entered promiscuous mode [ 26.174179][ T3317] veth1_macvtap: entered promiscuous mode [ 26.186648][ T3310] veth0_macvtap: entered promiscuous mode [ 26.195753][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.215860][ T3318] veth0_vlan: entered promiscuous mode [ 26.225544][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.233574][ T3310] veth1_macvtap: entered promiscuous mode [ 26.246187][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.256018][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.267500][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.276235][ T3318] veth1_vlan: entered promiscuous mode [ 26.285430][ T83] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.294266][ T83] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.311111][ T83] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.320507][ T83] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.329952][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.338393][ T83] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.355671][ T83] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.364664][ T83] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.381099][ T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.390056][ T83] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.401259][ T83] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.410205][ T83] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.424272][ T3315] veth0_vlan: entered promiscuous mode [ 26.430762][ T83] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.454464][ T3315] veth1_vlan: entered promiscuous mode [ 26.463637][ T3318] veth0_macvtap: entered promiscuous mode [ 26.474027][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.479011][ T3318] veth1_macvtap: entered promiscuous mode [ 26.519162][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.547992][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.566635][ T3315] veth0_macvtap: entered promiscuous mode [ 26.579836][ T3483] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 26.585004][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.599264][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.610801][ T3487] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 26.611425][ T3315] veth1_macvtap: entered promiscuous mode [ 26.626653][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.627846][ C1] hrtimer: interrupt took 37529 ns [ 26.635528][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.660693][ T3483] loop0: detected capacity change from 0 to 1024 [ 26.663601][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.675560][ T3486] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.692586][ T3484] syzkaller0: entered promiscuous mode [ 26.699045][ T3484] syzkaller0: entered allmulticast mode [ 26.700323][ T3483] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.1: Failed to acquire dquot type 0 [ 26.717629][ T3483] loop0: lost filesystem error report for type 5 error -117 [ 26.717847][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 26.728238][ T3483] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 26.731540][ C1] EXT4-fs (loop0): initial error at time 1772413673: ext4_acquire_dquot:7001 [ 26.731572][ C1] EXT4-fs (loop0): last error at time 1772413673: ext4_acquire_dquot:7001 [ 26.765942][ T3483] EXT4-fs (loop0): 1 truncate cleaned up [ 26.772201][ T3483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.900974][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.908527][ T3486] Zero length message leads to an empty skb [ 26.924549][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.948135][ T3493] Bluetooth: hci0: sending frame failed (-49) [ 26.954279][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 26.965704][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.979636][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.012066][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.044786][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 27.044798][ T28] audit: type=1400 audit(1772413673.562:130): avc: denied { create } for pid=3497 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 27.093403][ T28] audit: type=1400 audit(1772413673.602:131): avc: denied { setopt } for pid=3497 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 27.125495][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.135939][ T3501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 27.155132][ T28] audit: type=1400 audit(1772413673.602:132): avc: denied { create } for pid=3497 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.180079][ T3503] loop0: detected capacity change from 0 to 128 [ 27.186643][ T3503] ======================================================= [ 27.186643][ T3503] WARNING: The mand mount option has been deprecated and [ 27.186643][ T3503] and is ignored by this kernel. Remove the mand [ 27.186643][ T3503] option from the mount to silence this warning. [ 27.186643][ T3503] ======================================================= [ 27.224652][ T28] audit: type=1400 audit(1772413673.602:133): avc: denied { write } for pid=3497 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.245689][ T28] audit: type=1400 audit(1772413673.602:134): avc: denied { nlmsg_write } for pid=3497 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.276368][ T28] audit: type=1400 audit(1772413673.602:135): avc: denied { write } for pid=3497 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 27.296387][ T28] audit: type=1400 audit(1772413673.602:136): avc: denied { connect } for pid=3497 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 27.317131][ T3503] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 27.329756][ T28] audit: type=1400 audit(1772413673.602:137): avc: denied { name_connect } for pid=3497 comm="syz.3.6" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 27.351752][ T3503] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.364576][ T28] audit: type=1400 audit(1772413673.642:138): avc: denied { write } for pid=3485 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 27.475672][ T28] audit: type=1400 audit(1772413673.652:139): avc: denied { create } for pid=3497 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 27.682378][ T3515] syz.0.7 (3515) used greatest stack depth: 9952 bytes left [ 27.944366][ T3518] loop1: detected capacity change from 0 to 128 [ 27.959347][ T3518] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 27.972556][ T3518] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.816874][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.060976][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.180773][ T3536] Q6\bY4: renamed from lo (while UP) [ 29.205945][ T3539] xt_hashlimit: size too large, truncated to 1048576 [ 29.228001][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.234088][ T3493] Bluetooth: hci0: command 0x1003 tx timeout [ 29.477269][ T3552] syzkaller0: entered promiscuous mode [ 29.483434][ T3552] syzkaller0: entered allmulticast mode [ 29.557160][ T3554] loop1: detected capacity change from 0 to 1024 [ 29.574168][ T3554] EXT4-fs: inline encryption not supported [ 29.581835][ T3554] EXT4-fs: Invalid commit interval -2147483648, must be smaller than 21474836 [ 29.697619][ T3556] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 29.708885][ T3556] bond1 (unregistering): Released all slaves [ 29.711461][ T3554] netlink: 'syz.1.21': attribute type 3 has an invalid length. [ 30.143456][ T3576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'. [ 30.167659][ T3572] Illegal XDP return value 4294967294 on prog (id 10) dev N/A, expect packet loss! [ 30.564167][ T3585] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 30.575830][ T3585] netlink: 'syz.1.30': attribute type 2 has an invalid length. [ 30.585415][ T3585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 30.598007][ T3574] loop3: detected capacity change from 0 to 256 [ 30.604558][ T3585] loop1: detected capacity change from 0 to 1764 [ 30.673833][ T3574] FAT-fs (loop3): Directory bread(block 64) failed [ 30.680494][ T3574] FAT-fs (loop3): Directory bread(block 65) failed [ 30.687110][ T3574] FAT-fs (loop3): Directory bread(block 66) failed [ 30.693928][ T3574] FAT-fs (loop3): Directory bread(block 67) failed [ 30.702320][ T3574] FAT-fs (loop3): Directory bread(block 68) failed [ 30.708935][ T3574] FAT-fs (loop3): Directory bread(block 69) failed [ 30.715964][ T3574] FAT-fs (loop3): Directory bread(block 70) failed [ 30.723159][ T3574] FAT-fs (loop3): Directory bread(block 71) failed [ 30.729704][ T3574] FAT-fs (loop3): Directory bread(block 72) failed [ 30.736326][ T3574] FAT-fs (loop3): Directory bread(block 73) failed [ 30.740964][ T3590] capability: warning: `syz.2.32' uses 32-bit capabilities (legacy support in use) [ 30.755715][ T3574] syz.3.27: attempt to access beyond end of device [ 30.755715][ T3574] loop3: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 30.774649][ T3574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 30.783767][ T3592] loop2: detected capacity change from 0 to 512 [ 30.795151][ T3592] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.808274][ T3592] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 30.818410][ T3592] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 30.879257][ T3587] batman_adv: batadv0: Adding interface: macsec1 [ 30.885991][ T3587] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.913902][ T3587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.941443][ T3587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.952804][ T3587] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 30.986435][ T3602] loop2: detected capacity change from 0 to 128 [ 31.024482][ T3602] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 31.037600][ T3606] loop3: detected capacity change from 0 to 128 [ 31.055087][ T3608] loop1: detected capacity change from 0 to 128 [ 31.056435][ T3606] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.075258][ T3608] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.075767][ T3606] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.097899][ T3608] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.163105][ T3612] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.278354][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 32.278375][ T28] audit: type=1400 audit(1772413678.612:204): avc: denied { name_bind } for pid=3625 comm="syz.4.44" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 32.488468][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.518629][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.518989][ T3640] netlink: 'syz.2.50': attribute type 21 has an invalid length. [ 32.535497][ T3640] netlink: 132 bytes leftover after parsing attributes in process `syz.2.50'. [ 32.544645][ T3640] netlink: 'syz.2.50': attribute type 1 has an invalid length. [ 32.557200][ T3640] sctp: [Deprecated]: syz.2.50 (pid 3640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 32.557200][ T3640] Use struct sctp_sack_info instead [ 32.585851][ T28] audit: type=1400 audit(1772413679.092:205): avc: denied { cpu } for pid=3638 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.606155][ T28] audit: type=1400 audit(1772413679.102:206): avc: denied { mount } for pid=3638 comm="syz.2.50" name="/" dev="hugetlbfs" ino=6035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 32.694473][ T3630] syz.4.44 (3630) used greatest stack depth: 9848 bytes left [ 33.121556][ T28] audit: type=1400 audit(1772413679.642:207): avc: denied { write } for pid=3649 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 33.154936][ T3653] set_capacity_and_notify: 1 callbacks suppressed [ 33.155067][ T3653] loop4: detected capacity change from 0 to 128 [ 33.228985][ T3653] FAT-fs (loop4): Directory bread(block 32) failed [ 33.252184][ T3653] FAT-fs (loop4): Directory bread(block 33) failed [ 33.263583][ T3653] FAT-fs (loop4): Directory bread(block 34) failed [ 33.270163][ T3653] FAT-fs (loop4): Directory bread(block 35) failed [ 33.276683][ T3653] FAT-fs (loop4): Directory bread(block 36) failed [ 33.283257][ T3653] FAT-fs (loop4): Directory bread(block 37) failed [ 33.289913][ T3653] FAT-fs (loop4): Directory bread(block 38) failed [ 33.297116][ T3653] FAT-fs (loop4): Directory bread(block 39) failed [ 33.303862][ T3653] FAT-fs (loop4): Directory bread(block 40) failed [ 33.310530][ T3653] FAT-fs (loop4): Directory bread(block 41) failed [ 33.396500][ T28] audit: type=1400 audit(1772413679.912:208): avc: denied { create } for pid=3655 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 33.416582][ T28] audit: type=1400 audit(1772413679.912:209): avc: denied { ioctl } for pid=3655 comm="syz.3.54" path="socket:[6047]" dev="sockfs" ino=6047 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 33.468768][ T3661] netlink: 56 bytes leftover after parsing attributes in process `syz.0.55'. [ 33.469302][ T28] audit: type=1400 audit(1772413679.992:210): avc: denied { create } for pid=3655 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 33.510472][ T3666] loop1: detected capacity change from 0 to 256 [ 33.524021][ T28] audit: type=1400 audit(1772413680.042:211): avc: denied { read } for pid=3667 comm="syz.4.59" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.547358][ T28] audit: type=1400 audit(1772413680.042:212): avc: denied { open } for pid=3667 comm="syz.4.59" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.549988][ T3666] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.576496][ T28] audit: type=1400 audit(1772413680.092:213): avc: denied { block_suspend } for pid=3667 comm="syz.4.59" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.899681][ T1031] IPVS: starting estimator thread 0... [ 33.909740][ T3675] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 34.058002][ T3676] IPVS: using max 2448 ests per chain, 122400 per kthread [ 34.390729][ T1276] IPVS: stop unused estimator thread 0... [ 35.456858][ T3693] netlink: 'syz.1.64': attribute type 2 has an invalid length. [ 35.688858][ T3693] netlink: 14 bytes leftover after parsing attributes in process `syz.1.64'. [ 36.351112][ T3712] loop1: detected capacity change from 0 to 128 [ 36.748437][ T3720] loop1: detected capacity change from 0 to 128 [ 36.755461][ T3720] msdos: Bad value for 'dmask' [ 36.819203][ T3725] loop2: detected capacity change from 0 to 256 [ 36.834669][ T3725] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.265814][ T3735] netlink: 36 bytes leftover after parsing attributes in process `syz.4.77'. [ 37.304438][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 37.304448][ T28] audit: type=1400 audit(1772413683.822:230): avc: denied { bind } for pid=3734 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.785441][ T3746] loop4: detected capacity change from 0 to 1764 [ 37.792164][ T3746] iso9660: Unknown parameter '5tf8' [ 38.031434][ T28] audit: type=1400 audit(1772413684.322:231): avc: denied { getopt } for pid=3740 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 39.022995][ T23] IPVS: starting estimator thread 0... [ 39.048883][ T3753] netlink: 'syz.2.82': attribute type 4 has an invalid length. [ 39.393905][ T3751] loop3: detected capacity change from 0 to 1024 [ 39.422051][ T3755] netlink: 'syz.2.82': attribute type 4 has an invalid length. [ 39.480603][ T3758] loop4: detected capacity change from 0 to 512 [ 39.518106][ T3749] IPVS: using max 2400 ests per chain, 120000 per kthread [ 39.599523][ T3758] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.653307][ T3758] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 39.669928][ T3755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3755 comm=syz.2.82 [ 39.729890][ T3758] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.83: bg 0: block 248: padding at end of block bitmap is not set [ 39.780850][ T3767] xt_policy: output policy not valid in PREROUTING and INPUT [ 39.800157][ T3758] loop4: lost filesystem error report for type 5 error -117 [ 39.807844][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 39.821563][ C1] EXT4-fs (loop4): last error at time 1772413686: ext4_validate_block_bitmap:441 [ 39.830784][ T3758] Quota error (device loop4): write_blk: dquota write failed [ 39.849396][ T3758] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 39.867904][ T3758] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.83: Failed to acquire dquot type 1 [ 39.889584][ T3758] loop4: lost filesystem error report for type 5 error -117 [ 39.890018][ T3758] EXT4-fs (loop4): 1 truncate cleaned up [ 39.924578][ T3758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 40.254388][ T3758] syz.4.83 (3758) used greatest stack depth: 9160 bytes left [ 40.596595][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 40.610695][ T3779] loop1: detected capacity change from 0 to 512 [ 40.612399][ T28] audit: type=1400 audit(1772413687.132:232): avc: denied { bind } for pid=3780 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.636648][ T3779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.645171][ T3779] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.90: iget: bad extended attribute block 262144 [ 40.658218][ T3779] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.658403][ T3779] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.90: couldn't read orphan inode 15 (err -117) [ 40.679196][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 40.679211][ C0] EXT4-fs (loop1): initial error at time 1772413687: ext4_orphan_get:1391: inode 15 [ 40.679247][ C0] EXT4-fs (loop1): last error at time 1772413687: ext4_orphan_get:1391: inode 15 [ 40.704142][ T3779] loop1: lost filesystem error report for type 5 error -117 [ 40.718458][ T3779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.745608][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.759653][ T3779] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 40.767149][ T3779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 40.776295][ T3779] netlink: 96 bytes leftover after parsing attributes in process `syz.1.90'. [ 40.776543][ T3777] netlink: 36 bytes leftover after parsing attributes in process `syz.2.89'. [ 40.785268][ T3779] 8021q: VLANs not supported on sit0 [ 40.826828][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.866590][ T28] audit: type=1400 audit(1772413687.372:233): avc: denied { write } for pid=3787 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.447513][ T3800] loop1: detected capacity change from 0 to 1764 [ 41.454871][ T3800] iso9660: Unknown parameter '5tf8' [ 41.505245][ T3801] loop2: detected capacity change from 0 to 1764 [ 41.512309][ T3801] iso9660: Unknown parameter '5tf8' [ 42.261187][ T3805] loop0: detected capacity change from 0 to 512 [ 42.931327][ T3493] Bluetooth: hci0: command 0x1003 tx timeout [ 42.967914][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.974469][ T3805] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.983216][ T3806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 42.995220][ T3805] EXT4-fs (loop0): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 43.948028][ T1031] IPVS: starting estimator thread 0... [ 44.058232][ T3399] IPVS: starting estimator thread 0... [ 44.103506][ T3805] loop0: detected capacity change from 0 to 512 [ 44.173034][ T3807] IPVS: using max 2352 ests per chain, 117600 per kthread [ 44.206776][ T3805] ext3: Unknown parameter 'permit_directio' [ 44.207995][ T3808] IPVS: using max 2400 ests per chain, 120000 per kthread [ 44.233962][ T3814] openvswitch: netlink: EtherType 0 is less than min 600 [ 44.244170][ T3805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'. [ 44.256523][ T28] audit: type=1400 audit(1772413690.772:234): avc: denied { mount } for pid=3813 comm="syz.2.99" name="/" dev="ramfs" ino=7461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 44.331707][ T3821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.99'. [ 44.423568][ T3829] netlink: 36 bytes leftover after parsing attributes in process `syz.3.104'. [ 44.449751][ T28] audit: type=1400 audit(1772413690.972:235): avc: denied { setopt } for pid=3830 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.485497][ T28] audit: type=1400 audit(1772413691.002:236): avc: denied { bind } for pid=3833 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.505221][ T28] audit: type=1400 audit(1772413691.012:237): avc: denied { write } for pid=3833 comm="syz.1.106" path="socket:[7489]" dev="sockfs" ino=7489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.625449][ T28] audit: type=1400 audit(1772413691.142:238): avc: denied { name_bind } for pid=3838 comm="syz.3.108" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 44.673271][ T3843] syz.3.109 uses obsolete (PF_INET,SOCK_PACKET) [ 44.784600][ T3845] loop1: detected capacity change from 0 to 1764 [ 44.791460][ T3845] iso9660: Unknown parameter '5tf8' [ 44.844061][ T3847] loop3: detected capacity change from 0 to 128 [ 44.892665][ T3847] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.049371][ T3847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.110'. [ 45.307953][ T3858] loop0: detected capacity change from 0 to 128 [ 45.466830][ T3862] loop2: detected capacity change from 0 to 128 [ 45.514407][ T3862] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.577570][ T3862] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.537655][ T3871] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 46.548617][ T3871] syzkaller1: Linktype set failed because interface is up [ 46.799119][ T28] audit: type=1400 audit(1772413693.322:239): avc: denied { mounton } for pid=3846 comm="syz.3.110" path="/29/file0/file0" dev="loop3" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 46.833509][ T3310] FAT-fs (loop3): error, invalid access to FAT (entry 0x00007fff) [ 46.841790][ T3310] FAT-fs (loop3): Filesystem has been set read-only [ 46.919261][ T3877] netlink: 'syz.3.116': attribute type 1 has an invalid length. [ 46.932702][ T3877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.946831][ T3877] macvlan2: entered promiscuous mode [ 46.953283][ T3877] bond1: entered promiscuous mode [ 46.958718][ T3877] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 46.966979][ T3877] bond1: left promiscuous mode [ 47.427305][ T55] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.440545][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.524078][ T28] audit: type=1400 audit(1772413694.042:240): avc: denied { name_connect } for pid=3887 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 47.550625][ T28] audit: type=1400 audit(1772413694.042:241): avc: denied { create } for pid=3890 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.597027][ T28] audit: type=1400 audit(1772413694.112:242): avc: denied { getopt } for pid=3890 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.669843][ T3891] xt_hashlimit: size too large, truncated to 1048576 [ 47.709522][ T28] audit: type=1400 audit(1772413694.232:243): avc: denied { shutdown } for pid=3887 comm="syz.2.119" lport=54361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.741319][ T3898] netlink: 72 bytes leftover after parsing attributes in process `syz.0.123'. [ 47.764607][ T3898] netlink: 76 bytes leftover after parsing attributes in process `syz.0.123'. [ 48.439510][ T3909] loop0: detected capacity change from 0 to 1764 [ 48.446031][ T3909] iso9660: Unknown parameter '5tf8' [ 49.288717][ T3371] IPVS: starting estimator thread 0... [ 49.343854][ T28] kauditd_printk_skb: 465 callbacks suppressed [ 49.343880][ T28] audit: type=1326 audit(1772413695.812:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3901 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c71f9c799 code=0x7ffc0000 [ 49.425987][ T3925] loop4: detected capacity change from 0 to 128 [ 49.453872][ T28] audit: type=1326 audit(1772413695.812:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3901 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c71f9c799 code=0x7ffc0000 [ 49.454909][ T3927] loop3: detected capacity change from 0 to 128 [ 49.484480][ T3910] IPVS: using max 2352 ests per chain, 117600 per kthread [ 49.494631][ T3493] Bluetooth: hci0: command 0x1003 tx timeout [ 49.500729][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.509147][ T28] audit: type=1326 audit(1772413695.812:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3901 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0c71f9c799 code=0x7ffc0000 [ 49.533242][ T3925] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.600353][ T3925] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.619969][ T3927] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.657982][ T3927] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.670206][ T3930] netlink: 'syz.2.131': attribute type 4 has an invalid length. [ 50.318619][ T3940] loop4: detected capacity change from 0 to 256 [ 50.354564][ T28] audit: type=1400 audit(1772413696.872:712): avc: denied { create } for pid=3942 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.378705][ T3940] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.723957][ T3948] netlink: 'syz.1.135': attribute type 12 has an invalid length. [ 50.762514][ T3948] netlink: 'syz.1.135': attribute type 29 has an invalid length. [ 50.782193][ T3950] loop2: detected capacity change from 0 to 1024 [ 50.800122][ T3948] netlink: 148 bytes leftover after parsing attributes in process `syz.1.135'. [ 50.868365][ T3950] EXT4-fs: Ignoring removed oldalloc option [ 51.064298][ T3950] EXT4-fs: Ignoring removed bh option [ 51.982985][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.221999][ T3950] EXT4-fs (loop2): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 52.287970][ T3950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.424744][ T3965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 52.785823][ T3979] loop1: detected capacity change from 0 to 1764 [ 52.792707][ T3979] iso9660: Unknown parameter '5tf8' [ 52.859219][ T3978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.143'. [ 52.919913][ T3978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.959020][ T3978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.387204][ T3983] netlink: 7 bytes leftover after parsing attributes in process `syz.3.145'. [ 53.408691][ T3983] netlink: 7 bytes leftover after parsing attributes in process `syz.3.145'. [ 53.585192][ T3985] netlink: 52 bytes leftover after parsing attributes in process `syz.4.146'. [ 53.595360][ T3985] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.602563][ T3985] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.612381][ T3985] FAULT_INJECTION: forcing a failure. [ 53.612381][ T3985] name failslab, interval 1, probability 0, space 0, times 1 [ 53.636467][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.646653][ T3985] CPU: 1 UID: 0 PID: 3985 Comm: syz.4.146 Not tainted syzkaller #0 PREEMPT(full) [ 53.646689][ T3985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.646708][ T3985] Call Trace: [ 53.646714][ T3985] [ 53.646738][ T3985] __dump_stack+0x1d/0x30 [ 53.646760][ T3985] dump_stack_lvl+0x95/0xd0 [ 53.646837][ T3985] dump_stack+0x15/0x1b [ 53.646853][ T3985] should_fail_ex+0x263/0x280 [ 53.646874][ T3985] should_failslab+0x8c/0xb0 [ 53.646896][ T3985] __kmalloc_noprof+0xb8/0x4e0 [ 53.646916][ T3985] ? iovec_from_user+0x84/0x200 [ 53.646971][ T3985] iovec_from_user+0x84/0x200 [ 53.646995][ T3985] __import_iovec+0xf3/0x530 [ 53.647021][ T3985] ? _parse_integer_limit+0x170/0x190 [ 53.647042][ T3985] import_iovec+0x60/0x80 [ 53.647071][ T3985] ___sys_sendmsg+0x160/0x1e0 [ 53.647184][ T3985] __x64_sys_sendmsg+0xd4/0x160 [ 53.647288][ T3985] x64_sys_call+0x194c/0x3020 [ 53.647308][ T3985] do_syscall_64+0x12c/0x370 [ 53.647379][ T3985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.647401][ T3985] RIP: 0033:0x7fa5dac9c799 [ 53.647492][ T3985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.647509][ T3985] RSP: 002b:00007fa5d96ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.647530][ T3985] RAX: ffffffffffffffda RBX: 00007fa5daf15fa0 RCX: 00007fa5dac9c799 [ 53.647544][ T3985] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 53.647575][ T3985] RBP: 00007fa5d96ef090 R08: 0000000000000000 R09: 0000000000000000 [ 53.647641][ T3985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.647654][ T3985] R13: 00007fa5daf16038 R14: 00007fa5daf15fa0 R15: 00007ffdfc47f888 [ 53.647672][ T3985] [ 53.891460][ T28] audit: type=1400 audit(1772413700.412:713): avc: denied { execute } for pid=3987 comm="syz.4.148" name="file1" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.914867][ T3989] process 'syz.4.148' launched './file1' with NULL argv: empty string added [ 53.942230][ T28] audit: type=1400 audit(1772413700.452:714): avc: denied { execute_no_trans } for pid=3987 comm="syz.4.148" path="/21/file1" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.043174][ T28] audit: type=1400 audit(1772413700.562:715): avc: denied { bind } for pid=3987 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.066747][ T28] audit: type=1400 audit(1772413700.582:716): avc: denied { ioctl } for pid=3987 comm="syz.4.148" path="socket:[8742]" dev="sockfs" ino=8742 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.091981][ T28] audit: type=1400 audit(1772413700.582:717): avc: denied { write } for pid=3987 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.324989][ T4005] loop3: detected capacity change from 0 to 256 [ 54.335183][ T4005] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.457313][ T4009] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 54.479532][ T4009] bond1 (unregistering): Released all slaves [ 54.637443][ T4014] loop2: detected capacity change from 0 to 256 [ 54.793027][ T4017] loop4: detected capacity change from 0 to 2048 [ 54.822098][ T4014] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.861393][ T4017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.978265][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.036925][ T4021] loop4: detected capacity change from 0 to 4096 [ 55.060091][ T4021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.081884][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.133892][ T4027] loop4: detected capacity change from 0 to 8192 [ 55.142617][ T28] audit: type=1400 audit(1772413701.662:718): avc: denied { mounton } for pid=4026 comm="syz.4.160" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 55.247913][ T4027] vfat: Unknown parameter '0x00000000000000000x0000000000000000' [ 55.319387][ T4027] loop4: detected capacity change from 0 to 512 [ 55.336830][ T4027] ext4: Unknown parameter 'QR' [ 55.629708][ T28] audit: type=1400 audit(1772413702.112:719): avc: denied { create } for pid=4026 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 55.753746][ T28] audit: type=1400 audit(1772413702.112:720): avc: denied { kexec_image_load } for pid=4026 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 56.091823][ T28] audit: type=1400 audit(1772413702.612:721): avc: denied { create } for pid=4053 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.092889][ T4057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 56.122210][ T28] audit: type=1400 audit(1772413702.642:722): avc: denied { write } for pid=4053 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.125339][ T4055] netlink: 52 bytes leftover after parsing attributes in process `syz.4.169'. [ 56.281534][ T4065] loop2: detected capacity change from 0 to 512 [ 56.288153][ T4065] EXT4-fs: Ignoring removed i_version option [ 56.294246][ T4065] EXT4-fs: Ignoring removed bh option [ 56.317014][ T4065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.349370][ T4065] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.362163][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.368415][ T3493] Bluetooth: hci0: command 0x1003 tx timeout [ 56.391746][ T28] audit: type=1400 audit(1772413702.912:723): avc: denied { read write } for pid=4064 comm="syz.2.173" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.548653][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.591027][ T28] audit: type=1400 audit(1772413702.932:724): avc: denied { open } for pid=4064 comm="syz.2.173" path="/35/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.718876][ T28] audit: type=1400 audit(1772413702.962:725): avc: denied { firmware_load } for pid=4058 comm="syz.0.171" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 57.404824][ T4077] loop2: detected capacity change from 0 to 512 [ 57.418303][ T4077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.446671][ T4077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.459236][ T4077] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.471522][ T4077] xt_CT: You must specify a L4 protocol and not use inversions on it [ 57.483312][ T28] audit: type=1400 audit(1772413703.992:726): avc: denied { append } for pid=4076 comm="syz.2.175" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.566570][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.608456][ T28] audit: type=1400 audit(1772413704.002:727): avc: denied { map } for pid=4076 comm="syz.2.175" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 57.681496][ T4087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.703051][ T4087] netlink: 9 bytes leftover after parsing attributes in process `syz.3.178'. [ 57.727780][ T4087] .70: renamed from hsr0 (while UP) [ 57.735291][ T4087] .70: entered allmulticast mode [ 57.740486][ T4087] hsr_slave_0: entered allmulticast mode [ 57.746153][ T4087] hsr_slave_1: entered allmulticast mode [ 57.752406][ T4087] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 57.785047][ T4090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 57.798804][ T4087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 57.810790][ T4087] loop3: detected capacity change from 0 to 512 [ 57.832485][ T4087] ext4: Unknown parameter 'noacl' [ 57.850356][ T4087] loop3: detected capacity change from 0 to 512 [ 57.860201][ T4087] EXT4-fs: Ignoring removed orlov option [ 57.865848][ T4087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.873895][ T4087] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 57.912484][ T4097] loop3: detected capacity change from 0 to 256 [ 57.921136][ T4097] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.033805][ T4106] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 58.044716][ T4106] bond1 (unregistering): Released all slaves [ 58.103493][ T4114] loop0: detected capacity change from 0 to 1024 [ 58.192433][ T4126] loop1: detected capacity change from 0 to 512 [ 58.215633][ T4126] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.269634][ T4114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.298245][ T4126] EXT4-fs (loop1): 1 truncate cleaned up [ 58.310015][ T4126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.320636][ T4114] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #2: comm syz.0.186: missing EA_INODE flag [ 58.388110][ T4114] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.186: error while reading EA inode 2 err=-117 [ 58.437572][ T4144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.190'. [ 58.449074][ T4144] FAULT_INJECTION: forcing a failure. [ 58.449074][ T4144] name failslab, interval 1, probability 0, space 0, times 0 [ 58.468417][ T4144] CPU: 1 UID: 0 PID: 4144 Comm: syz.4.190 Not tainted syzkaller #0 PREEMPT(full) [ 58.468527][ T4144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 58.468578][ T4144] Call Trace: [ 58.468584][ T4144] [ 58.468598][ T4144] __dump_stack+0x1d/0x30 [ 58.468623][ T4144] dump_stack_lvl+0x95/0xd0 [ 58.468645][ T4144] dump_stack+0x15/0x1b [ 58.468682][ T4144] should_fail_ex+0x263/0x280 [ 58.468705][ T4144] ? genl_start+0x117/0x390 [ 58.468726][ T4144] should_failslab+0x8c/0xb0 [ 58.468842][ T4144] __kmalloc_cache_noprof+0x5f/0x410 [ 58.468873][ T4144] genl_start+0x117/0x390 [ 58.468890][ T4144] __netlink_dump_start+0x334/0x520 [ 58.468940][ T4144] genl_family_rcv_msg_dumpit+0x1a5/0x210 [ 58.468961][ T4144] ? __pfx_genl_start+0x10/0x10 [ 58.468979][ T4144] ? __pfx_genl_dumpit+0x10/0x10 [ 58.468997][ T4144] ? __pfx_genl_done+0x10/0x10 [ 58.469059][ T4144] genl_rcv_msg+0x400/0x470 [ 58.469076][ T4144] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 58.469146][ T4144] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 58.469178][ T4144] netlink_rcv_skb+0x123/0x220 [ 58.469203][ T4144] ? __pfx_genl_rcv_msg+0x10/0x10 [ 58.469282][ T4144] genl_rcv+0x28/0x40 [ 58.469299][ T4144] netlink_unicast+0x5c0/0x690 [ 58.469324][ T4144] netlink_sendmsg+0x5c8/0x6f0 [ 58.469416][ T4144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.469437][ T4144] ____sys_sendmsg+0x5af/0x600 [ 58.469461][ T4144] ___sys_sendmsg+0x195/0x1e0 [ 58.469618][ T4144] __x64_sys_sendmsg+0xd4/0x160 [ 58.469648][ T4144] x64_sys_call+0x194c/0x3020 [ 58.469673][ T4144] do_syscall_64+0x12c/0x370 [ 58.469695][ T4144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.469814][ T4144] RIP: 0033:0x7fa5dac9c799 [ 58.469830][ T4144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.469846][ T4144] RSP: 002b:00007fa5d96ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.469871][ T4144] RAX: ffffffffffffffda RBX: 00007fa5daf15fa0 RCX: 00007fa5dac9c799 [ 58.469956][ T4144] RDX: 0000000000000880 RSI: 0000200000000140 RDI: 0000000000000005 [ 58.469969][ T4144] RBP: 00007fa5d96ef090 R08: 0000000000000000 R09: 0000000000000000 [ 58.469982][ T4144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.469995][ T4144] R13: 00007fa5daf16038 R14: 00007fa5daf15fa0 R15: 00007ffdfc47f888 [ 58.470014][ T4144] [ 58.504498][ T4114] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 58.752408][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.753706][ T4114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.790577][ T4150] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 58.829901][ T4150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 58.970042][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.019298][ T4166] syzkaller0: entered promiscuous mode [ 59.024854][ T4166] syzkaller0: entered allmulticast mode [ 59.046241][ T4177] loop0: detected capacity change from 0 to 256 [ 59.050282][ T4168] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 59.065886][ T4168] bond1 (unregistering): Released all slaves [ 59.073083][ T4177] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.384923][ T4183] loop3: detected capacity change from 0 to 128 [ 59.449909][ T4186] FAULT_INJECTION: forcing a failure. [ 59.449909][ T4186] name failslab, interval 1, probability 0, space 0, times 0 [ 59.572249][ T4186] CPU: 0 UID: 0 PID: 4186 Comm: syz.2.204 Not tainted syzkaller #0 PREEMPT(full) [ 59.572327][ T4186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.572336][ T4186] Call Trace: [ 59.572341][ T4186] [ 59.572348][ T4186] __dump_stack+0x1d/0x30 [ 59.572430][ T4186] dump_stack_lvl+0x95/0xd0 [ 59.572448][ T4186] dump_stack+0x15/0x1b [ 59.572465][ T4186] should_fail_ex+0x263/0x280 [ 59.572488][ T4186] should_failslab+0x8c/0xb0 [ 59.572574][ T4186] kmem_cache_alloc_noprof+0x66/0x400 [ 59.572650][ T4186] ? prepare_creds+0x38/0x540 [ 59.572672][ T4186] prepare_creds+0x38/0x540 [ 59.572690][ T4186] set_current_groups+0x1b/0x180 [ 59.572723][ T4186] __se_sys_setgroups+0x286/0x310 [ 59.572746][ T4186] __x64_sys_setgroups+0x31/0x40 [ 59.572773][ T4186] x64_sys_call+0x2c38/0x3020 [ 59.572859][ T4186] do_syscall_64+0x12c/0x370 [ 59.572881][ T4186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.572903][ T4186] RIP: 0033:0x7f3799dac799 [ 59.572919][ T4186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.573008][ T4186] RSP: 002b:00007f3798807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 59.573028][ T4186] RAX: ffffffffffffffda RBX: 00007f379a025fa0 RCX: 00007f3799dac799 [ 59.573043][ T4186] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 40000000000000dd [ 59.573055][ T4186] RBP: 00007f3798807090 R08: 0000000000000000 R09: 0000000000000000 [ 59.573066][ T4186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.573089][ T4186] R13: 00007f379a026038 R14: 00007f379a025fa0 R15: 00007ffd56efd628 [ 59.573110][ T4186] [ 59.777780][ T4191] loop3: detected capacity change from 0 to 764 [ 59.786545][ T4191] iso9660: Unknown parameter 'iso9660' [ 59.825302][ T4193] mmap: syz.3.207 (4193) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.014313][ T4213] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 60.047745][ T4213] bond1 (unregistering): Released all slaves [ 60.074562][ T4220] SELinux: Context system_u:object_r:fuse_device_t:s0 is not valid (left unmapped). [ 60.160913][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 60.160975][ T28] audit: type=1400 audit(1772413706.682:769): avc: denied { unlink } for pid=3311 comm="syz-executor" name="file0" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fuse_device_t:s0" [ 60.209558][ T4247] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 60.231042][ T4247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 60.259221][ T4247] bond2: entered promiscuous mode [ 60.274595][ T4247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.289187][ T4247] bridge1: entered promiscuous mode [ 60.295424][ T4247] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 60.548496][ T4286] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.587807][ T28] audit: type=1400 audit(1772413707.102:770): avc: denied { write } for pid=4238 comm="syz.2.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.634387][ T4286] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.841066][ T28] audit: type=1326 audit(1772413707.362:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3799dac799 code=0x7ffc0000 [ 60.882301][ T28] audit: type=1326 audit(1772413707.362:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3799dac799 code=0x7ffc0000 [ 60.906027][ T28] audit: type=1326 audit(1772413707.392:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3799d6cfce code=0x7ffc0000 [ 60.929615][ T28] audit: type=1326 audit(1772413707.392:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3799dada97 code=0x7ffc0000 [ 60.952867][ T28] audit: type=1326 audit(1772413707.392:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3799dac799 code=0x7ffc0000 [ 60.976756][ T28] audit: type=1326 audit(1772413707.392:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3799dada97 code=0x7ffc0000 [ 61.000596][ T28] audit: type=1326 audit(1772413707.392:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3799d6cfce code=0x7ffc0000 [ 61.023868][ T28] audit: type=1326 audit(1772413707.392:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3799dac799 code=0x7ffc0000 [ 61.047727][ T4332] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 61.144307][ T4341] FAULT_INJECTION: forcing a failure. [ 61.144307][ T4341] name failslab, interval 1, probability 0, space 0, times 0 [ 61.166555][ T4341] CPU: 0 UID: 0 PID: 4341 Comm: syz.3.227 Not tainted syzkaller #0 PREEMPT(full) [ 61.166622][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.166632][ T4341] Call Trace: [ 61.166638][ T4341] [ 61.166678][ T4341] __dump_stack+0x1d/0x30 [ 61.166706][ T4341] dump_stack_lvl+0x95/0xd0 [ 61.166770][ T4341] dump_stack+0x15/0x1b [ 61.166787][ T4341] should_fail_ex+0x263/0x280 [ 61.166805][ T4341] should_failslab+0x8c/0xb0 [ 61.166822][ T4341] kmem_cache_alloc_noprof+0x66/0x400 [ 61.166841][ T4341] ? audit_log_start+0x34c/0x730 [ 61.166928][ T4341] audit_log_start+0x34c/0x730 [ 61.166945][ T4341] ? kstrtouint_from_user+0xa8/0xf0 [ 61.167037][ T4341] audit_seccomp+0x47/0x100 [ 61.167061][ T4341] ? __seccomp_filter+0x8db/0x1350 [ 61.167161][ T4341] __seccomp_filter+0x8ec/0x1350 [ 61.167183][ T4341] ? __rcu_read_unlock+0x4e/0x70 [ 61.167201][ T4341] ? __fget_files+0x184/0x1c0 [ 61.167232][ T4341] ? mutex_lock+0x57/0x90 [ 61.167291][ T4341] ? mutex_unlock+0x4e/0x90 [ 61.167325][ T4341] __secure_computing+0x81/0x150 [ 61.167345][ T4341] do_syscall_64+0xd3/0x370 [ 61.167362][ T4341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.167381][ T4341] RIP: 0033:0x7f0c71f9c799 [ 61.167395][ T4341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.167442][ T4341] RSP: 002b:00007f0c709ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 61.167532][ T4341] RAX: ffffffffffffffda RBX: 00007f0c72215fa0 RCX: 00007f0c71f9c799 [ 61.167544][ T4341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 61.167555][ T4341] RBP: 00007f0c709ef090 R08: 0000000000000000 R09: 0000000000000000 [ 61.167567][ T4341] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 61.167578][ T4341] R13: 00007f0c72216038 R14: 00007f0c72215fa0 R15: 00007ffef43c2688 [ 61.167595][ T4341] [ 61.368112][ T4343] netlink: 84 bytes leftover after parsing attributes in process `syz.1.228'. [ 61.534506][ T4355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 61.595475][ T4360] set_capacity_and_notify: 2 callbacks suppressed [ 61.595489][ T4360] loop1: detected capacity change from 0 to 2048 [ 61.698531][ T4360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.795857][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 61.838254][ T4388] loop4: detected capacity change from 0 to 512 [ 61.860024][ T4388] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 61.873238][ T4388] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 61.888821][ T4388] EXT4-fs (loop4): 1 truncate cleaned up [ 61.899458][ T4388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.934249][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.951583][ T4398] loop4: detected capacity change from 0 to 256 [ 61.963158][ T4398] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.357774][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.671178][ T4407] loop0: detected capacity change from 0 to 1024 [ 62.688247][ T4407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.721063][ T4407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.901654][ T4409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.911671][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.922855][ T4409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.021083][ T4434] loop2: detected capacity change from 0 to 512 [ 63.029105][ T4433] loop0: detected capacity change from 0 to 164 [ 63.036643][ T4433] ISOFS: unable to read i-node block [ 63.042220][ T4433] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 63.051632][ T4434] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.088673][ T4437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.259'. [ 63.107907][ T4434] EXT4-fs: quotafile must be on filesystem root [ 63.143048][ T4442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.261'. [ 63.164101][ T4442] loop0: detected capacity change from 0 to 1024 [ 63.177530][ T4440] loop3: detected capacity change from 0 to 1024 [ 63.203321][ T4442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.214619][ T4442] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 63.235369][ T4442] System zones: 0-1, 3-36 [ 63.241358][ T4440] loop3: detected capacity change from 0 to 1024 [ 63.244919][ T4442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.332643][ T4456] EXT4-fs (loop0): shut down requested (1) [ 63.980238][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.089149][ T4479] loop4: detected capacity change from 0 to 256 [ 64.096465][ T4479] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.263113][ T4484] EXT4-fs: Ignoring removed bh option [ 64.272310][ T4484] EXT4-fs: inline encryption not supported [ 64.285376][ T4484] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.298854][ T4484] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 64.317225][ T4484] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.275: bg 0: block 248: padding at end of block bitmap is not set [ 64.331729][ T4484] loop4: lost filesystem error report for type 5 error -117 [ 64.331964][ T4484] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.275: Failed to acquire dquot type 1 [ 64.339328][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 64.339367][ C1] EXT4-fs (loop4): last error at time 1772413966: ext4_validate_block_bitmap:441 [ 64.366630][ T4484] loop4: lost filesystem error report for type 5 error -117 [ 64.367745][ T4484] EXT4-fs (loop4): 1 truncate cleaned up [ 64.390919][ T4484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 64.416215][ T4492] EXT4-fs: Mount option(s) incompatible with ext2 [ 64.447338][ T4500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.460827][ T4500] ext4: Unknown parameter 'fowner>00000000000000060928' [ 64.468768][ T4495] netlink: 'syz.1.278': attribute type 2 has an invalid length. [ 64.484278][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 64.633397][ T4511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.717109][ T4519] syzkaller0: entered promiscuous mode [ 64.722655][ T4519] syzkaller0: entered allmulticast mode [ 64.734296][ T4521] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.830753][ T4511] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 64.883742][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.551695][ T4539] iso9660: Unknown parameter '5tf8' [ 65.575321][ T4540] iso9660: Unknown parameter '5tf8' [ 67.084356][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.182364][ T4542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.292'. [ 68.221582][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 68.221595][ T28] audit: type=1400 audit(1772413970.739:905): avc: denied { read write } for pid=4541 comm="syz.1.292" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 68.275401][ T28] audit: type=1400 audit(1772413970.769:906): avc: denied { open } for pid=4541 comm="syz.1.292" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 68.299651][ T3419] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.326397][ T4555] set_capacity_and_notify: 7 callbacks suppressed [ 68.326410][ T4555] loop0: detected capacity change from 0 to 128 [ 68.328422][ T3419] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.368273][ T4555] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.388052][ T4561] netlink: 'syz.2.297': attribute type 10 has an invalid length. [ 68.398684][ T4561] netlink: 2 bytes leftover after parsing attributes in process `syz.2.297'. [ 68.411992][ T4555] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.443918][ T4561] bond0: entered promiscuous mode [ 68.449153][ T4561] bond_slave_0: entered promiscuous mode [ 68.454870][ T4561] bond_slave_1: entered promiscuous mode [ 68.460851][ T4561] bridge0: port 3(bond0) entered blocking state [ 68.467236][ T4561] bridge0: port 3(bond0) entered disabled state [ 68.469720][ T28] audit: type=1400 audit(1772413970.959:907): avc: denied { setopt } for pid=4556 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.473629][ T4561] bond0: entered allmulticast mode [ 68.498080][ T4561] bond_slave_0: entered allmulticast mode [ 68.503877][ T4561] bond_slave_1: entered allmulticast mode [ 68.511198][ T4561] bridge0: port 3(bond0) entered blocking state [ 68.517458][ T4561] bridge0: port 3(bond0) entered forwarding state [ 68.549013][ T4557] tipc: Failed to obtain node identity [ 68.554473][ T4557] tipc: Enabling of bearer rejected, failed to enable media [ 68.568020][ T4565] loop4: detected capacity change from 0 to 256 [ 68.598241][ T28] audit: type=1400 audit(1772413971.109:908): avc: denied { write } for pid=4554 comm="syz.0.296" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 68.621333][ T4565] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.674863][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.785659][ T28] audit: type=1400 audit(1772413971.289:909): avc: denied { override_creds } for pid=4575 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.791208][ T4579] netlink: 'syz.1.303': attribute type 2 has an invalid length. [ 68.805488][ T28] audit: type=1400 audit(1772413971.309:910): avc: denied { getopt } for pid=4576 comm="syz.1.303" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.837745][ T4579] netlink: 36 bytes leftover after parsing attributes in process `syz.1.303'. [ 69.375125][ T4590] loop3: detected capacity change from 0 to 1764 [ 69.381994][ T4590] iso9660: Unknown parameter '5tf8' [ 69.523239][ T3522] IPVS: starting estimator thread 0... [ 69.647629][ T4593] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 69.671754][ T4591] IPVS: using max 2448 ests per chain, 122400 per kthread [ 69.683597][ T4593] bond1 (unregistering): Released all slaves [ 70.173058][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 70.234400][ T28] audit: type=1400 audit(1772413972.749:911): avc: denied { create } for pid=4616 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 70.253779][ T28] audit: type=1400 audit(1772413972.749:912): avc: denied { write } for pid=4616 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 70.285253][ T4612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.302652][ T4612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.393766][ T28] audit: type=1400 audit(1772413972.909:913): avc: denied { create } for pid=4626 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.793907][ T4636] loop0: detected capacity change from 0 to 2048 [ 71.054628][ T4643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 71.082227][ T4643] loop0: detected capacity change from 0 to 256 [ 71.100869][ T4647] loop1: detected capacity change from 0 to 1024 [ 71.118242][ T4647] EXT4-fs: Ignoring removed oldalloc option [ 71.129335][ T4643] FAT-fs (loop0): bogus sectors per cluster 0 [ 71.134329][ T4647] EXT4-fs: Ignoring removed bh option [ 71.137656][ T4643] FAT-fs (loop0): Can't find a valid FAT filesystem [ 71.162897][ T4647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.223607][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.339592][ T4651] loop2: detected capacity change from 0 to 512 [ 71.346140][ T4651] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 71.394675][ T4658] loop1: detected capacity change from 0 to 512 [ 71.406951][ T28] audit: type=1400 audit(1772413973.919:914): avc: denied { wake_alarm } for pid=4650 comm="syz.2.325" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.411138][ T4658] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.457276][ T4658] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 71.528987][ T4664] loop4: detected capacity change from 0 to 512 [ 71.552242][ T4664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.585334][ T4664] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.640847][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.983950][ T4679] loop4: detected capacity change from 0 to 1764 [ 71.990802][ T4679] iso9660: Unknown parameter '5tf8' [ 72.394667][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 72.714266][ T4684] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 72.757207][ T4684] FAT-fs (loop3): Filesystem has been set read-only [ 72.870520][ T4694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.337'. [ 72.894266][ T4694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.337'. [ 72.943225][ T4696] netlink: 'syz.0.338': attribute type 10 has an invalid length. [ 72.978125][ T4696] netlink: 2 bytes leftover after parsing attributes in process `syz.0.338'. [ 73.105466][ T4703] batman_adv: batadv0: Adding interface: dummy0 [ 73.121932][ T4703] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.180090][ T4703] batman_adv: batadv0: Interface activated: dummy0 [ 73.207052][ T4707] batadv0: mtu less than device minimum [ 73.243691][ T4707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.254623][ T4707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.265402][ T4707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.276125][ T4707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.286950][ T4707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.298146][ T4707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.309176][ T4707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.320193][ T4707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.331084][ T4707] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.390595][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 73.390637][ T28] audit: type=1400 audit(1772413975.879:920): avc: denied { setopt } for pid=4708 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.477035][ T4716] syz.0.342 (4716): attempted to duplicate a private mapping with mremap. This is not supported. [ 73.482061][ T28] audit: type=1400 audit(1772413975.899:921): avc: denied { watch watch_reads } for pid=4710 comm="syz.1.345" path="/newroot/66" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.574451][ T28] audit: type=1400 audit(1772413975.939:922): avc: denied { getattr } for pid=4708 comm="syz.2.344" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=10683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.671067][ T4716] xt_TCPMSS: Only works on TCP SYN packets [ 73.686765][ T4705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.341'. [ 73.689340][ T28] audit: type=1400 audit(1772413976.199:923): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.699734][ T4724] netlink: 32 bytes leftover after parsing attributes in process `syz.4.349'. [ 73.715595][ T28] audit: type=1400 audit(1772413976.219:924): avc: denied { setopt } for pid=4723 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.724558][ T4724] netlink: 40 bytes leftover after parsing attributes in process `syz.4.349'. [ 73.752541][ T4724] tipc: Started in network mode [ 73.757455][ T4724] tipc: Node identity 1, cluster identity 129 [ 73.763736][ T4724] tipc: Node number set to 1 [ 73.768678][ T4724] tipc: Cannot configure node identity twice [ 73.788457][ T28] audit: type=1400 audit(1772413976.219:925): avc: denied { setopt } for pid=4723 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.013095][ T4705] syzkaller1: entered promiscuous mode [ 74.094606][ T4705] syzkaller1: entered allmulticast mode [ 74.151893][ T28] audit: type=1400 audit(1772413976.439:926): avc: denied { allowed } for pid=4701 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 74.199850][ T28] audit: type=1400 audit(1772413976.459:927): avc: denied { create } for pid=4726 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.250790][ T4707] __vm_enough_memory: pid: 4707, comm: syz.0.342, bytes: 11727631970304 not enough memory for the allocation [ 74.256604][ T28] audit: type=1400 audit(1772413976.459:928): avc: denied { setopt } for pid=4726 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.285356][ T28] audit: type=1400 audit(1772413976.459:929): avc: denied { bind } for pid=4726 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.354664][ T4742] batman_adv: batadv0: Adding interface: gretap1 [ 74.414015][ T4742] batman_adv: batadv0: Interface activated: gretap1 [ 74.550967][ T4755] set_capacity_and_notify: 1 callbacks suppressed [ 74.550981][ T4755] loop4: detected capacity change from 0 to 512 [ 74.570418][ T4755] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 74.721026][ T4755] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 74.738852][ T4761] loop1: detected capacity change from 0 to 1764 [ 74.755062][ T4761] iso9660: Unknown parameter '5tf8' [ 74.810505][ T4755] EXT4-fs: failed to create workqueue [ 74.841223][ T4755] EXT4-fs (loop4): mount failed [ 75.412127][ T4768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4768 comm=syz.2.362 [ 75.495623][ T4768] loop2: detected capacity change from 0 to 4096 [ 75.509227][ T4768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.674870][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.784615][ T4780] loop2: detected capacity change from 0 to 128 [ 75.832477][ T4775] netlink: 'syz.0.366': attribute type 9 has an invalid length. [ 75.864686][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 75.916474][ T4786] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 75.987939][ T4788] netlink: 64 bytes leftover after parsing attributes in process `syz.2.368'. [ 76.156504][ T4775] team_slave_0: entered promiscuous mode [ 76.162555][ T4775] team_slave_1: entered promiscuous mode [ 76.182823][ T4775] macvlan2: entered promiscuous mode [ 76.188767][ T4775] team0: entered promiscuous mode [ 76.202069][ T4775] macvlan2: entered allmulticast mode [ 76.231641][ T4775] team0: entered allmulticast mode [ 76.237382][ T4775] team_slave_0: entered allmulticast mode [ 76.327969][ T4775] team_slave_1: entered allmulticast mode [ 76.375367][ T4775] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 76.455349][ T4786] netlink: 'syz.0.366': attribute type 2 has an invalid length. [ 76.981171][ T4832] loop4: detected capacity change from 0 to 1024 [ 76.999426][ T4832] EXT4-fs: Ignoring removed oldalloc option [ 77.026078][ T4832] EXT4-fs: Ignoring removed bh option [ 77.035981][ T4832] EXT4-fs (loop4): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 77.095193][ T4837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.384'. [ 77.095240][ T4832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.222313][ T4843] loop3: detected capacity change from 0 to 1764 [ 77.228926][ T4843] iso9660: Unknown parameter '5tf8' [ 77.402345][ T4848] loop2: detected capacity change from 0 to 512 [ 77.841346][ T4851] loop2: detected capacity change from 0 to 1764 [ 77.887066][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.715503][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 78.715516][ T28] audit: type=1400 audit(1772413981.229:1014): avc: denied { block_suspend } for pid=4856 comm="syz.4.390" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.239336][ T4876] loop0: detected capacity change from 0 to 512 [ 79.264750][ T28] audit: type=1400 audit(1772413981.779:1015): avc: denied { read write } for pid=4877 comm="syz.4.397" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.324284][ T4876] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.361976][ T4876] EXT4-fs (loop0): 1 truncate cleaned up [ 79.369828][ T28] audit: type=1400 audit(1772413981.779:1016): avc: denied { open } for pid=4877 comm="syz.4.397" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.411191][ T4876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.460294][ T28] audit: type=1400 audit(1772413981.779:1017): avc: denied { ioctl } for pid=4877 comm="syz.4.397" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.529479][ T28] audit: type=1400 audit(1772413981.919:1018): avc: denied { create } for pid=4877 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.551132][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.580489][ T28] audit: type=1400 audit(1772413982.019:1019): avc: denied { add_name } for pid=4875 comm="syz.0.396" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.623347][ T28] audit: type=1400 audit(1772413982.019:1020): avc: denied { write } for pid=4875 comm="syz.0.396" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.645753][ T28] audit: type=1400 audit(1772413982.019:1021): avc: denied { open } for pid=4875 comm="syz.0.396" path="/65/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.670342][ T28] audit: type=1400 audit(1772413982.169:1022): avc: denied { setopt } for pid=4882 comm="syz.0.398" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.710061][ T28] audit: type=1400 audit(1772413982.229:1023): avc: denied { setopt } for pid=4888 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.788168][ T4885] loop2: detected capacity change from 0 to 1024 [ 79.795165][ T4885] EXT4-fs: Ignoring removed oldalloc option [ 79.807989][ T4885] EXT4-fs: Ignoring removed bh option [ 79.838120][ T4885] EXT4-fs (loop2): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 79.869707][ T4897] loop0: detected capacity change from 0 to 1024 [ 79.886347][ T4885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.019484][ T4904] loop3: detected capacity change from 0 to 1764 [ 80.026251][ T4904] iso9660: Unknown parameter '5tf8' [ 80.102441][ T4897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.714637][ T4917] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 80.738977][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.901136][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.930120][ T4922] bond1: Unable to set down delay as MII monitoring is disabled [ 80.970105][ T4922] bond1 (unregistering): Released all slaves [ 81.526524][ T4930] loop3: detected capacity change from 0 to 128 [ 81.534064][ T4929] loop4: detected capacity change from 0 to 7 [ 81.550960][ T4929] Buffer I/O error on dev loop4, logical block 0, async page read [ 81.560634][ T4930] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.576095][ T4929] Buffer I/O error on dev loop4, logical block 0, async page read [ 81.584453][ T4930] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.590238][ T4935] loop1: detected capacity change from 0 to 128 [ 81.595085][ T4929] loop4: unable to read partition table [ 81.601131][ T4933] Buffer I/O error on dev loop4, logical block 0, async page read [ 81.634149][ T4929] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 81.682606][ T4935] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.698762][ T4935] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.712055][ T3291] Buffer I/O error on dev loop4, logical block 0, async page read [ 81.721260][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 81.730131][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 81.739750][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 81.748809][ T3291] Buffer I/O error on dev loop4, logical block 0, async page read [ 81.756747][ T3291] Buffer I/O error on dev loop4, logical block 0, async page read [ 81.764664][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 81.863801][ T3291] Buffer I/O error on dev loop4, logical block 0, async page read [ 81.872384][ T3291] Buffer I/O error on dev loop4, logical block 0, async page read [ 81.880836][ T3291] Buffer I/O error on dev loop4, logical block 0, async page read [ 81.889105][ T3291] Buffer I/O error on dev loop4, logical block 0, async page read [ 81.996466][ T4950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'. [ 82.027533][ T4954] loop2: detected capacity change from 0 to 1024 [ 82.042735][ T4954] EXT4-fs: Ignoring removed oldalloc option [ 82.056210][ T4954] EXT4-fs: Ignoring removed bh option [ 82.062372][ T4954] EXT4-fs (loop2): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 82.080032][ T4954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.525544][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.534887][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.758245][ T4972] FAULT_INJECTION: forcing a failure. [ 82.758245][ T4972] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 82.771815][ T4972] CPU: 1 UID: 0 PID: 4972 Comm: syz.1.425 Not tainted syzkaller #0 PREEMPT(full) [ 82.771839][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.771867][ T4972] Call Trace: [ 82.771874][ T4972] [ 82.771881][ T4972] __dump_stack+0x1d/0x30 [ 82.771995][ T4972] dump_stack_lvl+0x95/0xd0 [ 82.772013][ T4972] dump_stack+0x15/0x1b [ 82.772029][ T4972] should_fail_ex+0x263/0x280 [ 82.772093][ T4972] should_fail_alloc_page+0xf2/0x100 [ 82.772115][ T4972] __alloc_frozen_pages_noprof+0x108/0x360 [ 82.772143][ T4972] alloc_pages_mpol+0xb3/0x260 [ 82.772169][ T4972] alloc_pages_noprof+0x8f/0x130 [ 82.772216][ T4972] pte_alloc_one+0x1e/0xd0 [ 82.772271][ T4972] __pte_alloc+0x32/0x2c0 [ 82.772291][ T4972] handle_mm_fault+0x204e/0x3020 [ 82.772316][ T4972] ? mt_find+0x291/0x3d0 [ 82.772438][ T4972] ? number+0xa78/0xb90 [ 82.772462][ T4972] ? lock_mm_and_find_vma+0x8b/0x440 [ 82.772482][ T4972] do_user_addr_fault+0x3fd/0x1050 [ 82.772544][ T4972] exc_page_fault+0x62/0xa0 [ 82.772571][ T4972] asm_exc_page_fault+0x26/0x30 [ 82.772635][ T4972] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 82.772656][ T4972] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 19 02 00 66 2e [ 82.772672][ T4972] RSP: 0018:ffffc900013f79a0 EFLAGS: 00050202 [ 82.772686][ T4972] RAX: ffff888100b0ab78 RBX: ffffc900013f7e80 RCX: 0000000000000002 [ 82.772698][ T4972] RDX: 0000000000000001 RSI: 00002000004c5047 RDI: ffffc900013f7b44 [ 82.772723][ T4972] RBP: 00002000004c5047 R08: 0000000000000321 R09: 0000000000000000 [ 82.772736][ T4972] R10: 0001c900013f7b44 R11: 0001c900013f7b45 R12: 0000000000000000 [ 82.772750][ T4972] R13: ffffc900013f7e70 R14: 0000000000000002 R15: ffffc900013f7b44 [ 82.772770][ T4972] _copy_from_iter+0x117/0xea0 [ 82.772793][ T4972] ? audit_log_end+0x23d/0x250 [ 82.772811][ T4972] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 82.772916][ T4972] ? common_lsm_audit+0x1c9/0x230 [ 82.772939][ T4972] ? __rcu_read_unlock+0x4e/0x70 [ 82.772960][ T4972] rawv6_sendmsg+0x98c/0x1230 [ 82.772993][ T4972] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 82.773067][ T4972] inet_sendmsg+0xc5/0xd0 [ 82.773093][ T4972] ____sys_sendmsg+0x53a/0x600 [ 82.773159][ T4972] ___sys_sendmsg+0x195/0x1e0 [ 82.773246][ T4972] __x64_sys_sendmsg+0xd4/0x160 [ 82.773275][ T4972] x64_sys_call+0x194c/0x3020 [ 82.773330][ T4972] do_syscall_64+0x12c/0x370 [ 82.773488][ T4972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.773505][ T4972] RIP: 0033:0x7fdd517ac799 [ 82.773517][ T4972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.773543][ T4972] RSP: 002b:00007fdd50207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.773559][ T4972] RAX: ffffffffffffffda RBX: 00007fdd51a25fa0 RCX: 00007fdd517ac799 [ 82.773570][ T4972] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 82.773623][ T4972] RBP: 00007fdd50207090 R08: 0000000000000000 R09: 0000000000000000 [ 82.773672][ T4972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.773683][ T4972] R13: 00007fdd51a26038 R14: 00007fdd51a25fa0 R15: 00007ffe8a47a088 [ 82.773699][ T4972] [ 83.098891][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 83.105388][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.122445][ T4975] loop1: detected capacity change from 0 to 256 [ 83.188605][ T4968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'. [ 83.221603][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.298308][ T4993] netlink: 72 bytes leftover after parsing attributes in process `syz.2.429'. [ 83.307552][ T4989] loop3: detected capacity change from 0 to 2048 [ 83.359027][ T4993] loop2: detected capacity change from 0 to 512 [ 83.367349][ T4993] vfat: Unknown parameter ' [ 83.367349][ T4993] ' [ 83.376435][ T4989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.440971][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.456694][ T5000] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.457007][ T4993] netlink: 60 bytes leftover after parsing attributes in process `syz.2.429'. [ 83.483040][ T5000] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #3: block 1: comm syz.0.434: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.483071][ T5000] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 83.483216][ T5000] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.434: Failed to acquire dquot type 0 [ 83.483237][ T5000] loop0: lost filesystem error report for type 5 error -117 [ 83.483317][ T5000] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.434: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.483341][ T5000] loop0: lost filesystem error report for type 5 error -117 [ 83.483524][ T5000] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.434: Invalid inode bitmap blk 0 in block_group 0 [ 83.483547][ T5000] loop0: lost filesystem error report for type 5 error -117 [ 83.483601][ T5000] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 83.483679][ T5000] loop0: lost filesystem error report for type 5 error -117 [ 83.483736][ T5000] EXT4-fs (loop0): 1 orphan inode deleted [ 83.484134][ T5000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.606804][ T3699] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.633723][ T5008] team0: Device gtp0 is of different type [ 83.657954][ T3699] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 0 [ 83.677235][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.725690][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 83.725758][ T28] audit: type=1400 audit(1772413986.229:1114): avc: denied { execmem } for pid=5011 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.753304][ T28] audit: type=1400 audit(1772413986.269:1115): avc: denied { tracepoint } for pid=5015 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 83.801482][ T5016] EXT4-fs: Ignoring removed oldalloc option [ 83.810613][ T3419] kernel write not supported for file bpf-prog (pid: 3419 comm: kworker/1:4) [ 83.828179][ T5016] EXT4-fs: Ignoring removed bh option [ 83.841638][ T5016] EXT4-fs (loop2): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 83.848390][ T5020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.868158][ T28] audit: type=1400 audit(1772413986.329:1116): avc: denied { mounton } for pid=5012 comm="syz.3.440" path="/90/file0" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.899506][ T5016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.928075][ T5020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.952983][ T5020] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 83.961455][ T5020] System zones: 0-1, 3-36 [ 83.967566][ T5020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.982198][ T28] audit: type=1400 audit(1772413986.499:1117): avc: denied { create } for pid=5015 comm="syz.2.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.006167][ T5020] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.441: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 84.036432][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.123136][ T28] audit: type=1400 audit(1772413986.639:1118): avc: denied { create } for pid=5027 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.146645][ T28] audit: type=1400 audit(1772413986.659:1119): avc: denied { write } for pid=5027 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.228729][ T28] audit: type=1400 audit(1772413986.749:1120): avc: denied { mount } for pid=5032 comm="syz.0.444" name="/" dev="autofs" ino=11645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 84.253793][ T28] audit: type=1400 audit(1772413986.769:1121): avc: denied { read } for pid=5032 comm="syz.0.444" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.282951][ T28] audit: type=1400 audit(1772413986.769:1122): avc: denied { open } for pid=5032 comm="syz.0.444" path="/dev/input/event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.316635][ T28] audit: type=1400 audit(1772413986.769:1123): avc: denied { ioctl } for pid=5032 comm="syz.0.444" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x451f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.378856][ T5044] EXT4-fs: Ignoring removed orlov option [ 84.400584][ T5044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.422644][ T5044] tmpfs: Unknown parameter 'sze' [ 84.448750][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.538324][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 84.553368][ T5052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 84.583569][ T5050] EXT4-fs: Ignoring removed nobh option [ 84.589655][ T5050] EXT4-fs (loop3): stripe (15) is not aligned with cluster size (16), stripe is disabled [ 84.607928][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.620371][ T5050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.639766][ T5052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.729097][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.778802][ T5052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.804697][ T5062] syzkaller0: entered promiscuous mode [ 84.810183][ T5062] syzkaller0: entered allmulticast mode [ 84.846674][ T5052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.040395][ T5052] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.199039][ T4315] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.257709][ T4315] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.331764][ T4315] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.365379][ T5067] set_capacity_and_notify: 5 callbacks suppressed [ 85.365401][ T5067] loop1: detected capacity change from 0 to 1764 [ 85.406775][ T4315] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.766441][ T3494] Bluetooth: hci0: command 0x1003 tx timeout [ 85.770054][ T5082] loop3: detected capacity change from 0 to 256 [ 85.772483][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.844814][ T5082] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.871655][ T55] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.881431][ T5084] loop4: detected capacity change from 0 to 1024 [ 85.906765][ T55] Bluetooth: hci1: Frame reassembly failed (-84) [ 85.917304][ T5084] EXT4-fs: Ignoring removed oldalloc option [ 86.043152][ T5084] EXT4-fs: Ignoring removed bh option [ 86.049500][ T5084] EXT4-fs (loop4): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 86.070002][ T5084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.401394][ T5094] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 86.407953][ T5094] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 86.416003][ T5094] vhci_hcd vhci_hcd.0: Device attached [ 86.421672][ T5097] usbip_core: unknown command [ 86.428569][ T5097] vhci_hcd: unknown pdu 50331648 [ 86.433518][ T5097] usbip_core: unknown command [ 86.438526][ T2347] vhci_hcd vhci_hcd.2: stop threads [ 86.443745][ T2347] vhci_hcd vhci_hcd.2: release socket [ 86.449286][ T2347] vhci_hcd vhci_hcd.2: disconnect device [ 86.696555][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.766387][ T5107] loop4: detected capacity change from 0 to 8192 [ 86.925755][ T5113] loop4: detected capacity change from 0 to 1764 [ 86.981916][ T5119] IPVS: stopping backup sync thread 4917 ... [ 87.021793][ T5121] netlink: 36 bytes leftover after parsing attributes in process `syz.4.470'. [ 87.035181][ T5121] netlink: 36 bytes leftover after parsing attributes in process `syz.4.470'. [ 87.181807][ T5117] netlink: 28 bytes leftover after parsing attributes in process `syz.2.467'. [ 87.260632][ T5131] loop4: detected capacity change from 0 to 256 [ 87.277197][ T5131] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.948260][ T5132] Bluetooth: hci1: command 0x1003 tx timeout [ 87.948955][ T3494] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 87.954516][ T43] Bluetooth: hci0: command 0x1003 tx timeout [ 87.960348][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.142054][ T5140] loop4: detected capacity change from 0 to 1024 [ 88.149004][ T5140] EXT4-fs: Ignoring removed oldalloc option [ 88.160419][ T5140] EXT4-fs: Ignoring removed bh option [ 88.166285][ T5140] EXT4-fs (loop4): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 88.181127][ T5140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.701655][ T5152] loop0: detected capacity change from 0 to 1764 [ 88.742457][ T5150] loop1: detected capacity change from 0 to 1024 [ 88.760818][ T5150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.894030][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 88.894118][ T28] audit: type=1400 audit(1772413991.299:1161): avc: denied { read } for pid=5148 comm="syz.1.477" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 88.926770][ T28] audit: type=1400 audit(1772413991.309:1162): avc: denied { read } for pid=5148 comm="syz.1.477" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.976353][ T28] audit: type=1400 audit(1772413991.309:1163): avc: denied { open } for pid=5148 comm="syz.1.477" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 89.013120][ T28] audit: type=1400 audit(1772413991.489:1164): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 89.033789][ T28] audit: type=1400 audit(1772413991.519:1165): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.068599][ T28] audit: type=1400 audit(1772413991.519:1166): avc: denied { open } for pid=3311 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.092846][ T28] audit: type=1400 audit(1772413991.519:1167): avc: denied { ioctl } for pid=3311 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.095200][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.120142][ T28] audit: type=1400 audit(1772413991.579:1168): avc: denied { prog_load } for pid=5159 comm="syz.0.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.146726][ T28] audit: type=1400 audit(1772413991.579:1169): avc: denied { bpf } for pid=5159 comm="syz.0.480" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.167770][ T28] audit: type=1400 audit(1772413991.579:1170): avc: denied { open } for pid=5159 comm="syz.0.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.225294][ T5165] loop4: detected capacity change from 0 to 128 [ 89.239731][ T5165] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.255993][ T5165] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.312856][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.340222][ T5085] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 89.391601][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.460175][ T5175] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 89.468652][ T5175] netlink: 424 bytes leftover after parsing attributes in process `syz.3.483'. [ 89.659218][ T5181] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.702311][ T5181] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.276783][ T5199] EXT4-fs: Ignoring removed oldalloc option [ 90.288952][ T5202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.492'. [ 90.298412][ T5202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.492'. [ 90.311695][ T5199] EXT4-fs: Ignoring removed bh option [ 90.319698][ T5199] EXT4-fs (loop4): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 90.346704][ T5206] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.493'. [ 90.375785][ T5199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.510332][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.534024][ T5213] set_capacity_and_notify: 3 callbacks suppressed [ 90.534060][ T5213] loop2: detected capacity change from 0 to 1024 [ 90.559153][ T5213] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 90.572818][ T5213] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 90.584497][ T5213] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #32: comm syz.2.493: iget: special inode unallocated [ 90.621210][ T5213] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 90.621494][ T5213] EXT4-fs (loop2): Remounting filesystem read-only [ 90.630623][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 90.630637][ C1] EXT4-fs (loop2): initial error at time 1772413993: ext4_get_journal_inode:5863: inode 32 [ 90.630678][ C1] EXT4-fs (loop2): last error at time 1772413993: ext4_get_journal_inode:5863: inode 32 [ 90.665115][ T5213] EXT4-fs (loop2): no journal found [ 90.711329][ T5213] EXT4-fs (loop2): can't get journal size [ 90.725334][ T5219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 90.808630][ T5213] EXT4-fs (loop2): filesystem is read-only [ 90.815298][ T5213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 90.985456][ T5223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.138190][ T55] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.152849][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.185387][ T55] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.329364][ T55] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.392334][ T55] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.471656][ T5246] netlink: 128 bytes leftover after parsing attributes in process `syz.0.504'. [ 91.484590][ T5248] netlink: 60 bytes leftover after parsing attributes in process `syz.4.499'. [ 91.488243][ T5246] net_ratelimit: 10 callbacks suppressed [ 91.488257][ T5246] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 91.520258][ T5248] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 91.530813][ T5248] bridge2: entered promiscuous mode [ 91.530826][ T5248] bridge2: entered allmulticast mode [ 91.581170][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 91.705061][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.712741][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.720365][ T5228] bridge_slave_0: entered allmulticast mode [ 91.727302][ T5228] bridge_slave_0: entered promiscuous mode [ 91.745971][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.754771][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.762535][ T5228] bridge_slave_1: entered allmulticast mode [ 91.770072][ T5228] bridge_slave_1: entered promiscuous mode [ 91.817729][ T5260] loop0: detected capacity change from 0 to 512 [ 91.828011][ T5260] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.197133][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.237289][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.307122][ T5228] team0: Port device team_slave_0 added [ 92.331855][ T5228] team0: Port device team_slave_1 added [ 92.347918][ T5085] Bluetooth: hci0: command 0x1003 tx timeout [ 92.353958][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.398366][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.445310][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.497937][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.528756][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.535694][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.587934][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.635859][ T5228] hsr_slave_0: entered promiscuous mode [ 92.658384][ T5228] hsr_slave_1: entered promiscuous mode [ 92.668224][ T5228] debugfs: 'hsr0' already exists in 'hsr' [ 92.673939][ T5228] Cannot create hsr debugfs directory [ 92.783273][ T55] bond0: left allmulticast mode [ 92.817664][ T5270] loop1: detected capacity change from 0 to 512 [ 92.847719][ T5270] EXT4-fs: Invalid want_extra_isize 9 [ 92.995117][ T55] bond_slave_0: left allmulticast mode [ 93.000965][ T55] bond_slave_1: left allmulticast mode [ 93.006703][ T55] bridge0: port 3(bond0) entered disabled state [ 93.015330][ T55] bridge_slave_1: left allmulticast mode [ 93.021264][ T55] bridge_slave_1: left promiscuous mode [ 93.027107][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.035124][ T55] bridge_slave_0: left allmulticast mode [ 93.040909][ T55] bridge_slave_0: left promiscuous mode [ 93.056403][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.253200][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.262073][ T55] bond_slave_0: left promiscuous mode [ 93.268945][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.291710][ T55] bond_slave_1: left promiscuous mode [ 93.297772][ T55] bond0 (unregistering): Released all slaves [ 93.386406][ T55] hsr_slave_0: left promiscuous mode [ 93.398654][ T55] hsr_slave_1: left promiscuous mode [ 93.405520][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.413291][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.435178][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.442730][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.462371][ T55] veth1_macvtap: left promiscuous mode [ 93.469153][ T55] veth0_macvtap: left promiscuous mode [ 93.476510][ T55] veth1_vlan: left promiscuous mode [ 93.483482][ T55] veth0_vlan: left promiscuous mode [ 93.657695][ T5321] loop3: detected capacity change from 0 to 512 [ 93.664784][ T5321] EXT4-fs: Ignoring removed nobh option [ 93.683239][ T5321] ------------[ cut here ]------------ [ 93.688834][ T5321] EA inode 11 i_nlink=1026 [ 93.688856][ T5321] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.3.515/5321 [ 93.703957][ T5321] Modules linked in: [ 93.707941][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.3.515 Not tainted syzkaller #0 PREEMPT(full) [ 93.717192][ T5321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.727314][ T5321] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 93.733995][ T5321] Code: 84 5a 99 ff 4c 8d 2d 8d ea 5d 05 49 8d 7e 40 e8 f4 f0 b5 ff 49 8b 6e 40 4c 89 e7 e8 28 ec b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 df 44 dd 03 66 66 66 66 66 66 2e [ 93.753872][ T5321] RSP: 0018:ffffc900015d75a8 EFLAGS: 00010246 [ 93.759993][ T5321] RAX: ffff888103730a78 RBX: ffff88811a534608 RCX: ffffffff81bffab8 [ 93.767984][ T5321] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871de530 [ 93.775948][ T5321] RBP: 000000000000000b R08: 000188811a5345bb R09: 0000000000000000 [ 93.783947][ T5321] R10: ffffc900015d74d8 R11: 0001c900015d74d8 R12: ffff88811a5345b8 [ 93.791984][ T5321] R13: ffffffff871de530 R14: ffff88811a534570 R15: 0000000000000001 [ 93.799998][ T5321] FS: 00007f0c701676c0(0000) GS:ffff8882ae8dc000(0000) knlGS:0000000000000000 [ 93.808939][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.815518][ T5321] CR2: 00007f8dd2bc6008 CR3: 000000011d4e4000 CR4: 00000000003506f0 [ 93.823500][ T5321] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.831477][ T5321] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 93.839450][ T5321] Call Trace: [ 93.842713][ T5321] [ 93.845639][ T5321] ext4_xattr_set_entry+0x77c/0x1010 [ 93.850960][ T5321] ext4_xattr_ibody_set+0x184/0x3c0 [ 93.856162][ T5321] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 93.862077][ T5321] __ext4_expand_extra_isize+0x246/0x280 [ 93.867912][ T5321] __ext4_mark_inode_dirty+0x29b/0x400 [ 93.873421][ T5321] ext4_evict_inode+0x7c3/0xd60 [ 93.878543][ T5321] ? __pfx_ext4_evict_inode+0x10/0x10 [ 93.883975][ T5321] evict+0x2af/0x510 [ 93.887964][ T5321] ? __dquot_initialize+0x146/0x7c0 [ 93.893245][ T5321] iput+0x41a/0x580 [ 93.897061][ T5321] ext4_process_orphan+0x1a9/0x1c0 [ 93.902204][ T5321] ext4_orphan_cleanup+0x6a8/0xa00 [ 93.907387][ T5321] ext4_fill_super+0x3408/0x37c0 [ 93.912346][ T5321] ? set_blocksize+0x14c/0x270 [ 93.917103][ T5321] ? setup_bdev_super+0x30e/0x370 [ 93.922206][ T5321] ? __pfx_ext4_fill_super+0x10/0x10 [ 93.927527][ T5321] get_tree_bdev_flags+0x291/0x300 [ 93.932725][ T5321] ? __pfx_ext4_fill_super+0x10/0x10 [ 93.938027][ T5321] get_tree_bdev+0x1f/0x30 [ 93.942451][ T5321] ext4_get_tree+0x1c/0x30 [ 93.946863][ T5321] vfs_get_tree+0x57/0x1d0 [ 93.951401][ T5321] do_new_mount+0x288/0x8d0 [ 93.955907][ T5321] path_mount+0x4d0/0xbc0 [ 93.960250][ T5321] __se_sys_mount+0x28c/0x2e0 [ 93.964966][ T5321] __x64_sys_mount+0x67/0x80 [ 93.969639][ T5321] x64_sys_call+0x2d61/0x3020 [ 93.974357][ T5321] do_syscall_64+0x12c/0x370 [ 93.978961][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.984849][ T5321] RIP: 0033:0x7f0c71f9da0a [ 93.989323][ T5321] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.009065][ T5321] RSP: 002b:00007f0c70166e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.017472][ T5321] RAX: ffffffffffffffda RBX: 00007f0c70166ee0 RCX: 00007f0c71f9da0a [ 94.025477][ T5321] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f0c70166ea0 [ 94.033502][ T5321] RBP: 0000200000000180 R08: 00007f0c70166ee0 R09: 0000000000800718 [ 94.041512][ T5321] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 94.049495][ T5321] R13: 00007f0c70166ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 94.057466][ T5321] [ 94.060541][ T5321] ---[ end trace 0000000000000000 ]--- [ 94.075173][ T5321] EXT4-fs (loop3): 1 orphan inode deleted [ 94.081668][ T5321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.398148][ T55] team0 (unregistering): Port device team_slave_1 removed [ 94.421033][ T55] team0 (unregistering): Port device team_slave_0 removed [ 94.451129][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 94.451227][ T28] audit: type=1400 audit(1772413996.969:1267): avc: denied { create } for pid=5335 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.565546][ T5228] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.574329][ T5228] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.581935][ T5310] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.515: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 94.598029][ T28] audit: type=1400 audit(1772413997.099:1268): avc: denied { create } for pid=5309 comm="syz.3.515" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.624002][ T5228] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.636424][ T5348] loop4: detected capacity change from 0 to 128 [ 94.644961][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.674225][ T5228] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.709497][ T28] audit: type=1400 audit(1772413997.219:1269): avc: denied { write } for pid=5353 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.763989][ T28] audit: type=1400 audit(1772413997.219:1270): avc: denied { mounton } for pid=5353 comm="syz.3.520" path="/110/file0" dev="tmpfs" ino=602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.838018][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.871901][ T55] IPVS: stop unused estimator thread 0... [ 94.885607][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.895521][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.902590][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.929649][ T5228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.946925][ T5228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.964034][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.971088][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.994672][ T28] audit: type=1400 audit(1772413997.499:1271): avc: denied { read } for pid=5377 comm="syz.3.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.046751][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.189699][ T5228] veth0_vlan: entered promiscuous mode [ 95.198115][ T5228] veth1_vlan: entered promiscuous mode [ 95.224177][ T5228] veth0_macvtap: entered promiscuous mode [ 95.239594][ T5228] veth1_macvtap: entered promiscuous mode [ 95.258241][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.276697][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.287532][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.439813][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.449116][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.463568][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.463650][ T28] audit: type=1400 audit(1772413997.979:1272): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/root/syzkaller.rOGDUb/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 95.995876][ T5433] loop5: detected capacity change from 0 to 1764 [ 96.426137][ T28] audit: type=1400 audit(1772413997.989:1273): avc: denied { mount } for pid=5228 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 96.451591][ T28] audit: type=1400 audit(1772413997.989:1274): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/root/syzkaller.rOGDUb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 97.059473][ T5443] FAULT_INJECTION: forcing a failure. [ 97.059473][ T5443] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.100235][ T5443] CPU: 0 UID: 0 PID: 5443 Comm: syz.1.531 Tainted: G W syzkaller #0 PREEMPT(full) [ 97.100318][ T5443] Tainted: [W]=WARN [ 97.100325][ T5443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.100379][ T5443] Call Trace: [ 97.100385][ T5443] [ 97.100390][ T5443] __dump_stack+0x1d/0x30 [ 97.100413][ T5443] dump_stack_lvl+0x95/0xd0 [ 97.100446][ T5443] dump_stack+0x15/0x1b [ 97.100487][ T5443] should_fail_ex+0x263/0x280 [ 97.100508][ T5443] should_fail+0xb/0x20 [ 97.100524][ T5443] should_fail_usercopy+0x1a/0x20 [ 97.100554][ T5443] strncpy_from_user+0x27/0x250 [ 97.100639][ T5443] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 97.100659][ T5443] do_getname+0x59/0x1c0 [ 97.100677][ T5443] getname_uflags+0x23/0x30 [ 97.100695][ T5443] vfs_open_tree+0x1d5/0xcc0 [ 97.100717][ T5443] ? _raw_spin_unlock+0x9/0x30 [ 97.100814][ T5443] ? alloc_fd+0x389/0x3c0 [ 97.100901][ T5443] __x64_sys_open_tree+0x5e/0xd0 [ 97.100922][ T5443] x64_sys_call+0x2ad8/0x3020 [ 97.100942][ T5443] do_syscall_64+0x12c/0x370 [ 97.101020][ T5443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.101041][ T5443] RIP: 0033:0x7fdd517ac799 [ 97.101055][ T5443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.101084][ T5443] RSP: 002b:00007fdd501c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 97.101101][ T5443] RAX: ffffffffffffffda RBX: 00007fdd51a26180 RCX: 00007fdd517ac799 [ 97.101116][ T5443] RDX: 0000000000089901 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 97.101130][ T5443] RBP: 00007fdd501c5090 R08: 0000000000000000 R09: 0000000000000000 [ 97.101143][ T5443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.101156][ T5443] R13: 00007fdd51a26218 R14: 00007fdd51a26180 R15: 00007ffe8a47a088 [ 97.101179][ T5443] [ 97.346550][ T28] audit: type=1400 audit(1772413997.989:1275): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/root/syzkaller.rOGDUb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 97.401198][ T28] audit: type=1400 audit(1772413998.009:1276): avc: denied { mounton } for pid=5228 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 97.444589][ T5459] tipc: Started in network mode [ 97.456988][ T5459] tipc: Node identity ac1414aa, cluster identity 4711 [ 97.484184][ T5459] tipc: Enabled bearer , priority 10 [ 97.495825][ T3699] Bluetooth: hci0: Frame reassembly failed (-84) [ 97.536410][ T5463] loop3: detected capacity change from 0 to 1764 [ 97.542904][ T5467] loop5: detected capacity change from 0 to 2048 [ 97.562291][ T5467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.594954][ T5475] syz_tun: entered promiscuous mode [ 97.600415][ T5475] vlan2: entered promiscuous mode [ 97.630740][ T5228] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.699747][ T5482] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 97.761247][ T5492] ================================================================== [ 97.769325][ T5492] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 97.776590][ T5492] [ 97.778890][ T5492] write to 0xffff88811ade8a00 of 8 bytes by task 5488 on cpu 1: [ 97.786489][ T5492] mas_wmb_replace+0x20d/0x1610 [ 97.791317][ T5492] mas_wr_store_entry+0x16b6/0x2ed0 [ 97.796495][ T5492] mas_store_prealloc+0x72e/0xa70 [ 97.801500][ T5492] vma_complete+0x3c7/0x850 [ 97.805985][ T5492] __split_vma+0x5db/0x640 [ 97.810378][ T5492] vma_modify+0xbc9/0xd00 [ 97.814700][ T5492] vma_modify_flags+0x182/0x210 [ 97.819535][ T5492] mprotect_fixup+0x312/0x5d0 [ 97.824194][ T5492] do_mprotect_pkey+0x67b/0x920 [ 97.829025][ T5492] __x64_sys_mprotect+0x48/0x60 [ 97.833854][ T5492] x64_sys_call+0x2768/0x3020 [ 97.838512][ T5492] do_syscall_64+0x12c/0x370 [ 97.843087][ T5492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.848961][ T5492] [ 97.851265][ T5492] read to 0xffff88811ade8a00 of 8 bytes by task 5492 on cpu 0: [ 97.858783][ T5492] mas_state_walk+0x485/0x650 [ 97.863449][ T5492] mas_walk+0x60/0x150 [ 97.867501][ T5492] lock_vma_under_rcu+0xc9/0x210 [ 97.872420][ T5492] do_user_addr_fault+0x232/0x1050 [ 97.877516][ T5492] exc_page_fault+0x62/0xa0 [ 97.882003][ T5492] asm_exc_page_fault+0x26/0x30 [ 97.886834][ T5492] [ 97.889134][ T5492] value changed: 0xffff8881048f28c1 -> 0xffff88811ade8a00 [ 97.896211][ T5492] [ 97.898509][ T5492] Reported by Kernel Concurrency Sanitizer on: [ 97.904636][ T5492] CPU: 0 UID: 0 PID: 5492 Comm: syz.5.549 Tainted: G W syzkaller #0 PREEMPT(full) [ 97.915372][ T5492] Tainted: [W]=WARN [ 97.919147][ T5492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.929181][ T5492] ================================================================== [ 98.509032][ T10] tipc: Node number set to 2886997162 [ 99.547920][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.551607][ T5085] Bluetooth: hci0: command 0x1003 tx timeout