last executing test programs: 4m11.464455037s ago: executing program 0 (id=903): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000129bd7000fddbdf25020000000c00050020f3b5ed2900"/38], 0x2c}, 0x1, 0x0, 0x0, 0x20048051}, 0x4000800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8f6cde2c176ff000000000007010027364adde13817f5d3c50b9a00f8ffffffb702000008000000b70300200070310914906ff9ea00000095c5d9dbd71355040000000000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) sendmmsg$inet(r0, &(0x7f0000004980), 0x0, 0x20040010) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/112, 0x70}], 0x1}, 0x123) shutdown(r0, 0x1) r7 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) syz_open_procfs(r7, &(0x7f0000000380)='statm\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 4m11.139516533s ago: executing program 0 (id=906): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x454, &(0x7f0000000ec0)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000340)=""/93, 0x5d}], 0x2, 0x33, 0x2000051b) write$cgroup_subtree(r1, &(0x7f0000000200)={[{0x2b, 'devices'}]}, 0x9) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200000) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2}) sendmmsg$inet(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="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", 0x1fa}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)="25f272487f4afab0a7b886dd0b8e639ca568dfda486ff6dda34dbe7ff27e7b4eceecf8148f6a43c0603f29707494eba0e435cb9b34e87891f63d8736d5ea28baee43a7da81a75e4d2b5423fca94b68f37bc6aab2f3059c58fd7fd12ecbe7acbe34e374a0efb4603deb74b18d3b3db53f6a3727b970774da77af54648ab33ca120a60ba47c8d3f920731af0b58013b903f2eec9d375dcd3651c8f27dcecffcd71fbe17dc03dcabd9c670461a09280173acaebc33d02fd149852ee3c34c01969741ae2565d6065cf112236130fc78cf2b19517e309455163c3a21a", 0xda}, {&(0x7f0000000680)="a661f9f1a3332bce1adeb3b9c67bb1723978fafaa1cce7fd3ffdbae6acb14a5576b76f68e82e621fdcdbfac15c2e0ef688e97e82111637813aa281a442e4d53fb958321f82f4eefe5a9948f9234be9bcaa6a72049edb903f0252acad0dbc9bc7f59480c19af2ce7dff6221428112e55e471bfc054a12ee834451", 0x7a}], 0x2}}], 0x2, 0x40) 4m10.366779191s ago: executing program 0 (id=909): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204000, &(0x7f0000000040)={[{@grpquota}, {@barrier_val={'barrier', 0x3d, 0x857}}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffc, 0x0, 0x3}) capset(&(0x7f0000000080)={0x20071026}, 0x0) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) 4m10.204519249s ago: executing program 0 (id=911): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x85, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x833, 0x0, 0x4}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e21, 0xfffffffb, @rand_addr=' \x01\x00', 0x8}}, 0x3, 0x6aca}, &(0x7f0000000340)=0x90) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x50) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x21c880, &(0x7f0000000040), 0xfe, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x402009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r7, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000004) r8 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r1, 0x7}, &(0x7f00000003c0)=0x8) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f0000000040)=@ethtool_stats={0x1d, 0x4, [0xc, 0x30, 0x5, 0x400]}}) 4m9.269734005s ago: executing program 0 (id=917): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff2e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x8000) 4m9.238572306s ago: executing program 0 (id=921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket(0x1, 0x803, 0x0) sync() r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) r5 = dup(r4) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, 0x0, 0x0, 0x2010}, 0x48040) 4m9.17016095s ago: executing program 32 (id=921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket(0x1, 0x803, 0x0) sync() r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) r5 = dup(r4) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, 0x0, 0x0, 0x2010}, 0x48040) 2m55.420646707s ago: executing program 3 (id=1420): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000759, &(0x7f00000002c0)={[{@sysvgroups}, {@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@errors_remount}, {@norecovery, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x17}}, {@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x400e}}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@nodioread_nolock}, {@jqfmt_vfsv1}, {@data_writeback}, {@bsdgroups}], [{@subj_role}, {@obj_role}], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$eJzs3E1vFOcdAPD/rtc2LlC79I23lm1pVatVMTavhx4AtRKXSpVaVfS4tQ2iGKiwK4FlFVNVIPXQik/QNrdI+QQ5JZcoiXJIlGtQrlEkFPkCySGaaHZnNrveXXtt1l4Z/37SLs/MPjPz/Gfmwc/Lzgawa5XTt0LEvoj4KCJGa4vNGcq1f56vLE1/vrI0XYgk+f1nhWq+ZytL03nWfLu92cJ4MaL4z0IcaT3s8Py9xRuVubnZO9mKiYVilrpZuTZ7bfbW1Pnzp0+NnDs7daYncaZlenb477ePHrr8p8e/nb7y+M/vvJaWN8k+b4yjZqz6PtT1EQZa1pSj3HwuG/y0+6LvCPsb0oVS+l7sX2HoWnrXppdrsFr/R2OgulQzGr/5R18LB2ypJEmS4Za19b9ly0mjQqG2QZI8SICXQCH6XQKgP/I/9M9W0p7q0nRrP/jl9vRiVHtAadzPs1ftk1K1B1seq/WNBrfo+N+JiCvLX/w3fUXbcQgAgN5642LEo0u1dkf+qn1SjO815PtmNjc0FhHfiogDEfHtrP3y3Yhq3u9HxMGGbfZ3MQtQXrXc2v75YCRLNDZXeyZt//0qm9tqbv/VSz42kC3tr8Y/WLh6fW72ZHZOxmNwOF2ebN11fVjtzV9/+J9Oxy83tP/SV3r8vC2YlePT0qoBupnKQuVF4849fVA9sfdb4y9EqZCnIg5FxOFN7D89Z9d//urRTp83xZ/G2RL/vzvvvLSJAq2S/D/iZ7XrvxzV+POxz1rwQ1lqYuHmXyfm7y3+8nrj/OTkubNTZyb2xNzsyYn8rmj17vsPf5clW7oRzdc/SRquf141tnQiLb3+32h7/9dnLsfSVH2+dn7jx3j45FHHPs1m7/+hwh+q6Xx+9m5lYeHOZMRQYbl1/dTX296tjDTlT+MfP96+/h+I+PJ/2XZHIiK9iX8QET+MiGNZ2X8UET+OiONrxP/2pZ/8pVMXcv34t1Ya/8yGrv+9xZHIEvU1aeLCexHNa/LEwI23Xm858L/KLfEPRqfrf7qaGs/WzFQW9qwXV5sCtk288AkEAACAHeBYROyLQvFENtC0L4rFEyci9tZHUOYXfnH19t9uzdSeERiLwWI+0jXaMB46mY0Np8vpVlMNy+nnp6rjxkmSJCPpctp/nzvY39Bh19vbof6nPml9pAV42WxoHq3TE23AjrS6/j/pesvefyED2F49+B4NsEOp/7B7dV3/t+opOKBv2tX/+xHP+1AUYJu1q/9/bFlzYVvKAmyvdvXf3D/sDpsf//NlANjpjP/DrtTVQ/KbSBy4vEaeQqm7/ZS6fox/vUQx1v4VgLGo/6ZB3qZZe4cfFyN6c8YGenrmR5quabFtnj3Ri2NFcd08pQ38EMP2JoqVubn8AZe+l2c4Ita5e+s32/08sbjVBauem1f69z8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAb3wVAAD//8B9zog=") bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000008800000095"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xab}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfb, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f00000008c0), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000300)=r5, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x810) close_range(r7, r7, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000340)=r5, 0x4) unshare(0x22020600) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1600, 0x0, 0x3) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000c80)={'filter\x00', 0x7, 0x4, 0x400, 0x0, 0x110, 0x218, 0x318, 0x318, 0x318, 0x4, &(0x7f00000001c0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @broadcast, @broadcast, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x80, {0x40}}}}, {{@arp={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}, 0xffffff00, 0xffffff00, 0xa, 0x8, {@mac=@local, {[0x1fe, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x2, 0x3, 0x3, 0x403, 0x62, 0xfc1d, 'netdevsim0\x00', 'wlan0\x00', {0xff}, {}, 0x0, 0xede8acbc832b6436}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xe5, 0xde, {0x47}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x450) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x106) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x10040) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) 2m53.623464135s ago: executing program 3 (id=1439): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x7f}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) kexec_load(0x7, 0x0, 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x6, 0x4, 0x0, 0x0, 0xb, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3}, 0x5cc4, 0x5, 0x1, 0x5, 0x8, 0x24005, 0xb, 0x0, 0x0, 0x0, 0x7ff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00') listen(r1, 0x0) close(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioperm(0x9, 0x40, 0x8001) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000700)={0x1, &(0x7f0000000640)=[{0x0, 0x6378}]}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = semget$private(0x0, 0x7, 0x191) semtimedop(r5, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r5, &(0x7f0000000180)=[{0x2, 0x2, 0x800}], 0x1) semctl$GETZCNT(r5, 0x0, 0xf, 0x0) truncate(&(0x7f0000001400)='./file1\x00', 0x9f33) sendfile(r3, r0, 0x0, 0xe3aa6e7) 2m52.498938659s ago: executing program 3 (id=1453): socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xfffc, 0x4) (async) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x20004000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x80}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x240}], 0x1, 0x10102, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x20040014) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRESOCT=0x0, @ANYRES64], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_gettime(r2, &(0x7f0000000100)) (async) exit(0x5ee) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffd84, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1525, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2m51.627627532s ago: executing program 3 (id=1456): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x12088d4, &(0x7f0000001040)={[{@nogrpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@orlov}, {@commit}, {@data_err_ignore}, {@nouid32}, {@noauto_da_alloc}]}, 0x4, 0x505, &(0x7f0000000540)="$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") getpid() lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x2000, 0x144) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x278, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x3}}}}, [@NL80211_ATTR_TID_CONFIG={0x258, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7e}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1ff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x14c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x54}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x99c, 0x4, 0x6, 0xffff, 0x3, 0xff0e, 0x3, 0x7f]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x6}, {0x0, 0x6}, {0x2, 0x7}, {0x2, 0x6}, {0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x6, 0x6}, {0x1, 0x8}, {0x7, 0x4}, {0x3, 0xa}, {0x1, 0x9}, {0x4, 0x7}, {0x2, 0x8}, {0x2, 0x1}, {0x4, 0xa}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x6}, {0x2}, {0x0, 0x3}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0x2}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x2}, {0x5, 0x3}, {0x4}, {0x5, 0x2}, {0x7, 0x2}, {0x7, 0x6}, {0x7, 0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x1}, {0x0, 0x3}, {0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x4}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x7}, {}, {0x6, 0x8}, {0x3, 0x2}, {0x7, 0x8}, {0x7, 0x5}, {0x5, 0xa}, {0x5, 0x2}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x0, 0x9d, 0x2, 0x5, 0x5, 0x40]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x9}, {0x0, 0x1}, {0x7, 0x9}, {0x3, 0x5}, {0x1, 0x6}, {0x3, 0x4}, {0x7, 0x4}, {0x7, 0x6}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x7}, {0x6, 0x1}, {0x7, 0x4}, {0x3, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0x7}, {0x3, 0x2}, {0x1, 0x3}, {0x7, 0x9}, {0x1}, {0x1, 0x3}, {0x7, 0x7}, {0x3, 0x2}, {0x4, 0x5}, {0x1, 0x1}, {0x3, 0xa}, {0x0, 0x7}, {0x3, 0x5}, {0x2, 0xa}, {0x2, 0xa}, {0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x2, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8000, 0x401, 0x1ff, 0x400, 0x8, 0x4e6]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xb, 0x60, 0x9, 0x9, 0x36, 0x11, 0x24, 0x24, 0x6, 0x60, 0x24, 0x2, 0x30, 0x5, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x8453, 0x7fff, 0x311a, 0x1, 0x4, 0x0, 0xff01]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1a}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x46}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000001}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x92}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000010) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x6028d}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x10000}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000000000000000, 0x0, 0x0, 0x800, 0x200000000, 0xffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003500)=@newchain={0x74, 0x1e, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x3, 0x8, 0x0, {0x6, 0x1, 0xfff, 0x748c, 0x1, 0xf}, {0x4c, 0x1, 0x0, 0xfffb, 0x2, 0x4}, 0x9, 0xbf, 0xc}}]}]}}]}, 0x74}}, 0x44004) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(0xffffffffffffffff) socket(0x28, 0x5, 0x0) r6 = socket(0x8, 0x1, 0x40) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x4) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f0000000400000004000000120000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) 2m50.868556329s ago: executing program 3 (id=1458): unshare(0x20040600) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7fff}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback, 0xffffffffffffffff, 0x1d}, 0x1c) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x22}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x5, &(0x7f0000000040)=""/5, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unlinkat(0xffffffffffffff9c, 0x0, 0xd25f55a255150ea5) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x38304a5, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRESOCT=r0], 0x3, 0x181, &(0x7f00000003c0)="$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") ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x28) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) socket$kcm(0x10, 0x2, 0x4) 2m49.911274357s ago: executing program 3 (id=1465): io_uring_setup(0x684d, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@init_itable}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") fsmount(r0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89fc, &(0x7f00000006c0)={'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) r3 = getpid() mq_notify(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x20, 0x4, @thr={&(0x7f0000000400)="c497cca9c2077c87c7af26d4624f397a274d39413dc12b4a3da2e85de6ad60886edef6a8e81393ef6e6e032a32a8f9aa07308008383550c2607cd576932942c16efccca0c1248bb50e9565d4da34e043844459c8b4dd2e958b3f54425eafcc06c8b04f089591337b21cff3aca86ae5f5e52be0955a4aad0bc5cef5dfa9005bacf22d11281f6abe56ec530abd0dcfe8229628f150e763e91bee87ea44d23040f511e363abc68aab414eebd898d23283a1f5243452f33687de4ce31130c27dc7", &(0x7f0000000280)="cd9531c02e941df95fe52f5a3f1587887c753d0cfb77bcfaae9191184e21ca3ef3c38cb9e7bd9daf58aa3c8e924bf0bb1cd8509337a77252c69c3d3410aefd7a3bb1ff8b6afa6699b28c7c8c3b2ce1"}}) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) getcwd(0x0, 0x0) r6 = getpid() r7 = inotify_init1(0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x8000, 0x10007) inotify_add_watch(r7, &(0x7f00000002c0)='./file0\x00', 0x5c) r8 = syz_pidfd_open(r6, 0x0) setns(r8, 0x24020000) 2m49.865340179s ago: executing program 33 (id=1465): io_uring_setup(0x684d, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x20001, 0x2}) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@init_itable}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") fsmount(r0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89fc, &(0x7f00000006c0)={'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) r3 = getpid() mq_notify(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x20, 0x4, @thr={&(0x7f0000000400)="c497cca9c2077c87c7af26d4624f397a274d39413dc12b4a3da2e85de6ad60886edef6a8e81393ef6e6e032a32a8f9aa07308008383550c2607cd576932942c16efccca0c1248bb50e9565d4da34e043844459c8b4dd2e958b3f54425eafcc06c8b04f089591337b21cff3aca86ae5f5e52be0955a4aad0bc5cef5dfa9005bacf22d11281f6abe56ec530abd0dcfe8229628f150e763e91bee87ea44d23040f511e363abc68aab414eebd898d23283a1f5243452f33687de4ce31130c27dc7", &(0x7f0000000280)="cd9531c02e941df95fe52f5a3f1587887c753d0cfb77bcfaae9191184e21ca3ef3c38cb9e7bd9daf58aa3c8e924bf0bb1cd8509337a77252c69c3d3410aefd7a3bb1ff8b6afa6699b28c7c8c3b2ce1"}}) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) getcwd(0x0, 0x0) r6 = getpid() r7 = inotify_init1(0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x8000, 0x10007) inotify_add_watch(r7, &(0x7f00000002c0)='./file0\x00', 0x5c) r8 = syz_pidfd_open(r6, 0x0) setns(r8, 0x24020000) 38.448926784s ago: executing program 5 (id=2369): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040001aaaaaaaaaa14ac14f4baaaaaaaaaaa1cac1414bb"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 38.367415998s ago: executing program 5 (id=2373): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x100000000000000, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) 37.744091138s ago: executing program 5 (id=2378): socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c180}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) 35.508811808s ago: executing program 5 (id=2382): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x439}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000428bd7000f6dbdf250200000008000700", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x4008840) mkdir(&(0x7f0000000280)='./file0\x00', 0x112) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) rmdir(&(0x7f00000000c0)='./file0\x00') setsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 35.430516002s ago: executing program 5 (id=2384): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000129bd7000fddbdf25020000000c00050020f3b5ed2900"/38], 0x2c}, 0x1, 0x0, 0x0, 0x20048051}, 0x4000800) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) sendmmsg$inet(r0, &(0x7f0000004980), 0x0, 0x20040010) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/112, 0x70}], 0x1}, 0x123) shutdown(r0, 0x1) r7 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) syz_open_procfs(r7, &(0x7f0000000380)='statm\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 34.901692908s ago: executing program 5 (id=2390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c0002800800"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 34.787787154s ago: executing program 34 (id=2390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c0002800800"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 6.460050183s ago: executing program 4 (id=2646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="000000e4ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0], 0x48) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'pim6reg0\x00'}) getpgrp(0x0) gettid() mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f0000000700)=""/86, 0x56}, {&(0x7f0000000b00)=""/66, 0x42}, {&(0x7f0000000780)=""/125, 0x7d}], 0x4, &(0x7f0000000800)=""/178, 0xb2}, 0x4}, {{&(0x7f00000008c0)=@generic, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000940)=""/147, 0x93}, {&(0x7f0000000cc0)=""/78, 0x4e}, {&(0x7f0000000a00)=""/31, 0x1f}, {&(0x7f0000000b80)=""/71, 0x47}, {&(0x7f0000000ac0)=""/61, 0x3d}, {&(0x7f0000000c00)=""/61, 0x3d}], 0x6, &(0x7f0000000680)=""/37, 0x25}, 0x1}], 0x2, 0x10042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x481, 0x400000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'pimreg\x00', 0x100}) r7 = perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) 4.988354565s ago: executing program 4 (id=2654): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xffffffff}, 0x73) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20009, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x1fc}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.529519897s ago: executing program 4 (id=2659): io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x1, 0x44a}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0066a6", 0x14, 0x6, 0x1, @loopback={0x300}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0x6}}}}}}}, 0x0) 4.461263031s ago: executing program 4 (id=2662): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x24008000) 4.413726163s ago: executing program 4 (id=2663): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 4.336965567s ago: executing program 4 (id=2665): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r0, 0x2007ffc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x4, 0x700000000000000}, 0x8000) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7, 0x80, 0x3, 0x353, {{0x5, 0x4, 0x3, 0x3c, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000340)={'gre0\x00', 0x0}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) sendfile(r0, r0, 0x0, 0x800000009) 2.906980967s ago: executing program 2 (id=2677): eventfd(0x80000000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) 2.716752587s ago: executing program 2 (id=2681): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES16], 0x58}}, 0xc815) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) unshare(0x6c010880) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e000000090000000400001b7f5f8e008b080000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000000000000300"/28], 0x50) r5 = syz_open_procfs(r0, &(0x7f0000000ac0)='net/snmp\x00') r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xd, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000009000000000000001d030000181200007b416ea3b9a121521bf941e995c8f1278931a6263d092cbfebeedd553e8a540ddfef0bf050b0caab5da7dc992dadaa88cecb4665dd166f20dd2df94541cef6bb54464eb23a7e059b106f00b6c8356dd13f7a917786d65a205d503ed300f04ba8d0726a612f4729292de8895bf425c9e713dcc2ff93f153e4df157636a619fdace4dd52eb832705122bdd2a43bf5a7127007510a1499fdfe01973126af029d934", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000006710e0ff040000", @ANYRES32, @ANYRESOCT=r2], &(0x7f00000000c0)='syzkaller\x00', 0x80, 0x98, &(0x7f0000000340)=""/152, 0x40f00, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000b80)=[0xffffffffffffffff, r3, r4, r5, r6, r6], &(0x7f0000000bc0)=[{0x0, 0x1, 0xa, 0x6}], 0x10, 0x568e}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xd) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) getsockopt$MRT6(r9, 0x29, 0xce, &(0x7f0000000100), &(0x7f0000000140)=0x4) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) 1.979456933s ago: executing program 7 (id=2683): sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="458f8f0bcf5462a0985e2189fce217b7eb55964813430f58b688ce", 0x1b}], 0x1, 0x0, 0x0, 0x2c}, 0x8800) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x40002, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1.81583749s ago: executing program 1 (id=2684): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000300)={'bond0\x00', @ifru_settings={0x10001, 0x800, @fr=0x0}}) (async) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setresgid(0x0, 0xffffffffffffffff, 0xee00) ftruncate(0xffffffffffffffff, 0x1) mprotect(&(0x7f00003df000/0x2000)=nil, 0x2000, 0x1000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) (async) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x10, 0x1, {0xffffffff, 0xffffffd2}}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x7, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x45}, 0x40000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x4001a050) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 1.782971722s ago: executing program 2 (id=2685): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0xd7ba}, 0x200, 0x5ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 1.735371195s ago: executing program 7 (id=2686): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, 0x0, 0x24008000) 1.671348918s ago: executing program 1 (id=2687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_pidfd_open(0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x177) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x1, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x20002, 0xa2d}}, @TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x3, 0xa0e, 0x4, 0x5, 0x7, 0x1, 0x89, 0x3, 0x4, 0xa58e, 0x8, 0x100, 0x6, 0x0, 0x7fffffff, 0x10, 0xf, 0xc00000, 0x8, 0xcd5, 0x1000, 0x8, 0x4, 0xef47, 0xffffff7f, 0x2, 0x7, 0x1, 0x544a, 0x7, 0x9, 0x4, 0x1, 0x7, 0x9, 0x101, 0x4000001, 0x800, 0x3, 0x6, 0x4, 0x959, 0x0, 0x2, 0x733, 0x200, 0x19, 0x100, 0x642e36ee, 0x4, 0x5, 0x3, 0x4, 0x0, 0x4, 0x4, 0x5, 0xa0, 0x8dca, 0xf9d67b2, 0x5, 0x56996efc, 0x9, 0x1, 0x2, 0x5, 0x8, 0xffff, 0x7ff, 0x0, 0x2, 0x2a, 0x192, 0x1ff, 0x7, 0xa, 0x0, 0x9, 0x5, 0x9, 0x6604, 0x80000000, 0x8, 0x8, 0xffff0000, 0x40007, 0x9, 0x80000001, 0x100, 0x8, 0x7, 0xfffffffd, 0xff, 0x7, 0x10001, 0x1, 0x800, 0x8001, 0x8, 0x100, 0x5, 0x5edfd482, 0x42, 0x0, 0x3, 0x10000, 0x626, 0xffff, 0x400, 0x400, 0x7, 0x0, 0xf3, 0x5, 0x5, 0x6, 0x1, 0x9, 0xfffffffc, 0x3dafc201, 0x9, 0x81, 0x280, 0x8, 0xb3, 0x5, 0xffffff5f, 0x2, 0xee, 0x3, 0x5, 0x8, 0xf31, 0x6f, 0x100, 0x8, 0x1, 0xfc8, 0x7fff, 0x3, 0x9a8, 0x1, 0x8001, 0x1, 0x8000, 0xe7, 0x57, 0x1, 0x4, 0x7, 0xff, 0x18, 0x6, 0x5, 0x7, 0xfffffff9, 0x5, 0x8, 0xfffffffe, 0x1, 0xffffffff, 0x1, 0x7, 0x0, 0x9, 0x4, 0x6, 0x7, 0x8, 0x1, 0xf, 0x1, 0xb, 0x8, 0x9, 0x4, 0xb, 0x3, 0xd6, 0x4, 0x2, 0x2, 0x7, 0x280, 0x0, 0x6, 0x3, 0x3, 0x3, 0xae, 0xa56, 0x6, 0x5, 0x2, 0x1, 0x8, 0xffffffff, 0x10000, 0x7, 0x8, 0x7, 0x4, 0xff40, 0x4, 0x5, 0x0, 0x2, 0x3, 0x48000000, 0x5, 0x1, 0x0, 0x663d4cf3, 0xffff4f57, 0xffff67f3, 0x5, 0xfffffff7, 0x0, 0xe8, 0x50f3, 0x4000100, 0x1, 0x6, 0x7fff, 0xfffffff3, 0x9, 0xfffffffa, 0x2, 0x5389, 0xc, 0x7, 0x8, 0xdfd, 0x7fff, 0x2, 0x2860, 0x6, 0xff, 0x4000000, 0x8, 0xa4da, 0x5, 0x7, 0xd48, 0xa177, 0x6, 0x80000000, 0x4, 0x6, 0x9, 0x4, 0x7, 0x6, 0x3, 0x2]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xc, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.60844709s ago: executing program 7 (id=2688): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x1, 0x44a}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa3000000000000070300000cfeffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a08fee10000007303000000000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0066a6", 0x14, 0x6, 0x1, @loopback={0x300}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0x6}}}}}}}, 0x0) 1.602129341s ago: executing program 1 (id=2689): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0x40030, 0x1, @thr={&(0x7f0000000080)="fff663953886befb30aaa217ee6f7b768e910eaedc1e5b4a0aae187a3b11fa2dea65b1cdbcf4c698fd9c585927c68ace5cc82381315ae294bc4cba8da7d0da2589c6dd45810eb94b5e13ddb3ddc55b5fbf34864d917752b145876d6641eac70993f8a8182152e0ece26b348310e9057602d87bffd21a9ee6059e18dbc0a4ea114395fd9a79f28b53e8e0770a03ed2300aacfc5fb46c9463d35fe0ede3fcfa77e13e1df52d92fd280", &(0x7f0000000240)="00d81b4eb960cf762a572f2c00e147e0035925959a838f8196fff44708eb3b24a7c416c26a36f8faced639017931280ac4bfb55a732bb5fa3f1078f0dbe5dd19b91878b36cf1e839b3b35b4bd690956c41c65d59d27648fd3afd0e886ae718b8afe713177cbe07ee5955abaef956d68dd480881b5e7c17e3ef5fa10f3771a2d9af7a2304ff97069a7f8d81c155c830ce65fb2c84cc0af71dad63ecc488fa5b10ee0e84be6598661b4ab680a3388f3f7bd8e29606c858a8da3538160037f648a8f9434a7e346b42cc41cb2d4da9f34cb9d8a28ecd4032a748835fa2459a49ca4c66e4ec658c5a78884cc235fe4ffc76173f899200aee99cd09602a3ba6611fd8a652e5358206e8f731eb913c1caba4479a22eb5dce705830ca3f6dcf1a9d585db7ea3ff885ab41b26ca1cccdb218122012d9c689bfdccca047a77f6bccf51d02143276935ad25a164b9f0853f004478de0a2297e931fc44ea03df0c3a5df84332db75763560acf6d8379b73e2a4d5c2242425c3fc880b7aaf6bc0e4ba1d941817a17f8b7f91937413f9640c448220f1e635a7e19ac3e10e511b0f5e29a18b5f832d73f71206319c7c655d8cd2ac1c7424fdf6f62cbe5bfcfb53d1747cd4e232576a475e0d94596656b65494610ae60ec3e30b3d7869991d0f883592c64a464ba5e09f2d5d290856297ade423702e70457f437bf12ee5237be0a5b7b805d62da29f405e4f1c0e370ea620e5555ffee7e63cb50f65deb1917a8957199ffa335efc8898c332bdec08182debd95c2f647ee619c238d10cbf0b2b6a0bda81fc401f82d041bbf6845cc92c64a43bd34f2ce60ae6013cee7488f04f33de8c306b43e2b78b72570504a00726f41320b0c1ca4d8478b000b11b9ef2e8dd72be27ccee0fa69e83ae82e3280054985a4c25dec469eddd757d9feab468eb4237255e7295f39abffad5a4e8cab1bc205765b35b936f7a1498acdca884e2fd67a74e5f7b9c5d4240c110d73ebc5495651ff7f6dd2aa7007d7f262bc89ac3d56b65863cbd2adbfbe3d07103c106f349c9d0af7e78e7a14b1a10d23f9672126038c66a3ca325df7f26678f624ab556e82748afeb3109cdeb20c8b0bac4a69bda522790e8c4b489678a616ce2ac92de55873c3be43f2f0eec76b1859745e860905e281032f0cc194554688881a6a4478ff78d5bbf71c3a1838b6971c6e52e29d29c9eefd2445ef58c6dcb46bef55d70322ad50aa8ec1f9b7cea76c025856cd0d16661e24b4e2a28057ea8b8865c6d416f9a9a30704fdf0e1280650d5e5fafd8580c07c6192afbc67e204408d87234dab48a5a8b1562ca13e44cd96968b4ad1951ea111b1b92dfd68d216c0c02d777f276671ed568acc7ce9f84acf0e967e6675b51735b99d02eac212866372f350febf36bbc39ce5ecc493f4651fa2d41e1ec14facfb349872edfd412598202a2b039e8b6018384fe6a782f5e85da5b480a851c153e906d29642f348fa6a999f06b0bf74f9b6da19735a0c7a84e48e38c3e63d6d8e0589088a3e96cf679875837db4af83e324b805171119888c059a776da103835af456195af6640d3e9a89dc51c2ccff371e43fd12c4532317d21257086c7f989447504dc3b0c1415ada97e118d74febd4fbe11bfcd0041d7a789b5456798bb6b652c3cb06f61de644c5b91bb18cc4cfc47eb05460106bc8f6d328d5162841e83169af6694581af56a3ee6e18cbd40d751ac1ece5e0545f4d321d2791da60cff915469256bc7e6d23332fe401784affb5ad993a6e3a1c79a6960611e3adfb2e2a910abc545257093a1c06d2e7f39e1c7c60830edcf6a8f47ccf263a9795ad91800460ff214bbcb8e07f6d0907ac9fea2c1d357d97d0649cb3b5c27224b440676cc5d82adc63218498194209ea8f883da7885ed18839eef37dd8a92dca4a3b83cea86efeb630f048001822a46cddb23770d59a766b539a971994947d3450e67ee7946ab8e46a93cf939e6fddb84edc5f35b528b433eb2782c59b44ff66822dd326cd72beedc91264aa503930599cf78038c7249e0061f2fd37d60330bfd4fb68dbdc2a2f643b8d7487c61c27dac194bee39dbf7715f4c27c1626c963cae9ad3a6f675610171df5c307f5c87984e349fb6a3995966154cf0ec230818f83e9c047078bc6b43624b83ccdaf6e8856be527588b5a66d867846a3d29384bb8ff155782d878c15eeb383ca5078d20da28a0c04b0557d1dc6ffeb3165e158c4ff7f07f16d87a7059c34019d02ead5078200b7bc23a69426e725a267e6923683fbd69482fd6ac1e600681e014d0fdb4bde0422f195523d6d592e505eddda637aaee1e9d7761142b3ea9a881a3dc33e94e84058361a5545f1ee95223c1dec81ec1c1c15b53f9e55b1581d482dfc5ce37ccaa17a6c05625dd42fff61ab24f407a00a79c52d3f7e28ba3d76b2d6d6e073d85cec94fedac01bfb5ba96dbef1b8eb8caea2cb1df368a28bb22208d829cf94eaf14fe85a7a2d7905ed275fcd7a81bb0de12daeb550867655f5d323334b2dc24ca85026cc9ee2910cb54ce137a9f03ccfeaeacce58c13bc0fb30827ad47b1019d87540eda82ff7471f63302d0fc7d9073d81349f52a06f7c3ca455d1e6495c56a4d3a7ecd9ef6c2054fb8bda833190cb8a57d3ed24d2e52f8894e2edc83ed652e8789f310f37069aeeca95c8ad0733a62d17ba5b2f606516ea915e740ce4ae37b274edc05e4ab9eda945f374bd00035535938b7c4fbe27012551019ba555ff67c6b9459cd3d9e6fddeb4700c606a57abdb70625490474610405103761b357a8648dccb135f2c9f4840dc80dcc7b7b6da829435b8c833588f055ef79015d5186a3db7af1f0d32c1cd676e9a4de736ebefb6d1f130f27fcec66deff8bfa2da3b2149ad8add77c851476c7f8c05b195e5e821193b902a8b901f54842c1690dc62817917fa9b0833b9ac1f485843dc40124cc87248e7e41e91f8b9ffc060ac6b4f72557120ea42ebf9d691899442f4ef62559440d81764965baf839f7f58b57a191537707e2c797f39bd960cfe1f17018a8e52fecf220987f9648526073ad03b270ecfced8056086314285e94475d32271fd2fa2f40399d9bb12b1e95ec3a26a507b76400e4db6b801967380787f04c9bd3e25300174727ff84603609585dc5e1e158b1ea07ba9b41d1ca32657f054c26d2475667a43757458def2e95e23b8faa0045e8717975d1c9377795881b86eddf3d92cff130319f28dd74e3bf07a12b56db89ace78b287175c10c56409ab0fe2553cc8e5ff5ed55953f51fd7acf974b8d26ab6eb68293d2b4a45d9eb601b311f942d6ba5c9d9d1925c74ce40d6dae0d58fc161c6f8f089bcaef0ca2efb9709c71c2d842f5c76f2aa515933c3bdc8f4d1132cdb97aca1068da6260451b2f9f8b84618c4e33ed6edb44035ee1886d29b271b620492ec785200cf19c8b6531602aa42658f036d2aa6d0036ee6daba2bbe2f7815d1d68fcdf305fa0f0e3dc3e1f53235dbd34a2e331f9be7892a556d41bedb1ba6b6c46110ac791ae7109829438c10054c2d4679cfdb0fca08ad029a63d402fa1f996227d88d2e620124e55e1b23bc4fd597e9036655851eb9c87bf3260d6e44ba93719be6ddffef6c8bbf4751e46a614928fc2209f9cd289d62c9da25e08a699d1994f95f8a75a294d29fb373b02a9254feeca3315d95bb50a3d07c75f04a89d2e41bc5d70b9360c3e2698ebd10cbc5459353f6ea6f57821cdfc2ee9d7145e966da0f0dd43e44f1bdd8bfc96e5ed9b935461727d62d97acfbab306843d55a39bf2fbe7f460aa660607d465c6213ae74e3d54c79d096e3f8881889170082511d98d6b0edb0159fa694f87b1caf1b20850d55aaeef3644eb57eae8d95785b0f486d4b5176a7b259597e9629758442486a6da486e66b98a5de9f0d17d3f97eb31ed41a054cda560d514ff1f1776d86450029c28d65c0b2484113eb83a900867438c616a636ba1f571b913941faf8efcbac6aeb95e50e66d646f3cc214424af037fed68c878ccbd16e9ccc3b9ba2ee74eafde0393d76fd3e354947e31c36c6d512ff1dc1683014ef00c34a82588eb53e423b5d2f81fdeca996aafffd3e3a1737e845f130c057d02cc684880e96dfe80c682b24bda6ee32e923a119484b93d2630447020af40640278dd86e70b4c99626a87a565f99751d8661b2ea054203c38a270d5a9cd3d038c45d4c3b7132021c89f7fa2c83326e05b66f8d958b64411802f4d61a4024bf4810b75b9d061868d30a2270c518928645bf28e47971cfb11ac5dab6e0090fe386c68bea656612ed5a4c018aed7882ff2aa597c382aac1d359dfe5bd1ff515b59c5ad584f51ae649e33bc4f0b1144d9565507e046e7a682b8d40b71622e4da6928780bd568bf564d034b450ad33e29854db871e96cf5e1d8f31e16d48412a6c659d36e47879dc4de728bd26c6dbe07dd9866ca9d5af9c4b9659989fb7276edefddeba05f56e4724c80bd4c8ac5c3515fe4a2b69cb115b0f4e88ea649b464539f859d0260db047f86a68b984435cc4e19df9bdc8805763803de4ec3c6cc12bd1a3e4382afd982e113108fee704289fb8ad5b0f62b385a6b19266b1055ab2d60865254d24d0992124a2eb3a649378cbd8798b2e0620ea38a45be86a6157cad0d0320abc520c8df47f0ebf204080bb7961941c65f1d62f6e62b127c158ef5ec539459150ee75b3475c3856230cb07bed45bfa77a2b06dce726c0ad7b299b5c87ec8cafae86766f5d2bc4013e7916e814b93f376520cb6e5fefe28352886ab27fbcef612cd7108846cca3d5310b30d6a7ea1eaedf49cffb23dcd35b60843d6d129a9c30a1fee217aa953b6205028b4c0d7c44d324add216b26bd4cb8bc23175d401d31533f82d85cc8af69c37c9672e1eb40ddbae65a43e74b466bb97aa6159e0c52f8d06f171a6e04ed42208a20f64e10a9b3d4ee729d17bcf85b08d5dfb102e1dbb79c357e29df3a43259e863513420b936f75f5eb855525f4bd22faa8543b830daf168b4ed2b36d206c57010c7506221a89925ebf360ad31b8b12ff6ea4ef87deedaf028a8ea508f2a51a663202385a594ac892a462bf758dd67a384b0b2c7e2c6ca1d34fb6762745763d4877a2485eb487f3ef61d936a6ed722acac79a7e74d25a7f60c762c9d3493a39c015ff3e1716649de6401bca57c6aa230020b823100b0cb062e9b7e60c10f90ab6c95824768f0a411e8e68999636946d36830d9f29f03c5907b39c87b839f881b38f5130d28dd5b33c9c78ca25bbbd80a800a929a835243c026df818b5bdc23e25e8642d7b94b9c36dca10ef176a76cc1bfc97d43dee85543445670f643db59793aba31262d67e7e38f693eac412d1cbd83aa966e1913071e6c0f004dbcc8045773074924562a98b9e90b50ac74b6f302dcd1f2220606e1c323832272df3ab699331f8907a5d8fd3ca4ae4f9ce2f5dc560016f62bebcae1d05ac3684f994317cc37fc7b8b406df4d13d1e340cbe5dc2c52b524af4b7f604d24b831113792df7632c68f3087b6a8b98cc3ce48f4f5c55fc8b5f242c2603b73753174819ddd28daee07ef9c7f1a82af70d0b82a5216f8bb946c91d6ed4189f2a885743b45e64a8bfea51459231d768e55be998b85e07f21186ea75cffd8a093243510d584631ede43b56b27cb832318d9022025e5fb63da71fcb98dd73eaed9b19f44ca42dd8ad6e4d0bd6f988b10c03155b09dcca0f671caaaf8f33f9429bdf101435c8a3dd65e624b1c84b7bf4c16cc3ab83b4b3785f"}}, &(0x7f00000001c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001340)={'erspan0\x00', &(0x7f0000001240)={'gretap0\x00', 0x0, 0x7800, 0x20, 0x3, 0x10000, {{0x30, 0x4, 0x0, 0x31, 0xc0, 0x67, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @remote, {[@ssrr={0x89, 0x27, 0x2d, [@multicast2, @private=0xa010102, @remote, @broadcast, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback, @dev={0xac, 0x14, 0x14, 0x21}]}, @timestamp_prespec={0x44, 0x24, 0x43, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x48}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x4}]}, @ssrr={0x89, 0x17, 0x59, [@remote, @multicast1, @empty, @multicast1, @multicast1]}, @timestamp_addr={0x44, 0x3c, 0xc2, 0x1, 0x2, [{@rand_addr=0x64010101}, {@private=0xa010101, 0x8}, {@multicast1, 0x6}, {@multicast1, 0x5}, {@rand_addr=0x64010101, 0x8000}, {@multicast1}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0xc, 0x2b, 0x3, 0x0, [{@local, 0x7f}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001440)={'sit0\x00', &(0x7f0000001380)={'ip_vti0\x00', r2, 0x7800, 0x40, 0x7, 0x7a4, {{0x26, 0x4, 0x0, 0x3, 0x98, 0x66, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @empty, {[@generic={0x94, 0x10, "7e6006ffba26a319592f3cdf84e4"}, @rr={0x7, 0x7, 0x93, [@remote]}, @timestamp_prespec={0x44, 0x34, 0xc2, 0x3, 0x0, [{@remote, 0x6}, {@local, 0x2}, {@private=0xa010100, 0x93}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc6e7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3805}, {@rand_addr=0x64010101, 0x1c}]}, @timestamp_addr={0x44, 0x1c, 0xd8, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x89e}, {@private=0xa010100, 0x80000001}, {@local}]}, @timestamp_addr={0x44, 0x1c, 0x81, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x353b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0x4}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1.499184496s ago: executing program 7 (id=2690): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c002f9fa33d3a6430270000000000000000ff00000000000000010004c91000000000"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 1.495569076s ago: executing program 1 (id=2691): eventfd(0x80000000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) 1.165182532s ago: executing program 6 (id=2693): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000300)="65f38e", 0x3) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) close_range(r5, 0xffffffffffffffff, 0x0) 997.382501ms ago: executing program 6 (id=2694): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (rerun: 64) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x9, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) keyctl$search(0xa, 0x0, &(0x7f0000000040)='logon\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xb0}, 0x1, 0x0, 0x0, 0x20002010}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x15121, 0x0, 0x0, 0x7, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) (async, rerun: 64) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (rerun: 64) close_range(r2, 0xffffffffffffffff, 0x2) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000840)="ef5092788d303ede5f1e153e0087a94358e4e3968991f2d289cd6331b612c58cecfa95933d5bbb1a8bf78c11bbf1b674ebde961193fb1aea1728", 0x3a}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000120009162dbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20a004001000000008001f"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x2, 0x0) (async) syz_clone3(&(0x7f0000000780)={0x5800080, &(0x7f00000001c0), &(0x7f0000000300)=0x0, &(0x7f0000000380), {0x30}, &(0x7f0000000700)=""/99, 0x63, &(0x7f00000003c0)=""/53, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000800)={r5}) 700.524215ms ago: executing program 1 (id=2695): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa, 0x8}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x407f8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x4}, 0x120, 0x10000, 0x33f8, 0x1, 0xb, 0x20007, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfe00000}, &(0x7f00000001c0), &(0x7f00000003c0)) fsmount(0xffffffffffffffff, 0x0, 0x6) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r3, 0x5452, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x18, r4, 0x1, 0x70bd28, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 669.324157ms ago: executing program 2 (id=2696): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) (fail_nth: 1) 343.882483ms ago: executing program 2 (id=2697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0x2dbd854266873d48}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffa, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$packet(0x11, 0x2, 0x300) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xd6ca, 0x80, 0xffffffff, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) 311.152725ms ago: executing program 7 (id=2698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0x2dbd854266873d48}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffa, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xd6ca, 0x80, 0xffffffff, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0xfffffffffffffffe, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) 291.792435ms ago: executing program 6 (id=2699): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24008000) 227.751328ms ago: executing program 6 (id=2700): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x1, 0x44a}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0066a6", 0x14, 0x6, 0x1, @loopback={0x300}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1, 0x0, 0x6}}}}}}}, 0x0) 226.174069ms ago: executing program 6 (id=2701): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) timer_create(0x4, &(0x7f0000000140)={0x0, 0x40030, 0x1, @thr={&(0x7f0000000080)="fff663953886befb30aaa217ee6f7b768e910eaedc1e5b4a0aae187a3b11fa2dea65b1cdbcf4c698fd9c585927c68ace5cc82381315ae294bc4cba8da7d0da2589c6dd45810eb94b5e13ddb3ddc55b5fbf34864d917752b145876d6641eac70993f8a8182152e0ece26b348310e9057602d87bffd21a9ee6059e18dbc0a4ea114395fd9a79f28b53e8e0770a03ed2300aacfc5fb46c9463d35fe0ede3fcfa77e13e1df52d92fd280", &(0x7f0000000240)="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"}}, &(0x7f00000001c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001340)={'erspan0\x00', &(0x7f0000001240)={'gretap0\x00', 0x0, 0x7800, 0x20, 0x3, 0x10000, {{0x30, 0x4, 0x0, 0x31, 0xc0, 0x67, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @remote, {[@ssrr={0x89, 0x27, 0x2d, [@multicast2, @private=0xa010102, @remote, @broadcast, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback, @dev={0xac, 0x14, 0x14, 0x21}]}, @timestamp_prespec={0x44, 0x24, 0x43, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x48}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x4}]}, @ssrr={0x89, 0x17, 0x59, [@remote, @multicast1, @empty, @multicast1, @multicast1]}, @timestamp_addr={0x44, 0x3c, 0xc2, 0x1, 0x2, [{@rand_addr=0x64010101}, {@private=0xa010101, 0x8}, {@multicast1, 0x6}, {@multicast1, 0x5}, {@rand_addr=0x64010101, 0x8000}, {@multicast1}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0xc, 0x2b, 0x3, 0x0, [{@local, 0x7f}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001440)={'sit0\x00', &(0x7f0000001380)={'ip_vti0\x00', r2, 0x7800, 0x40, 0x7, 0x7a4, {{0x26, 0x4, 0x0, 0x3, 0x98, 0x66, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @empty, {[@generic={0x94, 0x10, "7e6006ffba26a319592f3cdf84e4"}, @rr={0x7, 0x7, 0x93, [@remote]}, @timestamp_prespec={0x44, 0x34, 0xc2, 0x3, 0x0, [{@remote, 0x6}, {@local, 0x2}, {@private=0xa010100, 0x93}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc6e7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3805}, {@rand_addr=0x64010101, 0x1c}]}, @timestamp_addr={0x44, 0x1c, 0xd8, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x89e}, {@private=0xa010100, 0x80000001}, {@local}]}, @timestamp_addr={0x44, 0x1c, 0x81, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x353b}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0x4}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 210.78997ms ago: executing program 1 (id=2702): socket$nl_netfilter(0x10, 0x3, 0xc) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x25, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a00)="dec1ad8cc03bc79e4c40cca25750a59156d4dbf719fc13ffd20ebb0e6af1d0a419c0ee8c30e400adcfcc29ace0df53b69f3020b14ece80908640db6b5962cddf3d160c16814f0422437b65bf75d2d158d6da1e1e7dd3e581c2f2c2ce30fab9ba3ffc707a494bfbf821905e55ee05ef5178d6a7e48b7e3e58019b4bacab8cbb1feb156975e51ce7e1538c748d278458e83b2c1ce86ee3d1a70f2f2276be16fbb3a0120b4b5ab70493191b9d066545609a38560753c9f9c98c8203743def8bd73aa6ba83f9775ea9", 0xc7}, {&(0x7f00000005c0)="442cdfffe9f911ef48dddd4ec6414941b2fbd664f80df13bac23f329818199b20d2b0b9647791a0d44996c9ee9d5055049a6b97cab7042485b2866185ce7f1683a358d51bc3559ac0eeb062f5d18c3c3eaacaa8bdbf70dda9a6c3133733d5672073493f46fa1ff4cf36ce6bc3e4f4a40109771eb41d20a21f3eb82ec44ecd554b06de3a5ce2d13a0b800a875137cd488c5cad37e0057b55e5fbe54c1901094484bcfce57382f95cf237ec98bb3681da9b644bef0ac8867e5", 0xb8}, {&(0x7f0000000b00)="523d69f6b10a3e03185eaf437c6a29828a5f0e3bcac8dd18c12d87b3f0152b898fb80ad07244db04d824fcd8980802394d311c238865bdc573cddc11333444d23e18ba03bce1cc649c4a301502ceed9bc97ead6b94dc583542310caec55f381cebbadddb231e3a5228135ccdd787c483a0aff4314fd1444abf231d2226579ddcba720f3d3ed810a7f1e6a05b60436aa4e8d16f7ad5f220e8ddeb527b2ca0245a621b2604a26e7aa4fb844889e8de4c497b4811130923f810f1c69a219adf7a1463bafe994b17f0952ce58edded753251f8d603695668f8c0556cadefc12d783c6f1360bda02a1d1b78", 0xe9}, {&(0x7f0000000200)="915579bb67c0621f5056b5c19efc51ef845c5463c93983354656962412a64bb88896d5bb69e3c3aad11d63a0", 0x2c}, {&(0x7f0000000c00)="c55092ec7987ada289a08a3eafe91a0461d20f92ff6e117afc934174d5bd9263f84912514d344653ac81dd53c2b4c446b3b818bfc310971a554f688c5920bb35467f77b40a83abd13adf2204dc8d2b6d38caadcd1cee93ca0dfe9add504ddcb46ed922e17b8833c810cf553789ab5a5c732a792196a546f413b27bc79c7f2b8c5bdf59bac84ed3a327be01d21fd1d6fc41c40a7e7221a46468b69d45", 0x9c}, {&(0x7f0000002000)="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", 0x1000}], 0x6}, 0x4001) write$cgroup_int(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) accept4$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES64=r8], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffce}, 0x94) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000000000)='R\x10rD\x90\x05\x10\xce\x8b\xe6\x16\t\x00\x15\xb7\xb5Vd\xcd\xfbD\xccl\x1e\x94\x00#\xdd\xe7p\x9c\xcf`\x1f<\x03\x87\x97\xbb\a?\xa4\xfc\xd9v\x8b_(\xe3\x14\xcf\x15\xfc\x89\x7f', 0x0) 177.408881ms ago: executing program 6 (id=2703): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x68, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x68}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000000080000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r7, 0xffffffffffffffff, 0xcc0, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=r5, 0x10}}, 0x20) 80.744406ms ago: executing program 2 (id=2704): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=r2, @ANYBLOB="00001e0000620000200012800b00010065727370616e0000100002800400120006001100ff7f0000"], 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) syz_open_pts(r0, 0x80) r4 = dup3(r3, r0, 0x0) read(r4, &(0x7f0000000200)=""/227, 0xe3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {0xfc}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) ioctl$SG_BLKTRACESTART(r4, 0x1274, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x8001, 0x5, 0x0, 0xffffffff, 0x15, "2ea98072973aefba56a9f8e8f77f20fbf5974a"}) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000000)={0x2, 0x1, 0x1000, 0x1, 0x8, 0x4}) 0s ago: executing program 7 (id=2705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRES32=r0]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): without journal. Quota mode: writeback. [ 351.912262][T11077] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.958010][T11109] loop5: detected capacity change from 0 to 128 [ 352.073958][ T8722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.113844][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 352.113891][ T28] audit: type=1326 audit(2000002738.360:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74879bc799 code=0x7ffc0000 [ 352.218946][ T28] audit: type=1326 audit(2000002738.360:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74879bc799 code=0x7ffc0000 [ 352.254203][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2092'. [ 352.267834][ T28] audit: type=1326 audit(2000002738.360:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74879bc799 code=0x7ffc0000 [ 352.307620][ T28] audit: type=1326 audit(2000002738.360:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74879bc799 code=0x7ffc0000 [ 352.346652][ T28] audit: type=1326 audit(2000002738.360:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f74879bc799 code=0x7ffc0000 [ 352.371214][T11122] lo speed is unknown, defaulting to 1000 [ 352.386942][ T28] audit: type=1326 audit(2000002738.360:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74879bc799 code=0x7ffc0000 [ 352.422665][ T28] audit: type=1326 audit(2000002738.360:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74879bc799 code=0x7ffc0000 [ 352.447288][ T28] audit: type=1326 audit(2000002738.360:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74879bc799 code=0x7ffc0000 [ 352.498429][ T28] audit: type=1326 audit(2000002738.360:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74879bc799 code=0x7ffc0000 [ 352.523509][ T28] audit: type=1326 audit(2000002738.360:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.1.2093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f74879bc799 code=0x7ffc0000 [ 352.604283][T11129] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2094'. [ 352.683841][T11133] loop2: detected capacity change from 0 to 256 [ 353.326292][T11164] loop6: detected capacity change from 0 to 512 [ 353.371454][T11164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.391980][T11164] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.466971][ T8722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.578910][T11180] loop2: detected capacity change from 0 to 128 [ 353.628245][T11176] netlink: 'syz.4.2113': attribute type 10 has an invalid length. [ 353.696740][T11188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11188 comm=syz.4.2116 [ 353.717268][T11188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11188 comm=syz.4.2116 [ 353.760122][T11188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=11188 comm=syz.4.2116 [ 353.773109][T11188] netlink: 8732 bytes leftover after parsing attributes in process `syz.4.2116'. [ 354.091383][T11205] lo speed is unknown, defaulting to 1000 [ 354.097413][T11205] lo speed is unknown, defaulting to 1000 [ 354.103784][T11205] lo speed is unknown, defaulting to 1000 [ 354.111139][T11205] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 354.128658][T11205] lo speed is unknown, defaulting to 1000 [ 354.135049][T11205] lo speed is unknown, defaulting to 1000 [ 354.141447][T11205] lo speed is unknown, defaulting to 1000 [ 354.147888][T11205] lo speed is unknown, defaulting to 1000 [ 354.154937][T11205] lo speed is unknown, defaulting to 1000 [ 354.615787][T11215] netlink: 'syz.4.2126': attribute type 1 has an invalid length. [ 354.642516][T11215] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 354.654927][T11215] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 354.709093][T11215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2126'. [ 354.766750][T11227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.856126][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'. [ 354.989890][T11240] siw: device registration error -23 [ 355.568800][T11227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.721406][T11232] vlan3: entered promiscuous mode [ 355.757059][ T2269] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 355.765512][ T2269] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.796788][ T2269] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 355.806792][ T2269] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.815299][ T2269] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 355.850236][ T2269] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.859261][T11261] netlink: 'syz.5.2140': attribute type 1 has an invalid length. [ 355.867819][ T2269] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 355.876313][ T2269] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.904235][T11261] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 355.915726][T11261] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 355.949727][T11266] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2140'. [ 356.004069][T11269] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2142'. [ 356.044774][T11272] loop5: detected capacity change from 0 to 256 [ 356.076459][T11273] bridge_slave_0: invalid flags given to default FDB implementation [ 356.209416][T11285] netlink: 'syz.5.2150': attribute type 22 has an invalid length. [ 356.220114][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2150'. [ 356.240739][T11285] netlink: 'syz.5.2150': attribute type 22 has an invalid length. [ 356.242633][T10063] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.256889][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2150'. [ 356.290917][T10063] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.303412][T10063] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.325349][T11286] sch_fq: defrate 0 ignored. [ 356.363895][T11298] netlink: 'syz.4.2154': attribute type 1 has an invalid length. [ 356.384984][T10063] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.432946][T11305] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 356.456358][T11309] loop2: detected capacity change from 0 to 512 [ 356.476423][T11305] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 356.499408][T11309] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 356.606190][T11317] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 356.630944][T11309] EXT4-fs (loop2): 1 truncate cleaned up [ 356.647590][T11309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.684456][T11324] loop6: detected capacity change from 0 to 512 [ 356.715584][T11324] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 356.739548][T11324] EXT4-fs (loop6): 1 truncate cleaned up [ 356.745970][T11324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.786018][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.206624][ T28] kauditd_printk_skb: 214 callbacks suppressed [ 357.206719][ T28] audit: type=1326 audit(2000002743.430:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9397e9cfce code=0x7ffc0000 [ 357.628440][ T28] audit: type=1326 audit(2000002743.430:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9397e9cfce code=0x7ffc0000 [ 357.652479][ T28] audit: type=1326 audit(2000002743.440:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9397e9cfce code=0x7ffc0000 [ 357.680252][ T28] audit: type=1326 audit(2000002743.440:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9397e9cfce code=0x7ffc0000 [ 357.737198][ T28] audit: type=1326 audit(2000002743.440:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9397e9cfce code=0x7ffc0000 [ 357.769404][ T28] audit: type=1326 audit(2000002743.440:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9397e9cfce code=0x7ffc0000 [ 357.820212][T11351] lo speed is unknown, defaulting to 1000 [ 357.826415][T11351] lo speed is unknown, defaulting to 1000 [ 357.846792][ T28] audit: type=1326 audit(2000002743.440:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9397e9cfce code=0x7ffc0000 [ 357.870482][ T28] audit: type=1326 audit(2000002743.440:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9397e9cfce code=0x7ffc0000 [ 357.894143][ T28] audit: type=1326 audit(2000002743.440:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9397e9cfce code=0x7ffc0000 [ 357.917931][ T28] audit: type=1326 audit(2000002743.450:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11316 comm="syz.6.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9397e9cfce code=0x7ffc0000 [ 358.723850][ T8722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.964674][T11368] __nla_validate_parse: 1 callbacks suppressed [ 359.964692][T11368] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2172'. [ 360.341997][T11361] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 360.483423][T11376] loop2: detected capacity change from 0 to 8192 [ 360.759927][T11368] bond1: (slave vlan2): Releasing backup interface [ 360.770770][T11368] vlan2 (unregistering): left promiscuous mode [ 360.777685][T11368] bond0 (unregistering): left promiscuous mode [ 360.784063][T11368] bond_slave_0: left promiscuous mode [ 360.792348][T11381] netlink: 'syz.6.2178': attribute type 1 has an invalid length. [ 360.803653][T11368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.813784][T11368] bond0 (unregistering): Released all slaves [ 360.929866][T11381] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2178'. [ 361.103096][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2182'. [ 361.147165][T11402] bond3: entered promiscuous mode [ 361.163109][T11402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 361.190516][T11408] vlan0: entered promiscuous mode [ 361.195621][T11408] bond0: entered promiscuous mode [ 361.376250][T11408] bond_slave_0: entered promiscuous mode [ 361.382604][T11408] bond_slave_1: entered promiscuous mode [ 361.389424][T11408] bond3: (slave vlan0): Enslaving as an active interface with an up link [ 361.566963][T11420] netlink: 54775 bytes leftover after parsing attributes in process `syz.2.2188'. [ 362.217272][T11433] netlink: 'syz.4.2193': attribute type 1 has an invalid length. [ 362.270129][T11433] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 362.281188][T11433] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 362.315371][T11437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2193'. [ 362.559087][T11445] loop5: detected capacity change from 0 to 1024 [ 362.577758][T11445] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 362.610907][T11445] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2194: Invalid block bitmap block 0 in block_group 0 [ 362.625784][T11445] fserror_report: 5 callbacks suppressed [ 362.631711][T11445] loop5: lost filesystem error report for type 5 error -117 [ 362.634736][T11445] __quota_error: 41 callbacks suppressed [ 362.634872][T11445] Quota error (device loop5): write_blk: dquota write failed [ 362.642602][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 362.642642][ C0] EXT4-fs (loop5): initial error at time 2000002748: ext4_read_block_bitmap_nowait:483 [ 362.642764][ C0] EXT4-fs (loop5): last error at time 2000002748: ext4_read_block_bitmap_nowait:483 [ 362.685956][T11445] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 362.697569][T11445] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2194: Failed to acquire dquot type 0 [ 362.709242][T11445] loop5: lost filesystem error report for type 5 error -117 [ 362.713754][T11445] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.2194: Freeing blocks not in datazone - block = 0, count = 4096 [ 362.735665][T11445] loop5: lost filesystem error report for type 5 error -117 [ 362.739142][T11445] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2194: Invalid inode bitmap blk 0 in block_group 0 [ 362.760192][T11445] loop5: lost filesystem error report for type 5 error -117 [ 362.761422][T11445] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 362.778443][T11445] loop5: lost filesystem error report for type 5 error -117 [ 362.780430][T11445] EXT4-fs (loop5): 1 orphan inode deleted [ 362.803940][T11445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.851146][T10063] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-7 [ 362.917817][T10063] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:18: Failed to release dquot type 0 [ 362.995442][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2197'. [ 364.866070][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2201'. [ 364.886509][ T6758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.117858][T11476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.158815][T11483] netlink: 200 bytes leftover after parsing attributes in process `syz.5.2203'. [ 365.169392][T11483] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2203'. [ 365.938984][T11449] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.978816][T11492] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 366.014169][ T28] audit: type=1400 audit(2000002752.262:3914): avc: denied { unmount } for pid=8722 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 366.040233][T11492] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2207'. [ 366.378321][T11512] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2214'. [ 366.793133][T11525] FAULT_INJECTION: forcing a failure. [ 366.793133][T11525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.806580][T11525] CPU: 0 UID: 0 PID: 11525 Comm: syz.2.2216 Tainted: G W syzkaller #0 PREEMPT(full) [ 366.806692][T11525] Tainted: [W]=WARN [ 366.806701][T11525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.806717][T11525] Call Trace: [ 366.806724][T11525] [ 366.806734][T11525] __dump_stack+0x1d/0x30 [ 366.806767][T11525] dump_stack_lvl+0x95/0xd0 [ 366.806809][T11525] dump_stack+0x15/0x1b [ 366.806899][T11525] should_fail_ex+0x263/0x280 [ 366.806954][T11525] should_fail+0xb/0x20 [ 366.806977][T11525] should_fail_usercopy+0x1a/0x20 [ 366.807004][T11525] _copy_from_user+0x1c/0xb0 [ 366.807038][T11525] ___sys_sendmsg+0xc1/0x1e0 [ 366.807213][T11525] __x64_sys_sendmsg+0xd4/0x160 [ 366.807277][T11525] x64_sys_call+0x194c/0x3020 [ 366.807321][T11525] do_syscall_64+0x12c/0x370 [ 366.807398][T11525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.807419][T11525] RIP: 0033:0x7f4ae14fc799 [ 366.807436][T11525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.807455][T11525] RSP: 002b:00007f4adff57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.807485][T11525] RAX: ffffffffffffffda RBX: 00007f4ae1775fa0 RCX: 00007f4ae14fc799 [ 366.807503][T11525] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000b [ 366.807519][T11525] RBP: 00007f4adff57090 R08: 0000000000000000 R09: 0000000000000000 [ 366.807536][T11525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.807551][T11525] R13: 00007f4ae1776038 R14: 00007f4ae1775fa0 R15: 00007ffc174f9898 [ 366.807580][T11525] [ 367.504262][T11537] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.511632][T11537] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.766564][T11537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.777642][T11537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.804041][T11537] veth3: left allmulticast mode [ 367.810333][T11537] bond3: left promiscuous mode [ 367.815632][T11537] vlan0: left promiscuous mode [ 367.820678][T11537] bond0: left promiscuous mode [ 367.826956][T11537] bond_slave_0: left promiscuous mode [ 367.832848][T11537] bond_slave_1: left promiscuous mode [ 367.856200][T11553] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 367.897777][ T5138] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.911902][ T5138] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.927388][T11558] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2228'. [ 367.954222][ T5138] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.215207][T10063] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.703889][T11579] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2234'. [ 370.029698][T11574] loop2: detected capacity change from 0 to 1024 [ 370.058927][T11574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.121551][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.155416][T11596] loop6: detected capacity change from 0 to 128 [ 370.428069][T11608] loop2: detected capacity change from 0 to 1024 [ 370.435814][T11608] EXT4-fs: Ignoring removed orlov option [ 370.525248][T11608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.562564][T11608] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 370.598271][T11608] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 371.032702][ T36] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 371.355200][ T36] EXT4-fs (loop2): This should not happen!! Data will be lost [ 371.355200][ T36] [ 371.380039][ T36] EXT4-fs (loop2): Total free blocks count 0 [ 371.604473][T11619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2245'. [ 372.095058][ T36] EXT4-fs (loop2): Free/Dirty block details [ 372.101030][ T36] EXT4-fs (loop2): free_blocks=20480 [ 372.106469][ T36] EXT4-fs (loop2): dirty_blocks=10752 [ 372.111887][ T36] EXT4-fs (loop2): Block reservation details [ 372.118129][ T36] EXT4-fs (loop2): i_reserved_data_blocks=672 [ 372.209210][T10058] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 373.321343][T11628] loop5: detected capacity change from 0 to 1024 [ 373.350193][T11628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.470701][T11628] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.2249: Allocating blocks 497-513 which overlap fs metadata [ 373.533369][T11643] FAULT_INJECTION: forcing a failure. [ 373.533369][T11643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.561317][T11643] CPU: 0 UID: 0 PID: 11643 Comm: syz.2.2252 Tainted: G W syzkaller #0 PREEMPT(full) [ 373.561353][T11643] Tainted: [W]=WARN [ 373.561360][T11643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.561375][T11643] Call Trace: [ 373.561382][T11643] [ 373.561390][T11643] __dump_stack+0x1d/0x30 [ 373.561422][T11643] dump_stack_lvl+0x95/0xd0 [ 373.561506][T11643] dump_stack+0x15/0x1b [ 373.561562][T11643] should_fail_ex+0x263/0x280 [ 373.561592][T11643] should_fail+0xb/0x20 [ 373.561619][T11643] should_fail_usercopy+0x1a/0x20 [ 373.561646][T11643] _copy_from_iter+0xcf/0xea0 [ 373.561680][T11643] ? file_tty_write+0x1d4/0x690 [ 373.561784][T11643] ? kfree+0x303/0x380 [ 373.561804][T11643] file_tty_write+0x322/0x690 [ 373.561837][T11643] ? __pfx_tty_write+0x10/0x10 [ 373.561865][T11643] tty_write+0x25/0x30 [ 373.561894][T11643] vfs_write+0x5a6/0x9f0 [ 373.561950][T11643] ksys_write+0xdc/0x1a0 [ 373.561975][T11643] __x64_sys_write+0x40/0x50 [ 373.561998][T11643] x64_sys_call+0x27e1/0x3020 [ 373.562045][T11643] do_syscall_64+0x12c/0x370 [ 373.562077][T11643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.562098][T11643] RIP: 0033:0x7f4ae14fc799 [ 373.562113][T11643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.562136][T11643] RSP: 002b:00007f4adff57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.562210][T11643] RAX: ffffffffffffffda RBX: 00007f4ae1775fa0 RCX: 00007f4ae14fc799 [ 373.562224][T11643] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000004 [ 373.562235][T11643] RBP: 00007f4adff57090 R08: 0000000000000000 R09: 0000000000000000 [ 373.562248][T11643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.562260][T11643] R13: 00007f4ae1776038 R14: 00007f4ae1775fa0 R15: 00007ffc174f9898 [ 373.562346][T11643] [ 373.807275][T11627] EXT4-fs (loop5): pa ffff888107e63700: logic 48, phys. 177, len 21 [ 373.815363][T11627] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 373.875689][T11645] loop2: detected capacity change from 0 to 512 [ 373.921328][T11645] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 373.929523][T11645] System zones: 1-12 [ 373.944595][T11645] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.2253: corrupted in-inode xattr: e_value size too large [ 373.964408][ T6758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.984454][T11645] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 373.985068][T11645] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2253: couldn't read orphan inode 15 (err -117) [ 373.994366][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 373.994388][ C0] EXT4-fs (loop2): initial error at time 2000002760: ext4_iget_extra_inode:5025: inode 15 [ 373.994420][ C0] EXT4-fs (loop2): last error at time 2000002760: ext4_iget_extra_inode:5025: inode 15 [ 374.033431][T11645] loop2: lost filesystem error report for type 5 error -117 [ 374.034107][T11645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.112519][T11645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2253'. [ 374.121940][T11645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2253'. [ 374.165121][T11645] lo speed is unknown, defaulting to 1000 [ 374.171302][T11645] lo speed is unknown, defaulting to 1000 [ 374.210059][ T28] audit: type=1326 audit(2000002760.463:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11650 comm="syz.5.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed892c799 code=0x7ffc0000 [ 374.272627][ T28] audit: type=1326 audit(2000002760.463:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11650 comm="syz.5.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed892c799 code=0x7ffc0000 [ 374.305353][ T28] audit: type=1326 audit(2000002760.463:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11650 comm="syz.5.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed892c799 code=0x7ffc0000 [ 374.364300][ T28] audit: type=1326 audit(2000002760.463:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11650 comm="syz.5.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fbed892c799 code=0x7ffc0000 [ 374.388147][ T28] audit: type=1326 audit(2000002760.463:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11650 comm="syz.5.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed892c799 code=0x7ffc0000 [ 374.413156][ T28] audit: type=1326 audit(2000002760.463:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11650 comm="syz.5.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed892c799 code=0x7ffc0000 [ 374.447293][ T28] audit: type=1326 audit(2000002760.463:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11650 comm="syz.5.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed892c799 code=0x7ffc0000 [ 374.471160][ T28] audit: type=1326 audit(2000002760.463:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11650 comm="syz.5.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fbed892c799 code=0x7ffc0000 [ 374.495027][ T28] audit: type=1326 audit(2000002760.463:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11650 comm="syz.5.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed892c799 code=0x7ffc0000 [ 374.519090][ T28] audit: type=1326 audit(2000002760.463:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11650 comm="syz.5.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed892c799 code=0x7ffc0000 [ 374.569765][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.606627][T11666] netlink: 'syz.4.2261': attribute type 1 has an invalid length. [ 374.635051][T11666] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address [ 374.646203][T11666] bond15: (slave vxcan3): Error -95 calling set_mac_address [ 375.463334][T11685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2266'. [ 375.490968][T11685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2266'. [ 375.975484][T11698] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2272'. [ 375.990662][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2271'. [ 376.062346][T11700] loop5: detected capacity change from 0 to 1024 [ 376.118134][T11700] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 376.926290][T11711] loop5: detected capacity change from 0 to 512 [ 376.993670][T11709] loop5: detected capacity change from 0 to 164 [ 377.146558][T11713] openvswitch: netlink: Key 23 has unexpected len 4 expected 2 [ 377.249825][T11713] lo speed is unknown, defaulting to 1000 [ 377.278951][T11713] lo speed is unknown, defaulting to 1000 [ 377.414248][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2278'. [ 377.462038][T11724] netlink: 'syz.1.2279': attribute type 1 has an invalid length. [ 377.552327][T11726] loop5: detected capacity change from 0 to 512 [ 377.572513][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2282'. [ 377.586998][T11730] loop6: detected capacity change from 0 to 512 [ 377.593706][T11726] EXT4-fs: Ignoring removed bh option [ 377.595168][T11724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2279'. [ 377.609906][T11726] EXT4-fs: Ignoring removed mblk_io_submit option [ 377.624330][T11730] EXT4-fs: Ignoring removed bh option [ 377.629922][T11730] EXT4-fs: Ignoring removed mblk_io_submit option [ 377.632498][T11724] 8021q: adding VLAN 0 to HW filter on device bond8 [ 377.648493][T11726] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 377.689553][T11730] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 377.699872][T11726] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 377.708302][T11735] loop2: detected capacity change from 0 to 2048 [ 377.720410][T11730] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 377.722236][T11735] EXT4-fs (loop2): Invalid log cluster size: 16776453 [ 377.729978][T11726] EXT4-fs (loop5): orphan cleanup on readonly fs [ 377.750246][T11730] EXT4-fs (loop6): orphan cleanup on readonly fs [ 377.757267][T11724] vlan0: entered promiscuous mode [ 377.765258][T11726] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2280: Failed to acquire dquot type 1 [ 377.777085][T11724] bond8: entered promiscuous mode [ 377.794533][T11730] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2281: Failed to acquire dquot type 1 [ 377.798271][T11726] loop5: lost filesystem error report for type 5 error -5 [ 377.806045][T11730] loop6: lost filesystem error report for type 5 error -5 [ 377.813766][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 377.827394][ C0] EXT4-fs (loop6): last error at time 2000002764: ext4_acquire_dquot:7001 [ 377.834648][T11726] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2280: Invalid block bitmap block 0 in block_group 0 [ 377.836584][T11730] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2281: Invalid block bitmap block 0 in block_group 0 [ 377.849355][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 377.863222][T11730] loop6: lost filesystem error report for type 5 error -117 [ 377.869205][ C1] EXT4-fs (loop5): last error at time 2000002764: ext4_acquire_dquot:7001 [ 377.893380][T11730] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2281: Invalid block bitmap block 0 in block_group 0 [ 377.913955][T11730] loop6: lost filesystem error report for type 5 error -117 [ 377.914164][T11730] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2281: Invalid block bitmap block 0 in block_group 0 [ 377.953863][T11730] loop6: lost filesystem error report for type 5 error -117 [ 377.954007][T11726] loop5: lost filesystem error report for type 5 error -117 [ 377.961649][T11730] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2281: Failed to acquire dquot type 1 [ 377.999769][T11726] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2280: Invalid block bitmap block 0 in block_group 0 [ 378.022885][T11730] loop6: lost filesystem error report for type 5 error -28 [ 378.024436][T11730] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2281: Failed to acquire dquot type 1 [ 378.046561][T11726] loop5: lost filesystem error report for type 5 error -117 [ 378.046745][T11726] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2280: Invalid block bitmap block 0 in block_group 0 [ 378.063895][T11730] loop6: lost filesystem error report for type 5 error -28 [ 378.068110][T11730] EXT4-fs (loop6): 1 orphan inode deleted [ 378.082184][T11726] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2280: Failed to acquire dquot type 1 [ 378.094181][T11726] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2280: Failed to acquire dquot type 1 [ 378.107245][T11726] EXT4-fs (loop5): 1 orphan inode deleted [ 378.117926][T11730] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 378.135187][T11726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 378.183361][T11749] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 378.191607][ T6758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.204403][ T8722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.241177][T11752] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2287'. [ 378.259948][T11756] tipc: Can't bind to reserved service type 1 [ 378.344503][T11752] bond4: (slave vlan1): Releasing backup interface [ 378.393935][T11752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.403564][T11752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.413579][T11752] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 378.494831][T11752] bond0 (unregistering): Released all slaves [ 379.249203][T11777] loop6: detected capacity change from 0 to 512 [ 379.653557][T11777] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 379.761164][T11777] EXT4-fs (loop6): 1 truncate cleaned up [ 379.768043][T11777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.782620][T11777] EXT4-fs (loop6): shut down requested (2) [ 379.789192][T11777] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 379.798225][T11777] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 379.807570][T11777] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 379.816539][T11777] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 379.825752][T11777] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 379.853526][ T28] kauditd_printk_skb: 242 callbacks suppressed [ 379.853553][ T28] audit: type=1400 audit(2000002766.084:4155): avc: denied { add_name } for pid=11773 comm="syz.6.2295" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 380.216269][ T28] audit: type=1400 audit(2000002766.094:4156): avc: denied { create } for pid=11773 comm="syz.6.2295" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 381.042204][ T28] audit: type=1400 audit(2000002766.194:4157): avc: denied { read } for pid=2983 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 381.073024][ T8722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.202057][ T28] audit: type=1400 audit(2000002766.194:4158): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.302333][ T28] audit: type=1400 audit(2000002766.194:4159): avc: denied { search } for pid=2983 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.348879][T11797] loop6: detected capacity change from 0 to 512 [ 381.355686][T11797] EXT4-fs: Ignoring removed bh option [ 381.361315][T11797] EXT4-fs: Ignoring removed mblk_io_submit option [ 381.371931][ T28] audit: type=1400 audit(2000002766.194:4160): avc: denied { add_name } for pid=2983 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.393349][ T28] audit: type=1400 audit(2000002766.194:4161): avc: denied { create } for pid=2983 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 381.415136][ T28] audit: type=1400 audit(2000002766.194:4162): avc: denied { append open } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 381.438631][ T28] audit: type=1400 audit(2000002766.194:4163): avc: denied { getattr } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 381.475467][T11797] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 381.512917][T11797] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 381.527979][T11797] EXT4-fs (loop6): orphan cleanup on readonly fs [ 381.541565][T11797] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 4 [ 381.555945][T11797] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2298: Failed to acquire dquot type 1 [ 381.627545][T11797] fserror_report: 3 callbacks suppressed [ 381.627564][T11797] loop6: lost filesystem error report for type 5 error -5 [ 381.642753][T11797] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2298: Invalid block bitmap block 0 in block_group 0 [ 381.650145][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 381.650163][ C1] EXT4-fs (loop6): last error at time 2000002767: ext4_acquire_dquot:7001 [ 381.891807][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'. [ 381.903874][T11797] loop6: lost filesystem error report for type 5 error -117 [ 381.904482][T11797] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2298: Invalid block bitmap block 0 in block_group 0 [ 381.980866][T11821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2309'. [ 382.032288][T11797] loop6: lost filesystem error report for type 5 error -117 [ 382.075237][T11797] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2298: Invalid block bitmap block 0 in block_group 0 [ 382.502310][T11797] loop6: lost filesystem error report for type 5 error -117 [ 382.502544][T11797] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2298: Failed to acquire dquot type 1 [ 382.647436][T11797] loop6: lost filesystem error report for type 5 error -28 [ 382.664271][T11797] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2298: Failed to acquire dquot type 1 [ 382.684102][T11827] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.694558][T11797] loop6: lost filesystem error report for type 5 error -28 [ 382.694587][T11827] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.097522][T11797] EXT4-fs (loop6): 1 orphan inode deleted [ 383.193924][T11827] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.204365][T11827] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.215842][T11797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.234567][T11835] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2312'. [ 383.258275][ T8722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.271302][T11827] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.281869][T11827] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.331147][T11827] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.341603][T11827] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.360842][T11839] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2314'. [ 383.438624][ T5138] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.453224][ T5138] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.488762][T11850] loop6: detected capacity change from 0 to 512 [ 383.495710][ T5138] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.511585][T11850] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 383.529131][ T5138] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.565065][ T5138] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.576976][T11850] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended [ 383.593131][ T5138] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.601549][ T5138] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.610654][T11850] EXT4-fs error (device loop6): ext4_orphan_get:1391: comm syz.6.2320: inode #15: comm syz.6.2320: iget: illegal inode # [ 383.625999][ T5138] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.644864][T11850] loop6: lost filesystem error report for type 5 error -117 [ 383.645017][T11850] EXT4-fs (loop6): Remounting filesystem read-only [ 383.659130][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 383.659155][ C0] EXT4-fs (loop6): initial error at time 2000002769: ext4_orphan_get:1391 [ 383.659182][ C0] EXT4-fs (loop6): last error at time 2000002769: ext4_orphan_get:1391 [ 383.692251][T11850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.724260][ T8722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.759814][T11864] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2324'. [ 383.779427][T11864] bond3: (slave vlan0): Releasing backup interface [ 383.790474][T11864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.804127][T11864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.823546][T11864] bond0 (unregistering): Released all slaves [ 383.999597][ T6151] page_pool_release_retry() stalled pool shutdown: id 36, 51 inflight 120 sec [ 384.461888][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2329'. [ 384.557699][T11882] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2330'. [ 384.569373][T11882] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2330'. [ 384.578679][T11882] FAULT_INJECTION: forcing a failure. [ 384.578679][T11882] name failslab, interval 1, probability 0, space 0, times 0 [ 384.591645][T11882] CPU: 0 UID: 0 PID: 11882 Comm: syz.5.2330 Tainted: G W syzkaller #0 PREEMPT(full) [ 384.591717][T11882] Tainted: [W]=WARN [ 384.591725][T11882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.591742][T11882] Call Trace: [ 384.591750][T11882] [ 384.591761][T11882] __dump_stack+0x1d/0x30 [ 384.591803][T11882] dump_stack_lvl+0x95/0xd0 [ 384.591833][T11882] dump_stack+0x15/0x1b [ 384.591860][T11882] should_fail_ex+0x263/0x280 [ 384.591890][T11882] should_failslab+0x8c/0xb0 [ 384.591977][T11882] __kvmalloc_node_noprof+0x155/0x650 [ 384.592074][T11882] ? alloc_netdev_mqs+0xa5/0xa40 [ 384.592113][T11882] ? __pfx_macvlan_setup+0x10/0x10 [ 384.592143][T11882] alloc_netdev_mqs+0xa5/0xa40 [ 384.592231][T11882] rtnl_create_link+0x239/0x720 [ 384.592272][T11882] rtnl_newlink_create+0x174/0x650 [ 384.592311][T11882] ? security_capable+0x7b/0x90 [ 384.592351][T11882] ? netlink_ns_capable+0x86/0xa0 [ 384.592458][T11882] rtnl_newlink+0x10a0/0x1330 [ 384.592494][T11882] ? __memcg_slab_free_hook+0x14b/0x240 [ 384.592525][T11882] ? __rcu_read_unlock+0x4e/0x70 [ 384.592551][T11882] ? avc_has_perm_noaudit+0xab/0x130 [ 384.592634][T11882] ? cred_has_capability+0x224/0x2a0 [ 384.592677][T11882] ? selinux_capable+0x31/0x40 [ 384.592712][T11882] ? security_capable+0x7b/0x90 [ 384.592760][T11882] ? ns_capable+0x7c/0xb0 [ 384.592778][T11882] ? __pfx_rtnl_newlink+0x10/0x10 [ 384.592799][T11882] rtnetlink_rcv_msg+0x64b/0x720 [ 384.592898][T11882] netlink_rcv_skb+0x123/0x220 [ 384.592978][T11882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 384.593015][T11882] rtnetlink_rcv+0x1c/0x30 [ 384.593068][T11882] netlink_unicast+0x5c0/0x690 [ 384.593110][T11882] netlink_sendmsg+0x5c8/0x6f0 [ 384.593157][T11882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.593230][T11882] ____sys_sendmsg+0x563/0x5b0 [ 384.593279][T11882] ___sys_sendmsg+0x195/0x1e0 [ 384.593329][T11882] ? path_openat+0x1b01/0x2050 [ 384.593399][T11882] __sys_sendmmsg+0x185/0x320 [ 384.593476][T11882] __x64_sys_sendmmsg+0x57/0x70 [ 384.593526][T11882] x64_sys_call+0x27aa/0x3020 [ 384.593553][T11882] do_syscall_64+0x12c/0x370 [ 384.593586][T11882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.593642][T11882] RIP: 0033:0x7fbed892c799 [ 384.593663][T11882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.593685][T11882] RSP: 002b:00007fbed7387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 384.593762][T11882] RAX: ffffffffffffffda RBX: 00007fbed8ba5fa0 RCX: 00007fbed892c799 [ 384.593886][T11882] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 384.593903][T11882] RBP: 00007fbed7387090 R08: 0000000000000000 R09: 0000000000000000 [ 384.593919][T11882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.593973][T11882] R13: 00007fbed8ba6038 R14: 00007fbed8ba5fa0 R15: 00007fff24d08b78 [ 384.593997][T11882] [ 384.954447][T11890] netlink: 'syz.5.2332': attribute type 1 has an invalid length. [ 385.003320][T11893] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11893 comm=syz.1.2333 [ 385.020741][T11890] bond4: (slave gretap1): making interface the new active one [ 385.028969][T11890] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 385.039057][T11890] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2332'. [ 385.049815][T11890] 8021q: adding VLAN 0 to HW filter on device bond4 [ 385.316976][T11914] loop2: detected capacity change from 0 to 1024 [ 385.325642][T11914] EXT4-fs: Ignoring removed orlov option [ 385.483341][T11905] loop5: detected capacity change from 0 to 1024 [ 385.511856][T11912] xt_TPROXY: Can be used only with -p tcp or -p udp [ 385.543794][T11914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.566868][T11914] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 386.207489][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 386.224803][T11905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.238690][T11924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2341'. [ 387.197864][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 387.197864][ T12] [ 387.217918][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 387.224191][ T12] EXT4-fs (loop2): Free/Dirty block details [ 387.236664][ T12] EXT4-fs (loop2): free_blocks=20480 [ 387.246450][ T12] EXT4-fs (loop2): dirty_blocks=10752 [ 387.251906][ T12] EXT4-fs (loop2): Block reservation details [ 387.311498][ T12] EXT4-fs (loop2): i_reserved_data_blocks=672 [ 387.432648][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 387.471861][ T6758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.572470][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 387.572517][ T28] audit: type=1400 audit(2000002773.795:4165): avc: denied { write } for pid=11937 comm="syz.1.2347" path="socket:[34151]" dev="sockfs" ino=34151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 387.931159][T11949] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2350'. [ 388.026467][T11947] loop2: detected capacity change from 0 to 512 [ 388.276418][T11947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.388828][T11947] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.585792][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2348'. [ 388.632347][T11947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2348'. [ 388.657892][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.715804][T11966] macvtap1: left promiscuous mode [ 388.721063][T11966] bond1: left promiscuous mode [ 388.729452][T11966] veth5: left allmulticast mode [ 388.796781][T11971] loop2: detected capacity change from 0 to 128 [ 388.841166][T11973] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2355'. [ 389.757558][T10058] kworker/u8:15: attempt to access beyond end of device [ 389.757558][T10058] loop2: rw=1, sector=145, nr_sectors = 40 limit=128 [ 389.786893][T10058] kworker/u8:15: attempt to access beyond end of device [ 389.786893][T10058] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 389.800550][T10058] kworker/u8:15: attempt to access beyond end of device [ 389.800550][T10058] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 389.814495][T10058] kworker/u8:15: attempt to access beyond end of device [ 389.814495][T10058] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 389.828965][T10058] kworker/u8:15: attempt to access beyond end of device [ 389.828965][T10058] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 389.883898][T10058] kworker/u8:15: attempt to access beyond end of device [ 389.883898][T10058] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 389.935209][T10058] kworker/u8:15: attempt to access beyond end of device [ 389.935209][T10058] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 389.948957][T10058] kworker/u8:15: attempt to access beyond end of device [ 389.948957][T10058] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 389.962640][T10058] kworker/u8:15: attempt to access beyond end of device [ 389.962640][T10058] loop2: rw=1, sector=305, nr_sectors = 8 limit=128 [ 389.977107][T10058] kworker/u8:15: attempt to access beyond end of device [ 389.977107][T10058] loop2: rw=1, sector=321, nr_sectors = 8 limit=128 [ 390.931039][T11999] loop6: detected capacity change from 0 to 1024 [ 390.967943][T11999] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 391.054694][T11999] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2361: Invalid block bitmap block 0 in block_group 0 [ 391.069216][T11999] loop6: lost filesystem error report for type 5 error -117 [ 391.071575][T11999] Quota error (device loop6): write_blk: dquota write failed [ 391.072000][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 391.072109][ C1] EXT4-fs (loop6): initial error at time 2000002777: ext4_read_block_bitmap_nowait:483 [ 391.072408][ C1] EXT4-fs (loop6): last error at time 2000002777: ext4_read_block_bitmap_nowait:483 [ 391.115093][T11999] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 391.126028][T11999] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2361: Failed to acquire dquot type 0 [ 391.138436][T11999] loop6: lost filesystem error report for type 5 error -117 [ 391.141345][T11999] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.2361: Freeing blocks not in datazone - block = 0, count = 4096 [ 391.163151][T11999] loop6: lost filesystem error report for type 5 error -117 [ 391.170340][T11999] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.2361: Invalid inode bitmap blk 0 in block_group 0 [ 391.192119][T11999] loop6: lost filesystem error report for type 5 error -117 [ 391.197153][T11999] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 391.214593][T11999] loop6: lost filesystem error report for type 5 error -117 [ 391.217310][T11999] EXT4-fs (loop6): 1 orphan inode deleted [ 391.239764][T11999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.298427][ T28] audit: type=1326 audit(2000002777.425:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11985 comm="syz.2.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ae14fc799 code=0x7fc00000 [ 391.633469][T12002] netlink: 'syz.2.2363': attribute type 1 has an invalid length. [ 391.722496][T12002] bond0: (slave gretap1): making interface the new active one [ 391.734711][T10059] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-7 [ 391.772499][T12002] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 391.783668][T10059] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:16: Failed to release dquot type 0 [ 391.913508][T12007] netlink: 'syz.2.2364': attribute type 9 has an invalid length. [ 391.945977][T11998] loop5: detected capacity change from 0 to 1024 [ 391.957100][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2364'. [ 391.995042][T11998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.025355][T12007] netlink: 'syz.2.2364': attribute type 9 has an invalid length. [ 392.033392][ T2269] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.063707][ T2269] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.075982][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2364'. [ 392.106248][ T2269] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.141883][ T2269] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.207683][ T6758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.563759][T12017] loop2: detected capacity change from 0 to 1024 [ 392.571988][T12017] EXT4-fs: Ignoring removed orlov option [ 392.606138][ T8722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.630879][T12017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.650906][T12017] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 393.087001][T10602] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 393.572308][T10602] EXT4-fs (loop2): This should not happen!! Data will be lost [ 393.572308][T10602] [ 394.243273][T12024] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12024 comm=syz.6.2368 [ 394.270126][T10602] EXT4-fs (loop2): Total free blocks count 0 [ 394.310471][T10602] EXT4-fs (loop2): Free/Dirty block details [ 394.384870][T10602] EXT4-fs (loop2): free_blocks=20480 [ 394.400687][T10602] EXT4-fs (loop2): dirty_blocks=10752 [ 394.406378][T10602] EXT4-fs (loop2): Block reservation details [ 394.418558][T10602] EXT4-fs (loop2): i_reserved_data_blocks=672 [ 394.520148][T10602] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 394.632627][T12039] loop5: detected capacity change from 0 to 512 [ 394.634054][T12041] netlink: 'syz.1.2374': attribute type 1 has an invalid length. [ 394.646909][T12039] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 394.767733][T12039] EXT4-fs (loop5): 1 truncate cleaned up [ 394.780456][T12043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2374'. [ 394.812162][T12043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.902407][T12039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.071050][T12054] veth0_to_team: Caught tx_queue_len zero misconfig [ 395.170196][T12054] pim6reg4: entered allmulticast mode [ 395.381842][ T6758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.539347][T12060] loop2: detected capacity change from 0 to 1024 [ 395.558216][T12060] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 395.589641][T12055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2375'. [ 395.694279][T12060] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2377: Invalid block bitmap block 0 in block_group 0 [ 395.709016][T12060] loop2: lost filesystem error report for type 5 error -117 [ 395.710981][T12060] Quota error (device loop2): write_blk: dquota write failed [ 395.726413][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 395.726503][ C0] EXT4-fs (loop2): initial error at time 2000002781: ext4_read_block_bitmap_nowait:483 [ 395.726645][ C0] EXT4-fs (loop2): last error at time 2000002781: ext4_read_block_bitmap_nowait:483 [ 395.753680][T12060] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 395.764740][T12060] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.2377: Failed to acquire dquot type 0 [ 395.776575][T12060] loop2: lost filesystem error report for type 5 error -117 [ 395.786529][T12060] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.2377: Freeing blocks not in datazone - block = 0, count = 4096 [ 395.808390][T12060] loop2: lost filesystem error report for type 5 error -117 [ 395.812175][T12060] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2377: Invalid inode bitmap blk 0 in block_group 0 [ 395.833497][T12060] loop2: lost filesystem error report for type 5 error -117 [ 395.835113][T12060] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 395.852275][T12060] loop2: lost filesystem error report for type 5 error -117 [ 395.856499][T12060] EXT4-fs (loop2): 1 orphan inode deleted [ 395.878459][T12060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.931516][T10602] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 395.967815][T12063] loop6: detected capacity change from 0 to 1024 [ 396.019733][T10602] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:20: Failed to release dquot type 0 [ 396.207399][T12063] EXT4-fs: Ignoring removed orlov option [ 396.335999][T12068] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2378'. [ 396.362394][T12063] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.272118][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.347617][T12063] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 397.471296][ T28] audit: type=1400 audit(2000002783.736:4167): avc: denied { setopt } for pid=12078 comm="syz.5.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 397.641904][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2381'. [ 397.659950][T12077] bond3: option lacp_active: invalid value (5) [ 397.682257][T12077] bond3 (unregistering): Released all slaves [ 397.731919][T12088] netlink: 'syz.1.2386': attribute type 1 has an invalid length. [ 397.757603][T10058] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 397.770443][T10058] EXT4-fs (loop6): This should not happen!! Data will be lost [ 397.770443][T10058] [ 397.783508][T10058] EXT4-fs (loop6): Total free blocks count 0 [ 397.789619][T10058] EXT4-fs (loop6): Free/Dirty block details [ 397.795908][T10058] EXT4-fs (loop6): free_blocks=20480 [ 397.801422][T10058] EXT4-fs (loop6): dirty_blocks=2816 [ 397.806816][T10058] EXT4-fs (loop6): Block reservation details [ 397.812883][T10058] EXT4-fs (loop6): i_reserved_data_blocks=176 [ 397.826785][T10602] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 760 with error 28 [ 397.848541][T12088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2386'. [ 397.971669][T12088] 8021q: adding VLAN 0 to HW filter on device bond9 [ 398.072663][T10058] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.132048][T10058] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.914302][T10058] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.984360][T10058] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.105427][T12117] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2394'. [ 399.166440][T10058] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.253276][T10058] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.362723][T10058] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.375762][T10058] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.399422][T12101] lo speed is unknown, defaulting to 1000 [ 399.405681][T12101] lo speed is unknown, defaulting to 1000 [ 399.512922][T10058] bridge_slave_1: left allmulticast mode [ 399.518667][T10058] bridge_slave_1: left promiscuous mode [ 399.530981][T10058] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.539405][T10058] bridge_slave_0: left allmulticast mode [ 399.546654][T10058] bridge_slave_0: left promiscuous mode [ 399.552596][T10058] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.657474][T10058] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 399.778506][T10058] bond1 (unregistering): (slave vlan2): Releasing backup interface [ 399.799662][T10058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.822206][T10058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.842184][T10058] bond0 (unregistering): Released all slaves [ 399.854590][T10058] bond1 (unregistering): Released all slaves [ 399.873870][T10058] bond2 (unregistering): Released all slaves [ 399.982601][T10058] bond3 (unregistering): Released all slaves [ 399.991838][T10058] bond4 (unregistering): Released all slaves [ 400.047775][T12101] chnl_net:caif_netlink_parms(): no params data found [ 400.063821][T10058] IPVS: stopping master sync thread 7490 ... [ 400.137130][T12155] loop6: detected capacity change from 0 to 1024 [ 400.145380][T12155] EXT4-fs: Ignoring removed orlov option [ 400.252533][T12155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.273878][T12155] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 400.715997][ T2269] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 401.060678][ T2269] EXT4-fs (loop6): This should not happen!! Data will be lost [ 401.060678][ T2269] [ 401.080863][ T2269] EXT4-fs (loop6): Total free blocks count 0 [ 401.086972][ T2269] EXT4-fs (loop6): Free/Dirty block details [ 401.105921][ T2269] EXT4-fs (loop6): free_blocks=20480 [ 401.111800][ T2269] EXT4-fs (loop6): dirty_blocks=10752 [ 401.117203][ T2269] EXT4-fs (loop6): Block reservation details [ 401.123847][ T2269] EXT4-fs (loop6): i_reserved_data_blocks=672 [ 401.160113][T10058] hsr_slave_0: left promiscuous mode [ 401.174243][T10058] hsr_slave_1: left promiscuous mode [ 401.212614][T10058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.220054][T10058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.298671][T10058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.324378][T10058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.364155][T10058] veth1_macvtap: left promiscuous mode [ 401.369686][T10058] veth0_macvtap: left promiscuous mode [ 401.405764][T10058] veth1_vlan: left promiscuous mode [ 401.436021][T10058] veth0_vlan: left promiscuous mode [ 401.641323][T10058] team0 (unregistering): Port device team_slave_1 removed [ 401.669625][T10058] team0 (unregistering): Port device team_slave_0 removed [ 401.902646][ T5138] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 402.010258][T12182] loop2: detected capacity change from 0 to 1024 [ 402.018224][T12182] EXT4-fs: Ignoring removed orlov option [ 402.042366][T12182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.063441][T12182] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 402.861320][T12180] pim6reg: entered allmulticast mode [ 402.880610][T10059] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 402.936104][T10059] EXT4-fs (loop2): This should not happen!! Data will be lost [ 402.936104][T10059] [ 402.949605][T10059] EXT4-fs (loop2): Total free blocks count 0 [ 402.963401][T12101] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.994818][T10059] EXT4-fs (loop2): Free/Dirty block details [ 403.003163][T12101] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.019778][T10059] EXT4-fs (loop2): free_blocks=20480 [ 403.027556][T12101] bridge_slave_0: entered allmulticast mode [ 403.150169][T10059] EXT4-fs (loop2): dirty_blocks=10752 [ 403.162640][T12101] bridge_slave_0: entered promiscuous mode [ 403.170437][T10059] EXT4-fs (loop2): Block reservation details [ 403.183134][T12101] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.719215][T10059] EXT4-fs (loop2): i_reserved_data_blocks=672 [ 403.776592][T12201] loop6: detected capacity change from 0 to 512 [ 403.807276][T12101] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.907303][T12201] EXT4-fs: Ignoring removed bh option [ 404.012202][T10059] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 404.025286][T12101] bridge_slave_1: entered allmulticast mode [ 404.032115][T12101] bridge_slave_1: entered promiscuous mode [ 404.063342][T12201] EXT4-fs: Ignoring removed mblk_io_submit option [ 404.071972][T12101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.095021][T12101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.130796][T12201] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 404.136456][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2412'. [ 404.152191][T12101] team0: Port device team_slave_0 added [ 404.158776][T12101] team0: Port device team_slave_1 added [ 404.187682][T12101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.194868][T12101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.221291][T12101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.222256][T12201] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 404.260978][T12101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.268330][T12101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.290637][T12201] EXT4-fs (loop6): orphan cleanup on readonly fs [ 404.295011][T12101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.328342][T12101] hsr_slave_0: entered promiscuous mode [ 404.342099][T12218] loop2: detected capacity change from 0 to 1024 [ 404.345766][T12101] hsr_slave_1: entered promiscuous mode [ 404.354688][T12201] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 4 [ 404.365117][T12218] EXT4-fs: inline encryption not supported [ 404.388333][T12201] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 404.399749][T10058] IPVS: stop unused estimator thread 0... [ 404.420301][T12201] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2410: Failed to acquire dquot type 1 [ 404.450151][T12201] loop6: lost filesystem error report for type 5 error -5 [ 404.450704][T12201] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2410: Invalid block bitmap block 0 in block_group 0 [ 404.471388][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 404.471415][ C1] EXT4-fs (loop6): last error at time 2000002790: ext4_acquire_dquot:7001 [ 404.507053][T12201] loop6: lost filesystem error report for type 5 error -117 [ 404.507289][T12201] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2410: Invalid block bitmap block 0 in block_group 0 [ 404.579916][T12218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.608302][T12201] loop6: lost filesystem error report for type 5 error -117 [ 404.608548][T12201] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2410: Invalid block bitmap block 0 in block_group 0 [ 405.062964][T12201] loop6: lost filesystem error report for type 5 error -117 [ 405.090206][T12201] Quota error (device loop6): write_blk: dquota write failed [ 405.204325][T12201] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 405.395463][T12218] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.2411: Allocating blocks 497-513 which overlap fs metadata [ 405.431517][T12201] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2410: Failed to acquire dquot type 1 [ 405.452304][T12101] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 405.474285][T12218] EXT4-fs (loop2): Remounting filesystem read-only [ 405.482573][T12201] loop6: lost filesystem error report for type 5 error -28 [ 405.483100][T12201] Quota error (device loop6): write_blk: dquota write failed [ 405.510843][T12101] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 405.536249][T12218] EXT4-fs (loop2): pa ffff888107e635b0: logic 128, phys. 385, len 8 [ 405.554761][T12101] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 405.565482][T12201] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 405.591974][T12101] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 405.611381][T12201] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2410: Failed to acquire dquot type 1 [ 405.624915][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.648946][T12201] loop6: lost filesystem error report for type 5 error -28 [ 405.649765][T12201] EXT4-fs (loop6): 1 orphan inode deleted [ 405.733647][T12201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 405.796593][T12101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.857686][T12101] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.914591][ T8722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.932529][T10059] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.939676][T10059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.989693][T10059] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.996815][T10059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.189452][ T28] audit: type=1400 audit(2000002792.447:4168): avc: denied { write } for pid=12267 comm="syz.2.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 406.254613][T12101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.816188][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2422'. [ 406.989634][T12300] loop6: detected capacity change from 0 to 512 [ 406.997769][T12300] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 407.028756][T12300] EXT4-fs (loop6): 1 truncate cleaned up [ 407.039005][T12300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.143156][T12101] veth0_vlan: entered promiscuous mode [ 407.166703][T12101] veth1_vlan: entered promiscuous mode [ 407.185886][T12101] veth0_macvtap: entered promiscuous mode [ 407.202217][T12101] veth1_macvtap: entered promiscuous mode [ 407.236666][T12101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.258270][T12101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.300129][T10058] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.340505][T10058] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.349264][T10058] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.362641][T10058] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.829388][ T8722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.900900][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2434'. [ 408.751357][T12370] FAULT_INJECTION: forcing a failure. [ 408.751357][T12370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.799831][T12370] CPU: 1 UID: 0 PID: 12370 Comm: syz.6.2439 Tainted: G W syzkaller #0 PREEMPT(full) [ 408.799865][T12370] Tainted: [W]=WARN [ 408.799872][T12370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.799886][T12370] Call Trace: [ 408.799919][T12370] [ 408.799929][T12370] __dump_stack+0x1d/0x30 [ 408.799960][T12370] dump_stack_lvl+0x95/0xd0 [ 408.800058][T12370] dump_stack+0x15/0x1b [ 408.800137][T12370] should_fail_ex+0x263/0x280 [ 408.800234][T12370] should_fail+0xb/0x20 [ 408.800256][T12370] should_fail_usercopy+0x1a/0x20 [ 408.800285][T12370] _copy_from_iter+0xcf/0xea0 [ 408.800457][T12370] ? __alloc_skb+0x4f6/0x690 [ 408.800488][T12370] ? __alloc_skb+0x200/0x690 [ 408.800584][T12370] netlink_sendmsg+0x4ae/0x6f0 [ 408.800624][T12370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.800662][T12370] ____sys_sendmsg+0x563/0x5b0 [ 408.800732][T12370] ___sys_sendmsg+0x195/0x1e0 [ 408.800783][T12370] __x64_sys_sendmsg+0xd4/0x160 [ 408.800882][T12370] x64_sys_call+0x194c/0x3020 [ 408.800976][T12370] do_syscall_64+0x12c/0x370 [ 408.801001][T12370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.801025][T12370] RIP: 0033:0x7f9397edc799 [ 408.801045][T12370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.801067][T12370] RSP: 002b:00007f939692f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.801108][T12370] RAX: ffffffffffffffda RBX: 00007f9398155fa0 RCX: 00007f9397edc799 [ 408.801122][T12370] RDX: 0000000004000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 408.801134][T12370] RBP: 00007f939692f090 R08: 0000000000000000 R09: 0000000000000000 [ 408.801146][T12370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.801176][T12370] R13: 00007f9398156038 R14: 00007f9398155fa0 R15: 00007ffd92626b58 [ 408.801206][T12370] [ 409.042753][T12377] netlink: 'syz.6.2442': attribute type 1 has an invalid length. [ 409.055170][T12376] loop7: detected capacity change from 0 to 2048 [ 409.079027][ T28] audit: type=1326 audit(2000002795.338:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12378 comm="syz.4.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e985c799 code=0x7ffc0000 [ 409.102798][ T28] audit: type=1326 audit(2000002795.338:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12378 comm="syz.4.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4e985c799 code=0x7ffc0000 [ 409.126890][ T28] audit: type=1326 audit(2000002795.368:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12378 comm="syz.4.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4e985c799 code=0x7ffc0000 [ 409.157846][T12364] loop2: detected capacity change from 0 to 512 [ 409.162943][T12381] bond0: (slave gretap1): making interface the new active one [ 409.189761][T12381] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 409.198652][T12364] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 409.208329][ T3307] Alternate GPT is invalid, using primary GPT. [ 409.214882][ T3307] loop7: p1 p2 p3 [ 409.225093][T12376] Alternate GPT is invalid, using primary GPT. [ 409.226149][T12364] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 409.245241][T12377] vlan0: entered promiscuous mode [ 409.248827][T12364] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2437: attempt to clear invalid blocks 2 len 1 [ 409.251923][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 409.252200][ C0] EXT4-fs (loop2): initial error at time 2000002795: ext4_mb_generate_buddy:1315 [ 409.252298][ C0] EXT4-fs (loop2): last error at time 2000002795: ext4_mb_generate_buddy:1315 [ 409.269893][T12376] loop7: p1 p2 p3 [ 409.274318][T12364] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 409.295939][T12377] bond0: entered promiscuous mode [ 409.314601][T12364] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2437: invalid indirect mapped block 1819239214 (level 0) [ 409.338986][T12364] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 409.350896][T12364] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2437: invalid indirect mapped block 1819239214 (level 1) [ 409.376393][T12377] gretap1: entered promiscuous mode [ 409.397229][T12377] bond0: (slave vlan0): Opening slave failed [ 409.409758][T12364] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 409.424739][T12364] EXT4-fs (loop2): 1 truncate cleaned up [ 409.492092][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 409.492568][ T4691] udevd[4691]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 409.505502][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 409.521763][T12364] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.564379][ T4691] udevd[4691]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 409.571515][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 409.594562][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 409.748393][T12399] loop7: detected capacity change from 0 to 128 [ 409.755122][T12364] EXT4-fs error (device loop2): __ext4_remount:6804: comm syz.2.2437: Abort forced by user [ 409.762898][T12401] netlink: 'syz.2.2437': attribute type 7 has an invalid length. [ 409.839192][T12364] EXT4-fs (loop2): Remounting filesystem read-only [ 409.899765][T12364] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 409.933614][T12401] netlink: 'syz.2.2437': attribute type 8 has an invalid length. [ 410.011882][T12365] netlink: 'syz.2.2437': attribute type 7 has an invalid length. [ 410.047144][T12365] netlink: 'syz.2.2437': attribute type 8 has an invalid length. [ 410.223880][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.459744][T12409] netlink: 'syz.6.2453': attribute type 11 has an invalid length. [ 410.479501][T12409] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2453'. [ 410.484910][T12411] netlink: 'syz.4.2452': attribute type 10 has an invalid length. [ 410.496668][T12411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2452'. [ 410.679296][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 410.679315][ T28] audit: type=1400 audit(2000002796.898:4201): avc: denied { read } for pid=12418 comm="syz.6.2457" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 410.810074][T12428] loop6: detected capacity change from 0 to 512 [ 410.852617][T12428] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 410.975961][T12429] bond4 (unregistering): Released all slaves [ 411.058990][T12426] loop2: detected capacity change from 0 to 1024 [ 411.085271][T12426] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 411.097670][T12426] System zones: 0-1, 3-36 [ 411.144274][T12426] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2458: bad orphan inode 134217728 [ 411.169772][T12426] loop2: lost filesystem error report for type 5 error -117 [ 411.179014][T12426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.263239][T12426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2458'. [ 411.363790][T12435] netlink: 'syz.4.2460': attribute type 1 has an invalid length. [ 411.391054][ T28] audit: type=1400 audit(2000002797.658:4202): avc: denied { bind } for pid=12425 comm="syz.2.2458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 411.413864][T12435] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2460'. [ 411.430018][T12435] 8021q: adding VLAN 0 to HW filter on device bond16 [ 411.507998][T12438] vlan0: entered promiscuous mode [ 411.530063][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.549364][T12438] bond16: entered promiscuous mode [ 411.584180][T12440] loop2: detected capacity change from 0 to 512 [ 411.629897][T12440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.664197][T12440] ext4 filesystem being mounted at /472/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.681317][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2461'. [ 411.857733][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.449938][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2466'. [ 412.474182][T12458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2467'. [ 412.519277][T12460] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 412.599634][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2473'. [ 412.680833][T12472] netlink: 'syz.1.2474': attribute type 1 has an invalid length. [ 412.696014][T12472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2474'. [ 412.705555][T12472] 8021q: adding VLAN 0 to HW filter on device bond10 [ 412.889085][T12486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.910433][T12486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.029752][T12491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2479'. [ 413.496244][T12497] lo speed is unknown, defaulting to 1000 [ 413.516406][T12497] lo speed is unknown, defaulting to 1000 [ 414.068679][ T5138] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.149009][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.209802][ T5138] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.295831][ T2269] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.321619][T12528] netlink: 'syz.4.2485': attribute type 1 has an invalid length. [ 414.324734][ T2269] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.353553][T12497] chnl_net:caif_netlink_parms(): no params data found [ 414.373726][T12530] FAULT_INJECTION: forcing a failure. [ 414.373726][T12530] name failslab, interval 1, probability 0, space 0, times 0 [ 414.395322][T12530] CPU: 0 UID: 0 PID: 12530 Comm: syz.2.2486 Tainted: G W syzkaller #0 PREEMPT(full) [ 414.395421][T12530] Tainted: [W]=WARN [ 414.395429][T12530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.395443][T12530] Call Trace: [ 414.395450][T12530] [ 414.395457][T12530] __dump_stack+0x1d/0x30 [ 414.395487][T12530] dump_stack_lvl+0x95/0xd0 [ 414.395514][T12530] dump_stack+0x15/0x1b [ 414.395609][T12530] should_fail_ex+0x263/0x280 [ 414.395639][T12530] ? serport_ldisc_read+0x8c/0x300 [ 414.395745][T12530] should_failslab+0x8c/0xb0 [ 414.395771][T12530] __kmalloc_cache_noprof+0x5f/0x410 [ 414.395867][T12530] serport_ldisc_read+0x8c/0x300 [ 414.395899][T12530] tty_read+0x154/0x490 [ 414.395940][T12530] ? avc_policy_seqno+0x15/0x30 [ 414.396002][T12530] ? selinux_file_permission+0x1f2/0x690 [ 414.396029][T12530] do_iter_readv_writev+0x4fd/0x5a0 [ 414.396091][T12530] vfs_readv+0x1f4/0x6e0 [ 414.396129][T12530] do_readv+0xe9/0x210 [ 414.396236][T12530] __x64_sys_readv+0x45/0x50 [ 414.396255][T12530] x64_sys_call+0x27c0/0x3020 [ 414.396281][T12530] do_syscall_64+0x12c/0x370 [ 414.396368][T12530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.396393][T12530] RIP: 0033:0x7f4ae14fc799 [ 414.396413][T12530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.396445][T12530] RSP: 002b:00007f4adff57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 414.396470][T12530] RAX: ffffffffffffffda RBX: 00007f4ae1775fa0 RCX: 00007f4ae14fc799 [ 414.396487][T12530] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000005 [ 414.396503][T12530] RBP: 00007f4adff57090 R08: 0000000000000000 R09: 0000000000000000 [ 414.396515][T12530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.396527][T12530] R13: 00007f4ae1776038 R14: 00007f4ae1775fa0 R15: 00007ffc174f9898 [ 414.396593][T12530] [ 414.593329][ T5138] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.617005][ T2269] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.630378][T12531] 8021q: adding VLAN 0 to HW filter on device bond17 [ 414.679665][T12534] pim6reg: entered allmulticast mode [ 414.687006][ T5138] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.698985][T12540] serio: Serial port ttyS3 [ 414.748932][ T28] audit: type=1400 audit(2000002801.008:4203): avc: denied { ioctl } for pid=12537 comm="syz.4.2490" path="socket:[36054]" dev="sockfs" ino=36054 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 414.764708][T12497] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.781161][T12497] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.781343][T12497] bridge_slave_0: entered allmulticast mode [ 414.782580][T12497] bridge_slave_0: entered promiscuous mode [ 414.802565][T12497] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.810386][T12497] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.817710][T12497] bridge_slave_1: entered allmulticast mode [ 414.824698][T12497] bridge_slave_1: entered promiscuous mode [ 414.872750][T12555] loop2: detected capacity change from 0 to 256 [ 414.898528][ T5138] bridge_slave_0: left allmulticast mode [ 414.904647][ T5138] bridge_slave_0: left promiscuous mode [ 414.910827][ T5138] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.952633][ T5138] bond7 (unregistering): (slave gretap1): Releasing active interface [ 415.170354][ T5138] bond1 (unregistering): Released all slaves [ 415.179971][ T5138] bond2 (unregistering): Released all slaves [ 415.190936][ T5138] bond3 (unregistering): Released all slaves [ 415.205583][ T5138] bond4 (unregistering): Released all slaves [ 415.214483][ T5138] bond5 (unregistering): Released all slaves [ 415.223492][ T5138] bond6 (unregistering): Released all slaves [ 415.249048][ T5138] bond7 (unregistering): Released all slaves [ 415.272659][ T5138] bond8 (unregistering): Released all slaves [ 415.288282][ T5138] bond0 (unregistering): Released all slaves [ 415.303629][ T5138] bond9 (unregistering): Released all slaves [ 415.318098][ T5138] bond10 (unregistering): Released all slaves [ 415.347790][T12497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.385653][T12497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.601918][ T5138] tipc: Left network mode [ 415.622934][ T5138] IPVS: stopping backup sync thread 11317 ... [ 415.642819][T12497] team0: Port device team_slave_0 added [ 415.657468][T12497] team0: Port device team_slave_1 added [ 415.681742][T12497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.689070][T12497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.748278][T12497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.787311][T12497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.794929][T12497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.875991][T12497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.901119][ T5138] hsr_slave_0: left promiscuous mode [ 415.940385][ T5138] hsr_slave_1: left promiscuous mode [ 415.951326][ T5138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.019103][ T5138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.091390][ T5138] pim6reg (unregistering): left allmulticast mode [ 416.099171][ T5138] pim6reg4 (unregistering): left allmulticast mode [ 416.174455][ T5138] team0 (unregistering): Port device team_slave_1 removed [ 416.190825][ T5138] team0 (unregistering): Port device team_slave_0 removed [ 416.268644][ T6154] lo speed is unknown, defaulting to 1000 [ 416.292828][ T6154] infiniband syz2: ib_query_port failed (-19) [ 416.322295][T12497] hsr_slave_0: entered promiscuous mode [ 416.339346][T12497] hsr_slave_1: entered promiscuous mode [ 416.351252][T12497] debugfs: 'hsr0' already exists in 'hsr' [ 416.362635][T12497] Cannot create hsr debugfs directory [ 416.453639][ T28] audit: type=1400 audit(2000002802.709:4204): avc: denied { write } for pid=12621 comm="syz.2.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 416.510985][ T5138] IPVS: stop unused estimator thread 0... [ 416.541415][T12628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.555476][T12628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.711472][T12637] loop6: detected capacity change from 0 to 128 [ 416.806079][T12642] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 416.825344][T12497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 416.832305][T12642] FAT-fs (loop6): Filesystem has been set read-only [ 416.865182][T12642] bio_check_eod: 98 callbacks suppressed [ 416.865202][T12642] syz.6.2508: attempt to access beyond end of device [ 416.865202][T12642] loop6: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 416.869704][T12497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 416.898664][T12642] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 416.954351][T12642] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 416.962945][T12497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 416.974987][T12497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 417.021427][T12652] __nla_validate_parse: 3 callbacks suppressed [ 417.021445][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2509'. [ 417.069103][T12642] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 417.080752][T12642] syz.6.2508: attempt to access beyond end of device [ 417.080752][T12642] loop6: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 417.095439][T12646] syz.6.2508: attempt to access beyond end of device [ 417.095439][T12646] loop6: rw=8388608, sector=2065, nr_sectors = 1 limit=128 [ 417.116171][T12642] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 417.133947][T12642] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 417.151427][T12646] Buffer I/O error on dev loop6, logical block 2065, async page read [ 417.200049][T12646] syz.6.2508: attempt to access beyond end of device [ 417.200049][T12646] loop6: rw=8388608, sector=2066, nr_sectors = 1 limit=128 [ 417.237981][T12646] Buffer I/O error on dev loop6, logical block 2066, async page read [ 417.252477][T12497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.258595][T12646] syz.6.2508: attempt to access beyond end of device [ 417.258595][T12646] loop6: rw=8388608, sector=2067, nr_sectors = 1 limit=128 [ 417.281226][T12497] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.302191][T10058] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.309685][T10058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.332258][T12646] Buffer I/O error on dev loop6, logical block 2067, async page read [ 417.339146][T10058] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.342630][T12646] syz.6.2508: attempt to access beyond end of device [ 417.342630][T12646] loop6: rw=8388608, sector=2068, nr_sectors = 1 limit=128 [ 417.347489][T10058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.380830][T12646] Buffer I/O error on dev loop6, logical block 2068, async page read [ 417.408520][T12646] syz.6.2508: attempt to access beyond end of device [ 417.408520][T12646] loop6: rw=8388608, sector=2069, nr_sectors = 1 limit=128 [ 417.438536][T12646] Buffer I/O error on dev loop6, logical block 2069, async page read [ 417.453736][T12646] syz.6.2508: attempt to access beyond end of device [ 417.453736][T12646] loop6: rw=8388608, sector=2070, nr_sectors = 1 limit=128 [ 417.477816][T12646] Buffer I/O error on dev loop6, logical block 2070, async page read [ 417.488760][T12497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.498144][T12646] syz.6.2508: attempt to access beyond end of device [ 417.498144][T12646] loop6: rw=8388608, sector=2071, nr_sectors = 1 limit=128 [ 417.532592][T12646] Buffer I/O error on dev loop6, logical block 2071, async page read [ 417.561133][T12646] syz.6.2508: attempt to access beyond end of device [ 417.561133][T12646] loop6: rw=8388608, sector=2072, nr_sectors = 1 limit=128 [ 417.588917][T12646] Buffer I/O error on dev loop6, logical block 2072, async page read [ 417.607245][T12646] Buffer I/O error on dev loop6, logical block 2065, async page read [ 417.625725][T12646] Buffer I/O error on dev loop6, logical block 2066, async page read [ 417.672486][T12497] veth0_vlan: entered promiscuous mode [ 417.690532][T12497] veth1_vlan: entered promiscuous mode [ 417.742853][T12497] veth0_macvtap: entered promiscuous mode [ 417.766891][T12497] veth1_macvtap: entered promiscuous mode [ 417.815235][T12693] netlink: 'syz.7.2512': attribute type 1 has an invalid length. [ 417.859634][T12693] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2512'. [ 417.870365][T12497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.880327][T12693] vlan2: entered promiscuous mode [ 417.885629][T12693] vlan0: entered promiscuous mode [ 417.902659][T12497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.922213][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.953161][T12695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2513'. [ 417.972688][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.997229][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.003886][T12695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12695 comm=syz.2.2513 [ 418.029066][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.103898][T12703] loop2: detected capacity change from 0 to 128 [ 418.116104][T12699] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2515'. [ 418.126798][ T28] audit: type=1400 audit(2000002804.379:4205): avc: denied { read } for pid=12698 comm="syz.6.2515" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 418.175972][T12703] IPVS: Unknown mcast interface: ge_slave_1 [ 418.191595][ T28] audit: type=1400 audit(2000002804.379:4206): avc: denied { open } for pid=12698 comm="syz.6.2515" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 418.245610][T12709] loop6: detected capacity change from 0 to 512 [ 418.271936][T12709] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 418.311078][T12709] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2518: bad orphan inode 14 [ 418.336441][T12715] loop2: detected capacity change from 0 to 512 [ 418.337197][T12709] loop6: lost filesystem error report for type 5 error -117 [ 418.349075][T12715] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 418.386190][T12709] ext4_test_bit(bit=13, block=18) = 1 [ 418.391697][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 418.391720][ C1] EXT4-fs (loop6): initial error at time 2000002804: ext4_orphan_get:1417 [ 418.391768][ C1] EXT4-fs (loop6): last error at time 2000002804: ext4_orphan_get:1417 [ 418.426043][T12709] is_bad_inode(inode)=0 [ 418.430463][T12709] NEXT_ORPHAN(inode)=0 [ 418.434656][T12709] max_ino=32 [ 418.437929][T12709] i_nlink=1 [ 418.441798][T12709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.454596][T12709] ext2 filesystem being mounted at /159/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.469209][T12709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=12709 comm=syz.6.2518 [ 418.530519][ T8722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.556831][ T28] audit: type=1400 audit(2000002804.809:4207): avc: denied { write } for pid=12728 comm="syz.1.2521" name="ipv6_route" dev="proc" ino=4026533480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 418.597148][T12734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2520'. [ 418.652425][T12734] bond3: entered promiscuous mode [ 418.657803][T12734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 418.683519][T12745] netlink: 'syz.6.2524': attribute type 1 has an invalid length. [ 418.705151][T12745] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2524'. [ 418.715039][T12745] 8021q: adding VLAN 0 to HW filter on device bond4 [ 418.728277][T12745] vlan0: entered promiscuous mode [ 418.733423][T12745] bond4: entered promiscuous mode [ 418.957586][T12766] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2527'. [ 419.081389][T12779] bridge0: port 3(macsec1) entered blocking state [ 419.088017][T12779] bridge0: port 3(macsec1) entered disabled state [ 419.094714][T12779] macsec1: entered allmulticast mode [ 419.100313][T12779] bridge0: entered allmulticast mode [ 419.106253][T12779] macsec1: left allmulticast mode [ 419.112468][T12779] bridge0: left allmulticast mode [ 419.355212][T12787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2536'. [ 419.526487][T12794] loop1: detected capacity change from 0 to 128 [ 419.587639][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2540'. [ 419.623232][T12796] hsr_slave_0: left promiscuous mode [ 419.642861][T12797] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2540'. [ 419.673770][T12796] hsr_slave_1: left promiscuous mode [ 419.693176][T12796] hsr0 (unregistering): left allmulticast mode [ 419.719793][T12796] hsr0 (unregistering): left promiscuous mode [ 419.749486][T12796] nr0: port 1(hsr0) entered disabled state [ 419.858125][ T28] audit: type=1400 audit(2000002806.039:4208): avc: denied { create } for pid=12795 comm="syz.2.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 420.329529][T12810] lo speed is unknown, defaulting to 1000 [ 420.896680][T12819] bpf: Bad value for 'uid' [ 420.992660][T12831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.008373][T12831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.063093][T12838] bond5: entered promiscuous mode [ 421.072998][T12838] 8021q: adding VLAN 0 to HW filter on device bond5 [ 421.603900][T12887] netlink: 'syz.7.2560': attribute type 10 has an invalid length. [ 421.911643][T12887] loop7: detected capacity change from 0 to 1024 [ 421.943872][T12887] EXT4-fs: Ignoring removed mblk_io_submit option [ 422.052270][T12887] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 422.068902][T12887] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.339862][ T28] audit: type=1400 audit(2000002808.599:4209): avc: denied { create } for pid=12886 comm="syz.7.2560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 422.398328][T12926] __nla_validate_parse: 6 callbacks suppressed [ 422.398344][T12926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2575'. [ 422.459571][T12926] bond18: entered promiscuous mode [ 422.475065][T12926] 8021q: adding VLAN 0 to HW filter on device bond18 [ 422.513038][T12101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 422.856881][T12941] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2580'. [ 423.259680][T12949] loop1: detected capacity change from 0 to 1024 [ 423.308498][T12949] EXT4-fs: Ignoring removed oldalloc option [ 423.332735][ T28] audit: type=1400 audit(2000002809.589:4210): avc: denied { map } for pid=12954 comm="syz.4.2585" path="socket:[38028]" dev="sockfs" ino=38028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 423.357389][T12949] EXT4-fs: Ignoring removed bh option [ 423.389691][T12949] EXT4-fs (loop1): bad geometry: first data block 1 is beyond end of filesystem (1) [ 423.593968][T12968] loop2: detected capacity change from 0 to 128 [ 423.690786][T12973] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2593'. [ 423.691626][T12975] netlink: 'syz.1.2594': attribute type 1 has an invalid length. [ 423.784110][T12975] vlan2: entered promiscuous mode [ 423.789267][T12975] veth0: entered promiscuous mode [ 423.915706][T12986] loop1: detected capacity change from 0 to 256 [ 423.976978][T12991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2600'. [ 424.686954][ T28] audit: type=1400 audit(2000002810.940:4211): avc: denied { create } for pid=13006 comm="syz.6.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 424.713427][ T28] audit: type=1400 audit(2000002810.970:4212): avc: denied { write } for pid=13006 comm="syz.6.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 424.777493][T13012] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 424.811254][T13014] loop7: detected capacity change from 0 to 512 [ 424.818190][T13014] EXT4-fs: Ignoring removed bh option [ 424.823842][T13012] SELinux: failed to load policy [ 424.831892][T13014] EXT4-fs: Ignoring removed mblk_io_submit option [ 424.861377][T13014] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 424.895317][T13007] loop6: detected capacity change from 0 to 1024 [ 424.918140][T13014] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 424.933256][T13014] EXT4-fs (loop7): orphan cleanup on readonly fs [ 424.942595][T13007] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 424.951152][T13014] Quota error (device loop7): do_insert_tree: Free block already used in tree: block 4 [ 424.961165][T13014] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 424.971075][T13014] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2608: Failed to acquire dquot type 1 [ 424.982444][T13014] loop7: lost filesystem error report for type 5 error -5 [ 424.987338][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 425.000987][ C0] EXT4-fs (loop7): last error at time 2000002811: ext4_acquire_dquot:7001 [ 425.004404][T13014] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2608: Invalid block bitmap block 0 in block_group 0 [ 425.038132][T13023] loop1: detected capacity change from 0 to 128 [ 425.079067][T13014] loop7: lost filesystem error report for type 5 error -117 [ 425.079300][T13014] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2608: Invalid block bitmap block 0 in block_group 0 [ 425.116176][T13014] loop7: lost filesystem error report for type 5 error -117 [ 425.135413][T13014] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2608: Invalid block bitmap block 0 in block_group 0 [ 425.164354][T13014] loop7: lost filesystem error report for type 5 error -117 [ 425.164648][T13014] Quota error (device loop7): write_blk: dquota write failed [ 425.180812][T13014] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 425.191256][T13014] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2608: Failed to acquire dquot type 1 [ 425.203039][T13014] loop7: lost filesystem error report for type 5 error -28 [ 425.203401][T13014] Quota error (device loop7): write_blk: dquota write failed [ 425.219598][T13014] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 425.231496][T13014] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2608: Failed to acquire dquot type 1 [ 425.243278][T13014] loop7: lost filesystem error report for type 5 error -28 [ 425.252085][T13014] EXT4-fs (loop7): 1 orphan inode deleted [ 425.283293][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'. [ 425.293155][T13014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 425.310504][T13034] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2615'. [ 425.340424][T12101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.349762][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'. [ 425.476043][T13055] loop6: detected capacity change from 0 to 512 [ 425.628792][T13066] netlink: 'syz.1.2626': attribute type 1 has an invalid length. [ 425.654846][T13066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2626'. [ 425.726808][T13074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2629'. [ 425.749101][T13070] loop6: detected capacity change from 0 to 512 [ 425.755683][T13070] EXT4-fs: Ignoring removed bh option [ 425.793313][T13070] EXT4-fs: Ignoring removed mblk_io_submit option [ 425.805929][T13070] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 425.826690][T13070] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 425.843618][T13070] EXT4-fs (loop6): orphan cleanup on readonly fs [ 425.864159][T13070] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2627: Failed to acquire dquot type 1 [ 425.888495][T13070] loop6: lost filesystem error report for type 5 error -5 [ 425.888843][T13070] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2627: Invalid block bitmap block 0 in block_group 0 [ 425.909699][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 425.909722][ C1] EXT4-fs (loop6): last error at time 2000002812: ext4_acquire_dquot:7001 [ 425.931225][T13070] loop6: lost filesystem error report for type 5 error -117 [ 425.931456][T13070] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2627: Invalid block bitmap block 0 in block_group 0 [ 425.952529][T13070] loop6: lost filesystem error report for type 5 error -117 [ 425.952739][T13070] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2627: Invalid block bitmap block 0 in block_group 0 [ 425.973746][T13070] loop6: lost filesystem error report for type 5 error -117 [ 425.973978][T13070] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2627: Failed to acquire dquot type 1 [ 426.002626][T13070] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2627: Failed to acquire dquot type 1 [ 426.029962][T13070] EXT4-fs (loop6): 1 orphan inode deleted [ 426.036339][T13070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 426.114225][ T8722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.583114][T13118] loop6: detected capacity change from 0 to 512 [ 426.714220][T13118] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.737645][T13118] EXT4-fs error (device loop6): ext4_validate_block_bitmap:423: comm syz.6.2643: bg 0: bad block bitmap checksum [ 426.750420][T13118] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2643: Failed to acquire dquot type 1 [ 427.590365][T13128] loop7: detected capacity change from 0 to 4096 [ 427.637620][T13128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.688639][T13128] xt_HMARK: spi-set and port-set can't be combined [ 427.697027][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 427.697043][ T28] audit: type=1400 audit(2000002813.950:4213): avc: denied { lock } for pid=13127 comm="syz.7.2650" path="/42/file0/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 427.745515][T13128] Quota error (device loop7): do_check_range: Getting block 3587 out of range 1-5 [ 427.756885][T13128] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 427.776665][T13128] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2650: Failed to acquire dquot type 1 [ 427.797000][ T28] audit: type=1400 audit(2000002814.000:4214): avc: denied { link } for pid=13127 comm="syz.7.2650" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 428.306398][T12101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.316485][ T8722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.399003][T13144] loop6: detected capacity change from 0 to 512 [ 428.412844][T13144] EXT4-fs: Ignoring removed bh option [ 428.419793][T13144] EXT4-fs: Ignoring removed mblk_io_submit option [ 428.504781][T13157] loop1: detected capacity change from 0 to 128 [ 428.551227][T13149] loop7: detected capacity change from 0 to 32768 [ 428.567297][T13144] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 428.589553][T13144] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 428.598201][T13144] EXT4-fs (loop6): orphan cleanup on readonly fs [ 428.609060][T13144] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 4 [ 428.614321][ T3302] loop7: p1 p2 p3 < p5 p6 > [ 428.619383][T13144] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 428.633377][T13144] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2656: Failed to acquire dquot type 1 [ 428.645382][T13144] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2656: Invalid block bitmap block 0 in block_group 0 [ 428.658952][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 428.658976][ C0] EXT4-fs (loop6): last error at time 2000002814: ext4_acquire_dquot:7001 [ 428.669514][ T3302] loop7: p2 size 16775168 extends beyond EOD, [ 428.674802][T13144] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2656: Invalid block bitmap block 0 in block_group 0 [ 428.681875][ T3302] truncated [ 428.699772][T13161] loop2: detected capacity change from 0 to 1024 [ 428.706951][T13144] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2656: Invalid block bitmap block 0 in block_group 0 [ 428.789010][T13161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.814420][T13144] Quota error (device loop6): write_blk: dquota write failed [ 428.830705][ T3302] loop7: p5 start 4294970168 is beyond EOD, truncated [ 428.849359][T13144] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 428.851552][T13149] loop7: p1 p2 p3 < p5 p6 > [ 428.866839][T13149] loop7: p2 size 16775168 extends beyond EOD, truncated [ 428.874906][T13149] loop7: p5 start 4294970168 is beyond EOD, truncated [ 428.994647][T13144] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2656: Failed to acquire dquot type 1 [ 429.127728][T13144] Quota error (device loop6): write_blk: dquota write failed [ 429.198983][T13144] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 429.290707][T13144] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2656: Failed to acquire dquot type 1 [ 429.344653][T13144] EXT4-fs (loop6): 1 orphan inode deleted [ 429.373050][T13178] lo speed is unknown, defaulting to 1000 [ 429.395820][T13144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 429.429308][T13180] loop1: detected capacity change from 0 to 512 [ 429.455120][ T4691] udevd[4691]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 429.466677][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 429.488232][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 429.504348][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 429.547307][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.560945][ T8722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.606017][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 429.606497][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 429.627166][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 429.658067][T13184] udevd[13184]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 429.730028][T13189] program syz.2.2671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.825593][T13198] FAULT_INJECTION: forcing a failure. [ 429.825593][T13198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.859749][T13198] CPU: 0 UID: 0 PID: 13198 Comm: syz.2.2675 Tainted: G W syzkaller #0 PREEMPT(full) [ 429.859864][T13198] Tainted: [W]=WARN [ 429.859873][T13198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.859943][T13198] Call Trace: [ 429.859951][T13198] [ 429.859962][T13198] __dump_stack+0x1d/0x30 [ 429.860004][T13198] dump_stack_lvl+0x95/0xd0 [ 429.860108][T13198] dump_stack+0x15/0x1b [ 429.860129][T13198] should_fail_ex+0x263/0x280 [ 429.860162][T13198] should_fail+0xb/0x20 [ 429.860188][T13198] should_fail_usercopy+0x1a/0x20 [ 429.860232][T13198] _copy_to_user+0x20/0xa0 [ 429.860318][T13198] simple_read_from_buffer+0xb5/0x130 [ 429.860342][T13198] proc_fail_nth_read+0x10e/0x150 [ 429.860379][T13198] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 429.860490][T13198] vfs_read+0x1ab/0x7f0 [ 429.860531][T13198] ? __sys_bpf+0x35d/0x7e0 [ 429.860565][T13198] ksys_read+0xdc/0x1a0 [ 429.860670][T13198] __x64_sys_read+0x40/0x50 [ 429.860742][T13198] x64_sys_call+0x2886/0x3020 [ 429.860778][T13198] do_syscall_64+0x12c/0x370 [ 429.860809][T13198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.860836][T13198] RIP: 0033:0x7f4ae14bcfce [ 429.860868][T13198] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 429.860892][T13198] RSP: 002b:00007f4adff56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 429.860915][T13198] RAX: ffffffffffffffda RBX: 00007f4adff576c0 RCX: 00007f4ae14bcfce [ 429.860934][T13198] RDX: 000000000000000f RSI: 00007f4adff570a0 RDI: 0000000000000004 [ 429.860950][T13198] RBP: 00007f4adff57090 R08: 0000000000000000 R09: 0000000000000000 [ 429.860962][T13198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.860974][T13198] R13: 00007f4ae1776038 R14: 00007f4ae1775fa0 R15: 00007ffc174f9898 [ 429.860999][T13198] [ 429.902879][T13200] loop6: detected capacity change from 0 to 128 [ 430.065392][T13202] netlink: 'syz.2.2677': attribute type 1 has an invalid length. [ 430.114592][T13202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2677'. [ 430.206867][T13210] loop6: detected capacity change from 0 to 512 [ 430.241750][T13210] EXT4-fs: Ignoring removed bh option [ 430.306850][T13210] EXT4-fs: Ignoring removed mblk_io_submit option [ 430.393315][T13210] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 430.414964][T13210] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 430.438716][T13210] EXT4-fs (loop6): orphan cleanup on readonly fs [ 430.455155][T13216] lo speed is unknown, defaulting to 1000 [ 430.461817][T13210] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2680: Failed to acquire dquot type 1 [ 430.723029][T13210] fserror_report: 8 callbacks suppressed [ 430.723046][T13210] loop6: lost filesystem error report for type 5 error -5 [ 430.806501][T13210] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2680: Invalid block bitmap block 0 in block_group 0 [ 430.806562][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 430.833619][ C0] EXT4-fs (loop6): last error at time 2000002817: ext4_acquire_dquot:7001 [ 430.936721][T13210] loop6: lost filesystem error report for type 5 error -117 [ 430.976672][T13210] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2680: Invalid block bitmap block 0 in block_group 0 [ 431.053599][T13210] loop6: lost filesystem error report for type 5 error -117 [ 431.054547][T13210] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.2680: Invalid block bitmap block 0 in block_group 0 [ 431.116700][T13210] loop6: lost filesystem error report for type 5 error -117 [ 431.137395][T13210] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2680: Failed to acquire dquot type 1 [ 431.246584][T13210] loop6: lost filesystem error report for type 5 error -28 [ 431.252164][T13210] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2680: Failed to acquire dquot type 1 [ 431.316510][T13210] loop6: lost filesystem error report for type 5 error -28 [ 431.326613][T13210] EXT4-fs (loop6): 1 orphan inode deleted [ 431.356968][T13210] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 431.376306][T13239] loop1: detected capacity change from 0 to 128 [ 431.557044][ T8722] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.635216][T13247] netlink: 'syz.1.2691': attribute type 1 has an invalid length. [ 431.804862][ T6159] hid_parser_main: 91 callbacks suppressed [ 431.804990][ T6159] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 431.981303][ T6159] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 432.196995][T13258] fido_id[13258]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 432.294914][T13262] FAULT_INJECTION: forcing a failure. [ 432.294914][T13262] name failslab, interval 1, probability 0, space 0, times 0 [ 432.344585][T13262] CPU: 1 UID: 0 PID: 13262 Comm: syz.2.2696 Tainted: G W syzkaller #0 PREEMPT(full) [ 432.344631][T13262] Tainted: [W]=WARN [ 432.344639][T13262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.344730][T13262] Call Trace: [ 432.344738][T13262] [ 432.344746][T13262] __dump_stack+0x1d/0x30 [ 432.344917][T13262] dump_stack_lvl+0x95/0xd0 [ 432.344940][T13262] dump_stack+0x15/0x1b [ 432.344999][T13262] should_fail_ex+0x263/0x280 [ 432.345029][T13262] should_failslab+0x8c/0xb0 [ 432.345060][T13262] kmem_cache_alloc_noprof+0x66/0x400 [ 432.345088][T13262] ? do_getname+0x2e/0x1c0 [ 432.345113][T13262] do_getname+0x2e/0x1c0 [ 432.345135][T13262] getname_flags+0x1d/0x30 [ 432.345204][T13262] do_sys_openat2+0x60/0x130 [ 432.345243][T13262] __x64_sys_openat+0xf2/0x120 [ 432.345308][T13262] x64_sys_call+0x1e39/0x3020 [ 432.345341][T13262] do_syscall_64+0x12c/0x370 [ 432.345426][T13262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.345453][T13262] RIP: 0033:0x7f4ae14bcfce [ 432.345536][T13262] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 432.345595][T13262] RSP: 002b:00007f4adff56b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 432.345682][T13262] RAX: ffffffffffffffda RBX: 00007f4adff576c0 RCX: 00007f4ae14bcfce [ 432.345741][T13262] RDX: 0000000000000000 RSI: 00007f4adff56c00 RDI: ffffffffffffff9c [ 432.345754][T13262] RBP: 00007f4adff56c00 R08: 0000000000000000 R09: 0000000000000000 [ 432.345767][T13262] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 432.345779][T13262] R13: 00007f4ae1776038 R14: 00007f4ae1775fa0 R15: 00007ffc174f9898 [ 432.345802][T13262] [ 432.723347][T13275] loop6: detected capacity change from 0 to 128 [ 432.798426][T13277] loop1: detected capacity change from 0 to 128 [ 433.136363][T13277] ================================================================== [ 433.144505][T13277] BUG: KCSAN: data-race in ktime_get / timekeeping_update_from_shadow [ 433.152724][T13277] [ 433.155063][T13277] write to 0xffffffff893c7108 of 280 bytes by interrupt on cpu 1: [ 433.162900][T13277] timekeeping_update_from_shadow+0x2b4/0x2f0 [ 433.169007][T13277] __timekeeping_advance+0xa5b/0xbe0 [ 433.174338][T13277] update_wall_time+0x24/0x90 [ 433.179047][T13277] tick_do_update_jiffies64+0x169/0x1c0 [ 433.184635][T13277] tick_nohz_handler+0x8d/0x3d0 [ 433.189526][T13277] __hrtimer_run_queues+0x218/0x4f0 [ 433.194760][T13277] hrtimer_interrupt+0x269/0x810 [ 433.199753][T13277] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 433.205674][T13277] sysvec_apic_timer_interrupt+0x6f/0x80 [ 433.211784][T13277] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 433.217805][T13277] __sanitizer_cov_trace_pc+0x8/0x70 [ 433.223120][T13277] __unix_dgram_recvmsg+0x7d5/0x870 [ 433.228358][T13277] unix_dgram_recvmsg+0x81/0x90 [ 433.233270][T13277] sock_recvmsg_nosec+0xc2/0xf0 [ 433.238154][T13277] ____sys_recvmsg+0x26f/0x280 [ 433.243139][T13277] ___sys_recvmsg+0x11f/0x3b0 [ 433.247867][T13277] do_recvmmsg+0x1ef/0x560 [ 433.252392][T13277] __x64_sys_recvmmsg+0xe5/0x170 [ 433.257386][T13277] x64_sys_call+0x80f/0x3020 [ 433.262024][T13277] do_syscall_64+0x12c/0x370 [ 433.266650][T13277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.272575][T13277] [ 433.274956][T13277] read to 0xffffffff893c7118 of 8 bytes by task 13277 on cpu 0: [ 433.282606][T13277] ktime_get+0xcd/0x210 [ 433.286814][T13277] bpf_check+0x4a/0xcc30 [ 433.291098][T13277] bpf_prog_load+0xf76/0x1140 [ 433.295793][T13277] __sys_bpf+0x505/0x7e0 [ 433.300066][T13277] __x64_sys_bpf+0x41/0x50 [ 433.304526][T13277] x64_sys_call+0x10cb/0x3020 [ 433.309243][T13277] do_syscall_64+0x12c/0x370 [ 433.313861][T13277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.319780][T13277] [ 433.322122][T13277] value changed: 0x000000df4af0b155 -> 0x000000df4c4062c2 [ 433.329241][T13277] [ 433.331582][T13277] Reported by Kernel Concurrency Sanitizer on: [ 433.337754][T13277] CPU: 0 UID: 0 PID: 13277 Comm: syz.1.2702 Tainted: G W syzkaller #0 PREEMPT(full) [ 433.348821][T13277] Tainted: [W]=WARN [ 433.352659][T13277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 433.362734][T13277] ==================================================================