last executing test programs: 3m7.088440948s ago: executing program 3 (id=713): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d700000010"], 0x10b8}, 0x200080c5) r1 = syz_pidfd_open(0x0, 0x0) r2 = dup(r1) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r2, &(0x7f0000000780)=ANY=[@ANYBLOB='+io +pids \x00io +cpuacct -net -\tpu +cpuset +blkio -blkio -net'], 0x3c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) fdatasync(r3) set_mempolicy(0x8006, &(0x7f0000000040)=0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000a3c000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000c00)=0xfffffffffffffff8, 0xfffffffffffffffe, 0x2) mmap(&(0x7f0000bbe000/0x3000)=nil, 0x3000, 0x2, 0x4000010, 0xffffffffffffffff, 0xffffc000) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {r2}}, './file1\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x18}, 0x10) write(r3, &(0x7f0000000880)="8963e561fa88f38e8a5eadd77f4e319399307b9fd7c15d34201179faf29fed8098aee96df87f0109a7a8823a144d82c54982552e9340ec2868e70a9054368a36f6026633606015b8e5dd1b0a994ce0ace4454706acb8834804a52d59d332f2c4ef1cc9b3a7215b59fbdbc35b5b12595f656252cd8d29d3f149f70db3c090c7ce407fcc498037b1f5b177df489e0f4a85451fa0a5d85abb1b4858996b44a02afa1526003ae03dbf39453aa2b21e870f63407d6d87a7d10daace10ecbcf75c548827b60e1dc39d117b3efab4917537ecb758956fd0d4c7a1ec76094051b68a5be5eb6aa26cf1dfb2f5470ba6cf0c90c021c040161b", 0xf4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB], &(0x7f0000000080)=""/41, 0x4a, 0x29, 0x0, 0x1}, 0x28) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x51}}, 0x0, 0x1a}, 0x28) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="d40000001b00010027bd7000fedbdf2500000000000000000000000000000000e00000010000000000000000000000004e2400054e2300020a0020003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000005000000000000007d0c0000000000000c000000000000000000000000000000480d00000000000001000080000000000300000000000000cd6200000000000003000000000000000800000000000000040000000000000010000000b76b6e00010000020000000001000000000000000a0010"], 0xd4}}, 0x0) 3m4.934273214s ago: executing program 3 (id=725): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20010) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f0000000240)='\x00', 0x1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/150, 0xa3}], 0x1, &(0x7f00000003c0)=""/76, 0x4c}, 0x7b}], 0x9e, 0x20003, 0x0) 3m3.761731762s ago: executing program 3 (id=731): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20010) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x1c) 3m2.447096867s ago: executing program 3 (id=740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10) r2 = socket(0x2, 0x3, 0xf8) sendto$unix(r2, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2004c0d0}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x1, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$kcm(0x11, 0x6, 0x0) 3m1.367024739s ago: executing program 3 (id=746): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x400000000000b, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, @perf_config_ext={0xd07}, 0x100d20, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="290b000000000000000020000000050003"], 0x1c}}, 0x2404c044) 3m0.402268797s ago: executing program 3 (id=753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaacf0d7541138f4a40669dbd8d00180600ff020000000000000000000000000001200100000000000000000000000000020000000000000000000000000000000000004e2c00004e"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$kcm(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x809, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0xda, 0x0, 0xabca, 0x85, 0xa, 0x0, 0x0, 0x0, 0x4000000020000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r7 = syz_io_uring_setup(0x1066, &(0x7f0000000180)={0x0, 0x7c77, 0x2, 0x0, 0x2be}, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r7, 0x1a, &(0x7f00000004c0), 0x1) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f737761702c6d706f6c3d696e7484726c656188652c00"]) 3m0.375666609s ago: executing program 32 (id=753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaacf0d7541138f4a40669dbd8d00180600ff020000000000000000000000000001200100000000000000000000000000020000000000000000000000000000000000004e2c00004e"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$kcm(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x809, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0xda, 0x0, 0xabca, 0x85, 0xa, 0x0, 0x0, 0x0, 0x4000000020000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r7 = syz_io_uring_setup(0x1066, &(0x7f0000000180)={0x0, 0x7c77, 0x2, 0x0, 0x2be}, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r7, 0x1a, &(0x7f00000004c0), 0x1) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f737761702c6d706f6c3d696e7484726c656188652c00"]) 2m26.787203794s ago: executing program 4 (id=959): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x20) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}, 0x80010000}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r5, 0x1, 0x21, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) 2m25.856030171s ago: executing program 4 (id=964): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x10, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f0000000e00)="d08a45ac7ed526beace8d54d7235271dc8ac6e27ce884b62a7ead2e083c266a9d5644c2d8a0f65cb550ad82aa76abfa5b4ebbcb6fc316d79b260b8fcc52fbdf3281585152d986a5281bc28979b986288853d89f1826c4799", 0x58) 2m25.809828733s ago: executing program 4 (id=965): socket(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x84}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0x20c, 0x22, 0x800, 0x70bd2a, 0x25dfdbfe, {0x11}, [@typed={0x8, 0x66, 0x0, 0x0, @fd=r1}, @generic="7b808cb79c694b6d168fb5ecf5723880c7b52bd7e8a3ff7ea4512ffea8f423869aeeee770004435803adfee540afbd5ac813d53f28b4731130fca9848453d51b0f52301a63bfe9e92d49bedb2be782f42490ab49162f6b03308990978711a2656315522e8c0ac36553ca6c5e6caa52ffe964c298e7a871ac027bbabbc7d87ad3cdf5af445c12c299216b27de1de6a5ca607d06b877866c403d10bddb7bd85c", @typed={0x4, 0x4d}, @generic="b76912f9e967ab93709b9e916fd328e79db94bbaec5f96ab72371e78f21fd89c35eb077cd607b33fcb4c25301b90b6afd37ab74b1cc028b6ccd720c9bb12ec82bd11a29c9b82da72e046d75d5021122437054dbfca575aa5dfdfea6a0635a45cb3a64cada6571b2228677c516e7725ae69d5d6f233e77f3510aa3149db5b3c72361913478e7db0b1f5305b70a3f1a297d34036310cec2e16454fa2", @typed={0xb0, 0xcf, 0x0, 0x0, @binary="fc80e82bb9919aec6faa3f979903e08bca45aa37055472e0812e35203170b1fe071a3dd7cb54e64d63e07b79a64e440731c54a013d4d4551a85b706043e6fa30ac4731da219132d467785f3a2640ac5aad703edc8052f690f99b6876650a823598576d627c7a023e0dbc12d44e2e11bfe0fda7f73c191bfd5a8adcaedda2263a5239dfb616b80a2543267d107af36874271bfd313a2981cba45f40e31eda1fff8013ecf50f3139860b55687c"}]}, 0x20c}, 0x1, 0x0, 0x0, 0x408a0}, 0xb1ea4e805bc4722e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="c8d62000", @ANYRES16, @ANYBLOB="796100000000fedbdf257e0000000c0099000700000017000000"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m25.620981872s ago: executing program 4 (id=966): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800110002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x800000, &(0x7f00000013c0)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0xffff}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}, {0x4}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7032000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000001900)={[{@grpquota}, {@noblock_validity}, {@dax_always}], [{@fowner_gt={'fowner>', 0xee00}}, {@obj_role={'obj_role', 0x3d, 'grpquota'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'plug\x00'}}, {@permit_directio}, {@fowner_gt}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0x4e451, &(0x7f0000000380)=ANY=[@ANYRES16], 0x1, 0x30e, &(0x7f0000000f00)="$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") write(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000001c0)='m', 0xfffffdfc}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x384100f, 0x0) setns(r5, 0x24020000) 2m24.296329097s ago: executing program 4 (id=976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000013000300686173683a6e65742c69666163650000140007800800064000000000080013"], 0x60}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x4004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "8f"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x20033, 0x51b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) recvmmsg(r5, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 2m22.606467159s ago: executing program 4 (id=979): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000040)) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'batadv0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0x0, 0xffffffffffffffff}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x84, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 2m22.5875169s ago: executing program 33 (id=979): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000040)) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'batadv0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0x0, 0xffffffffffffffff}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x84, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 9.534381564s ago: executing program 0 (id=1751): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x7ffffc, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setresuid(0x0, 0x0, 0xee00) poll(&(0x7f00000003c0)=[{r1, 0x400}, {r1, 0x94}, {0xffffffffffffffff, 0x504}, {r1}, {r4, 0x410}, {r4, 0x2}], 0x6, 0x5) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) r6 = socket(0x10, 0x2, 0x0) syz_io_uring_setup(0x100293f, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000500)="8a59aecf7b28e6e31f3c4fa56523dcfb9fd974763e6429bb6867e6dce94f312dd6d2aa3874b9f3c84323c547743897a15b62590e75dee9b9658b9d83d8be74af0117b771dcac1b349c4fd6", 0x4b}], 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}}, 0x0) 9.336531763s ago: executing program 1 (id=1754): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c0035000000000000000000080003800400328008002f"], 0x30}], 0x1}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500000000202010200000000000000000a0000063c0002800c00028005000100020010002c00018035000300fc03000000000000000000000000000014000400fe880000000000000000000000000101"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r7, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000900000000180000000000000029000000370000003c0000000000000010116e59"], 0x30}, 0x40004) setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000000)=0x6, 0x4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, 0x0, 0x8, 0x0) syz_read_part_table(0x5a7, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1000a, 0xf40b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r8 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000ed03ee77ef010000000010000000000200000a14000000f80301"], 0x28}}, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) 8.471156576s ago: executing program 0 (id=1757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = syz_io_uring_setup(0x760b, &(0x7f00000002c0)={0x0, 0x79e7, 0x400, 0x100001, 0x11c}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30000000000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, 0x0, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r6, 0x0, 0x0, 0x4000000, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 7.298220953s ago: executing program 0 (id=1761): socket$kcm(0x10, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') lseek(r1, 0x9, 0x2) getdents64(r1, 0x0, 0x59) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) socket$packet(0x11, 0x2, 0x300) 6.718191941s ago: executing program 1 (id=1764): setitimer(0x1, &(0x7f00000011c0)={{0x77359400}, {0x77359400}}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020549630e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049925ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160018000a0000000000e000e218d1ddf66ed538f272325000008c4c", 0x7a, 0x2000000, 0x0, 0x0) (async) getitimer(0x1, &(0x7f0000001580)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x6c, 0x0, 0x0, 0xb7a}, {0x6, 0x0, 0x8, 0x7ffffcb9}]}) (async) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{}, {0x0, 0xea60}}) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x200}, 0x80, 0x9, 0x4, 0x1, 0x16, 'syz1\x00', "9f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b33", "5a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20a26883ac0a", [{0x864b, 0x6, {0x2, 0x3ff}}, {0x3, 0x3, {0x2, 0x3}}, {0x2, 0x2, {0x3, 0x3}}, {0x7, 0xfff8, {0x1, 0x1}}, {0x9d40, 0x2, {0x1, 0x8}}, {0xca, 0xc4f2, {0x3, 0xe02f}}, {0xfffa, 0x17, {0x3, 0x80}}, {0x9, 0x8001, {0x1, 0x3}}, {0x2, 0x9, {0x1, 0xfffffffd}}, {0x200, 0x3, {0x0, 0x4}}, {0x7, 0x80, {0x3, 0x8}}, {0xb1, 0x0, {0x1, 0x5}}, {0x1, 0x2dc, {0x3, 0x3}}, {0xffff, 0x8, {0x3, 0xb}}, {0x9, 0x96}, {0x2, 0x2, {0x1, 0x9}}, {0x6, 0x7, {0x2, 0x3}}, {0x5, 0x5, {0x1, 0x67}}, {0xffd6, 0x1d97, {0x3}}, {0x8, 0xdb4d, {0x2, 0xffffffff}}, {0x3, 0x7fff, {0x0, 0x2}}, {0x401, 0xc, {0x3, 0x10001}}, {0x21, 0x9, {0x2, 0x2}}, {0x3, 0x6, {0x3, 0x5}}, {0x2, 0x200, {0x3, 0x5}}, {0x7, 0x1, {0x2, 0xa6}}, {0x3, 0x101, {0x2, 0x7}}, {0x2, 0x1, {0x3, 0xffffffff}}, {0x6, 0x81, {0x0, 0x6}}, {0xd, 0xc3e, {0x2, 0x1}}, {0x0, 0x84d, {0x1, 0x1}}, {0x5, 0x65, {0x2, 0xfffffffb}}, {0x7, 0x4, {0x2, 0x1}}, {0x1, 0x40, {0x0, 0x1}}, {0xfed9, 0x6, {0x3, 0x1}}, {0x40, 0x6, {0x1, 0xff800000}}, {0x370d, 0x800, {0x1, 0x4}}, {0x101, 0x8, {0x3, 0x10001}}, {0x5, 0x3, {0x2}}, {0x401, 0x5, {0x3, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000000000711174000000000085100000020000008500f6ff0400000095010000000000009500a50500000000721a87401e3be1df5240f2a906d2ed0159f6383e"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@cgroup, 0xffffffffffffffff, 0x1c, 0x4}, 0x20) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r10) io_cancel(0x0, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 5.974425608s ago: executing program 1 (id=1767): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000380)='reno\x00', 0x5) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mount$tmpfs(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000001c0), 0x800004, &(0x7f0000000000)=ANY=[@ANYBLOB='sizZ=p4,\x00']) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0500000006010000000000d9eabdc4a096be139abeb7f15dad5b3504f0893233a26f220a203a41e251c2a0c99a64f6d6d8ad1eb89fe6a635a8cedb87969d045fc1ea029f18e5fa53e992033774000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000c80), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x2a7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r4 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) io_setup(0x3, &(0x7f0000008240)) 5.870808413s ago: executing program 1 (id=1769): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x2}) (async) r1 = getuid() quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, r1, &(0x7f0000000a80)) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000980)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'}) read$ptp(r2, &(0x7f00000009c0)=""/176, 0xb0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r3 = socket$inet_sctp(0x2, 0x4, 0x84) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0xb0, 0x12) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x4, 0x1, [0x6]}, &(0x7f0000000200)=0xa) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000880)={r5, @in6={{0xa, 0x4e24, 0x5, @local, 0x9}}, 0x1, 0xbd2, 0xf0c, 0x101, 0x7}, &(0x7f0000000940)=0x98) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x1d8, 0x1d8, 0x1d8, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0x5, 0xff, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "0360"}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x2, 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x4, 0x7}, {0x1, 0x0, 0x6}}}}, {{@ip={@local, @remote, 0xffffffff, 0xffffffff, 'syzkaller0\x00', 'wg1\x00', {}, {0xff}, 0x84, 0x2, 0x10}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) 5.686362142s ago: executing program 1 (id=1773): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, &(0x7f0000000b40)={&(0x7f0000000ac0)=[{&(0x7f00000008c0)="1272292e716cf39e55c083512cf2f2b27a20b1752e", 0x15}], 0x1, 0x40, 0x0, 0x5, 0x1, 0x8000, 0x3, 0xd}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc0100001900010000040000fedbdf25fe80ffffff80000000000000000000bbe000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000009b7100000000000000000000000000000000000000000000000000000000000001000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500e0000001000000000000000000000000000004d63200000000000000e000000100000000000000000000000000000000010000000000000000000000feffffffffffffff000000000000000000000000000000003c00000000000000fe80000000000000000000000000001100000000000300000000000000000000000000007f000001000000000000000000000000000000006c000000000000007f0000010000000000000000000000000000000004000000030000000000000000000000ff010000000000000000000000000001000000006c"], 0x1fc}}, 0x0) 4.655903472s ago: executing program 5 (id=1778): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200088e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable}, {@errors_remount}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000780)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x88, 0x0, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffffd, @loopback, 0x1010}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x206}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x43479812}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8}]}]}]}, 0x88}}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_emit_ethernet(0x65, &(0x7f0000000300)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@generic={0x8864, "ec2d8fae067b0c3b40b261d9da89055068eae40c31e7a14c10c12c5579d42ce648d319efb324e7a7902f77e0b5a04e4583cd748cfdf2ae5f88a24313d40a25b8244b15e3b9590c0f5dffbd5a54f66b545800e1"}}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES16], 0x3, 0x7be, &(0x7f00000005c0)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r1 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000040)='status\x00') pread64(r3, &(0x7f0000000140)=""/25, 0x19, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) r5 = socket(0x2d, 0x2, 0x0) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r5, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0x3}, 0x10) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x38, r4, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x401]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x38}}, 0x4000001) 4.426867464s ago: executing program 1 (id=1781): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$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") 4.318048369s ago: executing program 34 (id=1781): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$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") 3.250539301s ago: executing program 2 (id=1788): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x1, 0x8) r2 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x4, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x8}, 0x106220, 0x610004, 0x20da, 0x5, 0xab, 0x20005, 0xb, 0x0, 0x10001, 0x0, 0x20000006}, r2, 0xffffffffefffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r4, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$key(0xf, 0x3, 0x2) 2.718315787s ago: executing program 2 (id=1789): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) 2.65286826s ago: executing program 2 (id=1790): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xc10, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000001680)="$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") 2.588766064s ago: executing program 6 (id=1791): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x40001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.406483353s ago: executing program 5 (id=1792): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x60f2, 0x2, 0x4, 0x55d53d0, 0x7, 0x20000004, 0x40, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}], 0x50, 0x8d5}, 0x24000052) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x4000010, r0, 0xcfc45000) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='trylock i'], 0xf) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r4, @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f"], 0x28}}, 0x4840) 2.377388734s ago: executing program 6 (id=1793): syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x19, 0x0, [{0x0, 0xc, "5e000000ff0000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x2}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @lsrr={0x83, 0x3, 0x62}]}}, "a815a23d"}}}}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0xfffd, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) close(0x3) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000380)="809e", 0x2}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000e00)={'NETMAP\x00'}, &(0x7f0000000e40)=0x1e) r4 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r4, 0x0, 0x40810) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe6, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) syz_io_uring_setup(0x6369, &(0x7f0000000080)={0x0, 0xffffffff, 0x80, 0x0, 0x6}, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$pptp(0x18, 0x1, 0x2) unshare(0x20060400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000280)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9, 0x300000000000000}, 0x0, 0x0) 2.306716387s ago: executing program 5 (id=1794): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x800, 0x0, 0x400250}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000180)={0x80, 0x6}, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 2.198365303s ago: executing program 5 (id=1795): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0xc4, &(0x7f0000000100)=@ll={0x11, 0x1b, 0x0, 0x1, 0x7}, 0x80) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6143, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x800}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r4, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0x29}], 0x16, 0x0, 0x0, 0x8000}, 0x48004) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e30, @remote}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000040)=0x1, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) 1.578883473s ago: executing program 2 (id=1796): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101000, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) connect$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0x8, @private0, @empty, 0x80, 0x720, 0x0, 0x80000000}}) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000240)) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'I', 0x3a, '', 0x3a, './file0'}, 0x28) 1.506728787s ago: executing program 0 (id=1797): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000009400)=ANY=[@ANYBLOB="050000000000000071114200000000008510000082000000850000000500000095000000000000009500a505000000005c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10000010000000, 0x8}}) r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x21081e, &(0x7f0000005780)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}, {@prjquota}]}, 0xfe, 0x51b, &(0x7f0000001000)="$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") ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000009440)={{0x1, 0x1, 0x18, r3, {0xe}}, './file1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000095c0)={'syztnl1\x00', &(0x7f0000009480)={'gretap0\x00', r2, 0x40, 0x7, 0x9, 0x3, {{0x43, 0x4, 0x1, 0x6, 0x10c, 0x68, 0x0, 0x2a, 0x29, 0x0, @multicast2, @rand_addr=0x64010100, {[@timestamp={0x44, 0x24, 0xfa, 0x0, 0x8, [0x5, 0x8000, 0x1ff, 0xfffffffd, 0x401, 0x7, 0x9, 0x7ff]}, @lsrr={0x83, 0x2b, 0x6f, [@dev={0xac, 0x14, 0x14, 0x2a}, @remote, @remote, @local, @remote, @multicast2, @broadcast, @multicast2, @broadcast, @rand_addr=0x64010101]}, @cipso={0x86, 0x5e, 0x0, [{0x5, 0xa, "66946b49b9773132"}, {0xead1ec33e611b91d, 0x6, "b8e8aa6c"}, {0x6, 0xf, "d6d204551297d4feaf0268ce53"}, {0x2, 0x7, "88cbe2fa96"}, {0x0, 0x3, "8a"}, {0x0, 0x5, "7496b8"}, {0x0, 0xc, "b5b0cd2bc9cdca660fec"}, {0x7, 0xb, "ebed50c6035e1bc6b5"}, {0x5, 0xc, "8cfd43549d902816baef"}, {0x6, 0x7, "0049a81a0f"}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xf8, 0x3, 0x3, [{@rand_addr=0x64010102, 0xfffffff9}, {@remote, 0xa0000}, {@multicast2, 0x400}]}, @rr={0x7, 0xf, 0x40, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ssrr={0x89, 0xf, 0x71, [@empty, @loopback, @dev={0xac, 0x14, 0x14, 0x1e}]}, @generic={0x82, 0x10, "c7644fb201b39a578db5b11e8d80"}]}}}}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) recvmmsg(r5, &(0x7f0000009140)=[{{&(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f00000003c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/189, 0xbd}, {&(0x7f0000000680)=""/153, 0x99}], 0x6, &(0x7f00000007c0)=""/239, 0xef}, 0x10000}, {{&(0x7f00000008c0)=@tipc, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000980)=""/219, 0xdb}, {&(0x7f0000000a80)=""/99, 0x63}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000b00)=""/235, 0xeb}, {&(0x7f0000000c00)=""/233, 0xe9}, {&(0x7f0000000d00)=""/241, 0xf1}, {&(0x7f0000000e00)=""/246, 0xf6}], 0x7, &(0x7f0000000f80)=""/79, 0x4f}, 0x1ff}, {{&(0x7f0000002540)=@pppol2tp, 0x80, &(0x7f00000029c0)=[{&(0x7f00000025c0)=""/105, 0x69}, {&(0x7f0000002640)=""/137, 0x89}, {&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000002700)=""/180, 0xb4}, {&(0x7f00000027c0)=""/70, 0x46}, {&(0x7f0000002840)=""/161, 0xa1}, {&(0x7f0000002900)=""/131, 0x83}], 0x7, &(0x7f0000002a40)=""/209, 0xd1}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002b40)=""/137, 0x89}], 0x1, &(0x7f0000002c40)=""/214, 0xd6}, 0x3}, {{&(0x7f0000002d40)=@un=@abs, 0x80, &(0x7f0000004200)=[{&(0x7f0000002dc0)=""/72, 0x48}, {&(0x7f0000002e40)=""/223, 0xdf}, {&(0x7f0000002f40)=""/231, 0xe7}, {&(0x7f0000003040)=""/82, 0x52}, {&(0x7f00000030c0)=""/90, 0x5a}, {&(0x7f0000003140)=""/142, 0x8e}, {&(0x7f0000003200)=""/4096, 0x1000}], 0x7, &(0x7f0000004280)=""/193, 0xc1}, 0x6}, {{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000004380)=""/30, 0x1e}, {&(0x7f00000043c0)=""/199, 0xc7}, {&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f00000054c0)=""/158, 0x9e}, {&(0x7f0000005580)=""/187, 0xbb}, {&(0x7f0000005640)=""/231, 0xe7}, {&(0x7f0000005740)=""/54, 0x36}, {&(0x7f0000005780)}], 0x8, &(0x7f0000005840)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000006840)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000006900)=[{&(0x7f00000068c0)=""/44, 0x2c}], 0x1}, 0x6}, {{&(0x7f0000006940)=@hci, 0x80, &(0x7f0000006c00)=[{&(0x7f00000069c0)=""/87, 0x57}, {&(0x7f0000006a40)=""/144, 0x90}, {&(0x7f0000006b00)=""/224, 0xe0}], 0x3, &(0x7f0000006c40)=""/50, 0x32}, 0x3}, {{&(0x7f0000006c80)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000007e40)=[{&(0x7f0000006d00)=""/4096, 0x1000}, {&(0x7f0000007d00)=""/90, 0x5a}, {&(0x7f0000007d80)=""/106, 0x6a}, {&(0x7f0000007e00)=""/1, 0x1}], 0x4}, 0xf73}, {{0x0, 0x0, &(0x7f0000009040)=[{&(0x7f0000007e80)=""/188, 0xbc}, {&(0x7f0000007f40)=""/128, 0x80}, {&(0x7f0000007fc0)=""/4096, 0x1000}, {&(0x7f0000008fc0)=""/113, 0x71}], 0x4, &(0x7f0000009080)=""/150, 0x96}}], 0xa, 0x12, &(0x7f00000093c0)={0x77359400}) sendfile(r5, r5, 0x0, 0xe3aa6ea) 1.402473942s ago: executing program 2 (id=1798): socket$kcm(0x2, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000180)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nogrpid}]}, 0x1, 0x4bd, &(0x7f0000000800)="$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") chdir(&(0x7f0000000140)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61, 0x2e]}}, &(0x7f0000001300)=""/181, 0x29, 0xb5, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 1.402107552s ago: executing program 6 (id=1799): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) 1.301421947s ago: executing program 5 (id=1800): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = msgget$private(0x0, 0x0) msgsnd(r3, 0x0, 0x2000, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x40000000000, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) (fail_nth: 1) 735.361825ms ago: executing program 0 (id=1801): socket$kcm(0x2, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000180)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nogrpid}]}, 0x1, 0x4bd, &(0x7f0000000800)="$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") chdir(&(0x7f0000000140)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61, 0x2e]}}, &(0x7f0000001300)=""/181, 0x29, 0xb5, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 734.111395ms ago: executing program 6 (id=1802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000001bc0)={{r0}, "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"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00', 0x4000}) r1 = socket(0x2, 0x80805, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x11, &(0x7f0000000380), 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000002c0)={0x4, 0x0, 0x27f}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2000128009000100766c616e000000000c0002800600010004000000080005000000000000000020", @ANYRES32=r6, @ANYBLOB="0500110001000000"], 0x4c}}, 0x8000002) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f000000a000/0xd000)=nil], &(0x7f0000000180)=[0x7fff], 0x0, 0x2) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001640)={'syztnl0\x00', &(0x7f00000015c0)={'syztnl1\x00', r6, 0x29, 0xdb, 0x67, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, 0x7, 0x7800, 0x8, 0x71}}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xfff3}, {0xd, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x82, 0x6a6addfb, 0x1a, 0x1c, 0x18, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000001540)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001580)=0x20) r12 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r12, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r13, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r13}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000000000000000180a02000000000000000000000000009500000000bb0000", @ANYRES64], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000052a872fd079070000000c000000000000", @ANYRES32=0x0, @ANYBLOB="00000000063800001800128008000100767469000c00028008000100", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13, @ANYBLOB], 0x40}}, 0x0) sendmsg$inet(r1, &(0x7f0000001740)={&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000180)="d90b173e2b91a9a9530f165135dab1bb8d7f9c63f13e797c1efc8c55b8eeac034e07e34dff3d9a137e71b2464f653dbaff0f9348f5ee6b861602698cf301760c1c1abd6d4a88e568d677f7a18da1efe555d23eac4dc4d1a637c10a52c776c6e9d0bddb1597a312e13fbe8694cb35c3fe0f0f669b74ad672763e7dd9ffe1cad7adc9c1ffc0eea4ebbe716110adac934d157a247dcdb139f18f9039702bb0ea5bbbb5fbb4bc28aaff680e09290c82bb5d27232beeebe086e18352a1ab33162a1083480b8a50cf7698ca90aa361c34243c940ef30229d46435ab8f700456c55e8c2a45b19d80ad3ac51d076db5617fda9fc94b54803b7a1", 0xf6}, {&(0x7f00000000c0)}, {&(0x7f0000000100)="b27ff6114ca1f40fcbbfe22b0a0ce5b147de9546349315860c075a96945a12bec49d7ed2ae3f", 0x26}, {&(0x7f0000000280)="2a5013e13ac7bb7d0c85023e71f42a32db823b0c355b1db1a08db160c8e9a61c042f5a7c5cdef64c6bf0ab5c08173d8711ff08838e2a9660604666b55fd4c949320b45b4d250736b925db12970c5a50237b681ee19ade1612179069cc15bf39159c21563a782c7795cfa8c6c472c6730591464a4bc7297dc445292c1942079bbfa9abfbbf00be7507243705745c0938e7eec1309b7055a65454cfadf15ef772d7bfa1abd5906245c90bb3f6b060cac7eb8e0d28116a2b462eb376d", 0xbb}, {&(0x7f0000000340)="496ed1fc1219167a4a83ffdf9aebb22cfb8aebf2ace86f45089f7a6a4539c92c85562204138741ce5cf10ef3a5feb438cb4752dbb77f608a278a4cd4798b660d81865d3c51b699", 0x47}, {&(0x7f00000003c0)="7c2d4a422956f8aedd803e6d1e805ab3ea522b06845b1fb3b0540502515042933ffb45bba52108690b2ec16002d90d967362cab7744743cf30ba521799e05f70121bd4e652", 0x45}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="e9d7b86689e0cd5ce76367892c1be878406b36900ae105edd10613baf0eb8e4e515e58549f59323a8615bab91cafc57145dfd93390b761532319c57807313932ef6a86e6679a7b59eb62d3c28efb1b8888b578027c1f8dfe690649b9", 0x5c}], 0x8, &(0x7f0000001980)=[@ip_retopts={{0x100, 0x0, 0x7, {[@generic={0x44, 0x8, "b667c589ce19"}, @cipso={0x86, 0x38, 0xffffffffffffffff, [{0x2, 0x2}, {0x7, 0x6, "e787c2ee"}, {0x5, 0xb, "0dcc7f08f99690676a"}, {0x1, 0xb, "37b9633507119d4079"}, {0x5, 0xf, "8cc147e1b6bbb8737b40655db6"}, {0x5, 0x5, "e292b7"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xed, 0x0, 0x0, [0x6, 0x20, 0xcf5, 0xe, 0x9, 0x1000, 0x81, 0x7]}, @lsrr={0x83, 0xb, 0xaf, [@remote, @private=0xa010102]}, @end, @rr={0x7, 0x1b, 0xf, [@local, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x2b, 0xa4, [@remote, @multicast1, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast, @local, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x34, 0xf2, 0x3, 0x9, [{@private=0xa010100, 0x6}, {@remote, 0x400}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x40}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x200000}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf7b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @dev={0xac, 0x14, 0x14, 0x44}}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x7, 0xcb, [@remote]}, @end, @generic={0x89, 0x9, "464b608f29b32d"}, @ssrr={0x89, 0x13, 0xad, [@multicast1, @loopback, @remote, @private=0xa010101]}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x60, [@dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010102]}, @end, @noop]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xc7, 0x1, 0x3, [{@empty, 0xd}, {@empty, 0x7}, {@multicast1, 0xb665701}]}, @timestamp_prespec={0x44, 0xc, 0xab, 0x3, 0x6, [{@multicast1, 0xcf}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x2c}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x228}, 0x20040000) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000140)) 630.26566ms ago: executing program 5 (id=1803): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x59b0, 0x3180, 0x3, 0x2c0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x63, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_io_uring_setup(0x109, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r5, &(0x7f00000000c0), 0x0}, 0x20) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x8}], 0x18, 0x8004}, 0x0) unshare(0x20000400) r7 = socket$nl_route(0x10, 0x3, 0x0) quotactl_fd$Q_GETFMT(r7, 0xffffffff80000401, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) capset(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed"], 0x2c}}, 0x4000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a02fe0000000c850000002b000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736369dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 612.25588ms ago: executing program 2 (id=1804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59cf27bd7000010000000800000030000001000a000000080005000300000014000300fe800000000000000000000000000078a785cc173dd521ec9abfaa070006006e710000000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x18, &(0x7f0000000040)=0x3, 0x4) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3738, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r5, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) close(0x3) r7 = socket(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x2003, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x2}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r7, r8, 0x0, 0xffffffff) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x200, 0xed84}, 0x1022e0, 0x10004, 0x0, 0x1, 0x8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 426.64696ms ago: executing program 6 (id=1805): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev, @remote, 0x0, 0x28}}) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x80, 0x4, 0x8, 0x2, 0x0, 0x0, 0x10000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000340), 0x9}, 0x480, 0x3, 0xe29, 0x7, 0x3, 0x6, 0x65, 0x0, 0x5, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x300, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r4 = getuid() mount$cgroup2(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x89, &(0x7f0000000280)={[{@subsystem='net_prio'}, {@memory_localevents}], [{@pcr={'pcr', 0x3d, 0x15}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_lt={'euid<', r4}}, {@smackfsdef={'smackfsdef', 0x3d, 'mpls\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'mpls\x00'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@dont_appraise}]}) cachestat(r3, &(0x7f0000000000)={0x7, 0x1}, &(0x7f0000000040), 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x270, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x368, 0x3a8, 0x3a8, 0x368, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x270, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x1, 0x73, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@eui64={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) 178.523042ms ago: executing program 6 (id=1806): socket$kcm(0x10, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') lseek(r1, 0x9, 0x2) getdents64(r1, 0x0, 0x59) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) socket$packet(0x11, 0x2, 0x300) 0s ago: executing program 0 (id=1807): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01f817000000000000000c0000000c0058db6fa752a3e37d00"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="010027bd700003dcdf250100000008000100", @ANYRES32, @ANYBLOB="800002803c00010024000100757365725f6c696e6b75705f656e61626c6564000000000000000000000000000500030006"], 0x9c}, 0x1, 0x400000000000000}, 0x48090) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0) kernel console output (not intermixed with test programs): =blk_file permissive=1 [ 261.558677][ T28] audit: type=1400 audit(1774089501.957:19980): avc: denied { open } for pid=8236 comm="syz.1.1213" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 261.869625][ T8259] syzkaller1: entered promiscuous mode [ 261.881628][ T8259] syzkaller1: entered allmulticast mode [ 261.896101][ T8259] loop6: detected capacity change from 0 to 1024 [ 261.913262][ T8259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.092361][ T8259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.122434][ T8249] loop1: detected capacity change from 0 to 512 [ 262.224343][ T8249] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 262.299223][ T8249] EXT4-fs (loop1): 1 truncate cleaned up [ 262.335904][ T8249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.356335][ T8274] loop5: detected capacity change from 0 to 512 [ 262.385391][ T8274] EXT4-fs (loop5): blocks per group (8192) and clusters per group (2304) inconsistent [ 262.450598][ T7288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.630654][ T8283] netlink: 'syz.5.1230': attribute type 4 has an invalid length. [ 262.943062][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.514490][ T8300] loop6: detected capacity change from 0 to 1024 [ 263.521419][ T8302] loop5: detected capacity change from 0 to 1024 [ 263.557559][ T8300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.570494][ T8302] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.619571][ T8300] EXT4-fs error (device loop6): ext4_empty_dir:3107: inode #11: block 623: comm syz.6.1234: Attempting to read directory block (623) that is past i_size (638464) [ 263.649159][ T8302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.703861][ T8300] EXT4-fs (loop6): Remounting filesystem read-only [ 263.750637][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1234'. [ 263.770621][ T6401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.892239][ T7288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.453951][ T8333] loop6: detected capacity change from 0 to 128 [ 264.913049][ T8328] loop1: detected capacity change from 0 to 8192 [ 265.096874][ T8340] loop2: detected capacity change from 0 to 128 [ 265.242310][ T8345] loop6: detected capacity change from 0 to 1024 [ 265.304957][ T8345] EXT4-fs: Ignoring removed bh option [ 265.308745][ T8348] loop2: detected capacity change from 0 to 512 [ 265.310603][ T8345] EXT4-fs: inline encryption not supported [ 265.393628][ T8345] EXT4-fs: Mount option(s) incompatible with ext2 [ 265.482613][ T8348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.535141][ T8348] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.621268][ T8348] netlink: 'syz.2.1249': attribute type 29 has an invalid length. [ 265.655039][ T8348] netlink: 'syz.2.1249': attribute type 29 has an invalid length. [ 265.683890][ T8348] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1249'. [ 265.698592][ T8348] unsupported nla_type 58 [ 265.730189][ T8348] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.1249: corrupted inode contents [ 265.776764][ T8348] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.1249: mark_inode_dirty error [ 265.805163][ T8348] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.1249: corrupted inode contents [ 265.863683][ T8348] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.1249: mark_inode_dirty error [ 265.895514][ T28] kauditd_printk_skb: 681 callbacks suppressed [ 265.895530][ T28] audit: type=1400 audit(1774089506.787:20563): avc: denied { prog_load } for pid=8347 comm="syz.2.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 265.924707][ T8348] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.1249: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 265.924707][ T8348] [ 265.973445][ T28] audit: type=1400 audit(1774089506.787:20564): avc: denied { prog_load } for pid=8357 comm="syz.6.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 266.012979][ T28] audit: type=1400 audit(1774089506.787:20565): avc: denied { bpf } for pid=8357 comm="syz.6.1251" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.081008][ T28] audit: type=1400 audit(1774089506.787:20566): avc: denied { perfmon } for pid=8357 comm="syz.6.1251" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.156160][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.178868][ T28] audit: type=1400 audit(1774089506.787:20567): avc: denied { perfmon } for pid=8357 comm="syz.6.1251" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.271041][ T28] audit: type=1400 audit(1774089506.787:20568): avc: denied { bpf } for pid=8357 comm="syz.6.1251" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.322177][ T28] audit: type=1400 audit(1774089506.817:20569): avc: denied { read append } for pid=8347 comm="syz.2.1249" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 266.491777][ T28] audit: type=1400 audit(1774089506.817:20570): avc: denied { read append open } for pid=8347 comm="syz.2.1249" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 266.694777][ T28] audit: type=1400 audit(1774089506.817:20571): avc: denied { create } for pid=8347 comm="syz.2.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 266.783460][ T28] audit: type=1400 audit(1774089506.817:20572): avc: denied { add_name } for pid=8347 comm="syz.2.1249" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.967122][ T8380] loop1: detected capacity change from 0 to 1024 [ 267.063384][ T8380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.110963][ T8380] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 623: comm syz.1.1258: Attempting to read directory block (623) that is past i_size (638464) [ 267.204096][ T8380] EXT4-fs (loop1): Remounting filesystem read-only [ 267.211672][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1258'. [ 267.399140][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.145280][ T8396] loop1: detected capacity change from 0 to 256 [ 269.422785][ T8396] FAT-fs (loop1): Directory bread(block 64) failed [ 269.443328][ T8396] FAT-fs (loop1): Directory bread(block 65) failed [ 269.450321][ T8396] FAT-fs (loop1): Directory bread(block 66) failed [ 269.467249][ T8396] FAT-fs (loop1): Directory bread(block 67) failed [ 269.476354][ T8396] FAT-fs (loop1): Directory bread(block 68) failed [ 269.488009][ T8396] FAT-fs (loop1): Directory bread(block 69) failed [ 269.497649][ T8396] FAT-fs (loop1): Directory bread(block 70) failed [ 269.514004][ T8396] FAT-fs (loop1): Directory bread(block 71) failed [ 269.521705][ T8396] FAT-fs (loop1): Directory bread(block 72) failed [ 269.541489][ T8396] FAT-fs (loop1): Directory bread(block 73) failed [ 270.313323][ T8432] loop1: detected capacity change from 0 to 128 [ 271.838345][ T28] kauditd_printk_skb: 330 callbacks suppressed [ 271.838361][ T28] audit: type=1400 audit(1774089512.728:20903): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 272.275043][ T28] audit: type=1400 audit(1774089512.768:20904): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.334740][ T28] audit: type=1400 audit(1774089512.768:20905): avc: denied { open } for pid=3313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.367661][ T8420] loop6: detected capacity change from 0 to 128 [ 272.376985][ T8420] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 272.394414][ T8420] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.503750][ T28] audit: type=1400 audit(1774089512.768:20906): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.687561][ T28] audit: type=1400 audit(1774089513.258:20907): avc: denied { read write } for pid=8419 comm="syz.6.1269" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.870942][ T28] audit: type=1400 audit(1774089513.258:20908): avc: denied { read write open } for pid=8419 comm="syz.6.1269" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.987175][ T8445] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.010269][ T8450] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.047555][ T8445] audit: audit_lost=237 audit_rate_limit=0 audit_backlog_limit=64 [ 273.074701][ T8450] audit: audit_lost=238 audit_rate_limit=0 audit_backlog_limit=64 [ 273.262731][ T8450] loop2: detected capacity change from 0 to 512 [ 274.919873][ T8478] loop6: detected capacity change from 0 to 128 [ 275.053264][ T8478] FAULT_INJECTION: forcing a failure. [ 275.053264][ T8478] name failslab, interval 1, probability 0, space 0, times 0 [ 275.109209][ T8478] CPU: 1 UID: 0 PID: 8478 Comm: syz.6.1289 Tainted: G W syzkaller #0 PREEMPT(full) [ 275.109275][ T8478] Tainted: [W]=WARN [ 275.109282][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 275.109334][ T8478] Call Trace: [ 275.109341][ T8478] [ 275.109349][ T8478] __dump_stack+0x1d/0x30 [ 275.109406][ T8478] dump_stack_lvl+0x95/0xd0 [ 275.109431][ T8478] dump_stack+0x15/0x1b [ 275.109450][ T8478] should_fail_ex+0x263/0x280 [ 275.109474][ T8478] should_failslab+0x8c/0xb0 [ 275.109607][ T8478] kmem_cache_alloc_noprof+0x66/0x400 [ 275.109678][ T8478] ? do_getname+0x2e/0x1c0 [ 275.109708][ T8478] ? __rcu_read_unlock+0x4e/0x70 [ 275.109731][ T8478] do_getname+0x2e/0x1c0 [ 275.109751][ T8478] getname_flags+0x1d/0x30 [ 275.109782][ T8478] do_sys_openat2+0x60/0x130 [ 275.109816][ T8478] __x64_sys_creat+0x65/0x90 [ 275.109856][ T8478] x64_sys_call+0x2ea0/0x3020 [ 275.109883][ T8478] do_syscall_64+0x12c/0x370 [ 275.109911][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.110003][ T8478] RIP: 0033:0x7f440120c799 [ 275.110021][ T8478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.110039][ T8478] RSP: 002b:00007f43ffc67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 275.110111][ T8478] RAX: ffffffffffffffda RBX: 00007f4401485fa0 RCX: 00007f440120c799 [ 275.110127][ T8478] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000080 [ 275.110142][ T8478] RBP: 00007f43ffc67090 R08: 0000000000000000 R09: 0000000000000000 [ 275.110183][ T8478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.110230][ T8478] R13: 00007f4401486038 R14: 00007f4401485fa0 R15: 00007ffc78002378 [ 275.110256][ T8478] [ 276.246494][ T8488] loop5: detected capacity change from 0 to 1024 [ 276.312731][ T8488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.393484][ T8496] loop6: detected capacity change from 0 to 1024 [ 276.401229][ T8496] EXT4-fs: Ignoring removed bh option [ 276.406705][ T8496] EXT4-fs: inline encryption not supported [ 276.460970][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 276.475001][ T8496] EXT4-fs: Mount option(s) incompatible with ext2 [ 276.503902][ T8497] loop1: detected capacity change from 0 to 512 [ 276.514551][ T8488] EXT4-fs error (device loop5): ext4_empty_dir:3107: inode #11: block 623: comm syz.5.1293: Attempting to read directory block (623) that is past i_size (638464) [ 276.563867][ T8497] EXT4-fs (loop1): first meta block group too large: 2 (group descriptor block count 1) [ 276.620780][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1293'. [ 276.680559][ T8488] EXT4-fs (loop5): Remounting filesystem read-only [ 276.928046][ T28] kauditd_printk_skb: 326 callbacks suppressed [ 276.928064][ T28] audit: type=1400 audit(1774089517.819:21233): avc: denied { unmount } for pid=6401 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 276.974943][ T6401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.027628][ T28] audit: type=1400 audit(1774089517.919:21234): avc: denied { create } for pid=8503 comm="syz.0.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 277.125605][ T28] audit: type=1400 audit(1774089517.949:21235): avc: denied { prog_load } for pid=8503 comm="syz.0.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 277.230310][ T28] audit: type=1400 audit(1774089517.949:21236): avc: denied { bpf } for pid=8503 comm="syz.0.1296" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 277.280085][ T28] audit: type=1400 audit(1774089517.949:21237): avc: denied { prog_load } for pid=8503 comm="syz.0.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 277.401666][ T28] audit: type=1400 audit(1774089517.949:21238): avc: denied { perfmon } for pid=8503 comm="syz.0.1296" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 277.549238][ T28] audit: type=1400 audit(1774089517.949:21239): avc: denied { bpf } for pid=8503 comm="syz.0.1296" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 277.782586][ T8507] audit: audit_backlog=65 > audit_backlog_limit=64 [ 277.902730][ T8517] audit: audit_backlog=65 > audit_backlog_limit=64 [ 277.909387][ T8517] audit: audit_lost=239 audit_rate_limit=0 audit_backlog_limit=64 [ 278.382456][ T8525] netlink: 'syz.6.1301': attribute type 12 has an invalid length. [ 278.390394][ T8525] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1301'. [ 279.184097][ T8543] syzkaller1: entered promiscuous mode [ 279.189817][ T8543] syzkaller1: entered allmulticast mode [ 279.958128][ T8548] loop1: detected capacity change from 0 to 1024 [ 280.160548][ T8555] loop2: detected capacity change from 0 to 128 [ 280.252267][ T8557] syzkaller1: entered promiscuous mode [ 280.257810][ T8557] syzkaller1: entered allmulticast mode [ 280.630753][ T8548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.084221][ T8563] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 623: comm syz.1.1307: Attempting to read directory block (623) that is past i_size (638464) [ 281.161271][ T8563] EXT4-fs (loop1): Remounting filesystem read-only [ 281.170915][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1307'. [ 281.288842][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.702357][ T8577] loop6: detected capacity change from 0 to 512 [ 281.892562][ T8582] loop5: detected capacity change from 0 to 2048 [ 281.933713][ T28] kauditd_printk_skb: 371 callbacks suppressed [ 281.933732][ T28] audit: type=1400 audit(1774089522.829:21569): avc: denied { prog_load } for pid=8584 comm="syz.1.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 281.984580][ T3657] Alternate GPT is invalid, using primary GPT. [ 281.991162][ T3657] loop5: p2 p3 p7 [ 282.016977][ T28] audit: type=1400 audit(1774089522.829:21570): avc: denied { bpf } for pid=8584 comm="syz.1.1318" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 282.127569][ T28] audit: type=1400 audit(1774089522.829:21571): avc: denied { perfmon } for pid=8584 comm="syz.1.1318" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 282.172652][ T8582] Alternate GPT is invalid, using primary GPT. [ 282.191402][ T8582] loop5: p2 p3 p7 [ 282.210043][ T28] audit: type=1400 audit(1774089522.829:21572): avc: denied { prog_load } for pid=8584 comm="syz.1.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 282.267852][ T28] audit: type=1400 audit(1774089522.829:21573): avc: denied { bpf } for pid=8584 comm="syz.1.1318" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 282.715760][ T28] audit: type=1400 audit(1774089522.829:21574): avc: denied { prog_run } for pid=8584 comm="syz.1.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 282.891733][ T28] audit: type=1400 audit(1774089522.859:21575): avc: denied { read } for pid=8581 comm="syz.2.1316" dev="nsfs" ino=4026532438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 282.913108][ T28] audit: type=1400 audit(1774089522.859:21576): avc: denied { open } for pid=8581 comm="syz.2.1316" path="net:[4026532438]" dev="nsfs" ino=4026532438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 282.937107][ T28] audit: type=1400 audit(1774089522.859:21577): avc: denied { create } for pid=8581 comm="syz.2.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.023293][ T8610] Cannot find add_set index 0 as target [ 283.086418][ T8608] FAULT_INJECTION: forcing a failure. [ 283.086418][ T8608] name failslab, interval 1, probability 0, space 0, times 0 [ 283.101903][ T28] audit: type=1400 audit(1774089522.879:21578): avc: denied { write } for pid=8584 comm="syz.1.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 283.122244][ T8608] CPU: 1 UID: 0 PID: 8608 Comm: syz.1.1325 Tainted: G W syzkaller #0 PREEMPT(full) [ 283.122293][ T8608] Tainted: [W]=WARN [ 283.122300][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.122312][ T8608] Call Trace: [ 283.122318][ T8608] [ 283.122326][ T8608] __dump_stack+0x1d/0x30 [ 283.122476][ T8608] dump_stack_lvl+0x95/0xd0 [ 283.122502][ T8608] dump_stack+0x15/0x1b [ 283.122525][ T8608] should_fail_ex+0x263/0x280 [ 283.122553][ T8608] ? __se_sys_mount+0xef/0x2e0 [ 283.122581][ T8608] should_failslab+0x8c/0xb0 [ 283.122606][ T8608] __kmalloc_cache_noprof+0x5f/0x410 [ 283.122695][ T8608] ? memdup_user+0x99/0xd0 [ 283.122720][ T8608] __se_sys_mount+0xef/0x2e0 [ 283.122742][ T8608] ? fput+0x8f/0xc0 [ 283.122835][ T8608] ? ksys_write+0x194/0x1a0 [ 283.122916][ T8608] __x64_sys_mount+0x67/0x80 [ 283.122951][ T8608] x64_sys_call+0x2d61/0x3020 [ 283.123024][ T8608] do_syscall_64+0x12c/0x370 [ 283.123051][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.123075][ T8608] RIP: 0033:0x7fa015acc799 [ 283.123160][ T8608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.123179][ T8608] RSP: 002b:00007fa014527028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 283.123200][ T8608] RAX: ffffffffffffffda RBX: 00007fa015d45fa0 RCX: 00007fa015acc799 [ 283.123216][ T8608] RDX: 0000200000000480 RSI: 0000200000000200 RDI: 0000000000000000 [ 283.123233][ T8608] RBP: 00007fa014527090 R08: 0000200000000100 R09: 0000000000000000 [ 283.123254][ T8608] R10: 0000000000600000 R11: 0000000000000246 R12: 0000000000000001 [ 283.123270][ T8608] R13: 00007fa015d46038 R14: 00007fa015d45fa0 R15: 00007fff24765178 [ 283.123294][ T8608] [ 283.405440][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 283.424975][ T3657] udevd[3657]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 283.440026][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 283.641185][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 283.714477][ T8606] loop5: detected capacity change from 0 to 1024 [ 283.734715][ T8606] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 283.776553][ T8606] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 283.786929][ T8606] EXT4-fs (loop5): orphan cleanup on readonly fs [ 283.798828][ T8606] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1323: Failed to acquire dquot type 0 [ 283.810675][ T8606] loop5: lost filesystem error report for type 5 error -117 [ 283.821209][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 283.835075][ C1] EXT4-fs (loop5): initial error at time 1774089524: ext4_acquire_dquot:7001 [ 283.843924][ C1] EXT4-fs (loop5): last error at time 1774089524: ext4_acquire_dquot:7001 [ 283.853791][ T8606] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1323: Failed to acquire dquot type 0 [ 283.865440][ T8606] loop5: lost filesystem error report for type 5 error -117 [ 283.878768][ T8606] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.1323: Freeing blocks not in datazone - block = 0, count = 4096 [ 283.900672][ T8606] loop5: lost filesystem error report for type 5 error -117 [ 283.904843][ T8606] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1323: Failed to acquire dquot type 0 [ 283.924054][ T8606] loop5: lost filesystem error report for type 5 error -117 [ 283.931863][ T8606] EXT4-fs (loop5): 1 orphan inode deleted [ 283.948635][ T8606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.034692][ T6401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.078864][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 284.111359][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 284.421673][ T8640] loop5: detected capacity change from 0 to 1764 [ 284.454441][ T8640] iso9660: Bad value for 'check' [ 285.113361][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'. [ 285.137349][ T8655] loop1: detected capacity change from 0 to 512 [ 285.193615][ T8655] EXT4-fs (loop1): first meta block group too large: 2 (group descriptor block count 1) [ 286.050326][ T8677] 9p: Bad value for 'rfdno' [ 286.232778][ T8695] netlink: 'syz.1.1356': attribute type 21 has an invalid length. [ 286.242763][ T8695] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1356'. [ 286.338679][ T8699] loop6: detected capacity change from 0 to 128 [ 286.404653][ T8703] loop1: detected capacity change from 0 to 256 [ 286.434391][ T8703] FAT-fs (loop1): Directory bread(block 64) failed [ 286.443276][ T8703] FAT-fs (loop1): Directory bread(block 65) failed [ 286.457233][ T8703] FAT-fs (loop1): Directory bread(block 66) failed [ 286.472968][ T8703] FAT-fs (loop1): Directory bread(block 67) failed [ 286.525203][ T8703] FAT-fs (loop1): Directory bread(block 68) failed [ 286.550918][ T8703] FAT-fs (loop1): Directory bread(block 69) failed [ 286.598955][ T8703] FAT-fs (loop1): Directory bread(block 70) failed [ 286.644266][ T8703] FAT-fs (loop1): Directory bread(block 71) failed [ 286.663546][ T8703] FAT-fs (loop1): Directory bread(block 72) failed [ 286.670153][ T8703] FAT-fs (loop1): Directory bread(block 73) failed [ 286.740997][ T8714] loop5: detected capacity change from 0 to 1024 [ 286.752140][ T8714] EXT4-fs: Ignoring removed nobh option [ 286.791120][ T8714] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 286.906406][ T8714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.923223][ T8718] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1365'. [ 286.942469][ T28] kauditd_printk_skb: 604 callbacks suppressed [ 286.942488][ T28] audit: type=1400 audit(1774089527.840:22177): avc: denied { create } for pid=8723 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 287.024269][ T8718] netlink: zone id is out of range [ 287.029510][ T8718] netlink: zone id is out of range [ 287.060142][ T8718] netlink: zone id is out of range [ 287.080234][ T8718] netlink: zone id is out of range [ 287.152482][ T8718] netlink: set zone limit has 8 unknown bytes [ 287.198775][ T28] audit: type=1400 audit(1774089527.840:22178): avc: denied { ioctl } for pid=8723 comm="syz.0.1368" path="socket:[22192]" dev="sockfs" ino=22192 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 287.201665][ T8731] audit: audit_backlog=65 > audit_backlog_limit=64 [ 287.226105][ T28] audit: type=1400 audit(1774089527.840:22179): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.255876][ T28] audit: type=1400 audit(1774089527.840:22180): avc: denied { open } for pid=3313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.281015][ T8731] audit: audit_lost=254 audit_rate_limit=0 audit_backlog_limit=64 [ 287.291499][ T28] audit: type=1400 audit(1774089527.840:22181): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 287.318125][ T8731] audit: backlog limit exceeded [ 287.323712][ T8731] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.1364: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 287.344899][ T28] audit: type=1400 audit(1774089527.890:22182): avc: denied { create } for pid=8723 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 287.368757][ T28] audit: type=1400 audit(1774089527.900:22183): avc: denied { name_bind } for pid=8716 comm="syz.2.1365" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 287.391435][ T8731] EXT4-fs (loop5): Remounting filesystem read-only [ 288.001612][ T8734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=8734 comm=syz.0.1369 [ 288.230566][ T6401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.377072][ T8776] syzkaller1: entered promiscuous mode [ 289.382665][ T8776] syzkaller1: entered allmulticast mode [ 289.629275][ T8777] loop2: detected capacity change from 0 to 512 [ 289.775245][ T8777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.826993][ T8777] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.990947][ T8777] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.1381: corrupted inode contents [ 290.035373][ T8777] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.1381: mark_inode_dirty error [ 290.070831][ T8777] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.1381: corrupted inode contents [ 290.140686][ T8777] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.1381: mark_inode_dirty error [ 290.246458][ T8777] FAULT_INJECTION: forcing a failure. [ 290.246458][ T8777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.296651][ T8777] CPU: 0 UID: 0 PID: 8777 Comm: syz.2.1381 Tainted: G W syzkaller #0 PREEMPT(full) [ 290.296691][ T8777] Tainted: [W]=WARN [ 290.296700][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.296713][ T8777] Call Trace: [ 290.296719][ T8777] [ 290.296725][ T8777] __dump_stack+0x1d/0x30 [ 290.296756][ T8777] dump_stack_lvl+0x95/0xd0 [ 290.296853][ T8777] dump_stack+0x15/0x1b [ 290.296881][ T8777] should_fail_ex+0x263/0x280 [ 290.296915][ T8777] should_fail+0xb/0x20 [ 290.296940][ T8777] should_fail_usercopy+0x1a/0x20 [ 290.297029][ T8777] strncpy_from_user+0x27/0x250 [ 290.297114][ T8777] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 290.297140][ T8777] do_getname+0x59/0x1c0 [ 290.297169][ T8777] getname_flags+0x1d/0x30 [ 290.297197][ T8777] do_sys_openat2+0x60/0x130 [ 290.297285][ T8777] __x64_sys_openat+0xf2/0x120 [ 290.297319][ T8777] x64_sys_call+0x1e39/0x3020 [ 290.297422][ T8777] do_syscall_64+0x12c/0x370 [ 290.297450][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.297470][ T8777] RIP: 0033:0x7f4f8528c799 [ 290.297484][ T8777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.297501][ T8777] RSP: 002b:00007f4f83cdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 290.297539][ T8777] RAX: ffffffffffffffda RBX: 00007f4f85505fa0 RCX: 00007f4f8528c799 [ 290.297558][ T8777] RDX: 00000000000800c4 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 290.297575][ T8777] RBP: 00007f4f83cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 290.297591][ T8777] R10: 0000000000000142 R11: 0000000000000246 R12: 0000000000000001 [ 290.297610][ T8777] R13: 00007f4f85506038 R14: 00007f4f85505fa0 R15: 00007fff5d86a968 [ 290.297630][ T8777] [ 290.653014][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.936953][ T8802] loop2: detected capacity change from 0 to 128 [ 291.743844][ T8809] macsec0: entered promiscuous mode [ 291.749093][ T8809] bridge0: entered promiscuous mode [ 291.967363][ T28] kauditd_printk_skb: 643 callbacks suppressed [ 291.967381][ T28] audit: type=1400 audit(1774089532.860:22827): avc: denied { read write } for pid=6401 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.070703][ T28] audit: type=1400 audit(1774089532.890:22828): avc: denied { read write open } for pid=6401 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.180243][ T28] audit: type=1400 audit(1774089532.890:22829): avc: denied { ioctl } for pid=6401 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.259779][ T8820] loop1: detected capacity change from 0 to 1024 [ 292.283724][ T8820] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 292.290386][ T28] audit: type=1400 audit(1774089532.940:22830): avc: denied { execmem } for pid=8818 comm="syz.1.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 292.337156][ T8820] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 292.346502][ T8820] EXT4-fs (loop1): orphan cleanup on readonly fs [ 292.354358][ T28] audit: type=1400 audit(1774089533.030:22831): avc: denied { open } for pid=8819 comm="syz.5.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 292.374570][ T28] audit: type=1400 audit(1774089533.030:22832): avc: denied { perfmon } for pid=8819 comm="syz.5.1396" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 292.398530][ T28] audit: type=1400 audit(1774089533.030:22833): avc: denied { kernel } for pid=8819 comm="syz.5.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 292.419022][ T28] audit: type=1400 audit(1774089533.030:22834): avc: denied { tracepoint } for pid=8819 comm="syz.5.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 292.440177][ T28] audit: type=1400 audit(1774089533.030:22835): avc: denied { create } for pid=8819 comm="syz.5.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 292.460404][ T28] audit: type=1400 audit(1774089533.050:22836): avc: denied { execmem } for pid=8816 comm="syz.0.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 292.480984][ T8820] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1395: Failed to acquire dquot type 0 [ 292.492683][ T8820] loop1: lost filesystem error report for type 5 error -117 [ 292.497016][ T8820] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1395: Failed to acquire dquot type 0 [ 292.504896][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 292.504973][ C0] EXT4-fs (loop1): initial error at time 1774089533: ext4_acquire_dquot:7001 [ 292.505076][ C0] EXT4-fs (loop1): last error at time 1774089533: ext4_acquire_dquot:7001 [ 292.541311][ T8820] loop1: lost filesystem error report for type 5 error -117 [ 292.545047][ T8820] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.1395: Freeing blocks not in datazone - block = 0, count = 4096 [ 292.569976][ T8820] loop1: lost filesystem error report for type 5 error -117 [ 292.572665][ T8820] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.1395: Failed to acquire dquot type 0 [ 292.591902][ T8820] loop1: lost filesystem error report for type 5 error -117 [ 292.595910][ T8820] EXT4-fs (loop1): 1 orphan inode deleted [ 292.641110][ T8820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 292.780632][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.803916][ T8823] loop2: detected capacity change from 0 to 1024 [ 292.944415][ T8823] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 292.968097][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'. [ 293.035722][ T8823] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 293.077094][ T8823] EXT4-fs (loop2): orphan cleanup on readonly fs [ 293.157501][ T8823] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1393: Failed to acquire dquot type 0 [ 293.216282][ T8823] loop2: lost filesystem error report for type 5 error -117 [ 293.220117][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 293.233986][ C0] EXT4-fs (loop2): initial error at time 1774089534: ext4_acquire_dquot:7001 [ 293.242828][ C0] EXT4-fs (loop2): last error at time 1774089534: ext4_acquire_dquot:7001 [ 293.255668][ T8823] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1393: Failed to acquire dquot type 0 [ 293.328105][ T8823] loop2: lost filesystem error report for type 5 error -117 [ 293.340424][ T8823] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.1393: Freeing blocks not in datazone - block = 0, count = 4096 [ 293.490913][ T8823] loop2: lost filesystem error report for type 5 error -117 [ 293.494681][ T8823] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1393: Failed to acquire dquot type 0 [ 293.519433][ T8823] loop2: lost filesystem error report for type 5 error -117 [ 293.521216][ T8823] EXT4-fs (loop2): 1 orphan inode deleted [ 293.542550][ T8823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 293.574526][ T8842] loop6: detected capacity change from 0 to 512 [ 293.623113][ T8842] EXT4-fs (loop6): 1 orphan inode deleted [ 293.630534][ T8842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.712622][ T8842] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.840159][ T7288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.927659][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.031266][ T8853] loop1: detected capacity change from 0 to 1024 [ 294.198895][ T8853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.367115][ T8853] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 623: comm syz.1.1406: Attempting to read directory block (623) that is past i_size (638464) [ 294.409134][ T8844] loop5: detected capacity change from 0 to 128 [ 294.417507][ T8844] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 294.434312][ T8844] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 294.457076][ T8853] EXT4-fs (loop1): Remounting filesystem read-only [ 294.465233][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1406'. [ 294.769498][ T8865] loop5: detected capacity change from 0 to 128 [ 294.777582][ T8865] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 294.790484][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.793225][ T8865] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 295.122965][ T8873] loop2: detected capacity change from 0 to 8192 [ 295.134325][ T8881] FAULT_INJECTION: forcing a failure. [ 295.134325][ T8881] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 295.162173][ T8878] ip6erspan0: entered allmulticast mode [ 295.174351][ T8881] CPU: 1 UID: 0 PID: 8881 Comm: syz.1.1417 Tainted: G W syzkaller #0 PREEMPT(full) [ 295.174388][ T8881] Tainted: [W]=WARN [ 295.174397][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.174469][ T8881] Call Trace: [ 295.174475][ T8881] [ 295.174531][ T8881] __dump_stack+0x1d/0x30 [ 295.174561][ T8881] dump_stack_lvl+0x95/0xd0 [ 295.174623][ T8881] dump_stack+0x15/0x1b [ 295.174659][ T8881] should_fail_ex+0x263/0x280 [ 295.174683][ T8881] should_fail_alloc_page+0xf2/0x100 [ 295.174704][ T8881] __alloc_frozen_pages_noprof+0x108/0x360 [ 295.174736][ T8881] alloc_pages_mpol+0xb3/0x260 [ 295.174902][ T8881] alloc_migration_target_by_mpol+0x11b/0x2a0 [ 295.174991][ T8881] migrate_pages_batch+0x399/0x2400 [ 295.175021][ T8881] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 295.175139][ T8881] ? __walk_page_range+0x324/0x340 [ 295.175185][ T8881] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 295.175216][ T8881] ? find_vma+0x6c/0xa0 [ 295.175246][ T8881] migrate_pages+0x1031/0x18c0 [ 295.175279][ T8881] ? mas_next_slot+0x69b/0x6f0 [ 295.175339][ T8881] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 295.175476][ T8881] __se_sys_mbind+0xc9c/0xde0 [ 295.175519][ T8881] __x64_sys_mbind+0x78/0x90 [ 295.175596][ T8881] x64_sys_call+0x2b72/0x3020 [ 295.175670][ T8881] do_syscall_64+0x12c/0x370 [ 295.175696][ T8881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.175716][ T8881] RIP: 0033:0x7fa015acc799 [ 295.175732][ T8881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.175801][ T8881] RSP: 002b:00007fa014527028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 295.175821][ T8881] RAX: ffffffffffffffda RBX: 00007fa015d45fa0 RCX: 00007fa015acc799 [ 295.175870][ T8881] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 295.175885][ T8881] RBP: 00007fa014527090 R08: 0000000000000000 R09: 0000000000000002 [ 295.175956][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.175971][ T8881] R13: 00007fa015d46038 R14: 00007fa015d45fa0 R15: 00007fff24765178 [ 295.176008][ T8881] [ 296.011719][ T8900] loop6: detected capacity change from 0 to 8192 [ 296.086166][ T8900] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 296.109791][ T8900] FAT-fs (loop6): Filesystem has been set read-only [ 296.153450][ T8904] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 296.586132][ T8912] loop6: detected capacity change from 0 to 128 [ 297.052164][ T28] kauditd_printk_skb: 484 callbacks suppressed [ 297.052211][ T28] audit: type=1400 audit(1774089537.951:23309): avc: denied { read write } for pid=8909 comm="syz.5.1426" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 297.088504][ T8910] loop5: detected capacity change from 0 to 128 [ 297.108449][ T8910] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 297.121307][ T8910] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 297.193379][ T28] audit: type=1400 audit(1774089537.951:23310): avc: denied { open } for pid=8909 comm="syz.5.1426" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 297.266401][ T28] audit: type=1400 audit(1774089537.951:23311): avc: denied { ioctl } for pid=8909 comm="syz.5.1426" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 297.309632][ T28] audit: type=1400 audit(1774089538.001:23312): avc: denied { mounton } for pid=8909 comm="syz.5.1426" path="/113/bus" dev="tmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 297.389814][ T28] audit: type=1400 audit(1774089538.041:23313): avc: denied { mount } for pid=8909 comm="syz.5.1426" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 297.459621][ T8914] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1428'. [ 297.468653][ T28] audit: type=1400 audit(1774089538.041:23314): avc: denied { read write } for pid=8909 comm="syz.5.1426" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 297.563693][ T28] audit: type=1400 audit(1774089538.041:23315): avc: denied { read write open } for pid=8909 comm="syz.5.1426" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 297.696633][ T28] audit: type=1400 audit(1774089538.091:23316): avc: denied { unmount } for pid=6401 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 297.762066][ T28] audit: type=1400 audit(1774089538.161:23317): avc: denied { read write } for pid=6401 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 297.860282][ T28] audit: type=1400 audit(1774089538.161:23318): avc: denied { open } for pid=6401 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 297.877391][ T8920] loop6: detected capacity change from 0 to 1024 [ 297.941667][ T8920] EXT4-fs: Ignoring removed bh option [ 298.035442][ T8920] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.071022][ T8926] netlink: 4336 bytes leftover after parsing attributes in process `syz.2.1431'. [ 298.143476][ T8924] netlink: 4336 bytes leftover after parsing attributes in process `syz.2.1431'. [ 298.218884][ T8920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.296669][ T8920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.370432][ T8939] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 298.440399][ T8920] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 298.468890][ T8920] EXT4-fs (loop6): Remounting filesystem read-only [ 298.572227][ T8948] loop1: detected capacity change from 0 to 1024 [ 298.585973][ T8948] EXT4-fs: inline encryption not supported [ 298.609072][ T8948] EXT4-fs: Ignoring removed nobh option [ 298.615826][ T8948] EXT4-fs: Ignoring removed bh option [ 298.641287][ T8943] veth0_to_team: left promiscuous mode [ 298.658019][ T8948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.728304][ T8957] loop2: detected capacity change from 0 to 512 [ 299.776856][ T6087] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.809249][ T7288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.819613][ T8957] EXT4-fs (loop2): first meta block group too large: 2 (group descriptor block count 1) [ 299.849430][ T6087] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.859073][ T6087] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.889719][ T8961] SELinux: policydb table sizes (8,16453) do not match mine (8,7) [ 299.939332][ T8961] SELinux: failed to load policy [ 299.955840][ T6087] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.981570][ T6087] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.134673][ T6087] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.184666][ T6087] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.229651][ T6087] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.563317][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.640808][ T8975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=8975 comm=syz.0.1444 [ 300.679311][ T8979] program syz.2.1446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.223794][ T8967] loop6: detected capacity change from 0 to 1024 [ 301.302165][ T9010] tmpfs: Unknown parameter 'sizZ' [ 301.431083][ T8967] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 301.504777][ T8967] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 301.606883][ T8967] EXT4-fs (loop6): orphan cleanup on readonly fs [ 301.680441][ T8967] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.1438: Failed to acquire dquot type 0 [ 301.715650][ T8967] loop6: lost filesystem error report for type 5 error -117 [ 301.726378][ T8967] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.1438: Failed to acquire dquot type 0 [ 301.734115][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 301.734244][ C1] EXT4-fs (loop6): initial error at time 1774089542: ext4_acquire_dquot:7001 [ 301.734347][ C1] EXT4-fs (loop6): last error at time 1774089542: ext4_acquire_dquot:7001 [ 301.775900][ T8967] loop6: lost filesystem error report for type 5 error -117 [ 301.786555][ T8967] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.1438: Freeing blocks not in datazone - block = 0, count = 4096 [ 301.837155][ T9032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.841115][ T8967] loop6: lost filesystem error report for type 5 error -117 [ 301.847703][ T9032] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.867469][ T8967] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.1438: Failed to acquire dquot type 0 [ 301.883894][ T9032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.899720][ T8967] loop6: lost filesystem error report for type 5 error -117 [ 301.901675][ T8967] EXT4-fs (loop6): 1 orphan inode deleted [ 301.961444][ T8967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 302.092302][ T28] kauditd_printk_skb: 537 callbacks suppressed [ 302.092321][ T28] audit: type=1326 audit(1774089542.992:23850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8528c799 code=0x7ffc0000 [ 302.125114][ T28] audit: type=1326 audit(1774089542.992:23851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f4f8528c799 code=0x7ffc0000 [ 302.165504][ T28] audit: type=1326 audit(1774089542.992:23852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8528c799 code=0x7ffc0000 [ 302.194567][ T9051] loop5: detected capacity change from 0 to 512 [ 302.201811][ T28] audit: type=1326 audit(1774089542.992:23853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8528c799 code=0x7ffc0000 [ 302.228313][ T28] audit: type=1400 audit(1774089542.992:23854): avc: denied { read write } for pid=6401 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.253252][ T28] audit: type=1400 audit(1774089542.992:23855): avc: denied { open } for pid=6401 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.280566][ T28] audit: type=1400 audit(1774089542.992:23856): avc: denied { ioctl } for pid=6401 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 302.307583][ T28] audit: type=1326 audit(1774089542.992:23857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.2.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f4f8528c799 code=0x7ffc0000 [ 302.335279][ T28] audit: type=1400 audit(1774089543.062:23858): avc: denied { create } for pid=9046 comm="syz.2.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 302.336072][ T7288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.359432][ T28] audit: type=1400 audit(1774089543.062:23859): avc: denied { accept } for pid=9046 comm="syz.2.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 302.763467][ T9058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=9058 comm=syz.0.1470 [ 303.040510][ T9058] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 303.145343][ T9064] loop1: detected capacity change from 0 to 8192 [ 303.402775][ T9070] syzkaller1: entered promiscuous mode [ 303.408321][ T9070] syzkaller1: entered allmulticast mode [ 303.887631][ T9074] FAULT_INJECTION: forcing a failure. [ 303.887631][ T9074] name failslab, interval 1, probability 0, space 0, times 0 [ 303.963453][ T9074] CPU: 0 UID: 0 PID: 9074 Comm: syz.6.1474 Tainted: G W syzkaller #0 PREEMPT(full) [ 303.963567][ T9074] Tainted: [W]=WARN [ 303.963577][ T9074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.963592][ T9074] Call Trace: [ 303.963600][ T9074] [ 303.963608][ T9074] __dump_stack+0x1d/0x30 [ 303.963642][ T9074] dump_stack_lvl+0x95/0xd0 [ 303.963671][ T9074] dump_stack+0x15/0x1b [ 303.963692][ T9074] should_fail_ex+0x263/0x280 [ 303.963777][ T9074] ? __se_sys_memfd_create+0x1df/0x3b0 [ 303.963839][ T9074] should_failslab+0x8c/0xb0 [ 303.963862][ T9074] __kmalloc_cache_noprof+0x5f/0x410 [ 303.963886][ T9074] ? fput+0x8f/0xc0 [ 303.963916][ T9074] __se_sys_memfd_create+0x1df/0x3b0 [ 303.963985][ T9074] __x64_sys_memfd_create+0x31/0x40 [ 303.964034][ T9074] x64_sys_call+0x1f22/0x3020 [ 303.964067][ T9074] do_syscall_64+0x12c/0x370 [ 303.964092][ T9074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.964127][ T9074] RIP: 0033:0x7f440120c799 [ 303.964144][ T9074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.964165][ T9074] RSP: 002b:00007f43ffc66e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 303.964186][ T9074] RAX: ffffffffffffffda RBX: 000000000000045b RCX: 00007f440120c799 [ 303.964198][ T9074] RDX: 00007f43ffc66ee0 RSI: 0000000000000000 RDI: 00007f44012a2e79 [ 303.964211][ T9074] RBP: 0000200000000280 R08: 00000000ffffffff R09: 0000000000000000 [ 303.964270][ T9074] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000180 [ 303.964285][ T9074] R13: 00007f43ffc66ee0 R14: 00007f43ffc66ea0 R15: 0000200000000840 [ 303.964313][ T9074] [ 304.178929][ T9076] binfmt_misc: register: failed to install interpreter file ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 304.239373][ T9079] loop2: detected capacity change from 0 to 512 [ 304.247296][ T9079] EXT4-fs: Ignoring removed nobh option [ 304.360852][ T9079] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 304.445096][ T9079] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1476: iget: bad i_size value: 38620345925642 [ 304.478492][ T9079] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 304.483124][ T9079] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1476: couldn't read orphan inode 15 (err -117) [ 304.492346][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 304.492360][ C1] EXT4-fs (loop2): initial error at time 1774089545: ext4_orphan_get:1391: inode 15 [ 304.492402][ C1] EXT4-fs (loop2): last error at time 1774089545: ext4_orphan_get:1391: inode 15 [ 304.581833][ T9079] loop2: lost filesystem error report for type 5 error -117 [ 304.599014][ T9079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.627993][ T9093] Process accounting resumed [ 304.711417][ T9079] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1476: bg 0: block 5: invalid block bitmap [ 304.917463][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1484'. [ 305.012329][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.507306][ T9127] loop1: detected capacity change from 0 to 128 [ 305.820806][ T6103] Bluetooth: hci0: Frame reassembly failed (-84) [ 305.854037][ T9126] loop5: detected capacity change from 0 to 8192 [ 305.886492][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1491'. [ 306.325440][ T9139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1493'. [ 307.593352][ T28] kauditd_printk_skb: 483 callbacks suppressed [ 307.593371][ T28] audit: type=1400 audit(1774089547.572:24343): avc: denied { prog_load } for pid=9140 comm="syz.0.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 307.628766][ T28] audit: type=1400 audit(1774089547.572:24344): avc: denied { bpf } for pid=9140 comm="syz.0.1494" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 307.872052][ T28] audit: type=1400 audit(1774089547.572:24345): avc: denied { prog_load } for pid=9140 comm="syz.0.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 307.918441][ T5345] Bluetooth: hci0: command 0x1003 tx timeout [ 307.928468][ T9154] SELinux: Context system_u: is not valid (left unmapped). [ 307.935824][ T3735] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 307.972502][ T28] audit: type=1400 audit(1774089547.572:24346): avc: denied { perfmon } for pid=9140 comm="syz.0.1494" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.024262][ T28] audit: type=1400 audit(1774089547.572:24347): avc: denied { open } for pid=9140 comm="syz.0.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 308.061595][ T9156] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1496'. [ 308.111100][ T9156] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1496'. [ 308.130353][ T28] audit: type=1400 audit(1774089547.572:24348): avc: denied { perfmon } for pid=9140 comm="syz.0.1494" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 308.215969][ T28] audit: type=1400 audit(1774089547.582:24349): avc: denied { kernel } for pid=9140 comm="syz.0.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 308.258291][ T28] audit: type=1400 audit(1774089547.582:24350): avc: denied { write } for pid=9140 comm="syz.0.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 308.297215][ T28] audit: type=1400 audit(1774089547.622:24351): avc: denied { create } for pid=9140 comm="syz.0.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 308.318547][ T28] audit: type=1400 audit(1774089548.772:24352): avc: denied { name_bind } for pid=9149 comm="syz.5.1496" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 308.322841][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1497'. [ 308.350288][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1497'. [ 308.397456][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1497'. [ 308.398109][ T30] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.419676][ T30] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.428652][ T9159] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1497'. [ 308.437535][ T30] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.451415][ T30] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.461421][ T9165] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 308.476951][ T9165] netlink: 'syz.1.1499': attribute type 1 has an invalid length. [ 308.581515][ T9169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1500'. [ 308.950887][ T9175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.958515][ T9175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.991465][ T9175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.999197][ T9175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.292309][ T9197] loop5: detected capacity change from 0 to 128 [ 309.465516][ T9199] syzkaller1: entered promiscuous mode [ 309.471199][ T9199] syzkaller1: entered allmulticast mode [ 309.662594][ T9200] syz.5.1506: attempt to access beyond end of device [ 309.662594][ T9200] loop5: rw=2049, sector=145, nr_sectors = 144 limit=128 [ 309.824071][ T9205] loop2: detected capacity change from 0 to 512 [ 309.885717][ T9205] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1513: bg 0: block 248: padding at end of block bitmap is not set [ 309.914431][ T9205] loop2: lost filesystem error report for type 5 error -117 [ 309.914680][ T9205] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1513: Failed to acquire dquot type 1 [ 309.922060][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 309.922096][ C0] EXT4-fs (loop2): last error at time 1774089550: ext4_validate_block_bitmap:441 [ 309.960564][ T9205] loop2: lost filesystem error report for type 5 error -117 [ 309.970122][ T9205] EXT4-fs (loop2): 1 truncate cleaned up [ 309.990345][ T9205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.003465][ T9205] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.045620][ T6087] kworker/u8:13: attempt to access beyond end of device [ 310.045620][ T6087] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 310.058032][ T9219] loop1: detected capacity change from 0 to 128 [ 310.073907][ T9219] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 310.087367][ T9219] ext4 filesystem being mounted at /306/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 310.126495][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 310.174423][ T9222] ALSA: seq fatal error: cannot create timer (-22) [ 310.223037][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.605710][ T9238] __nla_validate_parse: 6 callbacks suppressed [ 310.605781][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1524'. [ 310.750826][ T9232] loop6: detected capacity change from 0 to 8192 [ 310.831915][ T9245] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 310.831915][ T9245] The task syz.1.1522 (9245) triggered the difference, watch for misbehavior. [ 311.209660][ T9258] syzkaller1: entered promiscuous mode [ 311.215168][ T9258] syzkaller1: entered allmulticast mode [ 311.737889][ T9280] loop5: detected capacity change from 0 to 1764 [ 311.749056][ T9280] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 312.610709][ T28] kauditd_printk_skb: 547 callbacks suppressed [ 312.610723][ T28] audit: type=1400 audit(1774089553.513:24898): avc: denied { module_request } for pid=9273 comm="syz.2.1536" kmod="wpan4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 312.915869][ T28] audit: type=1400 audit(1774089553.543:24899): avc: denied { write } for pid=9273 comm="syz.2.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 313.061398][ T9304] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.069443][ T28] audit: type=1400 audit(1774089553.573:24900): avc: denied { sys_module } for pid=9273 comm="syz.2.1536" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 313.115928][ T9303] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.141205][ T3313] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.149711][ T9311] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.156243][ T9311] audit: audit_lost=255 audit_rate_limit=0 audit_backlog_limit=64 [ 313.168606][ T9304] audit: audit_lost=256 audit_rate_limit=0 audit_backlog_limit=64 [ 313.219270][ T9303] audit: audit_lost=257 audit_rate_limit=0 audit_backlog_limit=64 [ 313.246117][ T9304] team0: No ports can be present during mode change [ 313.287751][ T9303] loop6: detected capacity change from 0 to 512 [ 313.405689][ T9321] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1543'. [ 313.988599][ T9337] loop2: detected capacity change from 0 to 512 [ 314.025295][ T9337] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 314.110464][ T9337] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #3: comm syz.2.1551: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 314.157643][ T9337] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 314.157849][ T9337] EXT4-fs error (device loop2): ext4_quota_enable:7195: comm syz.2.1551: Bad quota inode: 3, type: 0 [ 314.177893][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 314.177913][ C0] EXT4-fs (loop2): initial error at time 1774089555: ext4_ext_check_inode:521: inode 3 [ 314.177949][ C0] EXT4-fs (loop2): last error at time 1774089555: ext4_ext_check_inode:521: inode 3 [ 314.281632][ T9343] loop5: detected capacity change from 0 to 8192 [ 314.355758][ T9349] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1554'. [ 314.399337][ T9337] loop2: lost filesystem error report for type 5 error -117 [ 314.403826][ T9337] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 314.412829][ T9349] batadv_slave_1: entered promiscuous mode [ 314.466412][ T9337] EXT4-fs (loop2): mount failed [ 314.524536][ T9337] loop2: detected capacity change from 0 to 1024 [ 314.543556][ T9337] ext4: Unknown parameter 'smackfshat' [ 314.561003][ T9355] loop1: detected capacity change from 0 to 512 [ 314.634767][ T9355] EXT4-fs: Ignoring removed nobh option [ 314.837842][ T9358] loop6: detected capacity change from 0 to 512 [ 314.892566][ T9355] EXT4-fs (loop1): 1 orphan inode deleted [ 314.927975][ T9355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.239555][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.168929][ T9383] loop2: detected capacity change from 0 to 8192 [ 316.391274][ T9389] tmpfs: Unknown parameter 'sizZ' [ 316.954132][ T9400] loop5: detected capacity change from 0 to 512 [ 316.992739][ T9400] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 317.024162][ T9403] loop6: detected capacity change from 0 to 1024 [ 317.048684][ T9403] EXT4-fs: Ignoring removed mblk_io_submit option [ 317.075491][ T9400] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1570: bad orphan inode 131083 [ 317.107937][ T9403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.130075][ T9400] loop5: lost filesystem error report for type 5 error -117 [ 317.130873][ T9400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.287695][ T7288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.593436][ T6401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.600003][ T9413] loop1: detected capacity change from 0 to 8192 [ 317.620122][ T28] kauditd_printk_skb: 576 callbacks suppressed [ 317.620134][ T28] audit: type=1400 audit(1774089558.523:25458): avc: denied { read write } for pid=7288 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 317.730173][ T28] audit: type=1400 audit(1774089558.523:25459): avc: denied { mounton } for pid=9407 comm="syz.1.1572" path="/322/file0" dev="tmpfs" ino=1757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 317.927762][ T28] audit: type=1400 audit(1774089558.523:25460): avc: denied { mount } for pid=9407 comm="syz.1.1572" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 318.007523][ T9428] loop5: detected capacity change from 0 to 1024 [ 318.009512][ T28] audit: type=1400 audit(1774089558.523:25461): avc: denied { read write } for pid=9407 comm="syz.1.1572" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.102460][ T9428] EXT4-fs: Ignoring removed orlov option [ 318.117764][ T28] audit: type=1400 audit(1774089558.523:25462): avc: denied { open } for pid=9407 comm="syz.1.1572" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.267173][ T28] audit: type=1400 audit(1774089558.553:25463): avc: denied { read write open } for pid=7288 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.268333][ T9428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.292496][ T28] audit: type=1400 audit(1774089558.553:25464): avc: denied { ioctl } for pid=7288 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.330627][ T28] audit: type=1400 audit(1774089558.583:25465): avc: denied { read write } for pid=6401 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.356123][ T28] audit: type=1400 audit(1774089558.583:25466): avc: denied { open } for pid=6401 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.380479][ T28] audit: type=1400 audit(1774089558.583:25467): avc: denied { ioctl } for pid=6401 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.690253][ T9460] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1582'. [ 318.950191][ T6401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.099144][ T9478] loop5: detected capacity change from 0 to 1024 [ 319.120897][ T9478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.158697][ T9478] EXT4-fs error (device loop5): ext4_empty_dir:3107: inode #11: block 623: comm syz.5.1585: Attempting to read directory block (623) that is past i_size (638464) [ 319.175325][ T9478] EXT4-fs (loop5): Remounting filesystem read-only [ 319.183244][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1585'. [ 319.813011][ T6401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.960820][ T9507] loop2: detected capacity change from 0 to 8192 [ 321.387054][ T9516] loop5: detected capacity change from 0 to 128 [ 321.396158][ T9516] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 321.437108][ T9516] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 321.792789][ T9523] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1598'. [ 321.868832][ T9526] netlink: 'syz.5.1598': attribute type 10 has an invalid length. [ 321.897521][ T9520] infiniband syz0: set down [ 321.902520][ T9523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.963682][ T9518] loop6: detected capacity change from 0 to 32768 [ 321.968417][ T9514] loop1: detected capacity change from 0 to 512 [ 321.978866][ T9520] infiniband syz0: added bond0 [ 321.987036][ T9518] loop6: p1 p3 < p5 p6 p7 > [ 321.996840][ T9523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.035063][ T9518] loop6: p6 start 117448704 is beyond EOD, truncated [ 322.048278][ T9520] RDS/IB: syz0: added [ 322.051907][ T9523] bond0 (unregistering): Released all slaves [ 322.065992][ T9520] smc: adding ib device syz0 with port count 1 [ 322.082995][ T9520] smc: ib device syz0 port 1 has no pnetid [ 322.188438][ T9514] EXT4-fs (loop1): 1 orphan inode deleted [ 322.222244][ T9514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.437095][ T9539] netlink: 'syz.2.1602': attribute type 1 has an invalid length. [ 322.477064][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.511517][ T9530] loop5: detected capacity change from 0 to 512 [ 322.601843][ T9530] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 322.623842][ T9530] EXT4-fs (loop5): orphan cleanup on readonly fs [ 322.630439][ T28] kauditd_printk_skb: 503 callbacks suppressed [ 322.630469][ T28] audit: type=1400 audit(1774089563.514:25971): avc: denied { bind } for pid=9538 comm="syz.6.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 322.665707][ T9545] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1604'. [ 322.675298][ T28] audit: type=1400 audit(1774089563.524:25972): avc: denied { create } for pid=9543 comm="syz.1.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 322.703173][ T28] audit: type=1400 audit(1774089563.544:25973): avc: denied { write } for pid=9543 comm="syz.1.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 322.735803][ T28] audit: type=1400 audit(1774089563.554:25974): avc: denied { nlmsg_write } for pid=9543 comm="syz.1.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 322.759729][ T28] audit: type=1400 audit(1774089563.594:25975): avc: denied { module_request } for pid=9538 comm="syz.6.1603" kmod="net-pf-10-proto-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 322.805390][ T28] audit: type=1400 audit(1774089563.684:25976): avc: denied { ioctl } for pid=9543 comm="syz.1.1604" path="socket:[24438]" dev="sockfs" ino=24438 ioctlcmd=0x5841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 322.848993][ T9530] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1598: corrupted inode contents [ 322.861516][ T28] audit: type=1400 audit(1774089563.694:25977): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.886880][ T28] audit: type=1400 audit(1774089563.694:25978): avc: denied { open } for pid=3313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.911886][ T28] audit: type=1400 audit(1774089563.694:25979): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.939065][ T9530] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 322.940298][ T9530] EXT4-fs (loop5): Remounting filesystem read-only [ 322.949658][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 322.949757][ C1] EXT4-fs (loop5): initial error at time 1774089563: ext4_do_update_inode:5569: inode 16 [ 322.949830][ C1] EXT4-fs (loop5): last error at time 1774089563: ext4_do_update_inode:5569: inode 16 [ 323.025771][ T9530] EXT4-fs (loop5): 1 truncate cleaned up [ 323.045465][ T5322] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 323.076304][ T5322] Quota error (device loop5): write_blk: dquota write failed [ 323.113000][ T5322] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 323.138378][ T5322] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 323.187578][ T9530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.217688][ T9554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=9554 comm=syz.1.1606 [ 323.252169][ T9530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.280749][ T9554] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 323.316874][ T6101] smc: removing ib device syz0 [ 324.314342][ T3657] udevd[3657]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 324.315662][ T9560] loop1: detected capacity change from 0 to 512 [ 324.328926][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 324.482411][ T9560] EXT4-fs (loop1): 1 truncate cleaned up [ 324.536906][ T9560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.716582][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1610'. [ 324.978261][ T9576] loop2: detected capacity change from 0 to 8192 [ 325.003638][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 325.006213][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 325.828835][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.161426][ T9592] loop6: detected capacity change from 0 to 512 [ 327.684379][ T28] kauditd_printk_skb: 282 callbacks suppressed [ 327.684397][ T28] audit: type=1400 audit(1774089568.575:26257): avc: denied { create } for pid=9620 comm="syz.1.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 327.809565][ T28] audit: type=1400 audit(1774089568.645:26258): avc: denied { open } for pid=9620 comm="syz.1.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 327.868684][ T9623] tipc: Started in network mode [ 327.873820][ T9623] tipc: Node identity ac14142f, cluster identity 4711 [ 327.881597][ T9623] tipc: New replicast peer: 0.0.0.0 [ 327.890699][ T28] audit: type=1400 audit(1774089568.655:26259): avc: denied { perfmon } for pid=9620 comm="syz.1.1623" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 327.961088][ T28] audit: type=1400 audit(1774089568.655:26260): avc: denied { kernel } for pid=9620 comm="syz.1.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 327.980933][ T9623] tipc: Enabled bearer , priority 10 [ 328.054999][ T28] audit: type=1400 audit(1774089568.665:26261): avc: denied { perfmon } for pid=9620 comm="syz.1.1623" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 328.136023][ T28] audit: type=1400 audit(1774089568.665:26262): avc: denied { allowed } for pid=9620 comm="syz.1.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 328.181883][ T28] audit: type=1400 audit(1774089568.665:26263): avc: denied { create } for pid=9620 comm="syz.1.1623" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 328.308375][ T28] audit: type=1400 audit(1774089568.665:26264): avc: denied { map } for pid=9620 comm="syz.1.1623" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 328.408850][ T28] audit: type=1400 audit(1774089568.665:26265): avc: denied { read write } for pid=9620 comm="syz.1.1623" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 328.483956][ T28] audit: type=1400 audit(1774089568.695:26266): avc: denied { create } for pid=9620 comm="syz.1.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.143243][ T35] tipc: Node number set to 2886997039 [ 329.306537][ T9647] loop1: detected capacity change from 0 to 512 [ 329.685151][ T9662] gretap0: left promiscuous mode [ 329.717147][ T9664] loop1: detected capacity change from 0 to 1024 [ 329.736228][ T9662] ip6gre0: left promiscuous mode [ 329.745250][ T9664] EXT4-fs: Ignoring removed orlov option [ 329.766264][ T9662] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.773485][ T9662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.780956][ T9662] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.788052][ T9662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.839560][ T9666] loop6: detected capacity change from 0 to 2048 [ 329.860096][ T9662] 8021q: adding VLAN 0 to HW filter on device .` [ 329.871480][ T9664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.917935][ T9563] Alternate GPT is invalid, using primary GPT. [ 329.924386][ T9563] loop6: p2 p3 p7 [ 329.933669][ T9662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 329.989851][ T9666] Alternate GPT is invalid, using primary GPT. [ 330.016110][ T9666] loop6: p2 p3 p7 [ 330.170789][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.646848][ T9683] loop1: detected capacity change from 0 to 1024 [ 330.690237][ T9683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.736911][ T9683] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 623: comm syz.1.1642: Attempting to read directory block (623) that is past i_size (638464) [ 330.828112][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1642'. [ 330.870772][ T9683] EXT4-fs (loop1): Remounting filesystem read-only [ 330.937732][ T9691] loop6: detected capacity change from 0 to 512 [ 330.975702][ T9691] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 331.006089][ T9691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 331.034450][ T9691] System zones: 1-12 [ 331.045478][ T9691] EXT4-fs (loop6): orphan cleanup on readonly fs [ 331.086084][ T9691] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1644: bg 0: block 361: padding at end of block bitmap is not set [ 331.100986][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.145743][ T9691] loop6: lost filesystem error report for type 5 error -117 [ 331.150941][ T9691] EXT4-fs (loop6): Remounting filesystem read-only [ 331.158336][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 331.158357][ C1] EXT4-fs (loop6): initial error at time 1774089572: ext4_validate_block_bitmap:441 [ 331.158412][ C1] EXT4-fs (loop6): last error at time 1774089572: ext4_validate_block_bitmap:441 [ 331.183401][ T9563] udevd[9563]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 331.199173][ T9691] EXT4-fs (loop6): 1 truncate cleaned up [ 331.213678][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 331.256139][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 331.259384][ T9691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 331.301039][ T9694] macvtap1: entered promiscuous mode [ 331.335608][ T9694] macvtap1: entered allmulticast mode [ 331.459585][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 331.465801][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 331.496746][ T9563] udevd[9563]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 331.722737][ T7288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 331.766134][ T9701] bridge0: left promiscuous mode [ 331.946593][ T9711] loop1: detected capacity change from 0 to 128 [ 331.971794][ T9711] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 332.075788][ T9711] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 332.399860][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1653'. [ 332.435176][ T9723] loop5: detected capacity change from 0 to 512 [ 332.445572][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1654'. [ 332.460303][ T9723] EXT4-fs (loop5): first meta block group too large: 2 (group descriptor block count 1) [ 332.485500][ T9724] loop1: detected capacity change from 0 to 512 [ 332.512042][ T9724] EXT4-fs (loop1): first meta block group too large: 2 (group descriptor block count 1) [ 332.588286][ T9710] loop6: detected capacity change from 0 to 764 [ 332.604187][ T9710] iso9660: Unknown parameter 'ušB‡ih"¤ÜÕid' [ 332.763094][ T28] kauditd_printk_skb: 405 callbacks suppressed [ 332.763117][ T28] audit: type=1400 audit(1774089573.655:26672): avc: denied { create } for pid=9727 comm="syz.0.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 332.845449][ T28] audit: type=1400 audit(1774089573.695:26673): avc: denied { read write } for pid=7288 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.985900][ T9733] loop6: detected capacity change from 0 to 128 [ 333.029263][ T28] audit: type=1400 audit(1774089573.695:26674): avc: denied { open } for pid=7288 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 333.075018][ T9734] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1655'. [ 333.140056][ T28] audit: type=1400 audit(1774089573.695:26675): avc: denied { ioctl } for pid=7288 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 333.230147][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'. [ 333.415607][ T28] audit: type=1400 audit(1774089573.705:26676): avc: denied { create } for pid=9727 comm="syz.0.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 333.573858][ T28] audit: type=1400 audit(1774089573.725:26677): avc: denied { write } for pid=9727 comm="syz.0.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 333.642338][ T28] audit: type=1400 audit(1774089573.725:26678): avc: denied { read } for pid=9727 comm="syz.0.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 334.615321][ T28] audit: type=1400 audit(1774089573.735:26679): avc: denied { read } for pid=9727 comm="syz.0.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.532045][ T28] audit: type=1400 audit(1774089573.735:26680): avc: denied { write } for pid=9727 comm="syz.0.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 335.574751][ T6401] audit: audit_backlog=65 > audit_backlog_limit=64 [ 335.733415][ T9752] loop5: detected capacity change from 0 to 1024 [ 335.769935][ T9752] EXT4-fs: Ignoring removed bh option [ 335.806463][ T9752] EXT4-fs: inline encryption not supported [ 335.842851][ T9752] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 335.909823][ T9752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 335.993773][ T9740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.008453][ T9752] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.1659: lblock 2 mapped to illegal pblock 2 (length 1) [ 336.050264][ T9764] loop6: detected capacity change from 0 to 128 [ 336.084328][ T9752] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 336.084994][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 336.100515][ C1] EXT4-fs (loop5): initial error at time 1774089576: ext4_map_blocks:776: inode 3: block 2 [ 336.110572][ C1] EXT4-fs (loop5): last error at time 1774089576: ext4_map_blocks:776: inode 3: block 2 [ 336.121177][ T9752] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.1659: lblock 0 mapped to illegal pblock 48 (length 1) [ 336.143218][ T9764] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 336.169042][ T9752] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 336.169136][ T9752] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1659: Failed to acquire dquot type 0 [ 336.190317][ T9764] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 336.204479][ T9752] loop5: lost filesystem error report for type 5 error -117 [ 336.226435][ T9752] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 336.266384][ T9752] loop5: lost filesystem error report for type 5 error -117 [ 336.267147][ T9752] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.1659: mark_inode_dirty error [ 336.303360][ T9752] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 336.308749][ T9752] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 336.351651][ T9752] EXT4-fs (loop5): 1 orphan inode deleted [ 336.365817][ T6103] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 336.370631][ T9752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.434998][ T6103] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:20: Failed to release dquot type 0 [ 336.501345][ T9752] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.512450][ T9783] tmpfs: Unknown parameter 'sizZ' [ 336.614786][ T9752] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.1659: Invalid inode table block 1 in block_group 0 [ 336.663031][ T9752] loop5: lost filesystem error report for type 5 error -117 [ 336.663199][ T9752] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 336.710307][ T9752] loop5: lost filesystem error report for type 5 error -117 [ 336.710409][ T9752] EXT4-fs error (device loop5): ext4_quota_off:7285: inode #3: comm syz.5.1659: mark_inode_dirty error [ 336.745895][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'. [ 336.788396][ T9752] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 336.818191][ T9796] 8021q: adding VLAN 0 to HW filter on device bond4 [ 336.880879][ T9802] loop6: detected capacity change from 0 to 512 [ 336.906172][ T9805] loop5: detected capacity change from 0 to 1024 [ 336.957986][ T9802] EXT4-fs: quotafile must be on filesystem root [ 336.966565][ T9805] EXT4-fs: Ignoring removed bh option [ 336.987327][ T9805] EXT4-fs: inline encryption not supported [ 337.026222][ T9802] loop6: detected capacity change from 0 to 562 [ 337.041232][ T9805] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 337.085214][ T9805] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 337.085244][ T9805] EXT4-fs: failed to create workqueue [ 337.160807][ T9805] EXT4-fs (loop5): mount failed [ 337.223557][ T9822] loop1: detected capacity change from 0 to 128 [ 337.235890][ T9822] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 337.250187][ T9822] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 337.476160][ T9828] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 337.521771][ T9828] loop5: detected capacity change from 0 to 512 [ 337.558351][ T9828] EXT4-fs (loop5): 1 truncate cleaned up [ 337.608449][ T9828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.829213][ T28] kauditd_printk_skb: 789 callbacks suppressed [ 337.829236][ T28] audit: type=1400 audit(1774089578.726:27435): avc: denied { prog_load } for pid=9834 comm="syz.6.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 338.093420][ T28] audit: type=1400 audit(1774089578.756:27436): avc: denied { bpf } for pid=9834 comm="syz.6.1680" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 338.144524][ T28] audit: type=1400 audit(1774089578.776:27437): avc: denied { prog_load } for pid=9834 comm="syz.6.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 338.241564][ T9842] loop6: detected capacity change from 0 to 1024 [ 338.261954][ T28] audit: type=1400 audit(1774089578.826:27438): avc: denied { write } for pid=9827 comm="syz.5.1677" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 338.312107][ T9837] loop1: detected capacity change from 0 to 8192 [ 338.330210][ T28] audit: type=1400 audit(1774089578.826:27439): avc: denied { perfmon } for pid=9834 comm="syz.6.1680" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 338.359516][ T9842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.454186][ T28] audit: type=1400 audit(1774089578.856:27440): avc: denied { open } for pid=9827 comm="syz.5.1677" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 338.476587][ T28] audit: type=1400 audit(1774089578.856:27441): avc: denied { perfmon } for pid=9834 comm="syz.6.1680" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 338.497702][ T28] audit: type=1400 audit(1774089578.856:27442): avc: denied { bpf } for pid=9834 comm="syz.6.1680" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 338.518578][ T28] audit: type=1400 audit(1774089578.886:27443): avc: denied { write } for pid=9834 comm="syz.6.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 338.539382][ T28] audit: type=1400 audit(1774089578.906:27444): avc: denied { bpf } for pid=9834 comm="syz.6.1680" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 338.581492][ T6401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.889806][ T7288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.297193][ T9864] loop6: detected capacity change from 0 to 128 [ 339.336563][ T9864] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 339.387381][ T9864] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 339.487789][ T9870] loop5: detected capacity change from 0 to 512 [ 339.921180][ T9884] loop5: detected capacity change from 0 to 128 [ 340.131856][ T9874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1692'. [ 340.151422][ T9889] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 340.649836][ T9907] netlink: 'syz.6.1704': attribute type 21 has an invalid length. [ 341.419482][ T9925] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1709'. [ 341.442194][ T9926] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1709'. [ 341.509681][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1709'. [ 341.554920][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1709'. [ 341.604452][ T9926] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1709'. [ 341.921567][ T9940] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1712'. [ 341.932094][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.957016][ T9940] bridge_slave_0: left allmulticast mode [ 341.978551][ T9940] bridge_slave_0: left promiscuous mode [ 342.000570][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.139230][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'. [ 342.384246][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'. [ 342.459382][ T9940] bridge_slave_1: left allmulticast mode [ 342.476362][ T9940] bridge_slave_1: left promiscuous mode [ 342.488891][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.674316][ T9940] bond0: (slave bond_slave_0): Releasing backup interface [ 342.711428][ T9940] bond0: (slave bond_slave_1): Releasing backup interface [ 342.732763][ T9940] team0: Port device team_slave_0 removed [ 342.760051][ T9940] team0: Port device team_slave_1 removed [ 342.775411][ T9940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.792975][ T9940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.801697][ T9940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.822214][ T9940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.843208][ T9940] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 342.891585][ T28] kauditd_printk_skb: 620 callbacks suppressed [ 342.891602][ T28] audit: type=1400 audit(1774089583.786:28065): avc: denied { attach_queue } for pid=9960 comm="syz.5.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 342.994199][ T28] audit: type=1400 audit(1774089583.856:28066): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.055112][ T9979] loop1: detected capacity change from 0 to 512 [ 343.091760][ T28] audit: type=1400 audit(1774089583.856:28067): avc: denied { open } for pid=3313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.120854][ T9980] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 343.188412][ T28] audit: type=1400 audit(1774089583.856:28068): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.265963][ T28] audit: type=1400 audit(1774089583.876:28069): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.269063][ T9979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.293490][ T28] audit: type=1400 audit(1774089583.876:28070): avc: denied { open } for pid=3312 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.327159][ T28] audit: type=1400 audit(1774089583.876:28071): avc: denied { ioctl } for pid=3312 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.352876][ T28] audit: type=1400 audit(1774089583.926:28072): avc: denied { append } for pid=9978 comm="syz.2.1723" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 343.376425][ T9979] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.430221][ T28] audit: type=1400 audit(1774089583.926:28073): avc: denied { read write } for pid=9977 comm="syz.1.1722" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.465097][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.544145][ T28] audit: type=1400 audit(1774089583.926:28074): avc: denied { open } for pid=9977 comm="syz.1.1722" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.682509][ T9990] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.088534][ T9990] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.315149][ T9990] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.374055][ T9990] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.803263][ T9990] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.828880][T10006] SELinux: policydb magic number 0x2b does not match expected magic number 0xf97cff8c [ 344.854125][T10006] SELinux: failed to load policy [ 344.859139][ T9990] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.997170][ T9990] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.007702][ T9990] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.066729][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 345.082190][ T6085] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.090832][ T6085] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.108631][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 345.142989][ T6085] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.165113][ T6085] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.203749][ T6085] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.226963][ T6085] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.256265][ T6085] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.278711][ T6085] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.394866][T10018] tipc: Started in network mode [ 345.405901][T10018] tipc: Node identity ac14140f, cluster identity 4711 [ 345.424444][T10018] tipc: New replicast peer: 255.255.255.255 [ 345.430677][T10018] tipc: Enabled bearer , priority 10 [ 345.478585][T10022] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 345.497238][T10022] loop1: detected capacity change from 0 to 512 [ 345.542502][T10022] EXT4-fs (loop1): 1 truncate cleaned up [ 345.555894][T10022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.861233][T10034] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1740'. [ 346.255083][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.543806][ T3402] tipc: Node number set to 2886997007 [ 347.301188][T10063] loop6: detected capacity change from 0 to 1024 [ 347.329562][T10063] EXT4-fs: Ignoring removed oldalloc option [ 347.340944][T10065] loop5: detected capacity change from 0 to 1024 [ 347.423825][T10063] EXT4-fs: Ignoring removed bh option [ 347.883980][T10065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.896545][T10063] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.911346][ T28] kauditd_printk_skb: 367 callbacks suppressed [ 347.911362][ T28] audit: type=1400 audit(1774089588.817:28442): avc: denied { read write } for pid=10067 comm="syz.1.1754" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.911409][T10074] loop1: detected capacity change from 0 to 2048 [ 347.931727][ T28] audit: type=1400 audit(1774089588.817:28443): avc: denied { read write open } for pid=10067 comm="syz.1.1754" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.963857][T10065] EXT4-fs error (device loop5): ext4_empty_dir:3107: inode #11: block 623: comm syz.5.1753: Attempting to read directory block (623) that is past i_size (638464) [ 348.035700][ T7288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.045786][ T28] audit: type=1400 audit(1774089588.817:28444): avc: denied { ioctl } for pid=10067 comm="syz.1.1754" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.073773][T10065] EXT4-fs (loop5): Remounting filesystem read-only [ 348.094117][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1753'. [ 348.107487][T10074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.120279][T10074] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.178632][ T6401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.244958][ T28] audit: type=1400 audit(1774089588.847:28445): avc: denied { mount } for pid=10064 comm="syz.5.1753" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 348.273582][ T28] audit: type=1400 audit(1774089588.847:28446): avc: denied { read write } for pid=10064 comm="syz.5.1753" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.361519][T10079] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1754'. [ 348.614998][T10082] netlink: 'syz.6.1755': attribute type 1 has an invalid length. [ 348.627685][ T28] audit: type=1400 audit(1774089588.847:28447): avc: denied { open } for pid=10064 comm="syz.5.1753" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.699500][T10082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.733843][T10087] audit: audit_backlog=65 > audit_backlog_limit=64 [ 348.773519][T10087] audit: audit_lost=275 audit_rate_limit=0 audit_backlog_limit=64 [ 348.782958][ T28] audit: type=1400 audit(1774089588.857:28448): avc: denied { setattr } for pid=10064 comm="syz.5.1753" path="/167/file1" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 348.815247][T10090] audit: audit_backlog=65 > audit_backlog_limit=64 [ 348.849097][T10088] bond1: (slave ip6erspan1): making interface the new active one [ 348.881925][T10082] FAULT_INJECTION: forcing a failure. [ 348.881925][T10082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.932054][T10088] bond1: (slave ip6erspan1): Enslaving as an active interface with an up link [ 348.965595][T10082] CPU: 1 UID: 0 PID: 10082 Comm: syz.6.1755 Tainted: G W syzkaller #0 PREEMPT(full) [ 348.965641][T10082] Tainted: [W]=WARN [ 348.965649][T10082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 348.965663][T10082] Call Trace: [ 348.965669][T10082] [ 348.965729][T10082] __dump_stack+0x1d/0x30 [ 348.965755][T10082] dump_stack_lvl+0x95/0xd0 [ 348.965803][T10082] dump_stack+0x15/0x1b [ 348.965828][T10082] should_fail_ex+0x263/0x280 [ 348.965904][T10082] should_fail+0xb/0x20 [ 348.965924][T10082] should_fail_usercopy+0x1a/0x20 [ 348.965951][T10082] _copy_from_user+0x1c/0xb0 [ 348.966005][T10082] ____sys_sendmsg+0x1e2/0x5b0 [ 348.966086][T10082] ___sys_sendmsg+0x195/0x1e0 [ 348.966163][T10082] ? path_openat+0x1b01/0x2050 [ 348.966211][T10082] __sys_sendmmsg+0x185/0x320 [ 348.966326][T10082] __x64_sys_sendmmsg+0x57/0x70 [ 348.966422][T10082] x64_sys_call+0x27aa/0x3020 [ 348.966452][T10082] do_syscall_64+0x12c/0x370 [ 348.966482][T10082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.966523][T10082] RIP: 0033:0x7f440120c799 [ 348.966537][T10082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.966555][T10082] RSP: 002b:00007f43ffc67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 348.966582][T10082] RAX: ffffffffffffffda RBX: 00007f4401485fa0 RCX: 00007f440120c799 [ 348.966598][T10082] RDX: 0000000000000043 RSI: 0000200000000c40 RDI: 0000000000000004 [ 348.966610][T10082] RBP: 00007f43ffc67090 R08: 0000000000000000 R09: 0000000000000000 [ 348.966647][T10082] R10: 0000000004000800 R11: 0000000000000246 R12: 0000000000000001 [ 348.966660][T10082] R13: 00007f4401486038 R14: 00007f4401485fa0 R15: 00007ffc78002378 [ 348.966678][T10082] [ 349.634195][T10100] loop6: detected capacity change from 0 to 1024 [ 349.667122][T10100] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 349.719850][T10100] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 349.745076][T10100] EXT4-fs (loop6): orphan cleanup on readonly fs [ 349.769041][T10100] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.1759: Failed to acquire dquot type 0 [ 349.804614][T10100] loop6: lost filesystem error report for type 5 error -117 [ 349.804893][T10100] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.1759: Failed to acquire dquot type 0 [ 349.823466][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 349.823486][ C1] EXT4-fs (loop6): initial error at time 1774089590: ext4_acquire_dquot:7001 [ 349.823533][ C1] EXT4-fs (loop6): last error at time 1774089590: ext4_acquire_dquot:7001 [ 349.977872][T10100] loop6: lost filesystem error report for type 5 error -117 [ 349.980198][T10100] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.1759: Freeing blocks not in datazone - block = 0, count = 4096 [ 350.010979][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.015832][T10100] loop6: lost filesystem error report for type 5 error -117 [ 350.033243][T10100] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.1759: Failed to acquire dquot type 0 [ 350.304183][T10100] loop6: lost filesystem error report for type 5 error -117 [ 350.305520][T10100] EXT4-fs (loop6): 1 orphan inode deleted [ 350.498127][T10100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.758324][T10124] tmpfs: Unknown parameter 'sizZ' [ 350.937996][ T7288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.947990][T10130] loop1: detected capacity change from 0 to 128 [ 351.093888][T10140] loop5: detected capacity change from 0 to 1024 [ 352.170985][T10161] loop5: detected capacity change from 0 to 512 [ 352.197641][T10165] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1780'. [ 352.209786][T10164] tmpfs: Unknown parameter 'sizZ' [ 352.215488][T10161] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 352.295590][T10165] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1780'. [ 352.323412][T10161] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1778: corrupted in-inode xattr: invalid ea_ino [ 352.343190][T10161] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 352.343458][T10161] EXT4-fs (loop5): Remounting filesystem read-only [ 352.359139][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 352.359172][ C0] EXT4-fs (loop5): initial error at time 1774089593: ext4_iget_extra_inode:5025: inode 15 [ 352.359196][ C0] EXT4-fs (loop5): last error at time 1774089593: ext4_iget_extra_inode:5025: inode 15 [ 352.483660][T10161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.595815][T10173] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1784'. [ 352.635619][T10173] netlink: zone id is out of range [ 352.660485][T10173] netlink: zone id is out of range [ 352.683145][T10173] netlink: zone id is out of range [ 352.688456][T10173] netlink: zone id is out of range [ 352.732962][T10173] netlink: set zone limit has 8 unknown bytes [ 352.921621][ T28] kauditd_printk_skb: 488 callbacks suppressed [ 352.921638][ T28] audit: type=1400 audit(1774089593.818:28922): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 352.993020][ T28] audit: type=1400 audit(1774089593.818:28923): avc: denied { open } for pid=3312 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.037979][ T28] audit: type=1400 audit(1774089593.818:28924): avc: denied { ioctl } for pid=3312 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.099259][T10188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1787'. [ 353.163017][T10188] tipc: Invalid UDP bearer configuration [ 353.163034][T10188] tipc: Enabling of bearer rejected, failed to enable media [ 353.171426][ T28] audit: type=1400 audit(1774089593.858:28925): avc: denied { create } for pid=10185 comm="syz.6.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 353.203017][ T28] audit: type=1400 audit(1774089593.878:28926): avc: denied { create } for pid=10187 comm="syz.2.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 353.264089][T10193] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1786'. [ 353.818536][ T28] audit: type=1400 audit(1774089593.878:28927): avc: denied { module_request } for pid=10176 comm="syz-executor" kmod="netdev-rose7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 353.841522][ T28] audit: type=1400 audit(1774089593.888:28928): avc: denied { execmem } for pid=10185 comm="syz.6.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 353.902942][ T28] audit: type=1400 audit(1774089593.928:28929): avc: denied { sys_module } for pid=10176 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 353.924443][ T28] audit: type=1400 audit(1774089593.928:28930): avc: denied { module_request } for pid=10176 comm="syz-executor" kmod="rose7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 353.963864][ T28] audit: type=1400 audit(1774089593.998:28931): avc: denied { create } for pid=10187 comm="syz.2.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 354.164587][T10176] chnl_net:caif_netlink_parms(): no params data found [ 354.298193][ T6401] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.588255][T10220] netlink: 'syz.5.1795': attribute type 4 has an invalid length. [ 354.599852][T10176] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.608827][T10221] loop2: detected capacity change from 0 to 1024 [ 354.619366][T10221] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 354.621893][T10176] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.666156][T10176] bridge_slave_0: entered allmulticast mode [ 354.675438][T10221] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 354.695733][T10176] bridge_slave_0: entered promiscuous mode [ 354.714733][T10221] EXT4-fs (loop2): orphan cleanup on readonly fs [ 354.741990][T10221] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1790: Failed to acquire dquot type 0 [ 354.761129][T10176] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.772653][T10176] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.781523][T10221] loop2: lost filesystem error report for type 5 error -117 [ 354.781773][T10221] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1790: Failed to acquire dquot type 0 [ 354.789157][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 354.789175][ C1] EXT4-fs (loop2): initial error at time 1774089595: ext4_acquire_dquot:7001 [ 354.789194][ C1] EXT4-fs (loop2): last error at time 1774089595: ext4_acquire_dquot:7001 [ 354.826037][T10176] bridge_slave_1: entered allmulticast mode [ 354.832548][T10176] bridge_slave_1: entered promiscuous mode [ 354.839243][T10221] loop2: lost filesystem error report for type 5 error -117 [ 354.839427][T10221] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.1790: Freeing blocks not in datazone - block = 0, count = 4096 [ 354.871972][T10221] loop2: lost filesystem error report for type 5 error -117 [ 354.872220][T10221] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1790: Failed to acquire dquot type 0 [ 354.898854][T10176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.902981][T10221] loop2: lost filesystem error report for type 5 error -117 [ 354.908029][T10221] EXT4-fs (loop2): 1 orphan inode deleted [ 354.911306][T10176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.930711][T10221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 354.951234][T10176] team0: Port device team_slave_0 added [ 354.969083][T10176] team0: Port device team_slave_1 added [ 354.989377][T10176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.997078][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.024170][T10176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.037990][T10176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.045636][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.076384][T10176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.111235][T10176] hsr_slave_0: entered promiscuous mode [ 355.118491][T10176] hsr_slave_1: entered promiscuous mode [ 355.131073][T10176] debugfs: 'hsr0' already exists in 'hsr' [ 355.144536][T10176] Cannot create hsr debugfs directory [ 355.164143][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.378631][T10176] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 355.473729][T10236] loop2: detected capacity change from 0 to 512 [ 355.580159][T10241] netlink: 'syz.5.1800': attribute type 1 has an invalid length. [ 355.659180][T10176] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 355.670955][T10240] FAULT_INJECTION: forcing a failure. [ 355.670955][T10240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.692929][T10236] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #11: comm syz.2.1798: iget: bad extended attribute block 3153 [ 355.716887][T10236] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 355.717078][T10236] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1798: couldn't read orphan inode 11 (err -117) [ 355.726385][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 355.726408][ C0] EXT4-fs (loop2): initial error at time 1774089596: ext4_orphan_get:1391: inode 11 [ 355.726433][ C0] EXT4-fs (loop2): last error at time 1774089596: ext4_orphan_get:1391: inode 11 [ 355.766590][T10240] CPU: 0 UID: 0 PID: 10240 Comm: syz.5.1800 Tainted: G W syzkaller #0 PREEMPT(full) [ 355.766637][T10240] Tainted: [W]=WARN [ 355.766645][T10240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 355.766662][T10240] Call Trace: [ 355.766670][T10240] [ 355.766678][T10240] __dump_stack+0x1d/0x30 [ 355.766710][T10240] dump_stack_lvl+0x95/0xd0 [ 355.766733][T10240] dump_stack+0x15/0x1b [ 355.766829][T10240] should_fail_ex+0x263/0x280 [ 355.766894][T10240] should_fail+0xb/0x20 [ 355.766918][T10240] should_fail_usercopy+0x1a/0x20 [ 355.766945][T10240] _copy_from_user+0x1c/0xb0 [ 355.766974][T10240] ___sys_sendmsg+0xc1/0x1e0 [ 355.767088][T10240] __x64_sys_sendmsg+0xd4/0x160 [ 355.767129][T10240] x64_sys_call+0x194c/0x3020 [ 355.767162][T10240] do_syscall_64+0x12c/0x370 [ 355.767198][T10240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.767367][T10240] RIP: 0033:0x7f08a9aac799 [ 355.767382][T10240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.767400][T10240] RSP: 002b:00007f08a84ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.767422][T10240] RAX: ffffffffffffffda RBX: 00007f08a9d25fa0 RCX: 00007f08a9aac799 [ 355.767484][T10240] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 355.767500][T10240] RBP: 00007f08a84ff090 R08: 0000000000000000 R09: 0000000000000000 [ 355.767512][T10240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.767524][T10240] R13: 00007f08a9d26038 R14: 00007f08a9d25fa0 R15: 00007ffde28dabc8 [ 355.767571][T10240] [ 355.942721][T10236] loop2: lost filesystem error report for type 5 error -117 [ 355.943452][T10176] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 355.946254][T10236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.973877][T10176] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 356.087507][T10251] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1802'. [ 356.141014][T10251] netlink: 'syz.6.1802': attribute type 1 has an invalid length. [ 356.150810][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.237160][T10176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.329325][T10176] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.382817][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.389930][ T6085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.414364][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.421488][ T6085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.457416][T10262] xt_hashlimit: invalid interval [ 356.820618][T10176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.851684][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1807'. [ 356.865975][T10279] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1807'. [ 356.929852][T10258] ================================================================== [ 356.937971][T10258] BUG: KCSAN: data-race in __d_drop / fast_dput [ 356.944246][T10258] [ 356.946582][T10258] write to 0xffff8881079a76d0 of 8 bytes by task 10261 on cpu 1: [ 356.954306][T10258] __d_drop+0x14d/0x240 [ 356.958488][T10258] __dentry_kill+0x122/0x460 [ 356.963098][T10258] finish_dput+0x2b/0x200 [ 356.967449][T10258] dput+0x52/0x60 [ 356.971104][T10258] path_openat+0xda4/0x2050 [ 356.975640][T10258] do_file_open+0x16c/0x290 [ 356.980181][T10258] do_sys_openat2+0x94/0x130 [ 356.984819][T10258] __x64_sys_openat+0xf2/0x120 [ 356.989613][T10258] x64_sys_call+0x1e39/0x3020 [ 356.994324][T10258] do_syscall_64+0x12c/0x370 [ 356.998940][T10258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.004861][T10258] [ 357.007233][T10258] read to 0xffff8881079a76d0 of 8 bytes by task 10258 on cpu 0: [ 357.014877][T10258] fast_dput+0x5f/0x2c0 [ 357.019052][T10258] dput+0x24/0x60 [ 357.022710][T10258] filename_mknodat+0x2cb/0x450 [ 357.027594][T10258] __se_sys_mknodat+0x38/0xf0 [ 357.032285][T10258] __x64_sys_mknodat+0x55/0x70 [ 357.037064][T10258] x64_sys_call+0x312/0x3020 [ 357.041687][T10258] do_syscall_64+0x12c/0x370 [ 357.046293][T10258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.052212][T10258] [ 357.054540][T10258] value changed: 0xffff8882375cff78 -> 0x0000000000000000 [ 357.061651][T10258] [ 357.063983][T10258] Reported by Kernel Concurrency Sanitizer on: [ 357.070149][T10258] CPU: 0 UID: 0 PID: 10258 Comm: syz.2.1804 Tainted: G W syzkaller #0 PREEMPT(full) [ 357.081113][T10258] Tainted: [W]=WARN [ 357.084930][T10258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 357.095084][T10258] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 357.875224][ T6085] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 357.934015][ T6085] bond0 (unregistering): Released all slaves [ 357.943603][ T6085] bond1 (unregistering): Released all slaves [ 357.952238][ T6085] bond2 (unregistering): Released all slaves [ 357.962584][ T6085] bond3 (unregistering): Released all slaves [ 357.971038][ T6085] bond4 (unregistering): Released all slaves [ 357.981678][ T6085] bond5 (unregistering): Released all slaves [ 358.016272][ T28] kauditd_printk_skb: 361 callbacks suppressed [ 358.016290][ T28] audit: type=1400 audit(1774089598.918:29287): avc: denied { search } for pid=10282 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.048621][ T28] audit: type=1400 audit(1774089598.948:29288): avc: denied { search } for pid=10282 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.092462][ T28] audit: type=1400 audit(1774089598.988:29289): avc: denied { search } for pid=10283 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.122087][ T28] audit: type=1400 audit(1774089599.018:29290): avc: denied { search } for pid=10283 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.146941][ T28] audit: type=1400 audit(1774089599.018:29291): avc: denied { search } for pid=10283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.170322][ T6085] hsr_slave_0: left promiscuous mode [ 358.170560][ T28] audit: type=1400 audit(1774089599.018:29292): avc: denied { search } for pid=10283 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.200671][ T6085] hsr_slave_1: left promiscuous mode [ 358.200691][ T28] audit: type=1400 audit(1774089599.018:29293): avc: denied { search } for pid=10284 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.231748][ T28] audit: type=1400 audit(1774089599.018:29294): avc: denied { search } for pid=10284 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.255026][ T28] audit: type=1400 audit(1774089599.018:29295): avc: denied { search } for pid=10284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.282078][ T28] audit: type=1400 audit(1774089599.018:29296): avc: denied { read open } for pid=10284 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.515845][ T6085] IPVS: stop unused estimator thread 0... [ 359.169716][ T6085] bridge_slave_1: left allmulticast mode [ 359.196244][ T6085] bridge_slave_1: left promiscuous mode [ 359.201965][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.252382][ T6085] bridge_slave_0: left allmulticast mode [ 359.258137][ T6085] bridge_slave_0: left promiscuous mode [ 359.268101][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.292981][ T6085] bridge_slave_1: left allmulticast mode [ 359.298672][ T6085] bridge_slave_1: left promiscuous mode [ 359.312442][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.320584][ T6085] bridge_slave_0: left allmulticast mode [ 359.332324][ T6085] bridge_slave_0: left promiscuous mode [ 359.338179][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.484637][ T6085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.494524][ T6085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.504159][ T6085] bond0 (unregistering): Released all slaves [ 359.578628][ T6085] bond0 (unregistering): Released all slaves [ 359.676971][ T6085] hsr_slave_0: left promiscuous mode [ 359.682775][ T6085] hsr_slave_1: left promiscuous mode [ 359.688481][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.696697][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.708382][ T6085] hsr_slave_0: left promiscuous mode [ 359.714928][ T6085] hsr_slave_1: left promiscuous mode [ 359.720548][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.729111][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.785856][ T6085] team0 (unregistering): Port device team_slave_1 removed [ 359.795891][ T6085] team0 (unregistering): Port device team_slave_0 removed [ 359.851994][ T6085] team0 (unregistering): Port device team_slave_1 removed [ 359.863233][ T6085] team0 (unregistering): Port device team_slave_0 removed [ 360.364544][ T6085] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.375242][ T6085] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.413752][ T6085] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.423650][ T6085] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.474109][ T6085] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.484632][ T6085] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.543825][ T6085] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.553732][ T6085] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.708628][ T6085] bond1 (unregistering): (slave ip6erspan1): Releasing active interface [ 360.788678][ T6085] bond0 (unregistering): Released all slaves [ 360.796263][ T6085] bond1 (unregistering): Released all slaves [ 360.834141][ T6085] tipc: Disabling bearer [ 360.839428][ T6085] tipc: Left network mode [ 360.863095][ T6085] hsr_slave_0: left promiscuous mode [ 360.868669][ T6085] hsr_slave_1: left promiscuous mode [ 360.878591][ T6085] veth1_macvtap: left promiscuous mode [ 360.885582][ T6085] veth0_macvtap: left promiscuous mode [ 360.891091][ T6085] veth1_vlan: left promiscuous mode [ 360.897036][ T6085] veth0_vlan: left promiscuous mode