last executing test programs: 2m18.427468608s ago: executing program 2 (id=116): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$unix(0x1, 0x1, 0x0) 2m18.313084064s ago: executing program 2 (id=120): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001000390426bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01980000000000004000128008000100736974003400028006000e000100000008000300ac1414"], 0x60}}, 0x0) sendto$packet(r0, &(0x7f0000000440), 0x0, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x10, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 2m17.933811836s ago: executing program 2 (id=125): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x2, 0x80800) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x0, 0x800002, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, &(0x7f0000000080)="e2", 0x1, 0x5, 0x0, 0x4}]) 2m17.796717044s ago: executing program 2 (id=131): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, &(0x7f0000000780)={[{@dioread_nolock}, {@nombcache}, {@nodiscard}, {@abort}, {@grpjquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8fffffeb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) umount2(0x0, 0x4) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x404ffa1, 0x100000001}) 2m17.5231437s ago: executing program 2 (id=135): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f00000002c0)=""/174, &(0x7f0000000100)=0xae) (async) r2 = syz_io_uring_setup(0x16c4, &(0x7f0000000380)={0x0, 0x5121, 0x80, 0x3, 0x258}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000001010800044000000001480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0x100}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_emit_ethernet(0x52, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@srh={0x0, 0x0, 0xc9}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) (async) socket(0x28, 0x5, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RREADDIR(r9, &(0x7f0000000580)={0x103, 0x29, 0x1, {0x5, [{{0x2, 0x0, 0x8}, 0x0, 0x51, 0x7, './file0'}, {{0x1, 0x3, 0x1}, 0x1, 0x1, 0x7, './file0'}, {{0x8, 0x1, 0x5453}, 0x1, 0x81, 0x7, './file0'}, {{0x80, 0x0, 0x5}, 0x400, 0xfb, 0x7, './file0'}, {{0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x2, 0x7, './file1'}, {{0x10, 0x0, 0x3}, 0xfffffffffffffffd, 0x6, 0x7, './file0'}, {{0x80, 0x4, 0x1}, 0xa, 0x6, 0x7, './file0'}, {{0x4, 0x1, 0x2}, 0x4, 0x3c, 0x7, './file0'}]}}, 0x103) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m16.931899225s ago: executing program 2 (id=141): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) r3 = memfd_secret(0x80000) (async) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c9002005b0100000300010000000000000000000000000000000000d09100000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000100000000000080000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000a00"/192]) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{}, 0x0, 0x0}, 0x20) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x14}}, 0x4014) openat$incfs(0xffffffffffffffff, &(0x7f0000001500)='.log\x00', 0x10b080, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001600)=@o_path={&(0x7f00000015c0)='./file0\x00', 0x0, 0x20, r1}, 0x18) r6 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000000) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb, 0x0, 0xfffffffffffffffa}}}, 0xb8}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) msgget$private(0x0, 0x790) (async) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2m16.885102708s ago: executing program 32 (id=141): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) r3 = memfd_secret(0x80000) (async) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c9002005b0100000300010000000000000000000000000000000000d09100000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000100000000000080000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000a00"/192]) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{}, 0x0, 0x0}, 0x20) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x14}}, 0x4014) openat$incfs(0xffffffffffffffff, &(0x7f0000001500)='.log\x00', 0x10b080, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001600)=@o_path={&(0x7f00000015c0)='./file0\x00', 0x0, 0x20, r1}, 0x18) r6 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000000) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb, 0x0, 0xfffffffffffffffa}}}, 0xb8}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) msgget$private(0x0, 0x790) (async) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 20.705688948s ago: executing program 3 (id=2651): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (fail_nth: 3) 19.584971884s ago: executing program 3 (id=2672): r0 = syz_open_procfs(0x0, &(0x7f0000002240)='comm\x00') socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) fchmod(r0, 0x2) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x156) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xff6f}}}}}}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000001, 0x80010, r3, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x20, 0x70bd2d, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x525a4512bda496f3}, 0x20008802) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 19.232998844s ago: executing program 3 (id=2674): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000a840}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000000d08000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000020c0)={0x0, 'hsr0\x00', {0x1}, 0x7f}) r2 = syz_open_procfs(0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x880088, &(0x7f0000000640)={[{@delalloc}, {@sb={'sb', 0x3d, 0x3}, 0x22}, {@usrquota}, {@nomblk_io_submit}, {@nodioread_nolock}, {@grpjquota, 0x22}, {@prjquota}, {@errors_remount}, {@noblock_validity}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00\x00\x00\x00\x00\x00'}}, {@euid_lt={'euid<', r3}}, {@measure}, {@fowner_lt={'fowner<', r3}}, {@seclabel}]}, 0xfe, 0x469, &(0x7f0000000d80)="$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") r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r2}, 0x18) fchmod(r4, 0xb0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpgrp(0x0) syz_mount_image$ext4(&(0x7f0000000a80)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8009, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000800)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") removexattr(0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="720a00ff000000007110b4000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) write$UHID_CREATE2(r2, &(0x7f0000000440)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x8d, 0x9, 0x1e, 0x101, 0xb47, 0x7ff, "052bd5a79893f4884a48bf65413d00db0da4be22d919bc354267174ea8ed6aafad914c15e0d0182cbbc8e0be8595219ac232272b4f7ce84b2be2d6f3a3a42cf3d9b54c90c1a90af00cad60ab2bacd62a7bb5dad61827cc1eeb34395008f4c43753947798958aca15fdc96f130a91fc07a07a77c6ea1f76f6a98cf59bd0946326a617192033f45f2dd609fe6c8d"}}, 0x1a5) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r7, 0x820, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1d, 0x800, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r8, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf35}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x20004080) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @empty, 0xfffffffa}, 0x1c) 18.994242298s ago: executing program 3 (id=2678): socket$xdp(0x2c, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)={0x4c, r1, 0x101, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x51}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xb}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) r2 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba0", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRESHEX=r0, @ANYRES64, @ANYRES8=r2], &(0x7f0000000100)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'ip6tnl0\x00'}}, 0x1e) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x0, @multicast, 'ip6tnl0\x00'}}, 0x1e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4}, 0x20) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x7f, &(0x7f0000000040)) io_setup(0x5, &(0x7f00000001c0)=0x0) io_cancel(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x2, r4, &(0x7f0000000300)="f861b5ece80621f4253853f62b23d29e9501a7a941b381a48ebebfa39494bdcbfd4b48f3fef4c58f3f49cc8dc8a9109df3ec09237f177f935f7f1278452bb44db24f68326e96a07e2f2148984f8eb06f3d4080d8ed6c8b8fe6faef912bcc0455e7cef0e31a0348679b97b8959b5cd2986808b7b28caaef25efaa54e7f2722185d2e7", 0x82, 0x3, 0x0, 0x1}, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r10 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r9, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r10}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r9, &(0x7f0000000240), &(0x7f0000000440)=""/210}, 0x20) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r11 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r11, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 17.866578855s ago: executing program 3 (id=2707): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x4, 0x1}, 0x80c, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a9a12bbd8b0000000000000001410000001c001700000012000000076574683a6d6163766c616e3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8100, 0x8) renameat2(r2, &(0x7f0000000140)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x6) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x20008, 0x1b, 0x200, &(0x7f0000003c40)="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"}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000020c0)=@newtaction={0x4c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}, {0x34, 0x1, [@m_ctinfo={0x30, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0xe40d06db3575609b, 0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000000)={r8, 0x6}, 0x8) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r10, 0x1, 0x80000, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}]}, 0x3c}}, 0x0) (async) inotify_rm_watch(0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) (async) r11 = socket$unix(0x1, 0x1, 0x0) connect$unix(r11, &(0x7f0000000640)=@file={0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 17.585123471s ago: executing program 3 (id=2714): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 17.549035493s ago: executing program 33 (id=2714): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$eJzs3M9vFFUcAPDvTLsFBGxF/MEPtYrGBrWlgMrBgxpNPGBiogeMp6YtBCnU0JoIIQrG4MkYE+/Go/+CJ70YoxcTr3o3JMT0AnhxzezOtLtld8u2225lP59k4L2dmX3f78683TfzdhtAzxrO/kkidkTEHxExWK3WbzBc/e/mwqXJWwuXJpMol9/+O6lsd2Ph0mSxabHf9rwykkaknyWxr0G7cxcunpmYmZk+n9fH5s9+MDZ34eJzp89OnJo+NX3u8LFjR4+Mv/jC4ecbBz7QXp5ZTDf2fjy7f88b73715vEv6vJflkeHDLda+VS53OHmumtnTTnp72IgtKUvIrLDVar0/8Hoi6WDNxivf9rV4IB1VS6Xy9ubr75cBu5iSdTXdXnoFcUHfXb9WyzLBwEvr9/wo+uuv1K9AMryvpkv1TX9kebblJZd33bScEScuPzPN9kSbd+HaPMmCABARPyQjX+ebTT+S+PBmu3uzeeGhiLivojYFRH3R8TuiHggorLtQxHxcGXPWBw7rWT5JMnt45/02poSXEE2/nspn9uqH/8tZjDUl9d2VvIvJSdPz0wfyl+TkShtyerjLdr48bXfv2y2rnb8ly1Z+8VYMI/jWv+W+n2mJuYn1pJzretXIvb2F7nW5p8szgQkEbEnIvauso3TB7/b32zdyvm30IF5pvK3EU9Xj//lWKjPv5C0np8c2xoz04fGirPidr/8dvWtJs1XXvgTB1eZfwdkx/+ehuf/Yv5DSe187Vz7bVz98/Om1zSrPf8Hkncq5eIK6KOJ+fnz4xEDyfFq0LWPH17at6gX22f5jxxo3P93xdIrsS8ispP4kYh4NCIey2N/PCKeiIgDLfL/+dUn32+4Il3j+d8BWf5TbR3/pcJALH+kcaHvzE/f1zU6tFTM87/V+vgfrZRG8kfu5P3vTuJa3dkMAAAA/z9pROyIJB1dLKfp6Gj1+/K7I9KZ2bn5Z07OfnhuqvobgaEopcWdrsGa+6Hj+WV9tX4lIqpfLSjWH8nvG3/dt61SH52cnZnqdvLQ47Y36f+Zv/q6HR2w7vxeC3qX/g+9q1H/39qFOICN5/MfeleD/r+tG3EAG6/R5/8nrXf5d71iATbWsv5v2g96SPvX/7++ty6BABuuaf+/m//yD1Dh/j/0pLltsfKP5FsWimda5e6bpZBEREefMEqbIq+1F8pJw4MbaVYobYYIFdah0N33JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//8YzNth") symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.107161866s ago: executing program 0 (id=2967): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) socket(0x29, 0x800, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000001b80)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000540)=ANY=[@ANYBLOB='check=strict,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,iocharset=macgreekAmap=acorn,iochar=iso8859-2,session=0x0000000000000058,sassoc,mode=0xffffffffffffe,check=strict,fscontext=system_u,permit_directio,L\x00\x00\x00\x00\x00\x00'], 0xfa, 0x69f, &(0x7f0000000f00)="$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") utimes(&(0x7f00000001c0)='./file0\x00', 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="2000000002000000"], 0x0) 7.958002275s ago: executing program 0 (id=2971): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc486) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x7, 0x7b5, &(0x7f0000000540)="$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") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x4000, 0x0, 0xfff, 0x2, 0x7, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 7.86816058s ago: executing program 0 (id=2973): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="30000000000000008400000001000000", @ANYRES64], 0x30, 0x180}], 0x1, 0x5) keyctl$get_security(0x11, 0x0, &(0x7f00000000c0)=""/128, 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x318, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x4488}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000200)=""/255, 0xff}, {&(0x7f00000004c0)=""/90, 0x5a}, {&(0x7f00000005c0)=""/193, 0xc1}], 0x3) request_key(&(0x7f0000000080)='user\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000000000)='R\x10rD\x90\x05\x10\xce\x8b\xe6\x16\t\x00\x15\xb7\xb5Vd\xcd\xfbD\xccl\x1e\x94\x00#\xdd\xe7p\x9c\xcf`\x1f<\x03\x87\x97\xbb\a?\xa4\xfc\xd9v\x8b_(\xe3\x14\xcf\x15\xfc\x89\x7f', 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0xe, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8418, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x0, 0x6, 0x0, 0x1, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf, 0xb}, {0x0, 0x9}, {0x9, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8000}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 7.548723428s ago: executing program 0 (id=2978): socket$xdp(0x2c, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)={0x4c, r1, 0x101, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x51}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xb}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) r2 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba0", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRESHEX=r0, @ANYRES64, @ANYRES8=r2], &(0x7f0000000100)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'ip6tnl0\x00'}}, 0x1e) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x0, @multicast, 'ip6tnl0\x00'}}, 0x1e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4}, 0x20) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x7f, &(0x7f0000000040)) io_setup(0x5, &(0x7f00000001c0)=0x0) io_cancel(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x2, r4, &(0x7f0000000300)="f861b5ece80621f4253853f62b23d29e9501a7a941b381a48ebebfa39494bdcbfd4b48f3fef4c58f3f49cc8dc8a9109df3ec09237f177f935f7f1278452bb44db24f68326e96a07e2f2148984f8eb06f3d4080d8ed6c8b8fe6faef912bcc0455e7cef0e31a0348679b97b8959b5cd2986808b7b28caaef25efaa54e7f2722185d2e7", 0x82, 0x3, 0x0, 0x1}, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r10 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r9, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r10}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r9, &(0x7f0000000240), &(0x7f0000000440)=""/210}, 0x20) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) 6.467593942s ago: executing program 0 (id=3003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x47, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4014}, 0x1011) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x1ba, &(0x7f0000000400)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x22) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) r2 = signalfd4(r1, &(0x7f0000000100)={[0x1c51]}, 0x8, 0x80c00) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, 0x0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee4, 0x2010, 0xffffffffffffffff, 0x32cbe000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0xa8, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x98, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0xa8}], 0x1, 0x0, 0x0, 0x1}, 0x0) setpgid(0x0, r4) 6.224487676s ago: executing program 0 (id=3007): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x6c, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffff5}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfc5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10001}, @CTA_TUPLE_MASTER={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001800000000000000000000000000000000000000000000000075ea163512e4b36b9ea0b3c6f3e80baeb6d9f7f9b313bce2ad667d8adde9b6e814a0f1aabc240069a743c247defeda092bf64c9da37989b4703ada46fa33290ad1fcad73ac"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r2, 0x0, 0x10}, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000001500)="$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") r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000280)={0x0, @can={0x1d, r3}, @nfc={0x27, r5, 0xffffffffffffffff, 0x5}, @vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)='geneve1\x00', 0x6, 0x3, 0x4}) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r7 = dup3(r4, r6, 0x0) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x80000001) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r2, 0x6}, 0xc) close_range(r1, r6, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup3(r8, r1, 0x0) lstat(&(0x7f0000001800)='./file0\x00', 0x0) 6.164938849s ago: executing program 34 (id=3007): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x6c, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffff5}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfc5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10001}, @CTA_TUPLE_MASTER={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001800000000000000000000000000000000000000000000000075ea163512e4b36b9ea0b3c6f3e80baeb6d9f7f9b313bce2ad667d8adde9b6e814a0f1aabc240069a743c247defeda092bf64c9da37989b4703ada46fa33290ad1fcad73ac"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r2, 0x0, 0x10}, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000001500)="$eJzs3e9rJGcdAPDvbHbz4y6aKH1RhdbDFu6KXnLp2TaI9k4Q3xWU6usz5PZCuE32SDZtEw7N4R8giNiCb/SVbwT/AEHuTyiCYN+LFeXQq4JFtCMzO5vspTu3SS67q8nnA5N5duaZ+X6f2d3Z2ZlnMwGcWRci4npEjEXECxExU0yvFEPstoes3gcP7y5nQxJp+vpfk0iKaVm1JGIsKZY9Xyw22R49aqo92tzeub3UaNQ3isnzrbU785vbO5dX15ZW6iv19atXF15efGXxpcUrJ9LOrF2vfv1PP/nhL77x6m+++OYfbvzl0veyfKeL+Z12nLT2Nqll22JPNSI2BhFsBMaK9vwrbetdqzrstAAAKJEd4386Ij6fH//PxFifY7XxrnIy8OwAAACAk5Bem45/JxHpEdWOvAQAAAAwKpW8D2xSmSv6AkxHpTI31+7D+1ScqzSam60v3Gpurd9s95WdjVrl1mqjfiXvUzsREbUke7ywd0ah/fjFvG42JI/0Af7xzFQ+f2652bg5ihMeAAAAcAadP/D9/x8z7e//AAAAwCkzW4zPjTgPAAAAYHBmR50AAAAAMHDH+P4/Pog8AAAAgIH45muvZUPauf/1zTe2t24337h8s755e25ta3luublxZ26l2VxppBMRa/3W12g273wp1rfemm/VN1vzm9s7N9aaW+utG6uP3AIbAAAAGKJPfe7+e0lE7H55Kh+ic21/rGQBvxWAU6NyyHpp9uf9weYCDFfZxzxw+lUfP7usm+/EIHIBhqvWHiWjzgMYnX47gMmyGu8eK5yfDwEAwAhc/Mz999Lk49f/q/vnBoBT6rDX/4HTp+T6fzoz7ESAoSu9/t+nYwDw/6+mByCcef2v/5d4N591vX+ENO27LgAAYKCm8yGpzBXXAqej8mHaFrNRS26tNupXIuKTEfH7mdpE9nghXzLxowEAAAAAAAAAAAAAAAAAAAAAAAAAOKQ0TSI9huqxlgIAAABGIaLy56S4D/DFmeenD54fGE8+zG8F/FGapm/+9PW331pqtTYWsul/y6ePR0TrnWz6+ChOXwAAAABdOnf5z7+/v1gbcTYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnFYfPLy73BmGGffB1yJitlf8akzm48moRcS5vydR7VouiYixE4i/ey8inu4VP8nSitkii4PxKxExlWfxxPErRbEs/jNpmvaMf/6Jo8PZdj/b/1zv9f6vxIV83Pv9X20P1540fmf/d75rH9yJ39n/je3F/+pe8GzP84lDxvjs73413/XwO/vFifb8au/9Xyd+UrL/fa5XsOrHJ3332zs7ZbmlP4+42Gl7GhFd8btjzbfW7sxvbu9cXl1bWqmv1NevXl14efGVxZcWr8zfWm3Ui7/7K3473Sv+6Jlff1QW/8GFiHMR6czDu8vjnZyKD5bZ9ugryV4q44/k9HxWqJWted9/9hfrrp2v9cG9iEvP7W3/9Ptdz//T+bjn9v/ZP9Nc/jmQzb9YfCYku+1yRPHyjYhnf/nbZ0vbf2+yKB39+b/Uv+m5F771gz8esioAMASb2zu3lxqN+sbAC++kaXq4ytlRaXmdtDga60xJInYP1skO4E64FVMRUTIrYicm96ZMFVs1Drvmp0pTfX8qYkjPzlEL145SOZ040ost2f0faOAZLoznL8iR7pYAAIAB2D/6H3UmAAAAAAAAAAAAAAAAAAAAcHYN4/+KHYy5O5qmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA81n8DAAD//x3CzJ0=") r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000280)={0x0, @can={0x1d, r3}, @nfc={0x27, r5, 0xffffffffffffffff, 0x5}, @vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x7, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)='geneve1\x00', 0x6, 0x3, 0x4}) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r6, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r7 = dup3(r4, r6, 0x0) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x80000001) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r2, 0x6}, 0xc) close_range(r1, r6, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup3(r8, r1, 0x0) lstat(&(0x7f0000001800)='./file0\x00', 0x0) 2.008505333s ago: executing program 7 (id=3110): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x4001}, 0xc044804) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1.849819612s ago: executing program 7 (id=3115): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) socket(0x29, 0x800, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[], 0x50) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000540)=ANY=[@ANYBLOB='check=strict,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,iocharset=macgreekAmap=acorn,iochar=iso8859-2,session=0x0000000000000058,sassoc,mode=0xffffffffffffe,check=strict,fscontext=system_u,permit_directio,L\x00\x00\x00\x00\x00\x00'], 0xfa, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3") utimes(&(0x7f00000001c0)='./file0\x00', 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="2000000002000000"], 0x0) 1.775947016s ago: executing program 7 (id=3116): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x408, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018002c000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) 1.775152267s ago: executing program 5 (id=3117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x47, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4014}, 0x1011) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x1ba, &(0x7f0000000400)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x22) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) r2 = signalfd4(r1, &(0x7f0000000100)={[0x1c51]}, 0x8, 0x80c00) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, 0x0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee4, 0x2010, 0xffffffffffffffff, 0x32cbe000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0xfc, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xe9, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0xfc}], 0x1, 0x0, 0x0, 0x1}, 0x0) setpgid(0x0, r4) 1.725040059s ago: executing program 7 (id=3118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0x10, 0xb}, {0x0, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.717392019s ago: executing program 5 (id=3128): syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB='\b\x00', @ANYRES32=r1], 0x90}}, 0x0) 1.470614294s ago: executing program 5 (id=3130): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000dc0)="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", 0x3b5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000700)='n', 0x1}], 0x1}}], 0x2, 0x119e75c40673edef) 1.296961515s ago: executing program 4 (id=3120): socket$xdp(0x2c, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)={0x4c, r1, 0x101, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x51}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xb}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) r2 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRESHEX=r0, @ANYRES64, @ANYRES8=r2], &(0x7f0000000100)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'ip6tnl0\x00'}}, 0x1e) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x0, @multicast, 'ip6tnl0\x00'}}, 0x1e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4}, 0x20) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x7f, &(0x7f0000000040)) io_setup(0x5, &(0x7f00000001c0)=0x0) io_cancel(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x2, r4, &(0x7f0000000300)="f861b5ece80621f4253853f62b23d29e9501a7a941b381a48ebebfa39494bdcbfd4b48f3fef4c58f3f49cc8dc8a9109df3ec09237f177f935f7f1278452bb44db24f68326e96a07e2f2148984f8eb06f3d4080d8ed6c8b8fe6faef912bcc0455e7cef0e31a0348679b97b8959b5cd2986808b7b28caaef25efaa54e7f2722185d2e7", 0x82, 0x3, 0x0, 0x1}, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r10 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r9, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r10}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r9, &(0x7f0000000240), &(0x7f0000000440)=""/210}, 0x20) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) 1.19920597s ago: executing program 6 (id=3122): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000b00)={@multicast, @remote, @void, {@llc={0x4, {@llc={0xaa, 0x0, 'p'}}}}}, 0x0) 1.141790293s ago: executing program 6 (id=3123): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0xe72c5f922f23cad9, 0x70bd28, 0x25dfdbf7}, 0x14}, 0x1, 0x0, 0x0, 0xc1920335b598980a}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) pipe(&(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045519, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r3, r2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52ba}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r5, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x30, r2, &(0x7f0000000000), 0x200a00}]) 801.053773ms ago: executing program 6 (id=3129): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e20, @broadcast}, {0x306, @remote}, 0xc, {0x2, 0x4e21, @rand_addr=0x64010100}, 'bridge_slave_0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x6, 0x10}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x1}, &(0x7f0000000500)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000940)={&(0x7f0000000200)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000580)="233fdefe4ff039f38fa310b7bcab1ad21d65daa0b768726a6e966dcc85f3b11e0ceb069b78b33c56b000abd27ae94f73fc49ecb7d598a6fa9854e3802e83358c87c3cb130d8edef8b46e1c780138502fa60d820b388a1db7c1a9eaa6c921d681b5e57dd432a92a23099af9095ce6a19e13787f61a8eea8719a405805b7de8af7a1307f4471a34466558a955e72e9731e58d7191ca4210585142de1fceec7a64f38dce9299aca65c7cf9038021e8208e00d7f746ff2a7f89abc81e6b71c36a26514a3d9c8095484ce2b00780e135a0ade53d9c3e0177f596bf40f52c06b47637d614f9c16734e4009dd39454befbf41473922", 0xf2}], 0x1, &(0x7f0000000800)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x3d90}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x8002, 0x8, 0x7f, r1}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x8}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xffffffff}}, @sndinfo={0x20, 0x84, 0x2, {0xff, 0x200, 0xc, 0x7fffffff, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x2, 0x8, 0x3, 0x1, 0x2, 0x3, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x110, 0x8844}, 0x4040010) 752.467896ms ago: executing program 6 (id=3131): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 736.487967ms ago: executing program 4 (id=3132): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000a840}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000000d08000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000020c0)={0x0, 'hsr0\x00', {0x1}, 0x7f}) r2 = syz_open_procfs(0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x880088, &(0x7f0000000640)={[{@delalloc}, {@sb={'sb', 0x3d, 0x3}, 0x22}, {@usrquota}, {@nomblk_io_submit}, {@nodioread_nolock}, {@grpjquota, 0x22}, {@prjquota}, {@errors_remount}, {@noblock_validity}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00\x00\x00\x00\x00\x00'}}, {@euid_lt={'euid<', r3}}, {@measure}, {@fowner_lt={'fowner<', r3}}, {@seclabel}]}, 0xfe, 0x469, &(0x7f0000000d80)="$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") r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r2}, 0x18) fchmod(r4, 0xb0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpgrp(0x0) syz_mount_image$ext4(&(0x7f0000000a80)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8009, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000800)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") removexattr(0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="720a00ff000000007110b4000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) openat$cgroup_ro(r6, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) write$UHID_CREATE2(r2, &(0x7f0000000440)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x8d, 0x9, 0x1e, 0x101, 0xb47, 0x7ff, "052bd5a79893f4884a48bf65413d00db0da4be22d919bc354267174ea8ed6aafad914c15e0d0182cbbc8e0be8595219ac232272b4f7ce84b2be2d6f3a3a42cf3d9b54c90c1a90af00cad60ab2bacd62a7bb5dad61827cc1eeb34395008f4c43753947798958aca15fdc96f130a91fc07a07a77c6ea1f76f6a98cf59bd0946326a617192033f45f2dd609fe6c8d"}}, 0x1a5) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r7, 0x820, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1d, 0x800, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r8, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf35}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x20004080) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @empty, 0xfffffffa}, 0x1c) 670.493881ms ago: executing program 6 (id=3133): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x515, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000002329000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 444.747154ms ago: executing program 4 (id=3134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") lstat(0x0, 0x0) chown(0x0, 0x0, 0xee00) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000002b80)={0x0, 0x2, 0x6, 0x3, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) lgetxattr(&(0x7f0000000200)='./file2\x00', &(0x7f0000000340)=@random={'osx.', 'deflate\x00'}, &(0x7f00000003c0)=""/119, 0x77) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfffe, 0x70c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x0, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc, 0x9}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x190da) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) arch_prctl$ARCH_GET_GS(0x1004, 0x0) 443.531884ms ago: executing program 6 (id=3144): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6}, {0xfff8, 0x2, 0x8, 0x1}, {0xfff5, 0xfd, 0x3, 0x100}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffe5}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2f0000006900000326bd7000fddbdf2500000000eaff"], 0x20}, 0x1, 0x0, 0x0, 0x20004091}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fed, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7724, 0x16, 0x0, 0x13) 406.566256ms ago: executing program 1 (id=3135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000b00)={@multicast, @remote, @void, {@llc={0x4, {@llc={0xaa, 0x0, 'p'}}}}}, 0x0) 406.427406ms ago: executing program 5 (id=3136): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000280)="0045c9fd0a7cdd6098802acd6d55776eb4a7cccb0f495a4912f74d8fa867e08fe4d321f5b95cc12f", 0x28, 0x0, &(0x7f0000000240)={0x3a, 0x32, r1, 0x1, 0x0, 0x6, @random="4a010000f84d"}, 0x14) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000100)={0x1a, 0x311, 0x7e, 0x9, 0x2, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 322.522871ms ago: executing program 5 (id=3137): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000540)='P', &(0x7f0000000000)=""/7, 0x2}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f00000022c0)=[{&(0x7f0000000080)="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", 0xf81}, {0x0}], 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60532d9203803afffe800000000000000000000000000022ff020000000000000000000000000001860090780003f5000000000000000000180aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5bf180200010000000500000000260004000118fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9780e1d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000180b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107000000ffffff00000000000200000000000000000001000000008879e66485201a0015ca8374000000000000000000000000000000000000145e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c0305d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"], 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r0, &(0x7f0000000400), 0x20000000}, 0x20) 322.258781ms ago: executing program 5 (id=3138): socket(0x29, 0x80000, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0xfd026, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0xec}, 0x400, 0xc, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x200000, 0x91) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0xa000000, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) splice(r4, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x20) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[], 0xe) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) 322.095961ms ago: executing program 1 (id=3139): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) socket(0x29, 0x800, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TCGETS(r1, 0x5401, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[], 0x50) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000540)=ANY=[@ANYBLOB='check=strict,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,iocharset=macgreekAmap=acorn,iochar=iso8859-2,session=0x0000000000000058,sassoc,mode=0xffffffffffffe,check=strict,fscontext=system_u,permit_directio,L\x00\x00\x00\x00\x00\x00'], 0xfa, 0x69f, &(0x7f0000000f00)="$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") utimes(&(0x7f00000001c0)='./file0\x00', 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="2000000002000000"], 0x0) 296.305323ms ago: executing program 1 (id=3140): r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0xdc, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x80, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "86d3607fc70ebd0c112eb49a50141398eb5912f1f437d95d0a55b34cc8804b4f"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f0f9f8a1747c1b5a3e93ada9fb63f4736f332292bdc55e4e56fbd00118f7dca5"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7f72adb30edc3834346704c573e39d02"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0xdc}}, 0x4010) 276.916774ms ago: executing program 1 (id=3141): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) lsetxattr$security_capability(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340), &(0x7f0000000380)=@v2={0x2000000, [{0x5, 0x101}, {0x7fff, 0xb}]}, 0x14, 0x2) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000003c0)={0x71, 0x17, 0x1, {0x68, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, 0x71) keyctl$get_persistent(0x16, r0, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x200, 0x100}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r1) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2) 243.681536ms ago: executing program 1 (id=3142): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e20, @broadcast}, {0x306, @remote}, 0xc, {0x2, 0x4e21, @rand_addr=0x64010100}, 'bridge_slave_0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x6, 0x10}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x1}, &(0x7f0000000500)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000940)={&(0x7f0000000200)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000580)="233fdefe4ff039f38fa310b7bcab1ad21d65daa0b768726a6e966dcc85f3b11e0ceb069b78b33c56b000abd27ae94f73fc49ecb7d598a6fa9854e3802e83358c87c3cb130d8edef8b46e1c780138502fa60d820b388a1db7c1a9eaa6c921d681b5e57dd432a92a23099af9095ce6a19e13787f61a8eea8719a405805b7de8af7a1307f4471a34466558a955e72e9731e58d7191ca4210585142de1fceec7a64f38dce9299aca65c7cf9038021e8208e00d7f746ff2a7f89abc81e6b71c36a26514a3d9c8095484ce2b00780e135a0ade53d9c3e0177f596bf40f52c06b47637d614f9c16734e4009dd39454befbf41473922", 0xf2}], 0x1, &(0x7f0000000800)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x3d90}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x8002, 0x8, 0x7f, r1}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x8}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xffffffff}}, @sndinfo={0x20, 0x84, 0x2, {0xff, 0x200, 0xc, 0x7fffffff, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x2, 0x8, 0x3, 0x1, 0x2, 0x3, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x110, 0x8844}, 0x4040010) 243.007316ms ago: executing program 1 (id=3143): socket$xdp(0x2c, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)={0x4c, r1, 0x101, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x51}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xb}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) r2 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRESHEX=r0, @ANYRES64, @ANYRES8=r2], &(0x7f0000000100)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'ip6tnl0\x00'}}, 0x1e) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x0, @multicast, 'ip6tnl0\x00'}}, 0x1e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4}, 0x20) creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x7f, &(0x7f0000000040)) io_setup(0x5, &(0x7f00000001c0)=0x0) io_cancel(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x2, r4, &(0x7f0000000300)="f861b5ece80621f4253853f62b23d29e9501a7a941b381a48ebebfa39494bdcbfd4b48f3fef4c58f3f49cc8dc8a9109df3ec09237f177f935f7f1278452bb44db24f68326e96a07e2f2148984f8eb06f3d4080d8ed6c8b8fe6faef912bcc0455e7cef0e31a0348679b97b8959b5cd2986808b7b28caaef25efaa54e7f2722185d2e7", 0x82, 0x3, 0x0, 0x1}, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r10 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r9, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r10}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r9, &(0x7f0000000240), &(0x7f0000000440)=""/210}, 0x20) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) 165.94465ms ago: executing program 4 (id=3145): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000a840}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000000d08000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000020c0)={0x0, 'hsr0\x00', {0x1}, 0x7f}) r2 = syz_open_procfs(0x0, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x880088, &(0x7f0000000640)={[{@delalloc}, {@sb={'sb', 0x3d, 0x3}, 0x22}, {@usrquota}, {@nomblk_io_submit}, {@nodioread_nolock}, {@grpjquota, 0x22}, {@prjquota}, {@errors_remount}, {@noblock_validity}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00\x00\x00\x00\x00\x00'}}, {@euid_lt={'euid<', r3}}, {@measure}, {@fowner_lt={'fowner<', r3}}, {@seclabel}]}, 0xfe, 0x469, &(0x7f0000000d80)="$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") r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r2}, 0x18) fchmod(r4, 0xb0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpgrp(0x0) syz_mount_image$ext4(&(0x7f0000000a80)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8009, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000800)="$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") removexattr(0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="720a00ff000000007110b4000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) openat$cgroup_ro(r6, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) write$UHID_CREATE2(r2, &(0x7f0000000440)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x8d, 0x9, 0x1e, 0x101, 0xb47, 0x7ff, "052bd5a79893f4884a48bf65413d00db0da4be22d919bc354267174ea8ed6aafad914c15e0d0182cbbc8e0be8595219ac232272b4f7ce84b2be2d6f3a3a42cf3d9b54c90c1a90af00cad60ab2bacd62a7bb5dad61827cc1eeb34395008f4c43753947798958aca15fdc96f130a91fc07a07a77c6ea1f76f6a98cf59bd0946326a617192033f45f2dd609fe6c8d"}}, 0x1a5) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r7, 0x820, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1d, 0x800, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r8, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf35}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x20004080) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @empty, 0xfffffffa}, 0x1c) 91.932645ms ago: executing program 7 (id=3146): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) 60.909666ms ago: executing program 4 (id=3147): syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x803, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 17.860119ms ago: executing program 7 (id=3148): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 4 (id=3149): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f000000a480)=[{{0x0, 0x0, 0x0}, 0x241}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}}], 0x2, 0x24044c45) kernel console output (not intermixed with test programs): sadm_r:sysadm_t pid=9813 comm="syz.5.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 141.195656][ T9818] tipc: Enabled bearer , priority 0 [ 141.196261][ T28] audit: type=1326 audit(1770694535.702:10914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.5.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 141.226443][ T28] audit: type=1326 audit(1770694535.702:10915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.5.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 141.250787][ T28] audit: type=1326 audit(1770694535.702:10916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.5.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 141.276087][ T28] audit: type=1326 audit(1770694535.732:10917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.5.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96c85bb84e code=0x7ffc0000 [ 141.299617][ T28] audit: type=1326 audit(1770694535.732:10918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.5.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96c85bb84e code=0x7ffc0000 [ 141.323177][ T28] audit: type=1326 audit(1770694535.732:10919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.5.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96c85bb84e code=0x7ffc0000 [ 141.346716][ T28] audit: type=1326 audit(1770694535.762:10920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.5.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96c85bb84e code=0x7ffc0000 [ 141.370388][ T28] audit: type=1326 audit(1770694535.762:10921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9813 comm="syz.5.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f96c85bb84e code=0x7ffc0000 [ 141.402681][ T9817] tipc: Disabling bearer [ 141.464706][ T9824] syzkaller0: entered promiscuous mode [ 141.470593][ T9824] syzkaller0: entered allmulticast mode [ 141.593941][ T9843] syzkaller0: entered promiscuous mode [ 141.599513][ T9843] syzkaller0: entered allmulticast mode [ 141.615705][ T9847] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2183'. [ 141.681944][ T9852] tipc: Enabling of bearer rejected, failed to enable media [ 141.730957][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.767563][ T9867] siw: device registration error -23 [ 141.784989][ T9865] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 141.841747][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.869227][ T9872] syzkaller0: entered promiscuous mode [ 141.874853][ T9872] syzkaller0: entered allmulticast mode [ 141.953941][ T9876] wg1 speed is unknown, defaulting to 1000 [ 141.964051][ T9876] lo speed is unknown, defaulting to 1000 [ 141.996897][ T9883] set_capacity_and_notify: 9 callbacks suppressed [ 141.996917][ T9883] loop0: detected capacity change from 0 to 128 [ 142.010404][ T9883] vfat: Unknown parameter 'vfat' [ 142.021376][ T9883] netlink: 'syz.0.2196': attribute type 1 has an invalid length. [ 142.029188][ T9883] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2196'. [ 142.106569][ T9895] syzkaller0: entered promiscuous mode [ 142.112155][ T9895] syzkaller0: entered allmulticast mode [ 142.138739][ T9891] tipc: Enabling of bearer rejected, failed to enable media [ 142.271132][ T9910] syzkaller0: entered promiscuous mode [ 142.276711][ T9910] syzkaller0: entered allmulticast mode [ 142.350884][ T9906] loop0: detected capacity change from 0 to 8192 [ 142.378512][ T9906] loop0: p1 p2[DM] p4 [ 142.383249][ T9906] loop0: p1 size 196608 extends beyond EOD, truncated [ 142.392340][ T9906] loop0: p2 start 4292936063 is beyond EOD, truncated [ 142.399439][ T9906] loop0: p4 size 50331648 extends beyond EOD, truncated [ 142.400552][ T9913] loop3: detected capacity change from 0 to 512 [ 142.422592][ T9913] loop3: detected capacity change from 0 to 128 [ 142.442203][ T9913] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 142.528819][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.533125][ T9918] wg1 speed is unknown, defaulting to 1000 [ 142.545781][ T9918] lo speed is unknown, defaulting to 1000 [ 142.581750][ T9926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2210'. [ 142.590821][ T9926] netlink: 'syz.3.2210': attribute type 7 has an invalid length. [ 142.598611][ T9926] netlink: 'syz.3.2210': attribute type 8 has an invalid length. [ 142.606368][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2210'. [ 142.652095][ T9924] tipc: Enabling of bearer rejected, failed to enable media [ 142.667019][ T9930] syzkaller0: entered promiscuous mode [ 142.672631][ T9930] syzkaller0: entered allmulticast mode [ 142.744683][ T9940] syzkaller0: entered promiscuous mode [ 142.750321][ T9940] syzkaller0: entered allmulticast mode [ 142.857363][ T30] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6c [ 142.877113][ T9954] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2218'. [ 142.886230][ T9954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2218'. [ 142.900491][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2219'. [ 142.964802][ T9959] loop3: detected capacity change from 0 to 512 [ 142.975196][ T9959] loop3: detected capacity change from 0 to 128 [ 142.986485][ T9959] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 143.050219][ T9964] FAULT_INJECTION: forcing a failure. [ 143.050219][ T9964] name failslab, interval 1, probability 0, space 0, times 0 [ 143.062909][ T9964] CPU: 1 UID: 0 PID: 9964 Comm: syz.1.2223 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 143.062944][ T9964] Tainted: [W]=WARN [ 143.062950][ T9964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 143.063005][ T9964] Call Trace: [ 143.063011][ T9964] [ 143.063019][ T9964] __dump_stack+0x1d/0x30 [ 143.063044][ T9964] dump_stack_lvl+0x95/0xd0 [ 143.063065][ T9964] dump_stack+0x15/0x1b [ 143.063083][ T9964] should_fail_ex+0x263/0x280 [ 143.063167][ T9964] should_failslab+0x8c/0xb0 [ 143.063187][ T9964] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 143.063209][ T9964] ? __d_alloc+0x37/0x340 [ 143.063233][ T9964] __d_alloc+0x37/0x340 [ 143.063311][ T9964] d_alloc_pseudo+0x1e/0x80 [ 143.063334][ T9964] alloc_file_pseudo+0x91/0x190 [ 143.063366][ T9964] __shmem_file_setup+0x1dd/0x210 [ 143.063390][ T9964] shmem_file_setup+0x3b/0x50 [ 143.063413][ T9964] memfd_alloc_file+0x4e/0x300 [ 143.063460][ T9964] __se_sys_memfd_create+0x2e1/0x3b0 [ 143.063489][ T9964] __x64_sys_memfd_create+0x31/0x40 [ 143.063580][ T9964] x64_sys_call+0x28cb/0x3000 [ 143.063604][ T9964] do_syscall_64+0xc0/0x2a0 [ 143.063659][ T9964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.063680][ T9964] RIP: 0033:0x7f5669faaf79 [ 143.063696][ T9964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.063740][ T9964] RSP: 002b:00007f56689fee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 143.063761][ T9964] RAX: ffffffffffffffda RBX: 00000000000005ad RCX: 00007f5669faaf79 [ 143.063775][ T9964] RDX: 00007f56689feee0 RSI: 0000000000000000 RDI: 00007f566a0418dd [ 143.063788][ T9964] RBP: 0000200000000180 R08: 00000000ffffffff R09: 0000000000000000 [ 143.063801][ T9964] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 143.063814][ T9964] R13: 00007f56689feee0 R14: 00007f56689feea0 R15: 0000200000000940 [ 143.063904][ T9964] [ 143.265598][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.288260][ T9967] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8217 sclass=netlink_xfrm_socket pid=9967 comm=syz.4.2224 [ 143.352179][ T9979] syzkaller0: entered promiscuous mode [ 143.357951][ T9979] syzkaller0: entered allmulticast mode [ 143.378370][ T9968] tipc: Enabling of bearer rejected, failed to enable media [ 143.449663][ T9984] syzkaller0: entered promiscuous mode [ 143.455353][ T9984] syzkaller0: entered allmulticast mode [ 143.691886][ T9996] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 143.721339][ T9996] pim6reg1: linktype set to 0 [ 143.757405][ T9996] bridge2: entered promiscuous mode [ 143.762770][ T9996] bridge2: entered allmulticast mode [ 143.823968][ T9996] team0: Port device bridge2 added [ 143.835634][T10001] loop0: detected capacity change from 0 to 512 [ 143.846588][T10003] bridge0: port 1(team0) entered blocking state [ 143.853047][T10003] bridge0: port 1(team0) entered disabled state [ 143.868669][T10001] loop0: detected capacity change from 0 to 128 [ 143.909265][T10001] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 143.924081][T10003] team0: entered allmulticast mode [ 143.938715][T10003] team0: entered promiscuous mode [ 144.149174][T10012] tipc: Enabling of bearer rejected, failed to enable media [ 144.275540][T10025] syzkaller0: entered promiscuous mode [ 144.281158][T10025] syzkaller0: entered allmulticast mode [ 144.291315][T10030] tipc: Enabling of bearer rejected, failed to enable media [ 144.496754][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.567746][T10056] tipc: Enabled bearer , priority 0 [ 144.579435][T10058] syzkaller0: entered promiscuous mode [ 144.584962][T10058] syzkaller0: entered allmulticast mode [ 144.593497][T10056] syzkaller0: entered promiscuous mode [ 144.599067][T10056] syzkaller0: entered allmulticast mode [ 144.637371][T10056] tipc: Resetting bearer [ 144.662301][T10063] syzkaller0: entered promiscuous mode [ 144.668008][T10063] syzkaller0: entered allmulticast mode [ 144.696032][T10055] tipc: Resetting bearer [ 144.719896][T10055] tipc: Disabling bearer [ 144.795239][T10068] loop3: detected capacity change from 0 to 512 [ 144.804144][T10068] EXT4-fs: Ignoring removed nobh option [ 144.835371][T10068] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.872722][T10068] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 144.915190][T10068] EXT4-fs (loop3): 1 truncate cleaned up [ 144.929844][T10068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.960247][T10068] FAULT_INJECTION: forcing a failure. [ 144.960247][T10068] name failslab, interval 1, probability 0, space 0, times 0 [ 144.972951][T10068] CPU: 1 UID: 0 PID: 10068 Comm: syz.3.2258 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.973059][T10068] Tainted: [W]=WARN [ 144.973069][T10068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 144.973084][T10068] Call Trace: [ 144.973093][T10068] [ 144.973103][T10068] __dump_stack+0x1d/0x30 [ 144.973197][T10068] dump_stack_lvl+0x95/0xd0 [ 144.973219][T10068] dump_stack+0x15/0x1b [ 144.973239][T10068] should_fail_ex+0x263/0x280 [ 144.973298][T10068] should_failslab+0x8c/0xb0 [ 144.973323][T10068] kmem_cache_alloc_noprof+0x68/0x490 [ 144.973374][T10068] ? __es_insert_extent+0x508/0xee0 [ 144.973401][T10068] __es_insert_extent+0x508/0xee0 [ 144.973501][T10068] ext4_es_insert_extent+0x467/0x1c70 [ 144.973532][T10068] ext4_map_blocks+0x941/0xd70 [ 144.973614][T10068] _ext4_get_block+0x117/0x370 [ 144.973646][T10068] ext4_get_block+0x39/0x50 [ 144.973676][T10068] ext4_block_write_begin+0x650/0xcf0 [ 144.973782][T10068] ? __pfx_ext4_get_block+0x10/0x10 [ 144.973859][T10068] ? folio_mapping+0xb9/0xe0 [ 144.973880][T10068] ext4_write_begin+0x636/0xe90 [ 144.973988][T10068] generic_perform_write+0x183/0x490 [ 144.974089][T10068] ext4_buffered_write_iter+0x1ee/0x3c0 [ 144.974126][T10068] ext4_file_write_iter+0x380/0xf70 [ 144.974154][T10068] ? kstrtouint+0x76/0xc0 [ 144.974178][T10068] ? selinux_file_permission+0x1f2/0x690 [ 144.974265][T10068] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 144.974373][T10068] vfs_write+0x5a6/0x9f0 [ 144.974415][T10068] ksys_write+0xdc/0x1a0 [ 144.974527][T10068] __x64_sys_write+0x40/0x50 [ 144.974558][T10068] x64_sys_call+0x2847/0x3000 [ 144.974645][T10068] do_syscall_64+0xc0/0x2a0 [ 144.974691][T10068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.974717][T10068] RIP: 0033:0x7f8a6419af79 [ 144.974735][T10068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.974757][T10068] RSP: 002b:00007f8a62bef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 144.974813][T10068] RAX: ffffffffffffffda RBX: 00007f8a64415fa0 RCX: 00007f8a6419af79 [ 144.974831][T10068] RDX: 00000000fffffdab RSI: 0000200000000000 RDI: 0000000000000004 [ 144.974848][T10068] RBP: 00007f8a62bef090 R08: 0000000000000000 R09: 0000000000000000 [ 144.974862][T10068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.974875][T10068] R13: 00007f8a64416038 R14: 00007f8a64415fa0 R15: 00007ffdc4152518 [ 144.974925][T10068] [ 145.248031][T10083] loop4: detected capacity change from 0 to 512 [ 145.261732][T10083] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 145.303404][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.320914][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.333784][T10087] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2264'. [ 145.342975][T10087] netlink: 'syz.4.2264': attribute type 7 has an invalid length. [ 145.350866][T10087] netlink: 'syz.4.2264': attribute type 8 has an invalid length. [ 145.358671][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2264'. [ 145.412543][T10094] msdos: Unknown parameter 'ÿÿ' [ 145.477618][T10103] tipc: Enabled bearer , priority 0 [ 145.484688][T10103] syzkaller0: entered promiscuous mode [ 145.490225][T10103] syzkaller0: entered allmulticast mode [ 145.501797][T10103] tipc: Resetting bearer [ 145.538142][T10102] syzkaller0: entered promiscuous mode [ 145.543760][T10102] syzkaller0: entered allmulticast mode [ 145.557275][T10100] tipc: Resetting bearer [ 145.565686][T10100] tipc: Disabling bearer [ 145.678968][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2276'. [ 145.688025][T10116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2276'. [ 145.748353][T10128] syzkaller0: entered promiscuous mode [ 145.753889][T10128] syzkaller0: entered allmulticast mode [ 145.805549][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2282'. [ 145.814582][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2282'. [ 145.877888][T10131] ip6gretap0: entered promiscuous mode [ 145.896066][T10131] syz_tun: entered promiscuous mode [ 145.912753][T10131] debugfs: 'hsr1' already exists in 'hsr' [ 145.918583][T10131] Cannot create hsr debugfs directory [ 145.924534][T10131] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 145.935047][T10131] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 145.948264][T10136] tipc: Enabling of bearer rejected, failed to enable media [ 145.999984][T10141] netlink: 'syz.1.2285': attribute type 1 has an invalid length. [ 146.007970][T10141] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2285'. [ 146.122691][T10149] tipc: Enabled bearer , priority 0 [ 146.149934][T10149] syzkaller0: entered promiscuous mode [ 146.155598][T10149] syzkaller0: entered allmulticast mode [ 146.212962][T10149] tipc: Resetting bearer [ 146.246296][T10148] tipc: Resetting bearer [ 146.260604][T10148] tipc: Disabling bearer [ 146.335108][T10165] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2292'. [ 146.690220][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2294'. [ 146.699304][T10173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2294'. [ 146.784256][T10175] syzkaller0: entered promiscuous mode [ 146.789869][T10175] syzkaller0: entered allmulticast mode [ 146.816577][T10177] tipc: Enabling of bearer rejected, failed to enable media [ 147.148708][T10207] team0: No ports can be present during mode change [ 147.326636][T10212] tipc: Enabling of bearer rejected, failed to enable media [ 147.377618][T10225] syzkaller0: entered promiscuous mode [ 147.383515][T10225] syzkaller0: entered allmulticast mode [ 147.394747][T10230] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 147.401193][T10230] pim6reg1: linktype set to 0 [ 147.415796][T10230] bridge4: entered promiscuous mode [ 147.421201][T10230] bridge4: entered allmulticast mode [ 147.428133][T10230] team0: Port device bridge4 added [ 147.434184][T10230] bridge0: port 1(team0) entered blocking state [ 147.440591][T10230] bridge0: port 1(team0) entered disabled state [ 147.446961][T10230] team0: entered allmulticast mode [ 147.452274][T10230] macvlan2: entered allmulticast mode [ 147.457659][T10230] bond3: entered allmulticast mode [ 147.465431][T10230] team0: entered promiscuous mode [ 147.507574][T10239] netlink: 'syz.1.2317': attribute type 1 has an invalid length. [ 147.522629][T10239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.542705][T10239] vlan2: entered allmulticast mode [ 147.548001][T10239] veth0_to_bond: entered allmulticast mode [ 147.556864][T10239] bond1: (slave vlan2): Enslaving as an active interface with a down link [ 147.577389][T10244] set_capacity_and_notify: 3 callbacks suppressed [ 147.577410][T10244] loop0: detected capacity change from 0 to 164 [ 147.604484][T10246] team0: No ports can be present during mode change [ 147.634093][T10244] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 147.714797][T10254] syzkaller0: entered promiscuous mode [ 147.720385][T10254] syzkaller0: entered allmulticast mode [ 147.750804][T10260] loop0: detected capacity change from 0 to 256 [ 147.794353][T10256] tipc: Enabling of bearer rejected, failed to enable media [ 147.840551][T10265] loop0: detected capacity change from 0 to 512 [ 147.858693][ T28] kauditd_printk_skb: 543 callbacks suppressed [ 147.858710][ T28] audit: type=1326 audit(1770694542.422:11465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31cfaf79 code=0x7ffc0000 [ 147.891852][T10265] loop0: detected capacity change from 0 to 128 [ 147.899746][T10269] loop4: detected capacity change from 0 to 512 [ 147.907935][ T28] audit: type=1326 audit(1770694542.452:11466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f6a31cfaf79 code=0x7ffc0000 [ 147.931667][ T28] audit: type=1326 audit(1770694542.452:11467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31cfaf79 code=0x7ffc0000 [ 147.955590][ T28] audit: type=1326 audit(1770694542.452:11468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6a31cfaf79 code=0x7ffc0000 [ 147.979973][ T28] audit: type=1326 audit(1770694542.452:11469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6a31cface2 code=0x7ffc0000 [ 148.004367][ T28] audit: type=1326 audit(1770694542.452:11470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6a31cbb84e code=0x7ffc0000 [ 148.028190][ T28] audit: type=1326 audit(1770694542.452:11471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6a31cfada7 code=0x7ffc0000 [ 148.051730][ T28] audit: type=1326 audit(1770694542.452:11472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a31cbb84e code=0x7ffc0000 [ 148.053918][T10281] team0: Unable to change to the same mode the team is in [ 148.075500][ T28] audit: type=1326 audit(1770694542.452:11473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a31cfac0b code=0x7ffc0000 [ 148.106178][ T28] audit: type=1326 audit(1770694542.462:11474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10264 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6a31cbb84e code=0x7ffc0000 [ 148.111601][T10282] loop3: detected capacity change from 0 to 1024 [ 148.138041][T10265] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 148.175641][T10282] ext4: Unknown parameter 'fsuuid' [ 148.207116][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.288365][T10296] loop4: detected capacity change from 0 to 512 [ 148.289018][T10293] syzkaller0: entered promiscuous mode [ 148.300438][T10293] syzkaller0: entered allmulticast mode [ 148.317183][T10296] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2339: inode has both inline data and extents flags [ 148.330724][T10296] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.333627][T10296] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2339: couldn't read orphan inode 15 (err -117) [ 148.355088][T10296] loop4: lost filesystem error report for type 5 error -117 [ 148.357034][T10296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.396285][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.491143][T10304] tipc: Enabling of bearer rejected, failed to enable media [ 148.513604][T10316] bond5: option all_slaves_active: invalid value (5) [ 148.521987][T10316] bond5 (unregistering): Released all slaves [ 148.557579][T10319] team0: Unable to change to the same mode the team is in [ 148.571221][T10319] loop4: detected capacity change from 0 to 1024 [ 148.580126][T10319] ext4: Unknown parameter 'fsuuid' [ 148.650299][T10321] loop3: detected capacity change from 0 to 164 [ 148.662658][T10321] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 148.706551][T10327] loop4: detected capacity change from 0 to 256 [ 148.757516][T10332] hsr_slave_0: left promiscuous mode [ 148.775503][T10332] hsr_slave_1: left promiscuous mode [ 148.875752][T10343] syzkaller0: entered promiscuous mode [ 148.881409][T10343] syzkaller0: entered allmulticast mode [ 148.996062][T10350] tipc: Enabling of bearer rejected, failed to enable media [ 149.039313][T10360] EXT4-fs: Ignoring removed nobh option [ 149.049494][T10360] EXT4-fs: Invalid want_extra_isize 232 [ 149.171576][ T35] IPVS: starting estimator thread 0... [ 149.177644][T10368] random: crng reseeded on system resumption [ 149.226949][T10375] FAULT_INJECTION: forcing a failure. [ 149.226949][T10375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.240224][T10375] CPU: 0 UID: 0 PID: 10375 Comm: syz.0.2366 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 149.240311][T10375] Tainted: [W]=WARN [ 149.240319][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 149.240331][T10375] Call Trace: [ 149.240391][T10375] [ 149.240401][T10375] __dump_stack+0x1d/0x30 [ 149.240458][T10375] dump_stack_lvl+0x95/0xd0 [ 149.240483][T10375] dump_stack+0x15/0x1b [ 149.240507][T10375] should_fail_ex+0x263/0x280 [ 149.240537][T10375] should_fail+0xb/0x20 [ 149.240595][T10375] should_fail_usercopy+0x1a/0x20 [ 149.240631][T10375] _copy_to_user+0x20/0xa0 [ 149.240655][T10375] simple_read_from_buffer+0xb5/0x130 [ 149.240772][T10375] proc_fail_nth_read+0x10e/0x150 [ 149.240804][T10375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 149.240829][T10375] vfs_read+0x1ab/0x7f0 [ 149.240925][T10375] ? __schedule+0x81f/0xce0 [ 149.240954][T10375] ? __rcu_read_unlock+0x4e/0x70 [ 149.240986][T10375] ? __fget_files+0x184/0x1c0 [ 149.241019][T10375] ? mutex_lock+0x57/0x90 [ 149.241072][T10375] ksys_read+0xdc/0x1a0 [ 149.241110][T10375] __x64_sys_read+0x40/0x50 [ 149.241154][T10375] x64_sys_call+0x2889/0x3000 [ 149.241182][T10375] do_syscall_64+0xc0/0x2a0 [ 149.241209][T10375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.241235][T10375] RIP: 0033:0x7f6a31cbb84e [ 149.241252][T10375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 149.241271][T10375] RSP: 002b:00007f6a3074efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 149.241400][T10375] RAX: ffffffffffffffda RBX: 00007f6a3074f6c0 RCX: 00007f6a31cbb84e [ 149.241416][T10375] RDX: 000000000000000f RSI: 00007f6a3074f0a0 RDI: 0000000000000004 [ 149.241500][T10375] RBP: 00007f6a3074f090 R08: 0000000000000000 R09: 0000000000000000 [ 149.241514][T10375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.241527][T10375] R13: 00007f6a31f76038 R14: 00007f6a31f75fa0 R15: 00007ffe3d2c8788 [ 149.241546][T10375] [ 149.253735][T10377] syzkaller0: entered promiscuous mode [ 149.267936][T10369] IPVS: using max 2256 ests per chain, 112800 per kthread [ 149.273304][T10377] syzkaller0: entered allmulticast mode [ 149.561201][T10386] team0: No ports can be present during mode change [ 149.580458][T10387] syz_tun (unregistering): left promiscuous mode [ 149.635459][T10387] ext3: Unknown parameter 'smackfstransmute' [ 149.713028][T10393] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 149.735339][T10393] pim6reg1: linktype set to 0 [ 149.758448][T10393] bridge2: entered promiscuous mode [ 149.763812][T10393] bridge2: entered allmulticast mode [ 149.778284][T10393] team0: Port device bridge2 added [ 149.976500][T10426] syz_tun (unregistering): left promiscuous mode [ 149.993475][T10428] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2387: invalid indirect mapped block 256 (level 2) [ 150.006940][T10428] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 150.038246][T10428] EXT4-fs (loop4): 2 truncates cleaned up [ 150.114003][T10428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.173952][T10439] bridge2: entered promiscuous mode [ 150.179342][T10439] bridge2: entered allmulticast mode [ 150.185598][T10445] syzkaller0: entered promiscuous mode [ 150.191178][T10445] syzkaller0: entered allmulticast mode [ 150.248861][T10442] xt_socket: unknown flags 0x48 [ 150.278413][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.384611][T10460] __nla_validate_parse: 15 callbacks suppressed [ 150.384634][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 150.399969][T10460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2399'. [ 150.420682][T10463] vfat: Unknown parameter 'vfat' [ 150.451513][T10463] netlink: 'syz.4.2400': attribute type 1 has an invalid length. [ 150.459376][T10463] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2400'. [ 150.493288][T10467] syzkaller0: entered promiscuous mode [ 150.498913][T10467] syzkaller0: entered allmulticast mode [ 150.530101][T10467] tipc: Enabled bearer , priority 0 [ 150.553099][T10466] tipc: Resetting bearer [ 150.578528][T10466] tipc: Disabling bearer [ 150.624577][T10474] siw: device registration error -23 [ 150.714327][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2405'. [ 150.723304][T10478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2405'. [ 150.794031][T10481] syzkaller0: entered promiscuous mode [ 150.799720][T10481] syzkaller0: entered allmulticast mode [ 150.821329][T10483] tipc: Enabled bearer , priority 0 [ 150.839966][T10483] syzkaller0: entered promiscuous mode [ 150.845463][T10483] syzkaller0: entered allmulticast mode [ 150.899875][T10483] tipc: Resetting bearer [ 150.927156][T10482] tipc: Resetting bearer [ 150.934939][T10482] tipc: Disabling bearer [ 151.068798][T10494] batadv_slave_1: entered promiscuous mode [ 151.096277][T10496] xt_recent: Unsupported userspace flags (000000b1) [ 151.141422][T10494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.245671][T10493] batadv_slave_1: left promiscuous mode [ 151.261914][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.308087][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2417'. [ 151.317183][T10506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2417'. [ 151.386002][T10510] syzkaller0: entered promiscuous mode [ 151.391572][T10510] syzkaller0: entered allmulticast mode [ 151.502283][T10513] buffer_io_error: 17 callbacks suppressed [ 151.502302][T10513] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.518682][T10513] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.526709][T10513] loop8: unable to read partition table [ 151.538997][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'. [ 151.543002][T10513] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 151.559207][ T3299] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.579233][ T3299] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.587374][ T3299] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.596588][T10516] team0: No ports can be present during mode change [ 151.617476][T10516] ext4: Unknown parameter 'fsuuid' [ 151.626030][ T3299] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.658143][ T3299] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.667005][ T3299] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.702101][ T3299] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.713964][ T3299] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.723402][T10525] vfat: Unknown parameter 'vfat' [ 151.751550][T10525] netlink: 'syz.0.2423': attribute type 1 has an invalid length. [ 151.759348][T10525] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2423'. [ 151.880289][T10533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.920073][T10533] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 151.974310][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.024540][T10541] iso9660: Unknown parameter 'uession' [ 152.107535][T10544] syzkaller0: entered promiscuous mode [ 152.113284][T10544] syzkaller0: entered allmulticast mode [ 152.363751][T10551] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 152.376483][T10551] pim6reg1: linktype set to 0 [ 152.401444][T10555] FAULT_INJECTION: forcing a failure. [ 152.401444][T10555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.403938][T10551] bridge3: entered promiscuous mode [ 152.414678][T10555] CPU: 0 UID: 0 PID: 10555 Comm: syz.3.2433 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 152.414720][T10555] Tainted: [W]=WARN [ 152.414727][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 152.414741][T10555] Call Trace: [ 152.414749][T10555] [ 152.414758][T10555] __dump_stack+0x1d/0x30 [ 152.414850][T10555] dump_stack_lvl+0x95/0xd0 [ 152.414874][T10555] dump_stack+0x15/0x1b [ 152.414895][T10555] should_fail_ex+0x263/0x280 [ 152.415001][T10555] should_fail+0xb/0x20 [ 152.415039][T10555] should_fail_usercopy+0x1a/0x20 [ 152.415080][T10555] _copy_from_user+0x1c/0xb0 [ 152.415108][T10555] ____sys_sendmsg+0x1e2/0x600 [ 152.415239][T10555] ___sys_sendmsg+0x195/0x1e0 [ 152.415269][T10555] ? path_openat+0x1b01/0x2050 [ 152.415347][T10555] __sys_sendmmsg+0x185/0x320 [ 152.415455][T10555] __x64_sys_sendmmsg+0x57/0x70 [ 152.415487][T10555] x64_sys_call+0x1e28/0x3000 [ 152.415513][T10555] do_syscall_64+0xc0/0x2a0 [ 152.415623][T10555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.415646][T10555] RIP: 0033:0x7f8a6419af79 [ 152.415664][T10555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.415684][T10555] RSP: 002b:00007f8a62bef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 152.415707][T10555] RAX: ffffffffffffffda RBX: 00007f8a64415fa0 RCX: 00007f8a6419af79 [ 152.415723][T10555] RDX: 0000000000000001 RSI: 0000200000007140 RDI: 0000000000000004 [ 152.415752][T10555] RBP: 00007f8a62bef090 R08: 0000000000000000 R09: 0000000000000000 [ 152.415766][T10555] R10: 0000000000000450 R11: 0000000000000246 R12: 0000000000000001 [ 152.415779][T10555] R13: 00007f8a64416038 R14: 00007f8a64415fa0 R15: 00007ffdc4152518 [ 152.415800][T10555] [ 152.598371][T10551] bridge3: entered allmulticast mode [ 152.632056][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2434'. [ 152.656735][T10558] team0: No ports can be present during mode change [ 152.670857][T10558] set_capacity_and_notify: 11 callbacks suppressed [ 152.670876][T10558] loop3: detected capacity change from 0 to 1024 [ 152.688237][T10558] ext4: Unknown parameter 'fsuuid' [ 152.767035][T10564] netlink: 'syz.1.2436': attribute type 1 has an invalid length. [ 152.843163][T10574] syzkaller0: entered promiscuous mode [ 152.848783][T10574] syzkaller0: entered allmulticast mode [ 152.878101][ T28] kauditd_printk_skb: 513 callbacks suppressed [ 152.878118][ T28] audit: type=1326 audit(152.849:11988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.5.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 152.878206][ T28] audit: type=1326 audit(152.849:11989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.5.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 152.878289][ T28] audit: type=1326 audit(152.849:11990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.5.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 152.878608][ T28] audit: type=1326 audit(152.849:11991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.5.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 152.878691][ T28] audit: type=1326 audit(152.849:11992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.5.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 152.879551][ T28] audit: type=1326 audit(152.849:11993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.5.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 152.913895][T10584] netlink: 'syz.3.2440': attribute type 10 has an invalid length. [ 152.942723][ T28] audit: type=1326 audit(152.909:11994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.5.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 153.080130][ T28] audit: type=1326 audit(153.039:11995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.5.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 153.123466][T10576] netlink: zone id is out of range [ 153.129042][T10576] netlink: zone id is out of range [ 153.142855][T10576] netlink: zone id is out of range [ 153.161285][T10576] netlink: zone id is out of range [ 153.166444][T10576] netlink: zone id is out of range [ 153.171643][T10576] netlink: zone id is out of range [ 153.178365][ T28] audit: type=1326 audit(153.079:11996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.5.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 153.201542][ T28] audit: type=1326 audit(153.079:11997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10577 comm="syz.5.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 153.227641][T10584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.256273][T10576] netlink: zone id is out of range [ 153.268535][T10576] netlink: zone id is out of range [ 153.281648][T10601] loop8: detected capacity change from 0 to 7 [ 153.292175][T10584] team0: Port device bond0 added [ 153.298165][T10576] netlink: zone id is out of range [ 153.300096][T10601] loop8: unable to read partition table [ 153.311133][T10601] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 153.317134][T10576] netlink: zone id is out of range [ 153.361591][T10603] tipc: Enabling of bearer rejected, failed to enable media [ 153.464694][T10621] syzkaller0: entered promiscuous mode [ 153.470579][T10621] syzkaller0: entered allmulticast mode [ 153.680057][T10639] syzkaller0: entered promiscuous mode [ 153.685706][T10639] syzkaller0: entered allmulticast mode [ 153.724011][T10639] tipc: Enabled bearer , priority 0 [ 153.748469][T10638] tipc: Resetting bearer [ 153.767125][T10638] tipc: Disabling bearer [ 153.815161][T10649] loop3: detected capacity change from 0 to 512 [ 153.853562][T10649] FAT-fs (loop3): Directory bread(block 199916) failed [ 153.875569][T10654] syzkaller0: entered promiscuous mode [ 153.881197][T10654] syzkaller0: entered allmulticast mode [ 153.884396][T10649] FAT-fs (loop3): Directory bread(block 199917) failed [ 153.917974][T10649] FAT-fs (loop3): Directory bread(block 199918) failed [ 153.951213][T10649] FAT-fs (loop3): Directory bread(block 199919) failed [ 153.972233][T10649] FAT-fs (loop3): Directory bread(block 199920) failed [ 154.034191][T10662] loop4: detected capacity change from 0 to 512 [ 154.045877][T10662] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 154.066635][T10662] EXT4-fs (loop4): orphan cleanup on readonly fs [ 154.075926][T10662] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.2473: Block bitmap for bg 0 marked uninitialized [ 154.089239][T10662] loop4: lost filesystem error report for type 5 error -117 [ 154.096071][T10649] FAT-fs (loop3): Directory bread(block 199921) failed [ 154.111710][T10662] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 154.120624][T10662] loop4: lost filesystem error report for type 5 error -117 [ 154.128381][T10649] FAT-fs (loop3): Directory bread(block 199922) failed [ 154.129316][T10662] EXT4-fs (loop4): 1 orphan inode deleted [ 154.135799][T10649] FAT-fs (loop3): Directory bread(block 199923) failed [ 154.157441][T10662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 154.185185][T10662] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 154.220648][T10662] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 154.223566][T10673] loop0: detected capacity change from 0 to 256 [ 154.239058][T10649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10649 comm=syz.3.2466 [ 154.268371][T10662] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.2473: Block bitmap for bg 0 marked uninitialized [ 154.366084][T10683] siw: device registration error -23 [ 154.447755][T10645] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.472812][T10690] syzkaller0: entered promiscuous mode [ 154.478386][T10690] syzkaller0: entered allmulticast mode [ 154.488690][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.519140][T10697] loop4: detected capacity change from 0 to 512 [ 154.526753][T10697] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.540596][T10697] EXT4-fs (loop4): 1 truncate cleaned up [ 154.547070][T10697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.562791][T10697] EXT4-fs error (device loop4): ext4_get_parent:1836: comm syz.4.2485: inode #2: comm syz.4.2485: iget: illegal inode # [ 154.576579][T10697] random: crng reseeded on system resumption [ 154.599453][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.647745][T10707] loop4: detected capacity change from 0 to 1024 [ 154.688708][T10707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 154.740607][T10707] geneve2: entered promiscuous mode [ 154.749110][ T5587] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.757701][ T5587] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.766425][ T5587] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.775871][ T5587] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 154.808740][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 154.844162][T10724] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 154.852812][T10724] pim6reg1: linktype set to 0 [ 154.927125][T10732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.946023][T10732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.978009][T10737] loop4: detected capacity change from 0 to 256 [ 155.213536][T10761] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 155.219663][T10761] pim6reg1: linktype set to 0 [ 155.254585][T10767] tipc: Enabled bearer , priority 0 [ 155.261843][T10767] syzkaller0: entered promiscuous mode [ 155.264610][T10769] loop0: detected capacity change from 0 to 512 [ 155.267504][T10767] syzkaller0: entered allmulticast mode [ 155.309022][T10769] loop0: detected capacity change from 0 to 128 [ 155.319544][T10769] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 155.333949][T10775] netlink: 'syz.1.2515': attribute type 1 has an invalid length. [ 155.365055][T10775] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 155.377639][T10775] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 155.388248][T10775] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 155.399946][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.414430][T10771] tipc: Enabling of bearer rejected, failed to enable media [ 155.485620][T10786] __nla_validate_parse: 14 callbacks suppressed [ 155.485639][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2518'. [ 155.525064][T10789] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬( IrÝ\•žu}ibˆŒÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh–O„h'®ÈûrK1‚\kU{!e½úó¬Üš7»ßß [ 155.525064][T10789] ÄUúeâ[¦ÓÎ%#s' [ 155.658045][T10800] siw: device registration error -23 [ 155.723151][T10808] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 155.733170][T10808] pim6reg1: linktype set to 0 [ 155.744819][T10807] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 155.781158][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.843815][T10818] tipc: Enabled bearer , priority 0 [ 155.852444][T10818] tipc: Resetting bearer [ 155.860799][T10817] tipc: Disabling bearer [ 155.911600][T10826] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2533'. [ 155.938315][T10828] 9p: Bad value for 'rfdno' [ 155.980613][T10749] tipc: Resetting bearer [ 155.999026][T10749] tipc: Disabling bearer [ 156.020303][T10837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2537'. [ 156.024461][T10839] syzkaller0: entered promiscuous mode [ 156.029464][T10837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2537'. [ 156.035066][T10839] syzkaller0: entered allmulticast mode [ 156.189687][T10853] tipc: Enabled bearer , priority 0 [ 156.199486][T10851] vfat: Unknown parameter 'vfat' [ 156.226499][T10853] tipc: Resetting bearer [ 156.250319][T10852] tipc: Disabling bearer [ 156.276172][T10866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2550'. [ 156.285946][T10866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2550'. [ 156.355585][T10871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.386438][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.402008][T10878] syzkaller0: entered promiscuous mode [ 156.407543][T10878] syzkaller0: entered allmulticast mode [ 156.462088][T10886] vfat: Unknown parameter 'vfat' [ 156.556069][T10897] bridge5: entered promiscuous mode [ 156.561654][T10897] bridge5: entered allmulticast mode [ 156.581165][T10897] team0: Port device bridge5 added [ 156.586626][T10900] batadv_slave_1: entered promiscuous mode [ 156.593890][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2566'. [ 156.605585][T10906] veth1_macvtap: left promiscuous mode [ 156.666552][T10895] batadv_slave_1: left promiscuous mode [ 156.701666][T10919] siw: device registration error -23 [ 156.761733][T10928] EXT4-fs: dax option not supported [ 156.780963][T10925] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 156.840968][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.890562][T10942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2579'. [ 156.904751][T10942] team0: Unable to change to the same mode the team is in [ 156.923154][T10942] ext4: Unknown parameter 'fsuuid' [ 156.944518][T10946] FAULT_INJECTION: forcing a failure. [ 156.944518][T10946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.957710][T10946] CPU: 0 UID: 0 PID: 10946 Comm: syz.3.2581 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.957774][T10946] Tainted: [W]=WARN [ 156.957783][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 156.957797][T10946] Call Trace: [ 156.957805][T10946] [ 156.957814][T10946] __dump_stack+0x1d/0x30 [ 156.957862][T10946] dump_stack_lvl+0x95/0xd0 [ 156.957888][T10946] dump_stack+0x15/0x1b [ 156.957975][T10946] should_fail_ex+0x263/0x280 [ 156.958064][T10946] should_fail+0xb/0x20 [ 156.958095][T10946] should_fail_usercopy+0x1a/0x20 [ 156.958199][T10946] _copy_to_user+0x20/0xa0 [ 156.958237][T10946] simple_read_from_buffer+0xb5/0x130 [ 156.958276][T10946] proc_fail_nth_read+0x10e/0x150 [ 156.958305][T10946] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.958366][T10946] vfs_read+0x1ab/0x7f0 [ 156.958401][T10946] ? __rcu_read_unlock+0x4e/0x70 [ 156.958434][T10946] ? __fget_files+0x184/0x1c0 [ 156.958472][T10946] ? mutex_lock+0x57/0x90 [ 156.958650][T10946] ksys_read+0xdc/0x1a0 [ 156.958744][T10946] __x64_sys_read+0x40/0x50 [ 156.958781][T10946] x64_sys_call+0x2889/0x3000 [ 156.958865][T10946] do_syscall_64+0xc0/0x2a0 [ 156.958934][T10946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.958961][T10946] RIP: 0033:0x7f8a6415b84e [ 156.959024][T10946] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.959044][T10946] RSP: 002b:00007f8a62beefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.959176][T10946] RAX: ffffffffffffffda RBX: 00007f8a62bef6c0 RCX: 00007f8a6415b84e [ 156.959194][T10946] RDX: 000000000000000f RSI: 00007f8a62bef0a0 RDI: 0000000000000003 [ 156.959209][T10946] RBP: 00007f8a62bef090 R08: 0000000000000000 R09: 0000000000000000 [ 156.959225][T10946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.959240][T10946] R13: 00007f8a64416038 R14: 00007f8a64415fa0 R15: 00007ffdc4152518 [ 156.959260][T10946] [ 157.218595][T10954] tipc: Enabled bearer , priority 0 [ 157.238915][T10954] tipc: Resetting bearer [ 157.253356][T10956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2586'. [ 157.262450][T10956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2586'. [ 157.272200][T10953] tipc: Disabling bearer [ 157.293437][T10958] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 157.336924][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.421087][T10973] bridge3: entered promiscuous mode [ 157.426367][T10973] bridge3: entered allmulticast mode [ 157.435216][T10973] team0: Port device bridge3 added [ 157.442970][T10977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10977 comm=syz.0.2595 [ 157.445567][T10973] bridge0: port 2(team0) entered blocking state [ 157.461917][T10973] bridge0: port 2(team0) entered disabled state [ 157.469259][T10973] team0: entered allmulticast mode [ 157.474426][T10973] bond0: entered allmulticast mode [ 157.480013][T10973] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 157.492276][T10973] team0: entered promiscuous mode [ 157.497507][T10973] bond0: entered promiscuous mode [ 157.502725][T10973] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 157.510943][T10980] team0: No ports can be present during mode change [ 157.526625][T10980] ext4: Unknown parameter 'fsuuid' [ 157.800302][T11006] netlink: 'syz.3.2605': attribute type 21 has an invalid length. [ 157.831992][T11009] siw: device registration error -23 [ 157.856138][T11011] team0: No ports can be present during mode change [ 157.876613][T11015] set_capacity_and_notify: 17 callbacks suppressed [ 157.876629][T11015] loop3: detected capacity change from 0 to 256 [ 158.022904][T11035] syzkaller0: entered promiscuous mode [ 158.029403][T11035] syzkaller0: entered allmulticast mode [ 158.124715][T11033] tipc: Cannot configure node identity twice [ 158.194653][T11043] ip6tnl2: entered promiscuous mode [ 158.202009][T11046] loop3: detected capacity change from 0 to 256 [ 158.220017][T11047] loop0: detected capacity change from 0 to 256 [ 158.288366][ T28] kauditd_printk_skb: 493 callbacks suppressed [ 158.288387][ T28] audit: type=1400 audit(158.259:12491): avc: denied { mounton } for pid=11045 comm="syz.0.2622" path="/494/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 158.373113][T11056] loop0: detected capacity change from 0 to 512 [ 158.391102][T11054] bridge4: entered promiscuous mode [ 158.396496][T11054] bridge4: entered allmulticast mode [ 158.405525][T11056] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.421914][T11054] team0: Port device bridge4 added [ 158.448726][T11056] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2626: bad orphan inode 16 [ 158.459104][T11056] loop0: lost filesystem error report for type 5 error -117 [ 158.498059][T11056] ext4_test_bit(bit=15, block=4) = 0 [ 158.511660][T11056] EXT4-fs (loop0): 1 orphan inode deleted [ 158.536382][T11056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.561213][T11056] EXT4-fs (loop0): shut down requested (0) [ 158.580335][T11064] tipc: Cannot configure node identity twice [ 158.642050][ T28] audit: type=1400 audit(158.599:12492): avc: denied { setopt } for pid=11055 comm="syz.0.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 158.674137][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.777096][T11081] 9p: Bad value for 'rfdno' [ 158.781443][T11084] bridge3: entered promiscuous mode [ 158.786985][T11084] bridge3: entered allmulticast mode [ 158.806146][T11084] team0: Port device bridge3 added [ 158.818319][T11084] bridge0: port 1(team0) entered blocking state [ 158.825261][T11084] bridge0: port 1(team0) entered disabled state [ 158.835835][T11084] team0: entered allmulticast mode [ 158.845237][T11084] team0: entered promiscuous mode [ 158.870398][ T28] audit: type=1400 audit(158.829:12493): avc: denied { connect } for pid=11070 comm="syz.3.2632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.911997][ T28] audit: type=1400 audit(158.879:12494): avc: denied { override_creds } for pid=11096 comm="syz.1.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 158.940775][T11102] FAULT_INJECTION: forcing a failure. [ 158.940775][T11102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.954018][T11102] CPU: 0 UID: 0 PID: 11102 Comm: syz.4.2644 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.954058][T11102] Tainted: [W]=WARN [ 158.954067][T11102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 158.954081][T11102] Call Trace: [ 158.954089][T11102] [ 158.954100][T11102] __dump_stack+0x1d/0x30 [ 158.954190][T11102] dump_stack_lvl+0x95/0xd0 [ 158.954216][T11102] dump_stack+0x15/0x1b [ 158.954248][T11102] should_fail_ex+0x263/0x280 [ 158.954279][T11102] should_fail+0xb/0x20 [ 158.954308][T11102] should_fail_usercopy+0x1a/0x20 [ 158.954360][T11102] _copy_from_iter+0x328/0xea0 [ 158.954450][T11102] ? __slab_alloc+0x25/0x50 [ 158.954475][T11102] ? __kmalloc_noprof+0x2a3/0x580 [ 158.954512][T11102] ? bcm_rx_setup+0x3e0/0x1090 [ 158.954539][T11102] bcm_rx_setup+0x529/0x1090 [ 158.954635][T11102] ? _raw_spin_lock_bh+0x56/0xb0 [ 158.954749][T11102] ? _raw_spin_unlock_bh+0x18/0x20 [ 158.954811][T11102] ? lock_sock_nested+0x132/0x160 [ 158.954838][T11102] ? selinux_socket_sendmsg+0x192/0x1c0 [ 158.954934][T11102] bcm_sendmsg+0x1bb/0x4a0 [ 158.955003][T11102] ? __pfx_bcm_sendmsg+0x10/0x10 [ 158.955025][T11102] ____sys_sendmsg+0x5af/0x600 [ 158.955082][T11102] ___sys_sendmsg+0x195/0x1e0 [ 158.955201][T11102] __x64_sys_sendmsg+0xd4/0x160 [ 158.955251][T11102] x64_sys_call+0x17ba/0x3000 [ 158.955343][T11102] do_syscall_64+0xc0/0x2a0 [ 158.955376][T11102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.955470][T11102] RIP: 0033:0x7f6deda7af79 [ 158.955489][T11102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.955509][T11102] RSP: 002b:00007f6dec4cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.955534][T11102] RAX: ffffffffffffffda RBX: 00007f6dedcf5fa0 RCX: 00007f6deda7af79 [ 158.955552][T11102] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 158.955628][T11102] RBP: 00007f6dec4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 158.955644][T11102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.955658][T11102] R13: 00007f6dedcf6038 R14: 00007f6dedcf5fa0 R15: 00007ffc07a0c0f8 [ 158.955680][T11102] [ 159.306611][T11126] loop3: detected capacity change from 0 to 512 [ 159.365420][T11126] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.379185][T11129] loop4: detected capacity change from 0 to 128 [ 159.402364][T11129] vfat: Unknown parameter 'vfat' [ 159.434739][T11126] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2651: Invalid block bitmap block 0 in block_group 0 [ 159.448442][T11126] loop3: lost filesystem error report for type 5 error -117 [ 159.449954][T11126] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 159.466030][T11126] loop3: lost filesystem error report for type 5 error -117 [ 159.550398][T11126] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.2651: attempt to clear invalid blocks 983261 len 1 [ 159.571246][T11126] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.663074][T11126] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.2651: Invalid inode table block 0 in block_group 0 [ 159.685292][T11126] loop3: lost filesystem error report for type 5 error -117 [ 159.740476][T11126] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 159.743227][T11139] netlink: 'syz.0.2655': attribute type 1 has an invalid length. [ 159.747893][T11126] loop3: lost filesystem error report for type 5 error -117 [ 159.870792][ T28] audit: type=1400 audit(159.839:12495): avc: denied { bind } for pid=11142 comm="syz.0.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.938385][T11126] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 159.947116][T11126] loop3: lost filesystem error report for type 5 error -117 [ 159.947417][T11126] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.2651: Invalid inode table block 0 in block_group 0 [ 159.968273][T11126] loop3: lost filesystem error report for type 5 error -117 [ 160.006849][T11126] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 160.023723][T11126] loop3: lost filesystem error report for type 5 error -117 [ 160.054899][T11126] EXT4-fs error (device loop3): ext4_truncate:4635: inode #11: comm syz.3.2651: mark_inode_dirty error [ 160.074022][T11126] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 160.078339][T11126] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 160.096703][T11126] loop3: lost filesystem error report for type 5 error -117 [ 160.123037][T11126] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.2651: Invalid inode table block 0 in block_group 0 [ 160.143826][T11126] loop3: lost filesystem error report for type 5 error -117 [ 160.144313][T11126] EXT4-fs (loop3): 1 truncate cleaned up [ 160.192563][T11126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.215764][T11126] FAULT_INJECTION: forcing a failure. [ 160.215764][T11126] name failslab, interval 1, probability 0, space 0, times 0 [ 160.229299][T11126] CPU: 1 UID: 0 PID: 11126 Comm: syz.3.2651 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.229409][T11126] Tainted: [W]=WARN [ 160.229416][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 160.229429][T11126] Call Trace: [ 160.229490][T11126] [ 160.229501][T11126] __dump_stack+0x1d/0x30 [ 160.229534][T11126] dump_stack_lvl+0x95/0xd0 [ 160.229562][T11126] dump_stack+0x15/0x1b [ 160.229652][T11126] should_fail_ex+0x263/0x280 [ 160.229684][T11126] should_failslab+0x8c/0xb0 [ 160.229705][T11126] kmem_cache_alloc_noprof+0x68/0x490 [ 160.229793][T11126] ? getname_flags+0x7f/0x3b0 [ 160.229823][T11126] getname_flags+0x7f/0x3b0 [ 160.229877][T11126] __x64_sys_symlink+0x40/0x60 [ 160.229897][T11126] x64_sys_call+0x24a9/0x3000 [ 160.229923][T11126] do_syscall_64+0xc0/0x2a0 [ 160.230001][T11126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.230028][T11126] RIP: 0033:0x7f8a6419af79 [ 160.230048][T11126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.230067][T11126] RSP: 002b:00007f8a62bef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 160.230099][T11126] RAX: ffffffffffffffda RBX: 00007f8a64415fa0 RCX: 00007f8a6419af79 [ 160.230114][T11126] RDX: 0000000000000000 RSI: 0000200000000e40 RDI: 0000200000001640 [ 160.230130][T11126] RBP: 00007f8a62bef090 R08: 0000000000000000 R09: 0000000000000000 [ 160.230143][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.230157][T11126] R13: 00007f8a64416038 R14: 00007f8a64415fa0 R15: 00007ffdc4152518 [ 160.230279][T11126] [ 160.257580][T11182] syzkaller0: entered promiscuous mode [ 160.279208][T11183] netlink: 'syz.4.2653': attribute type 4 has an invalid length. [ 160.282946][T11182] syzkaller0: entered allmulticast mode [ 160.376283][T11187] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 160.429343][T11187] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 160.460042][T11187] vhci_hcd vhci_hcd.0: Device attached [ 160.467725][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.476776][T11189] vhci_hcd: connection closed [ 160.477169][ T5784] vhci_hcd vhci_hcd.0: stop threads [ 160.487998][ T5784] vhci_hcd vhci_hcd.0: release socket [ 160.490502][T11193] FAULT_INJECTION: forcing a failure. [ 160.490502][T11193] name failslab, interval 1, probability 0, space 0, times 0 [ 160.493482][ T5784] vhci_hcd vhci_hcd.0: disconnect device [ 160.506148][T11193] CPU: 0 UID: 0 PID: 11193 Comm: syz.4.2673 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.506207][T11193] Tainted: [W]=WARN [ 160.506215][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 160.506228][T11193] Call Trace: [ 160.506250][T11193] [ 160.506259][T11193] __dump_stack+0x1d/0x30 [ 160.506295][T11193] dump_stack_lvl+0x95/0xd0 [ 160.506319][T11193] dump_stack+0x15/0x1b [ 160.506391][T11193] should_fail_ex+0x263/0x280 [ 160.506429][T11193] should_failslab+0x8c/0xb0 [ 160.506476][T11193] __kmalloc_cache_noprof+0x64/0x4a0 [ 160.506501][T11193] ? cma_alloc_port+0x3d/0x320 [ 160.506530][T11193] cma_alloc_port+0x3d/0x320 [ 160.506622][T11193] rdma_bind_addr_dst+0xa98/0x2290 [ 160.506647][T11193] ? lockref_put_return+0xf7/0x130 [ 160.506707][T11193] ? __rcu_read_unlock+0x4e/0x70 [ 160.506737][T11193] rdma_resolve_addr+0x43a/0x1350 [ 160.506763][T11193] ? _parse_integer_limit+0x170/0x190 [ 160.506795][T11193] ucma_resolve_ip+0x283/0x370 [ 160.506871][T11193] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 160.506900][T11193] ucma_write+0x1c9/0x260 [ 160.506977][T11193] ? __pfx_ucma_write+0x10/0x10 [ 160.507004][T11193] vfs_write+0x269/0x9f0 [ 160.507035][T11193] ? __rcu_read_unlock+0x4e/0x70 [ 160.507147][T11193] ? __fget_files+0x184/0x1c0 [ 160.507171][T11193] ksys_write+0xdc/0x1a0 [ 160.507224][T11193] __x64_sys_write+0x40/0x50 [ 160.507263][T11193] x64_sys_call+0x2847/0x3000 [ 160.507331][T11193] do_syscall_64+0xc0/0x2a0 [ 160.507360][T11193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.507431][T11193] RIP: 0033:0x7f6deda7af79 [ 160.507449][T11193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.507470][T11193] RSP: 002b:00007f6dec4cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.507530][T11193] RAX: ffffffffffffffda RBX: 00007f6dedcf5fa0 RCX: 00007f6deda7af79 [ 160.507546][T11193] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000003 [ 160.507561][T11193] RBP: 00007f6dec4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 160.507575][T11193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.507589][T11193] R13: 00007f6dedcf6038 R14: 00007f6dedcf5fa0 R15: 00007ffc07a0c0f8 [ 160.507637][T11193] [ 160.763204][T11197] loop3: detected capacity change from 0 to 512 [ 160.774051][T11197] loop3: detected capacity change from 0 to 128 [ 160.778398][ T28] audit: type=1326 audit(160.739:12496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.3.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6419af79 code=0x7ffc0000 [ 160.803396][ T28] audit: type=1326 audit(160.739:12497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.3.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f8a6419af79 code=0x7ffc0000 [ 160.826502][ T28] audit: type=1326 audit(160.739:12498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.3.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a6419af79 code=0x7ffc0000 [ 160.832146][T11199] __nla_validate_parse: 7 callbacks suppressed [ 160.832165][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2675'. [ 160.849552][ T28] audit: type=1326 audit(160.739:12499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.3.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8a6419af79 code=0x7ffc0000 [ 160.849587][ T28] audit: type=1326 audit(160.739:12500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.3.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a6419ace2 code=0x7ffc0000 [ 160.913897][T11199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2675'. [ 160.925028][T11197] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 160.988326][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.049066][T11213] siw: device registration error -23 [ 161.077299][T11215] loop4: detected capacity change from 0 to 128 [ 161.107549][T11215] vfat: Unknown parameter 'vfat' [ 161.192527][T11218] loop3: detected capacity change from 0 to 8192 [ 161.206270][T11228] bridge6: entered promiscuous mode [ 161.211707][T11228] bridge6: entered allmulticast mode [ 161.227080][T11232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11232 comm=syz.1.2687 [ 161.241553][T11228] team0: Port device bridge6 added [ 161.278384][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2688'. [ 161.287434][T11237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2688'. [ 161.412349][T11243] netlink: 328 bytes leftover after parsing attributes in process `syz.1.2690'. [ 161.909494][T11268] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2699'. [ 161.920351][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2699'. [ 161.945899][T11268] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 161.983806][T11275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2701'. [ 162.054362][T11275] team0: No ports can be present during mode change [ 162.191406][T11235] syz_tun (unregistering): left promiscuous mode [ 162.199394][T11293] siw: device registration error -23 [ 162.221545][T11297] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2711'. [ 162.662418][T11337] bridge7: entered promiscuous mode [ 162.668074][T11337] bridge7: entered allmulticast mode [ 162.675864][T11337] team0: Port device bridge7 added [ 162.690827][T11318] wg1 speed is unknown, defaulting to 1000 [ 162.697121][T11318] lo speed is unknown, defaulting to 1000 [ 162.716028][T11340] bridge3: entered promiscuous mode [ 162.721403][T11340] bridge3: entered allmulticast mode [ 162.734908][T11345] syzkaller0: entered promiscuous mode [ 162.741188][T11345] syzkaller0: entered allmulticast mode [ 162.808191][T11318] chnl_net:caif_netlink_parms(): no params data found [ 162.877137][T11318] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.884350][T11318] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.908950][T11318] bridge_slave_0: entered allmulticast mode [ 162.923544][T11318] bridge_slave_0: entered promiscuous mode [ 162.937401][T11318] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.945244][T11318] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.971893][T11318] bridge_slave_1: entered allmulticast mode [ 162.979232][T11318] bridge_slave_1: entered promiscuous mode [ 163.046718][T11318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.069028][T11318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.093275][T11380] bridge4: entered promiscuous mode [ 163.098660][T11380] bridge4: entered allmulticast mode [ 163.109986][T11380] team0: Port device bridge4 added [ 163.149483][T11318] team0: Port device team_slave_0 added [ 163.164182][T11318] team0: Port device team_slave_1 added [ 163.193515][T11318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.200649][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.226836][T11318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.239786][T11318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.246762][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.273170][T11318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.290468][T11391] bridge4: entered promiscuous mode [ 163.295746][T11391] bridge4: entered allmulticast mode [ 163.307039][T11391] team0: Port device bridge4 added [ 163.370759][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2742'. [ 163.423668][T11318] hsr_slave_0: entered promiscuous mode [ 163.448343][T11318] hsr_slave_1: entered promiscuous mode [ 163.469860][T11410] loop4: detected capacity change from 0 to 256 [ 163.526250][T11415] loop4: detected capacity change from 0 to 128 [ 163.550263][T11413] wg1 speed is unknown, defaulting to 1000 [ 163.556596][T11413] lo speed is unknown, defaulting to 1000 [ 163.563337][T11415] vfat: Unknown parameter 'vfat' [ 163.650948][T11421] loop4: detected capacity change from 0 to 512 [ 163.661166][ T28] kauditd_printk_skb: 401 callbacks suppressed [ 163.661184][ T28] audit: type=1326 audit(163.629:12902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11424 comm="syz.1.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5669faaf79 code=0x7ffc0000 [ 163.677647][T11318] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 163.703634][T11421] loop4: detected capacity change from 0 to 128 [ 163.710519][T11318] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 163.720357][T11318] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 163.734259][T11421] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 163.742630][ T28] audit: type=1326 audit(163.659:12903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11424 comm="syz.1.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5669faaf79 code=0x7ffc0000 [ 163.769503][ T28] audit: type=1326 audit(163.659:12904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11424 comm="syz.1.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5669faaf79 code=0x7ffc0000 [ 163.793140][ T28] audit: type=1326 audit(163.659:12905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11424 comm="syz.1.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5669faaf79 code=0x7ffc0000 [ 163.816326][ T28] audit: type=1326 audit(163.669:12906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deda7af79 code=0x7ffc0000 [ 163.840180][ T28] audit: type=1326 audit(163.669:12907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f6deda7af79 code=0x7ffc0000 [ 163.863556][ T28] audit: type=1326 audit(163.669:12908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deda7af79 code=0x7ffc0000 [ 163.886550][ T28] audit: type=1326 audit(163.669:12909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6deda7af79 code=0x7ffc0000 [ 163.909629][ T28] audit: type=1326 audit(163.669:12910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6deda7ace2 code=0x7ffc0000 [ 163.932601][ T28] audit: type=1326 audit(163.669:12911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.4.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6deda3b84e code=0x7ffc0000 [ 163.962329][T11433] team0: No ports can be present during mode change [ 163.980961][T11318] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.032338][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.071828][T11445] siw: device registration error -23 [ 164.090249][T11318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.116869][T11318] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.146501][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.153607][ T5782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.174027][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.181144][ T5782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.302767][T11318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.592093][T11318] veth0_vlan: entered promiscuous mode [ 164.601449][T11318] veth1_vlan: entered promiscuous mode [ 164.629668][T11318] veth0_macvtap: entered promiscuous mode [ 164.644793][T11318] veth1_macvtap: entered promiscuous mode [ 164.657620][T11318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.672307][T11318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.684589][ T5587] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.701727][ T5587] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.719741][ T5587] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.733133][ T5587] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.874005][T11517] syzkaller0: entered promiscuous mode [ 164.879669][T11517] syzkaller0: entered allmulticast mode [ 164.890343][T11517] tipc: Started in network mode [ 164.895265][T11517] tipc: Node identity bacab18171b4, cluster identity 4711 [ 164.902751][T11517] tipc: Enabled bearer , priority 0 [ 164.921456][T11516] tipc: Resetting bearer [ 164.930100][T11516] tipc: Disabling bearer [ 164.958545][T11521] bridge5: entered promiscuous mode [ 164.989458][T11525] netlink: 'syz.4.2775': attribute type 21 has an invalid length. [ 165.050443][T11532] loop4: detected capacity change from 0 to 128 [ 165.059045][T11532] vfat: Unknown parameter 'vfat' [ 165.130954][T11539] syzkaller0: entered promiscuous mode [ 165.136560][T11539] syzkaller0: entered allmulticast mode [ 165.438288][T11570] sg_write: data in/out 921/246 bytes for SCSI command 0x0-- guessing data in; [ 165.438288][T11570] program syz.0.2793 not setting count and/or reply_len properly [ 165.483068][T11572] netlink: 'syz.0.2794': attribute type 1 has an invalid length. [ 165.491171][T11572] netlink: 'syz.0.2794': attribute type 3 has an invalid length. [ 165.590189][T11577] syzkaller0: entered promiscuous mode [ 165.595899][T11577] syzkaller0: entered allmulticast mode [ 165.722485][T11587] bridge8: entered promiscuous mode [ 165.727919][T11587] bridge8: entered allmulticast mode [ 165.742278][T11587] team0: Port device bridge8 added [ 165.757505][T11589] bridge1: entered promiscuous mode [ 165.762848][T11589] bridge1: entered allmulticast mode [ 165.772454][T11589] team0: Port device bridge1 added [ 165.782761][T11589] bridge0: port 3(team0) entered blocking state [ 165.789314][T11589] bridge0: port 3(team0) entered disabled state [ 165.805037][T11589] team0: entered allmulticast mode [ 165.810938][T11589] team_slave_0: entered allmulticast mode [ 165.816777][T11589] team_slave_1: entered allmulticast mode [ 165.824717][T11589] team0: entered promiscuous mode [ 165.829880][T11589] team_slave_0: entered promiscuous mode [ 165.835806][T11589] team_slave_1: entered promiscuous mode [ 165.842853][T11589] bridge0: port 3(team0) entered blocking state [ 165.849202][T11589] bridge0: port 3(team0) entered forwarding state [ 165.858403][T11595] team0: No ports can be present during mode change [ 165.943928][T11597] __nla_validate_parse: 12 callbacks suppressed [ 165.944050][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2805'. [ 165.963340][T11608] loop6: detected capacity change from 0 to 164 [ 165.983062][T11608] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 166.035690][T11616] syzkaller0: entered promiscuous mode [ 166.041365][T11616] syzkaller0: entered allmulticast mode [ 166.074949][T11620] tipc: Enabling of bearer rejected, failed to enable media [ 166.129727][T11629] FAULT_INJECTION: forcing a failure. [ 166.129727][T11629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.143094][T11629] CPU: 0 UID: 0 PID: 11629 Comm: syz.0.2816 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.143130][T11629] Tainted: [W]=WARN [ 166.143151][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 166.143164][T11629] Call Trace: [ 166.143172][T11629] [ 166.143226][T11629] __dump_stack+0x1d/0x30 [ 166.143252][T11629] dump_stack_lvl+0x95/0xd0 [ 166.143277][T11629] dump_stack+0x15/0x1b [ 166.143300][T11629] should_fail_ex+0x263/0x280 [ 166.143403][T11629] should_fail+0xb/0x20 [ 166.143487][T11629] should_fail_usercopy+0x1a/0x20 [ 166.143522][T11629] _copy_from_user+0x1c/0xb0 [ 166.143544][T11629] ___sys_sendmsg+0xc1/0x1e0 [ 166.143596][T11629] __x64_sys_sendmsg+0xd4/0x160 [ 166.143631][T11629] x64_sys_call+0x17ba/0x3000 [ 166.143692][T11629] do_syscall_64+0xc0/0x2a0 [ 166.143722][T11629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.143743][T11629] RIP: 0033:0x7f6a31cfaf79 [ 166.143760][T11629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.143783][T11629] RSP: 002b:00007f6a3074f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.143808][T11629] RAX: ffffffffffffffda RBX: 00007f6a31f75fa0 RCX: 00007f6a31cfaf79 [ 166.143823][T11629] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 166.143836][T11629] RBP: 00007f6a3074f090 R08: 0000000000000000 R09: 0000000000000000 [ 166.143900][T11629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.143916][T11629] R13: 00007f6a31f76038 R14: 00007f6a31f75fa0 R15: 00007ffe3d2c8788 [ 166.143939][T11629] [ 166.372362][T11636] FAULT_INJECTION: forcing a failure. [ 166.372362][T11636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.385480][T11636] CPU: 1 UID: 0 PID: 11636 Comm: syz.4.2820 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.385579][T11636] Tainted: [W]=WARN [ 166.385586][T11636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 166.385598][T11636] Call Trace: [ 166.385606][T11636] [ 166.385614][T11636] __dump_stack+0x1d/0x30 [ 166.385643][T11636] dump_stack_lvl+0x95/0xd0 [ 166.385769][T11636] dump_stack+0x15/0x1b [ 166.385788][T11636] should_fail_ex+0x263/0x280 [ 166.385821][T11636] should_fail+0xb/0x20 [ 166.385847][T11636] should_fail_usercopy+0x1a/0x20 [ 166.386025][T11636] _copy_from_user+0x1c/0xb0 [ 166.386048][T11636] map_update_elem+0x2f3/0x580 [ 166.386078][T11636] __sys_bpf+0x57b/0x7b0 [ 166.386110][T11636] __x64_sys_bpf+0x41/0x50 [ 166.386188][T11636] x64_sys_call+0x28e1/0x3000 [ 166.386283][T11636] do_syscall_64+0xc0/0x2a0 [ 166.386381][T11636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.386484][T11636] RIP: 0033:0x7f6deda7af79 [ 166.386514][T11636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.386536][T11636] RSP: 002b:00007f6dec4cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.386636][T11636] RAX: ffffffffffffffda RBX: 00007f6dedcf5fa0 RCX: 00007f6deda7af79 [ 166.386650][T11636] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000002 [ 166.386665][T11636] RBP: 00007f6dec4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 166.386706][T11636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.386722][T11636] R13: 00007f6dedcf6038 R14: 00007f6dedcf5fa0 R15: 00007ffc07a0c0f8 [ 166.386744][T11636] [ 166.643072][T11641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2817'. [ 166.653713][T11651] syzkaller0: entered promiscuous mode [ 166.659490][T11651] syzkaller0: entered allmulticast mode [ 166.670795][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2826'. [ 166.680140][T11655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2826'. [ 166.696537][T11651] tipc: Enabled bearer , priority 0 [ 166.722889][T11649] tipc: Resetting bearer [ 166.738562][T11649] tipc: Disabling bearer [ 167.242387][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2841'. [ 167.251537][T11701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2841'. [ 167.310059][T11691] infiniband !yz!: set down [ 167.314702][T11691] infiniband !yz!: added team_slave_0 [ 167.337519][T11691] RDS/IB: !yz!: added [ 167.342109][T11691] smc: adding ib device !yz! with port count 1 [ 167.348620][T11691] smc: ib device !yz! port 1 has no pnetid [ 167.643045][T11727] FAULT_INJECTION: forcing a failure. [ 167.643045][T11727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.651146][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2852'. [ 167.657447][T11727] CPU: 1 UID: 0 PID: 11727 Comm: syz.6.2851 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.657530][T11727] Tainted: [W]=WARN [ 167.657538][T11727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 167.657551][T11727] Call Trace: [ 167.657558][T11727] [ 167.657567][T11727] __dump_stack+0x1d/0x30 [ 167.657595][T11727] dump_stack_lvl+0x95/0xd0 [ 167.657672][T11727] dump_stack+0x15/0x1b [ 167.657720][T11727] should_fail_ex+0x263/0x280 [ 167.657749][T11727] should_fail+0xb/0x20 [ 167.657783][T11727] should_fail_usercopy+0x1a/0x20 [ 167.657826][T11727] _copy_from_user+0x1c/0xb0 [ 167.657847][T11727] sctp_getsockopt_maxseg+0x11c/0x4b0 [ 167.657877][T11727] ? selinux_socket_getsockopt+0x192/0x1c0 [ 167.657983][T11727] sctp_getsockopt+0x8bc/0xaa0 [ 167.658015][T11727] sock_common_getsockopt+0x60/0x70 [ 167.658041][T11727] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 167.658086][T11727] do_sock_getsockopt+0x1c4/0x210 [ 167.658126][T11727] __x64_sys_getsockopt+0x11d/0x1a0 [ 167.658178][T11727] x64_sys_call+0x2dc7/0x3000 [ 167.658211][T11727] do_syscall_64+0xc0/0x2a0 [ 167.658240][T11727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.658312][T11727] RIP: 0033:0x7f3ff1a5af79 [ 167.658331][T11727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.658350][T11727] RSP: 002b:00007f3ff04b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 167.658452][T11727] RAX: ffffffffffffffda RBX: 00007f3ff1cd5fa0 RCX: 00007f3ff1a5af79 [ 167.658497][T11727] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000004 [ 167.658586][T11727] RBP: 00007f3ff04b7090 R08: 0000200000003a80 R09: 0000000000000000 [ 167.658601][T11727] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 167.658616][T11727] R13: 00007f3ff1cd6038 R14: 00007f3ff1cd5fa0 R15: 00007fffe7af9a78 [ 167.658636][T11727] [ 167.792530][T11732] loop6: detected capacity change from 0 to 256 [ 167.808192][T11729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2852'. [ 167.900044][T11734] syzkaller0: entered promiscuous mode [ 167.905702][T11734] syzkaller0: entered allmulticast mode [ 167.938858][T11736] loop6: detected capacity change from 0 to 512 [ 167.968044][T11736] loop6: detected capacity change from 0 to 128 [ 167.994554][T11736] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 168.040309][T11318] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.053224][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2859'. [ 168.108993][T11745] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2859'. [ 168.120955][T11758] team0: No ports can be present during mode change [ 168.137500][T11758] loop6: detected capacity change from 0 to 1024 [ 168.148360][T11758] ext4: Unknown parameter 'fsuuid' [ 168.637640][T11791] block device autoloading is deprecated and will be removed. [ 168.668444][ T28] kauditd_printk_skb: 1200 callbacks suppressed [ 168.668460][ T28] audit: type=1326 audit(168.639:14112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11754 comm="syz.4.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6deda7af79 code=0x7ffc0000 [ 168.698922][ T28] audit: type=1326 audit(168.639:14113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11754 comm="syz.4.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6deda7af79 code=0x7ffc0000 [ 168.725779][ T28] audit: type=1326 audit(168.689:14114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31cfaf79 code=0x7ffc0000 [ 168.749118][ T28] audit: type=1326 audit(168.689:14115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.0.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31cfaf79 code=0x7ffc0000 [ 168.840797][T11803] team0: No ports can be present during mode change [ 168.852188][T11807] loop0: detected capacity change from 0 to 256 [ 169.062855][T11826] loop0: detected capacity change from 0 to 512 [ 169.074407][ T28] audit: type=1326 audit(169.039:14116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.0.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31cfaf79 code=0x7ffc0000 [ 169.098813][ T28] audit: type=1326 audit(169.069:14117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.0.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f6a31cfaf79 code=0x7ffc0000 [ 169.122006][ T28] audit: type=1326 audit(169.069:14118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.0.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31cfaf79 code=0x7ffc0000 [ 169.145122][ T28] audit: type=1326 audit(169.069:14119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.0.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31cfaf79 code=0x7ffc0000 [ 169.169391][ T28] audit: type=1326 audit(169.069:14120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.1.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5669faaf79 code=0x7ffc0000 [ 169.192835][ T28] audit: type=1326 audit(169.069:14121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.1.2885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5669faaf79 code=0x7ffc0000 [ 169.262506][T11829] loop0: detected capacity change from 0 to 128 [ 169.278308][T11829] vfat: Unknown parameter 'vfat' [ 169.452372][T11844] net_ratelimit: 313 callbacks suppressed [ 169.452389][T11844] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 169.532908][T11851] bridge5: entered promiscuous mode [ 169.538301][T11851] bridge5: entered allmulticast mode [ 169.547109][T11851] team0: Port device bridge5 added [ 169.612654][T11858] syzkaller0: entered promiscuous mode [ 169.618291][T11858] syzkaller0: entered allmulticast mode [ 169.836686][T11886] FAULT_INJECTION: forcing a failure. [ 169.836686][T11886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.850014][T11886] CPU: 0 UID: 0 PID: 11886 Comm: syz.0.2908 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 169.850116][T11886] Tainted: [W]=WARN [ 169.850125][T11886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 169.850140][T11886] Call Trace: [ 169.850148][T11886] [ 169.850158][T11886] __dump_stack+0x1d/0x30 [ 169.850187][T11886] dump_stack_lvl+0x95/0xd0 [ 169.850213][T11886] dump_stack+0x15/0x1b [ 169.850303][T11886] should_fail_ex+0x263/0x280 [ 169.850338][T11886] should_fail+0xb/0x20 [ 169.850367][T11886] should_fail_usercopy+0x1a/0x20 [ 169.850456][T11886] _copy_to_user+0x20/0xa0 [ 169.850478][T11886] simple_read_from_buffer+0xb5/0x130 [ 169.850516][T11886] proc_fail_nth_read+0x10e/0x150 [ 169.850624][T11886] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.850653][T11886] vfs_read+0x1ab/0x7f0 [ 169.850726][T11886] ? __rcu_read_unlock+0x4e/0x70 [ 169.850758][T11886] ? __fget_files+0x184/0x1c0 [ 169.850791][T11886] ? mutex_lock+0x57/0x90 [ 169.850818][T11886] ksys_read+0xdc/0x1a0 [ 169.850853][T11886] __x64_sys_read+0x40/0x50 [ 169.850921][T11886] x64_sys_call+0x2889/0x3000 [ 169.850951][T11886] do_syscall_64+0xc0/0x2a0 [ 169.850990][T11886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.851015][T11886] RIP: 0033:0x7f6a31cbb84e [ 169.851036][T11886] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.851169][T11886] RSP: 002b:00007f6a3074efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.851248][T11886] RAX: ffffffffffffffda RBX: 00007f6a3074f6c0 RCX: 00007f6a31cbb84e [ 169.851265][T11886] RDX: 000000000000000f RSI: 00007f6a3074f0a0 RDI: 0000000000000004 [ 169.851281][T11886] RBP: 00007f6a3074f090 R08: 0000000000000000 R09: 0000000000000000 [ 169.851297][T11886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.851312][T11886] R13: 00007f6a31f76038 R14: 00007f6a31f75fa0 R15: 00007ffe3d2c8788 [ 169.851335][T11886] [ 169.927389][T11888] bridge4: entered promiscuous mode [ 170.064304][T11888] bridge4: entered allmulticast mode [ 170.093304][T11891] team0: left allmulticast mode [ 170.098820][T11891] team0: left promiscuous mode [ 170.103970][T11891] bridge0: port 1(team0) entered disabled state [ 170.126794][T11891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 170.233952][T11911] FAULT_INJECTION: forcing a failure. [ 170.233952][T11911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.247126][T11911] CPU: 0 UID: 0 PID: 11911 Comm: syz.1.2917 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 170.247167][T11911] Tainted: [W]=WARN [ 170.247176][T11911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 170.247191][T11911] Call Trace: [ 170.247199][T11911] [ 170.247209][T11911] __dump_stack+0x1d/0x30 [ 170.247316][T11911] dump_stack_lvl+0x95/0xd0 [ 170.247343][T11911] dump_stack+0x15/0x1b [ 170.247387][T11911] should_fail_ex+0x263/0x280 [ 170.247461][T11911] should_fail+0xb/0x20 [ 170.247492][T11911] should_fail_usercopy+0x1a/0x20 [ 170.247528][T11911] _copy_from_user+0x1c/0xb0 [ 170.247552][T11911] ___sys_sendmsg+0xc1/0x1e0 [ 170.247677][T11911] __x64_sys_sendmsg+0xd4/0x160 [ 170.247739][T11911] x64_sys_call+0x17ba/0x3000 [ 170.247769][T11911] do_syscall_64+0xc0/0x2a0 [ 170.247846][T11911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.247884][T11911] RIP: 0033:0x7f5669faaf79 [ 170.247905][T11911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.247927][T11911] RSP: 002b:00007f56689ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.247952][T11911] RAX: ffffffffffffffda RBX: 00007f566a225fa0 RCX: 00007f5669faaf79 [ 170.248001][T11911] RDX: 0000000000000080 RSI: 00002000000008c0 RDI: 0000000000000005 [ 170.248071][T11911] RBP: 00007f56689ff090 R08: 0000000000000000 R09: 0000000000000000 [ 170.248086][T11911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.248144][T11911] R13: 00007f566a226038 R14: 00007f566a225fa0 R15: 00007fffa9bc6278 [ 170.248166][T11911] [ 170.463713][T11919] bridge6: entered promiscuous mode [ 170.469170][T11919] bridge6: entered allmulticast mode [ 170.500723][T11919] team0: Port device bridge6 added [ 170.509872][T11919] bridge0: port 1(team0) entered blocking state [ 170.516355][T11919] bridge0: port 1(team0) entered disabled state [ 170.529157][T11919] team0: entered allmulticast mode [ 170.536238][T11919] team0: entered promiscuous mode [ 170.600864][T11931] syzkaller0: entered promiscuous mode [ 170.606424][T11931] syzkaller0: entered allmulticast mode [ 170.656441][T11928] loop0: detected capacity change from 0 to 8192 [ 170.831514][T11947] sctp: [Deprecated]: syz.1.2932 (pid 11947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.831514][T11947] Use struct sctp_sack_info instead [ 170.964126][T11959] syzkaller0: entered promiscuous mode [ 170.964943][T11961] __nla_validate_parse: 3 callbacks suppressed [ 170.964958][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2938'. [ 170.969823][T11959] syzkaller0: entered allmulticast mode [ 170.975967][T11961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2938'. [ 171.032448][T11964] syzkaller0: entered promiscuous mode [ 171.038145][T11964] syzkaller0: entered allmulticast mode [ 171.064517][T11966] loop6: detected capacity change from 0 to 164 [ 171.074050][T11966] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 171.119798][T11968] syzkaller0: entered promiscuous mode [ 171.125425][T11968] syzkaller0: entered allmulticast mode [ 171.164338][T11968] tipc: Enabled bearer , priority 0 [ 171.188681][T11967] tipc: Resetting bearer [ 171.200480][T11967] tipc: Disabling bearer [ 171.369637][T11983] No such timeout policy "syz1" [ 171.388930][T11983] random: crng reseeded on system resumption [ 171.446080][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2951'. [ 171.455836][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2951'. [ 171.521881][T11996] loop6: detected capacity change from 0 to 164 [ 171.550085][T11996] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 171.600387][T12002] syzkaller0: entered promiscuous mode [ 171.606002][T12002] syzkaller0: entered allmulticast mode [ 171.626660][T12003] syzkaller0: entered promiscuous mode [ 171.632232][T12003] syzkaller0: entered allmulticast mode [ 171.651399][T12003] tipc: Enabled bearer , priority 0 [ 171.663343][T12001] tipc: Resetting bearer [ 171.690440][T12001] tipc: Disabling bearer [ 171.881625][T12032] wg1 speed is unknown, defaulting to 1000 [ 171.896973][T12032] lo speed is unknown, defaulting to 1000 [ 171.912302][T12034] loop6: detected capacity change from 0 to 256 [ 171.972053][T12037] loop0: detected capacity change from 0 to 164 [ 171.987656][T12037] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 172.045122][T12044] loop0: detected capacity change from 0 to 512 [ 172.060446][T12044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.089219][T12046] syzkaller0: entered promiscuous mode [ 172.094785][T12046] syzkaller0: entered allmulticast mode [ 172.115982][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.256402][T12055] bridge2: entered promiscuous mode [ 172.261791][T12055] bridge2: entered allmulticast mode [ 172.269212][T12055] team0: Port device bridge2 added [ 172.375588][T12061] tipc: Enabled bearer , priority 0 [ 172.384194][T12061] tipc: Resetting bearer [ 172.391735][T12060] tipc: Disabling bearer [ 172.478457][T12063] loop0: detected capacity change from 0 to 8192 [ 172.692688][T12082] syzkaller0: entered promiscuous mode [ 172.698881][T12082] syzkaller0: entered allmulticast mode [ 172.715926][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2988'. [ 172.725030][T12093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2988'. [ 172.756950][T12075] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 173.052319][T12116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.069648][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2998'. [ 173.078752][T12118] netlink: 'syz.4.2998': attribute type 7 has an invalid length. [ 173.086632][T12118] netlink: 'syz.4.2998': attribute type 8 has an invalid length. [ 173.095069][T12118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2998'. [ 173.156272][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2999'. [ 173.165605][T12122] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2999'. [ 173.209056][T12126] team0: left allmulticast mode [ 173.214128][T12126] team0: left promiscuous mode [ 173.219907][T12126] bridge0: port 1(team0) entered disabled state [ 173.240819][T11318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.244398][T12126] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.454328][T12130] team0: left allmulticast mode [ 173.459294][T12130] team_slave_0: left allmulticast mode [ 173.464877][T12130] team_slave_1: left allmulticast mode [ 173.470490][T12130] team0: left promiscuous mode [ 173.475283][T12130] team_slave_0: left promiscuous mode [ 173.481567][T12130] team_slave_1: left promiscuous mode [ 173.487460][T12130] bridge0: port 3(team0) entered disabled state [ 173.545413][T12130] bridge_slave_0: left allmulticast mode [ 173.551259][T12130] bridge_slave_0: left promiscuous mode [ 173.557085][T12130] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.561982][T12136] ext4: Unknown parameter 'fsuuid' [ 173.574736][T12130] bridge_slave_1: left allmulticast mode [ 173.580508][T12130] bridge_slave_1: left promiscuous mode [ 173.586161][T12130] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.600366][T12130] bond0: (slave bond_slave_0): Releasing backup interface [ 173.610855][T12130] bond0: (slave bond_slave_1): Releasing backup interface [ 173.625223][T12130] team0: Port device team_slave_0 removed [ 173.634121][T12130] team0: Port device team_slave_1 removed [ 173.641391][T12130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.648841][T12130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.661269][T12130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.668796][T12130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.679661][T12130] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.784340][T12149] netlink: 'syz.6.3009': attribute type 7 has an invalid length. [ 173.792883][T12149] netlink: 'syz.6.3009': attribute type 8 has an invalid length. [ 173.995980][T12169] set_capacity_and_notify: 4 callbacks suppressed [ 173.996000][T12169] loop6: detected capacity change from 0 to 128 [ 174.044704][T12169] bio_check_eod: 45 callbacks suppressed [ 174.044722][T12169] syz.6.3012: attempt to access beyond end of device [ 174.044722][T12169] loop6: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 174.068604][ T28] kauditd_printk_skb: 745 callbacks suppressed [ 174.068634][ T28] audit: type=1326 audit(174.039:14867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12165 comm="syz.5.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 174.096103][T12169] syz.6.3012: attempt to access beyond end of device [ 174.096103][T12169] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 174.111712][T12169] buffer_io_error: 15 callbacks suppressed [ 174.111778][T12169] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 174.118190][ T28] audit: type=1326 audit(174.039:14868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12165 comm="syz.5.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 174.130903][T12169] syz.6.3012: attempt to access beyond end of device [ 174.130903][T12169] loop6: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 174.152362][T12156] wg1 speed is unknown, defaulting to 1000 [ 174.163705][T12169] syz.6.3012: attempt to access beyond end of device [ 174.163705][T12169] loop6: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 174.169840][ T28] audit: type=1326 audit(174.099:14869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12165 comm="syz.5.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 174.182659][T12169] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 174.183452][T12169] syz.6.3012: attempt to access beyond end of device [ 174.183452][T12169] loop6: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 174.206504][ T28] audit: type=1326 audit(174.099:14870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12165 comm="syz.5.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 174.206573][ T28] audit: type=1326 audit(174.099:14871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12165 comm="syz.5.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 174.215799][T12169] syz.6.3012: attempt to access beyond end of device [ 174.215799][T12169] loop6: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 174.229042][ T28] audit: type=1326 audit(174.139:14872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12165 comm="syz.5.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 174.252044][T12169] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 174.258251][T12169] syz.6.3012: attempt to access beyond end of device [ 174.258251][T12169] loop6: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 174.275845][ T28] audit: type=1326 audit(174.139:14873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12165 comm="syz.5.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 174.290923][T12169] syz.6.3012: attempt to access beyond end of device [ 174.290923][T12169] loop6: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 174.313165][ T28] audit: type=1326 audit(174.139:14874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12165 comm="syz.5.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 174.321246][T12169] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 174.336260][ T28] audit: type=1326 audit(174.159:14875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12165 comm="syz.5.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 174.368291][T12169] syz.6.3012: attempt to access beyond end of device [ 174.368291][T12169] loop6: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 174.372235][ T28] audit: type=1326 audit(174.159:14876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12165 comm="syz.5.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c85faf79 code=0x7ffc0000 [ 174.396101][T12169] syz.6.3012: attempt to access beyond end of device [ 174.396101][T12169] loop6: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 174.428475][T12156] lo speed is unknown, defaulting to 1000 [ 174.484509][T12169] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 174.495013][T12169] Buffer I/O error on dev loop6, logical block 116, lost async page write [ 174.506117][T12169] Buffer I/O error on dev loop6, logical block 88, lost async page write [ 174.515588][T12169] Buffer I/O error on dev loop6, logical block 92, lost async page write [ 174.526457][T12169] Buffer I/O error on dev loop6, logical block 120, lost async page write [ 174.536125][T12169] Buffer I/O error on dev loop6, logical block 124, lost async page write [ 174.564418][T12176] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 174.592050][T12156] chnl_net:caif_netlink_parms(): no params data found [ 174.657268][T12156] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.664490][T12156] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.672593][T12156] bridge_slave_0: entered allmulticast mode [ 174.680337][T12156] bridge_slave_0: entered promiscuous mode [ 174.687184][T12156] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.694371][T12156] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.702628][T12156] bridge_slave_1: entered allmulticast mode [ 174.709659][T12156] bridge_slave_1: entered promiscuous mode [ 174.737295][T12199] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.755368][T12156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.783690][T12156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.836330][T12204] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 174.842660][T12209] netlink: 'syz.5.3026': attribute type 21 has an invalid length. [ 174.863164][T12156] team0: Port device team_slave_0 added [ 174.870346][T12156] team0: Port device team_slave_1 added [ 174.882151][T12205] tipc: Enabled bearer , priority 0 [ 174.894345][T12204] loop6: detected capacity change from 0 to 1024 [ 174.901670][T12205] syzkaller0: entered promiscuous mode [ 174.907178][T12205] syzkaller0: entered allmulticast mode [ 174.913449][T12204] ext4: Unknown parameter 'fsuuid' [ 174.932531][T12156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.939657][T12156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.965810][T12156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.992119][T12212] tipc: Resetting bearer [ 175.016302][T12156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.023349][T12156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.050125][T12156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.069675][T12203] tipc: Resetting bearer [ 175.092529][T12203] tipc: Disabling bearer [ 175.141218][T12156] hsr_slave_0: entered promiscuous mode [ 175.162497][T12156] hsr_slave_1: entered promiscuous mode [ 175.169432][T12156] debugfs: 'hsr0' already exists in 'hsr' [ 175.175208][T12156] Cannot create hsr debugfs directory [ 175.238256][T12229] syzkaller0: entered promiscuous mode [ 175.243851][T12229] syzkaller0: entered allmulticast mode [ 175.262785][T12229] tipc: Enabled bearer , priority 0 [ 175.276753][T12228] tipc: Resetting bearer [ 175.284337][T12228] tipc: Disabling bearer [ 175.342537][T12156] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 175.355082][T12156] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 175.365084][T12156] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 175.375236][T12156] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 175.421784][T12249] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 175.457142][T12156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.474197][T12156] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.486661][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.493930][ T5784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.510995][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.518332][ T5784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.594449][T12265] FAULT_INJECTION: forcing a failure. [ 175.594449][T12265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.608125][T12265] CPU: 0 UID: 0 PID: 12265 Comm: syz.4.3046 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.608192][T12265] Tainted: [W]=WARN [ 175.608200][T12265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 175.608213][T12265] Call Trace: [ 175.608220][T12265] [ 175.608230][T12265] __dump_stack+0x1d/0x30 [ 175.608255][T12265] dump_stack_lvl+0x95/0xd0 [ 175.608276][T12265] dump_stack+0x15/0x1b [ 175.608299][T12265] should_fail_ex+0x263/0x280 [ 175.608388][T12265] should_fail+0xb/0x20 [ 175.608461][T12265] should_fail_usercopy+0x1a/0x20 [ 175.608497][T12265] _copy_from_user+0x1c/0xb0 [ 175.608519][T12265] ___sys_sendmsg+0xc1/0x1e0 [ 175.608565][T12265] __x64_sys_sendmsg+0xd4/0x160 [ 175.608655][T12265] x64_sys_call+0x17ba/0x3000 [ 175.608687][T12265] do_syscall_64+0xc0/0x2a0 [ 175.608775][T12265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.608800][T12265] RIP: 0033:0x7f6deda7af79 [ 175.608820][T12265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.608842][T12265] RSP: 002b:00007f6dec4cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.608883][T12265] RAX: ffffffffffffffda RBX: 00007f6dedcf5fa0 RCX: 00007f6deda7af79 [ 175.608898][T12265] RDX: 000000002000c004 RSI: 0000200000000000 RDI: 0000000000000003 [ 175.608911][T12265] RBP: 00007f6dec4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 175.608949][T12265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.608964][T12265] R13: 00007f6dedcf6038 R14: 00007f6dedcf5fa0 R15: 00007ffc07a0c0f8 [ 175.608986][T12265] [ 175.611870][T12156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.819506][T12275] loop6: detected capacity change from 0 to 512 [ 175.836058][T12275] loop6: detected capacity change from 0 to 128 [ 175.848555][T12275] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 175.905754][T11318] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.958421][T12289] loop6: detected capacity change from 0 to 256 [ 175.960136][T12156] veth0_vlan: entered promiscuous mode [ 175.983276][T12156] veth1_vlan: entered promiscuous mode [ 176.015925][T12156] veth0_macvtap: entered promiscuous mode [ 176.024731][T12156] veth1_macvtap: entered promiscuous mode [ 176.040931][T12156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.058565][T12156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.066635][T12295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41235 sclass=netlink_route_socket pid=12295 comm=syz.1.3053 [ 176.093284][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.143525][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.147922][T12300] __nla_validate_parse: 8 callbacks suppressed [ 176.147941][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3056'. [ 176.166141][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.168216][T12300] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3056'. [ 176.177217][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.255924][T12308] syzkaller0: entered promiscuous mode [ 176.261572][T12308] syzkaller0: entered allmulticast mode [ 176.282774][T12308] tipc: Enabled bearer , priority 0 [ 176.290518][T12307] tipc: Resetting bearer [ 176.293203][T12313] loop6: detected capacity change from 0 to 512 [ 176.305669][T12307] tipc: Disabling bearer [ 176.318498][T12313] loop6: detected capacity change from 0 to 128 [ 176.355390][T12313] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 176.385890][T12321] syzkaller0: entered promiscuous mode [ 176.391807][T12321] syzkaller0: entered allmulticast mode [ 176.400354][T12321] tipc: Started in network mode [ 176.405285][T12321] tipc: Node identity 0a90943264fb, cluster identity 4711 [ 176.412641][T12321] tipc: Enabled bearer , priority 0 [ 176.420512][T12320] tipc: Resetting bearer [ 176.420526][T11318] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.438424][T12320] tipc: Disabling bearer [ 176.496146][T12329] loop6: detected capacity change from 0 to 164 [ 176.519938][T12329] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 176.578169][T12338] loop6: detected capacity change from 0 to 1024 [ 176.579601][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3068'. [ 176.592754][T12338] EXT4-fs: Ignoring removed nobh option [ 176.593523][T12340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3068'. [ 176.626329][T12338] EXT4-fs: dax option not supported [ 176.786490][T12362] loop7: detected capacity change from 0 to 164 [ 176.805707][T12362] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 176.893443][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3078'. [ 176.902414][T12367] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3078'. [ 176.925314][T12369] bridge6: entered promiscuous mode [ 176.930660][T12369] bridge6: entered allmulticast mode [ 176.951195][T12369] team0: Port device bridge6 added [ 176.957365][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3081'. [ 176.966332][T12371] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3081'. [ 177.010130][T12375] netlink: 'syz.7.3083': attribute type 1 has an invalid length. [ 177.116422][T12381] netlink: 'syz.4.3086': attribute type 1 has an invalid length. [ 177.176711][T12386] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 177.186484][T12387] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3086'. [ 177.202462][T12381] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.253200][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3086'. [ 177.581816][T12415] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.628450][T12421] netlink: 'syz.4.3094': attribute type 7 has an invalid length. [ 177.630107][T12405] bridge5: entered promiscuous mode [ 177.636271][T12421] netlink: 'syz.4.3094': attribute type 8 has an invalid length. [ 177.641575][T12405] bridge5: entered allmulticast mode [ 177.733104][T12156] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.809947][T12435] vfat: Unknown parameter 'vfat' [ 177.965998][T12454] bridge1: entered promiscuous mode [ 177.971330][T12454] bridge1: entered allmulticast mode [ 178.001538][T12454] team0: Port device bridge1 added [ 178.011624][T12457] bridge0: port 3(team0) entered blocking state [ 178.018115][T12457] bridge0: port 3(team0) entered disabled state [ 178.032370][T12457] team0: entered allmulticast mode [ 178.037543][T12457] team_slave_0: entered allmulticast mode [ 178.043487][T12457] team_slave_1: entered allmulticast mode [ 178.073473][T12457] team0: entered promiscuous mode [ 178.078601][T12457] team_slave_0: entered promiscuous mode [ 178.084424][T12457] team_slave_1: entered promiscuous mode [ 178.092121][T12457] bridge0: port 3(team0) entered blocking state [ 178.098544][T12457] bridge0: port 3(team0) entered forwarding state [ 178.109470][T12462] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 178.165061][T12465] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 178.245092][T12473] tipc: Enabled bearer , priority 0 [ 178.256256][T12473] syzkaller0: entered promiscuous mode [ 178.262595][T12473] syzkaller0: entered allmulticast mode [ 178.279496][T12475] netlink: 'syz.5.3128': attribute type 7 has an invalid length. [ 178.287350][T12475] netlink: 'syz.5.3128': attribute type 8 has an invalid length. [ 178.296040][T12473] tipc: Resetting bearer [ 178.303618][T12472] tipc: Resetting bearer [ 178.311054][T12472] tipc: Disabling bearer [ 178.529099][T12479] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.537490][T12479] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.546916][T12479] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 178.558715][T12479] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.3119: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 178.577416][T12479] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 178.577675][T12479] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3119: couldn't read orphan inode 11 (err -117) [ 178.598920][T12479] loop6: lost filesystem error report for type 5 error -117 [ 178.599593][T12479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.624429][T12479] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3119: Invalid block bitmap block 0 in block_group 0 [ 178.638532][T12479] EXT4-fs error (device loop6): ext4_acquire_dquot:6991: comm syz.6.3119: Failed to acquire dquot type 0 [ 178.654487][T12479] EXT4-fs error (device loop6): ext4_lookup:1785: inode #16: comm syz.6.3119: iget: bad extra_isize 65535 (inode size 256) [ 178.707440][T12479] SELinux: failed to load policy [ 178.736698][T11318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.985373][T12491] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.016398][T12491] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 179.025306][T12491] FAT-fs (loop6): Filesystem has been set read-only [ 179.071632][T12497] set_capacity_and_notify: 7 callbacks suppressed [ 179.071651][T12497] loop1: detected capacity change from 0 to 164 [ 179.107187][T12497] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 179.205978][T12499] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.272275][T12499] loop1: detected capacity change from 0 to 1024 [ 179.280373][T12499] ext4: Unknown parameter 'fsuuid' [ 179.282710][ T28] kauditd_printk_skb: 144 callbacks suppressed [ 179.282725][ T28] audit: type=1326 audit(179.249:15019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deda7af79 code=0x7ffc0000 [ 179.322447][ T28] audit: type=1326 audit(179.289:15020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f6deda7af79 code=0x7ffc0000 [ 179.345655][ T28] audit: type=1326 audit(179.289:15021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deda7af79 code=0x7ffc0000 [ 179.368672][ T28] audit: type=1326 audit(179.289:15022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6deda7af79 code=0x7ffc0000 [ 179.391864][ T28] audit: type=1326 audit(179.289:15023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6deda7ace2 code=0x7ffc0000 [ 179.414842][ T28] audit: type=1326 audit(179.289:15024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6deda3b84e code=0x7ffc0000 [ 179.437668][ T28] audit: type=1326 audit(179.289:15025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6deda7ada7 code=0x7ffc0000 [ 179.460631][ T28] audit: type=1326 audit(179.289:15026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6deda3b84e code=0x7ffc0000 [ 179.483694][ T28] audit: type=1326 audit(179.289:15027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6deda3b84e code=0x7ffc0000 [ 179.506659][ T28] audit: type=1326 audit(179.289:15028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12504 comm="syz.4.3132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6deda7af79 code=0x7ffc0000 [ 179.656414][T12522] loop1: detected capacity change from 0 to 164 [ 179.671656][T12522] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 179.746451][T12512] SELinux: failed to load policy [ 179.805178][T12534] loop1: detected capacity change from 0 to 8192 [ 180.003794][T12534] ================================================================== [ 180.012021][T12534] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 180.019351][T12534] [ 180.021771][T12534] write to 0xffff88814fe054fe of 2 bytes by task 12538 on cpu 0: [ 180.029580][T12534] fat16_ent_put+0x28/0x60 [ 180.034018][T12534] fat_alloc_clusters+0x57b/0xc50 [ 180.039064][T12534] fat_get_block+0x258/0x5e0 [ 180.043662][T12534] __block_write_begin_int+0x400/0xf90 [ 180.049131][T12534] cont_write_begin+0x5fe/0x970 [ 180.054092][T12534] fat_write_begin+0x4f/0xe0 [ 180.058692][T12534] generic_perform_write+0x183/0x490 [ 180.064266][T12534] __generic_file_write_iter+0x9e/0x120 [ 180.069839][T12534] generic_file_write_iter+0x8d/0x310 [ 180.075235][T12534] __kernel_write_iter+0x319/0x590 [ 180.080373][T12534] dump_user_range+0xa7d/0xdb0 [ 180.085247][T12534] elf_core_dump+0x21a2/0x2330 [ 180.090133][T12534] coredump_write+0xacf/0xdf0 [ 180.094842][T12534] vfs_coredump+0x26bc/0x3120 [ 180.099530][T12534] get_signal+0xd7b/0xf60 [ 180.103872][T12534] arch_do_signal_or_restart+0x96/0x450 [ 180.109432][T12534] irqentry_exit+0xf7/0x510 [ 180.113948][T12534] asm_exc_page_fault+0x26/0x30 [ 180.118815][T12534] [ 180.121145][T12534] read to 0xffff88814fe05400 of 512 bytes by task 12534 on cpu 1: [ 180.129303][T12534] fat_mirror_bhs+0x1df/0x320 [ 180.134036][T12534] fat_alloc_clusters+0xb48/0xc50 [ 180.139078][T12534] fat_get_block+0x258/0x5e0 [ 180.143763][T12534] __block_write_begin_int+0x400/0xf90 [ 180.149232][T12534] cont_write_begin+0x5fe/0x970 [ 180.154097][T12534] fat_write_begin+0x4f/0xe0 [ 180.158695][T12534] generic_perform_write+0x183/0x490 [ 180.164004][T12534] __generic_file_write_iter+0x9e/0x120 [ 180.169563][T12534] generic_file_write_iter+0x8d/0x310 [ 180.174950][T12534] vfs_write+0x5a6/0x9f0 [ 180.179238][T12534] ksys_write+0xdc/0x1a0 [ 180.183494][T12534] __x64_sys_write+0x40/0x50 [ 180.188100][T12534] x64_sys_call+0x2847/0x3000 [ 180.192835][T12534] do_syscall_64+0xc0/0x2a0 [ 180.197371][T12534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.203291][T12534] [ 180.205647][T12534] Reported by Kernel Concurrency Sanitizer on: [ 180.211807][T12534] CPU: 1 UID: 0 PID: 12534 Comm: syz.1.3143 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.223277][T12534] Tainted: [W]=WARN [ 180.227082][T12534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 180.237147][T12534] ==================================================================