last executing test programs: 4m37.871783337s ago: executing program 32 (id=1810): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x2, 0x0) capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0xb, 0x6, 0xc, 0x7fff, 0x0, 0x9}) setrlimit(0x5, &(0x7f0000000000)={0x7ff, 0x3369}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xe11, 0xffffffffffffffff, 0x0, 0x300, 0x4}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='net/udp6\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 4m19.498294024s ago: executing program 33 (id=1844): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 3m12.996152471s ago: executing program 34 (id=2600): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x3) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r0, 0x2) fchdir(0xffffffffffffffff) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0xfb}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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") lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x2) 2m58.701731645s ago: executing program 35 (id=2860): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x207, &(0x7f0000000000), 0x1, 0x471, &(0x7f0000000580)="$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") r0 = socket$inet6(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) stat(0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f00000002c0), 0x800) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x501020, 0x0) bind$x25(r3, &(0x7f0000000280)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1m22.819689369s ago: executing program 0 (id=3999): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x704c3, 0xc4a48b7f26bf141b}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r3 = syz_open_pts(r2, 0x60300) dup3(r3, r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x6fffe7fd, 0x1000000000000000) 1m22.786949932s ago: executing program 0 (id=4002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m22.786056663s ago: executing program 0 (id=4004): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=ANY=[@ANYBLOB="020300031a0200000000000000000000040019"], 0x10d0}}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 1m22.601619149s ago: executing program 0 (id=4007): timer_create(0x7, 0x0, 0xfffffffffffffffe) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x81) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000008061121c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x34, 0x102, 0xf}, 0x2c) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) linkat(r1, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./file1\x00', 0x1000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x101) fremovexattr(r3, &(0x7f0000000140)=@known='trusted.overlay.upper\x00') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f0000000100)="b7c6da479fe1b97051cccc96fa9a38107e58ad4fa7d592470fe2e4d5a3936ea7fd7cb4e6aded042a88d0bd37c07394d92094d5f0d68a96e24be8cd12f095e0cf89", &(0x7f0000000180)=""/7}, 0x20) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000000)={{0x3, 0x2, 0x7e, 0x852, 0x4}, [{0x6, 0x5, 0x9, 0x9}]}) semop(0x0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(0x0, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semctl$GETNCNT(0x0, 0x3, 0xe, 0x0) mount(0x0, &(0x7f00000001c0)='./bus//file0\x00', 0x0, 0x84, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 1m22.345881671s ago: executing program 0 (id=4009): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xe0020000, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010100, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="1e1106f2008e", {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x8, 0xd, 0x8, 0xe8, 0x6, 'batadv_slave_0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1002, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) 1m22.184367396s ago: executing program 0 (id=4015): move_pages(0x0, 0x10000000, 0xffffffffffffffff, &(0x7f0000000080)=[0x0], 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_open_dev$vcsa(&(0x7f0000000140), 0x2, 0x8000) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@gettfilter={0x44, 0x2e, 0x20, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x3, 0xfff1}, {0x9, 0xfff1}, {0x3467fcea5eceaefa, 0xfff1}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x56b}, {0x8, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0xc0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 1m22.161058078s ago: executing program 36 (id=4015): move_pages(0x0, 0x10000000, 0xffffffffffffffff, &(0x7f0000000080)=[0x0], 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_open_dev$vcsa(&(0x7f0000000140), 0x2, 0x8000) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@gettfilter={0x44, 0x2e, 0x20, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x3, 0xfff1}, {0x9, 0xfff1}, {0x3467fcea5eceaefa, 0xfff1}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x56b}, {0x8, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0xc0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 1m6.638009822s ago: executing program 2 (id=4298): r0 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f00000010c0)="4cb42035b67d24bb1f934df0237f0b59b6d34e12f24b3383aebdeb9922e20e5fb48e4b3b11d7e83eef3c9af327f6beec67319a312274b6e408aecabce3a1626c31f2e3e497a6763aeb559e16473480df76737f8bdcad7dec53383573b2bd44dc5d3d565bfd33a9d9a54873163691c0419a5ab81c866c21dc0739d44c7f32ffb3015fff7c89d763c19d7da902fe1389aa4514526862e055ac6f51caf053ffd849bf7499db31318fe02fb31475a82cb22d0c9472018cd04de07e4eda7aa2e2878e29c34acdb8729a22194154a1db4e45ba0d6ca82a"}], 0x12c3) copy_file_range(r0, &(0x7f0000000080)=0x9, r0, 0x0, 0x7, 0x0) 1m6.612076933s ago: executing program 2 (id=4300): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3800204, &(0x7f0000003240)=ANY=[], 0x3, 0x33c, &(0x7f00000002c0)="$eJzs3M1LI2ccwPFfXk0imhxKSwvFh/bSXoaY9lwaikJpoKKmVAvCqJM2ZJpIJlhSStVTr6X3ngo9iEdvQus/4KW37mUve8tlYQ8ry7JZ5s28amI2blz9fmCZZ57n+c08T57J8pvBSePb338sFSytoNckGFMSEBE5F0lJUHwBbxt0ylFpty8fTz/5//2VtfWvsrncwrJSi9nVTzJKqdm5f376Je51O5mSs9RG43Hm0dnbZ+82Xqz+ULRU0VLlSk3parPysKZvmobaLlolTakl09AtQxXLllF12ytue8Gs7OzUlV7enknsVA3LUnq5rkpGXdUqqlatK/17vVhWmqapmYRgAHtBl/XsiNFbYx4Nbki1mtVDIhLvackfTmRAAABgorrz/6Cd0o+U/8usk//bnVv5/9EHp7Xpb45nT+zYjcZJtF/+/+kD91gd+X9MREbJ//+Ua+T/vRnR/ZI/XB49/8ftMBftqQp07Nn5f8L7/joOvjtKOwXyfwAAAAAAAAAAAAAAAAAAAAAA3gTnzWay2Wwm/a3/r/UKgbePO+my9Z8SkZi9+k3W/y5bWVuXmPPinr3G5m+7+d28u/U6nIqIKYakI85u84Jd9t88UraU/GvuOfHP7G3IackWpOjEz0tSUm58yIuyy4tf5hbmlcuLv3hNKdEen5GkvNV9fjc+0xlvj39vNx+Vjz5si9ckKf9tSUVM2XbO3Yr/dV6pL77OdcXH3ZMAAAAAAHAHaEoFvNvnVOf9r3uXrmlK9W93f2UkW3AeExmSlqQ8739/nu57fx5Ovhee9OwBAAAAALgfrPrPJd00jeoVhbgM7jN6ITxc52hXTeSqzqG2GQ47nqjzIEPkVef115CfakfB/0OKjqaYVznaePz5j2299ttrgjJEVLh78HN2hbrm2Q+8iVzU+I+Nopd8zrLUe5zgFVdCZGzX8zt//P10fF+Qz479K2Bw54NBB4xfciHFuq86pxC56f93AAAAALx+raTfr/m8vTkwkUEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDP3MhP+nUVJj1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LZ4GQAA///hFPFh") ioctl$PTP_CLOCK_GETCAPS(r5, 0x40043d14, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="000125bd7000fedbdf25060000004000018014000400ff02000000000000000000000000000108000600000000000800060004000000060001000a000000080006000400000008000700", @ANYRES32=r6, @ANYBLOB="0500050006000000080004005f210000080003000000000005000500040000000500709c2c13000067dcb4284ac5f69e"], 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100d5432f"], 0xdd12}], 0x1}, 0x20040890) 1m6.550395479s ago: executing program 2 (id=4301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x419, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480c0}, 0x800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 1m6.549887759s ago: executing program 2 (id=4302): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9}, 0x200, 0x10000, 0x8, 0x1, 0x8, 0x7, 0xb, 0x0, 0x0, 0x0, 0x12000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x0, 0x7, 0x6, 0x0, 0x60, 0x4, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xaf, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1000, 0xe58, 0xfff80000, 0x6, 0x81, 0xfea8, 0xf, 0x0, 0x5, 0x0, 0xfffffffffffffe01}, r0, 0x0, 0xffffffffffffffff, 0xa) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1m6.409916772s ago: executing program 2 (id=4303): r0 = memfd_secret(0x80000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/stat\x00') mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0xc3a0ba3) close_range(r1, r1, 0x0) socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x212, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 10) 1m6.333485399s ago: executing program 2 (id=4304): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002340), 0x22401, 0x0) poll(&(0x7f0000000000)=[{r0, 0x2280}], 0x1, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 1m6.31757278s ago: executing program 37 (id=4304): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002340), 0x22401, 0x0) poll(&(0x7f0000000000)=[{r0, 0x2280}], 0x1, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 1m5.744085401s ago: executing program 1 (id=4318): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xf, &(0x7f0000000080), 0x0) mlock2(&(0x7f0000341000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x4000050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newqdisc={0x130, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0xffff, 0xe}}, [@TCA_STAB={0x104, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5d, 0x2, 0x0, 0x2, 0x1ff, 0x40d, 0x3}}, {0xa, 0x2, [0xef72, 0xfff, 0xfff]}}, {{0x1c, 0x1, {0x6, 0x6, 0x6b4d, 0x131, 0x1, 0xffffffff, 0x8, 0x1}}, {0x6, 0x2, [0x4b61]}}, {{0x1c, 0x1, {0x5, 0x4, 0xc1aa, 0x8000006, 0x0, 0x6, 0x1, 0x5}}, {0xe, 0x2, [0x3a, 0x4, 0x3, 0x8, 0xfffe]}}, {{0x1c, 0x1, {0x6, 0x3c, 0xd, 0x8, 0x0, 0xb6, 0x0, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x7, 0xba, 0x1, 0x11, 0x1, 0x8, 0x6, 0x9}}, {0x16, 0x2, [0x6, 0xc, 0x0, 0x2, 0xff, 0x10, 0xe6a5, 0xfff9, 0xfffe]}}, {{0x1c, 0x1, {0x7, 0x8, 0x0, 0xffffffff, 0x1, 0x6, 0x6, 0x8}}, {0x14, 0x2, [0x4, 0x1, 0x1800, 0xfff, 0x4, 0x6, 0xf5, 0x7f]}}]}, @TCA_EGRESS_BLOCK={0x8}]}, 0x130}, 0x1, 0x0, 0x0, 0x40}, 0x841) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x7, 0x700, 0x0, 0x0, {{0x2a, 0x4, 0x3, 0x1f, 0xa8, 0x65, 0x0, 0xf, 0x4, 0x0, @empty, @multicast2, {[@ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0xf, 0xc0, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @generic={0x94, 0x11, "58515eb84b0400b19d3e61c0c24c8f"}, @generic={0x82, 0xf, "d7e82f12c478ec332593957257"}, @generic={0x88, 0x9, "c25752e4ec72cc"}, @cipso={0x86, 0x38, 0x0, [{0x7, 0x3, "d6"}, {0x1, 0x10, "285c6ef1ba4ef917be6c0b819087"}, {0x7, 0xb, "27a92385b65322b588"}, {0x0, 0x4, "1452"}, {0x5, 0x8, "a1120f19fb38"}, {0x0, 0xfef3, "c0bde8754de1"}]}, @noop, @ssrr={0x89, 0x7, 0xfa, [@multicast2]}, @timestamp_prespec={0x44, 0x14, 0x63, 0x3, 0xb, [{@rand_addr=0x64010102, 0x1}, {@empty, 0x800}]}]}}}}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0x8000000000000000, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x3000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setpipe(r7, 0x407, 0x7000000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r8 = msgget$private(0x0, 0x286) msgrcv(r8, 0x0, 0x0, 0x3, 0x2000) msgsnd(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000000000000"], 0x8, 0x8fa2496c381b7ad5) msgctl$IPC_SET(r8, 0x1, &(0x7f0000000300)={{0x2, 0x0, 0x0, 0xee01, 0x0, 0x3, 0xff}, 0x0, 0x0, 0x5, 0x4, 0x3, 0x45, 0x0, 0x8000, 0x7, 0x6}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a8009000100766c616e000000000c0002800600010004000000080005000000000000", @ANYRES32=r5, @ANYBLOB="0500110001000000"], 0x4c}}, 0x8000002) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) mmap$qrtrtun(&(0x7f0000342000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x100000001) sendmmsg$inet6(r0, &(0x7f00000013c0)=[{{&(0x7f0000001640)={0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000001680)="b4", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x90000, @local, 0x7}, 0x1c, &(0x7f0000001100)=[{&(0x7f0000001080)="11f7797837", 0x5}], 0x1}}], 0x2, 0x48011) shutdown(r6, 0x0) 1m4.737960321s ago: executing program 1 (id=4332): socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x6, 0xa, 0xff, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, 0x0, 0x0) 1m4.645877719s ago: executing program 1 (id=4334): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@null, 0xd, 'lo\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FRA_TUN_ID={0xc, 0x17, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) 1m4.553783917s ago: executing program 1 (id=4335): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r0 = socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x8}}}, 0x24}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000cc0), 0x1ff, 0x41) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000e00)=@urb_type_bulk={0x3, {0x5, 0x1}, 0x6, 0xa4, &(0x7f0000000d00)="33efded0", 0x4, 0x2, 0xc90, 0x6dd4f95a, 0x9, 0x5, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x3, 0xa, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xf11, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x7f}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000005700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005640)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48003, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10) write(r2, &(0x7f00000002c0)="24a6e25f024ba40901020000000000020000d100"/31, 0x1f) r5 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1m4.146757173s ago: executing program 1 (id=4345): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x18}}], 0x1, 0xc080) 1m3.745863299s ago: executing program 1 (id=4350): r0 = syz_open_procfs(0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x400) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) io_setup(0x7, &(0x7f0000000000)) io_setup(0x1005, &(0x7f0000000040)) io_setup(0xb, &(0x7f0000000080)) io_setup(0x9, &(0x7f0000000540)) io_setup(0x6, &(0x7f0000000f40)) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ff5000/0x3000)=nil, 0x2) syz_clone3(&(0x7f0000000440)={0x1a0241c00, &(0x7f0000000000), 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000500000019997deee0d5bbf3418000"/34, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000002d0e00"/16], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) r4 = syz_io_uring_setup(0x40d0, &(0x7f0000000380)={0x0, 0xbab8, 0x13090, 0x10001, 0xd8}, &(0x7f0000000400), &(0x7f00000005c0)) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x7d) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) io_cancel(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) r5 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) sendfile(r5, r5, 0x0, 0x800000009) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) syz_clone(0x17200, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) setpriority(0x1, 0x0, 0x1) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000140)) 1m3.725302871s ago: executing program 38 (id=4350): r0 = syz_open_procfs(0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x400) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) io_setup(0x7, &(0x7f0000000000)) io_setup(0x1005, &(0x7f0000000040)) io_setup(0xb, &(0x7f0000000080)) io_setup(0x9, &(0x7f0000000540)) io_setup(0x6, &(0x7f0000000f40)) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000ff5000/0x3000)=nil, 0x2) syz_clone3(&(0x7f0000000440)={0x1a0241c00, &(0x7f0000000000), 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000500000019997deee0d5bbf3418000"/34, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000002d0e00"/16], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) r4 = syz_io_uring_setup(0x40d0, &(0x7f0000000380)={0x0, 0xbab8, 0x13090, 0x10001, 0xd8}, &(0x7f0000000400), &(0x7f00000005c0)) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x7d) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) io_cancel(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) r5 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) sendfile(r5, r5, 0x0, 0x800000009) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) syz_clone(0x17200, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) setpriority(0x1, 0x0, 0x1) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000140)) 17.445140265s ago: executing program 9 (id=5435): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x2, 0x80805, 0x0) socket(0x28, 0x5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) fstat(r0, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x894a, &(0x7f00000001c0)={'ip_vti0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) open_tree(0xffffffffffffffff, 0x0, 0x101) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x8864, "11703067c7e064cc"}}}, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x43, 0x0, 0x0) 16.719680319s ago: executing program 9 (id=5454): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000008c430184b41934a10c0002800800"], 0x64}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x403, 0x6, 0x20599, 0x9, 0x2, 0x0, 0x7ffffffe, 0xffd}, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9, 0xfff8}, {0x6, 0xc}, {0x1, 0x5}}}, 0x24}}, 0x20040000) clock_gettime(0x0, &(0x7f00000072c0)={0x0, 0x0}) r7 = socket(0x2, 0x3, 0xff) shutdown(r7, 0x1) sendmmsg$inet(r7, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7", 0x14}], 0x1}}], 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x102, &(0x7f0000007300)={r5, r6+10000000}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 15.906868732s ago: executing program 9 (id=5474): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1, 0x2000000400020, 0x0, 0x0, 0x7, 0x0, 0x1757, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000740)='./cgroup.cpu/cgroup.procs\x00', 0x30) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @remote, 0xffffffff}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x28e2002, &(0x7f0000000000)={[{@oldalloc}, {@nojournal_checksum}]}, 0x21, 0x4d6, &(0x7f0000000b80)="$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") r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000aedb162593a8340e0a61825e00000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000001ffffffffffffff000000"]}, 0x108) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x791000, 0x0) read$msr(r5, &(0x7f00000004c0)=""/4096, 0x1000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x1016, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000009000000000000000600000018010000fe20752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cb0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4f22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e23, @broadcast}}) chmod(&(0x7f0000000180)='./file0\x00', 0xa9) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)) 15.760612755s ago: executing program 9 (id=5480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000370402000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="830405000000000020001280080001007369740014000280080001002c3d"], 0x40}, 0x1, 0x0, 0x0, 0x4009004}, 0x4040004) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r4, 0x3, &(0x7f0000000680)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r5, &(0x7f00000000c0)=' ', 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0]) sendmmsg$inet(r1, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000005c0), 0x0, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}}], 0x1, 0x880) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x3, 0x9, 0x0, 0x14, 0x1000}, @ipv4=@icmp={{0x5, 0x4, 0x1, 0x11, 0x1c, 0x67, 0x0, 0x4, 0x1, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, @echo={0x8, 0x0, 0x0, 0xf2fd, 0x6}}}, 0x2a) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x200c1, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="18020000000000000000000000004e81010f00001cbf3648b4325d9facfa195b92908ea85cae2e574cb89153811575cdb0e4cfa1b55689afe082957bde7a93e79459d3cf701d89e13114a685dd830e9170d53a4e0f560ab66a213d4640367a9da9f05250e173a1270ff86957996bd3e218aec307594c89fe63e7380fb8b62349dec19fa42005b96a4c764dae40f021b20dd30b8b4faecea62bd482aff547b6ce75f5b65798a902f31631e2dcd6ffa42d041f201c73043b41a4034e2ce516738929cd0bd6579869583525e6415a8f892fc105d59d5aaa137176bd749065174c", @ANYRES32=r6, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000c80)='syzkaller\x00'}, 0x94) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r7 = socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000f000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r6, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000600)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000000080)='syzkaller\x00', 0x9fac, 0x5c, &(0x7f0000000140)=""/92, 0x41000, 0x4, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x7, 0x80000000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[{0x2, 0x5, 0x0, 0xb}], 0x10, 0x9}, 0x94) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) io_getevents(r4, 0xffffffffffffffff, 0x5, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) 15.637834916s ago: executing program 9 (id=5483): capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000000)={0x4, 0x8, 0x0, 0x0, 0x2}) prctl$PR_GET_IO_FLUSHER(0x3a) 13.976592364s ago: executing program 9 (id=5520): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x7}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="a905000000007464000100000000", 0xe}, {&(0x7f00000000c0)="d6976d1a0a08772151e1a1fddfbf82e5b6", 0x11}], 0x2}}, {{&(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000008c0)}}], 0x2, 0x24004044) 13.971051224s ago: executing program 39 (id=5520): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x7}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="a905000000007464000100000000", 0xe}, {&(0x7f00000000c0)="d6976d1a0a08772151e1a1fddfbf82e5b6", 0x11}], 0x2}}, {{&(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000008c0)}}], 0x2, 0x24004044) 9.254069155s ago: executing program 5 (id=5584): setreuid(0x0, 0xee00) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="70dbea2b074df7d068859bc3694581735516814f08eb1bca1954a0932bbcbbe36f5eee11b2cb07f224ad1a526c75c5ceb7e3f07072fa0613e3e0962a5327f7ffbeb7fa60c2d75f8ffb3fef894011084d353ac4af8f41f896de2d667a3e6d2993997232f95cdaefa685e64a91c2f7b96902b03f60ad312c544553a03f9f2a2dfa29476347df1891771398bfdcf6f6e739dfae21a84a1079da014b3fdcd6ca4e135b290790f71c962ca8b085ba5a987e4f55afcb3bea80412968e13f11e25400c8f21242dfc803941fb1470cb36035aefcedcde4974e7623f1c16541d5f661e50122942367f61ee13e3222e07f07660bb254e29e4d23190a", 0xf7, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x1, 0x44a}) socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)=0x10) write$P9_RWRITE(r4, &(0x7f0000000100)={0xb, 0x77, 0x1, 0x4}, 0xb) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000080)={0x40000009}) epoll_wait(r5, &(0x7f00000001c0)=[{}], 0x1, 0x8) write$P9_RFSYNC(r4, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x6) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@deltaction={0x14, 0x31, 0x8, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@private, @in=@remote}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) 9.169913323s ago: executing program 5 (id=5585): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu&>0&&\t') r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x1000000, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000050a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000054000000060a01040000000000000000010000000900010073797a310000000008000b40000000030c000640000000000000000314000480100001800b0001007470726f787900000900010073797a30"], 0x7904}, 0x1, 0x0, 0x0, 0x4040}, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000480)=0x6, 0x4) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) 9.001721448s ago: executing program 5 (id=5590): socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.988245939s ago: executing program 5 (id=5591): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) socket$unix(0x1, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="0d000000246804003199aee6fdb9291b3091ec1a2d41d2270a00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25", 0x82}], 0x1) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40e8662e, &(0x7f0000000000)={0x3f32, 0x5, 0x2d3b, 0x4, 0x2, 0x5}) fchown(0xffffffffffffffff, 0x0, 0xee01) 7.95949138s ago: executing program 5 (id=5619): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf44b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000002c0)="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") ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202080002000d0001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.585780204s ago: executing program 5 (id=5623): r0 = socket(0x10, 0x2, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) r2 = epoll_create(0x1a) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x2000}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x110}, 0x2}, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000180)={&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0xc040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e020409430008003b000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160018000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 7.548475307s ago: executing program 40 (id=5623): r0 = socket(0x10, 0x2, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) r2 = epoll_create(0x1a) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x2000}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x110}, 0x2}, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000180)={&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0xc040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e020409430008003b000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160018000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 2.510147566s ago: executing program 8 (id=5707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e40)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x4c}}, 0x0) 2.490443048s ago: executing program 8 (id=5708): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000500)={[{@unhide}, {@dmode={'dmode', 0x3d, 0x7}}, {@sbsector={'sbsector', 0x3d, 0x6}}, {@unhide}, {@sbsector={'sbsector', 0x3d, 0x81}}, {@map_off}, {@map_acorn}, {@showassoc}, {@cruft}]}, 0x1, 0xa5a, &(0x7f0000001d00)="$eJzs3U9sXNdeB/DvHduJ4/dI8ppQStU2k5Tk+fUZx3ZeE6IsHok9SfzwH2Q7UiMWL32Ng9IYCg1IbYSUVKpYUYEEYgG7ihUsqNQFdIO6gx2sukBCXbGvWIWVn+7MOB7bMx47dewk/Xys8dx77u+e87sz987xzFzfE54ty4fWzC0v129bmf+opazp2j/uQsY8xS5NfP3pZ5+Ut48eZF968mbxr0l/kmrSm+SlpG98Ym52ev/mFd1JbiT5MimSlMHFVnO4keIv8/3V+S9T/H3Zbkf7tloz3SzznbbX+x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNivGJkZHRYl8mZ669VW1IqhuMT8zNFlle3rhkZZ2GL+qjfhdfdG03Kcpb+vtXhvp+6ejq4heTVE/klcbcK/UBydOfe9978fCFI6vrd8rmW9m/pWpTaeR25+2lpcX3O8ct32/E7WCCT48rtZnJ+dnJ6YtXatXJ+dnq+bNnR05fvTxfvTw5VZu/Pr9Qm66Oz9UuLszOVQfHf1QdPX/+TLU2fH322syVieGp2krhud8cGxk5W/3Z8O/WLs7Nz86c/tnw/PjVyampyZkr9ZhycRlzrtwRf2dyobpQuzhdrd66vbR4Zl1OPesf7DJotNuWlEFjXWJ6MzI2Njo6Njb6UXP07LGVgrNvnn/z3MhI78g62RDxhHZani4HOj/NO/jqDd9OpdH/592pTGYm1/JWqm1/xjORucxmusPyppX+/+Tp2qbttvb/zV6+t2Xxy+WvE3mtOdvf7P9/JcmFI72VR+u3z2X3fu7mw9zLnbydpSxlMe/veUa7+3MltcxkMvOZzWSmc7FeUm2WVHM+Z3M2I/l5ruZY5lPN5UxmKrXM53rms5BafY8az1xquZiFzGYu1QxmPD9KNaM5n/M5k2pqGc71zOZaZnIlE7lYr+VWbtcf9zOb5PgoaHQrQWObBK3vzMt9fXv9f+15/UuQLdv5F3F4TMvN/n/fuvKejaGD47uVFAAAALCjfv0/cvDoC//+P0mRV+ufy1+enKr9NMm/HPn43b3ODgAAANgJ9dP1Xinv+sqpV/vr7/9H9jotAAAAYAcV9f+xK5IM5FhjauU/oXwIAAAAAM+J+vf/r6U4tlrg/T8AAAA8ZzpdY3/1GrtdI4qhlcv/Vm827m82IxpzRZHJqdrw+OzUhdGcql9lIMmrG2vrSYq++r8fvJHjjajjA437gdUayzb7y6jR4QujeSMnmhsy+Hp59/pgm8ixRuQPG5E/bI3syZrIM2UkADzvTmzSH2+1/38jQ42IoZfrXX7vy2364BE9KwA8LR6NsfP/zSHN2vT/zYjXOvX/P9nk/X8Z8UJuHWucUjCcd/JelnIzQ2mecXCsXa37mqPrNU5DGOryacBA85SF/zpXydCGzwP6H21ra+xixjK0+onAL5qfVaytt1jJ4UxjaZtBEQDgWXRi0354a/3/UJf3/wMdTilcLnZ1UwGAprsf3muMYH/3w3vL95sTj0pWJwZaSu53iOk0sdfbCACspZcGAAAAAAAAAAAAAAAAAAAAAAAAAACAnbfmcv0HmoXrL+D/n6eSpaXFZFuX/e86kYf30zmmv12GjzdRyY7l/JRP9CTZq9Z/mm2v1d9mZ9vGxD8daK7+v3v/yL/dvzP76uNOZMcrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DugSHralVeS/UlGkpze/ayenAd7ncBOqe57rNWKh3mYD3Jwx/MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiOa17/v5LG/fcaRemtJCeT3Ejye3ud4056uNcJPBlF95A/aASuXv+/kvRluUhv42lP0Tc+MTc7XVZV7C+Xf/3pZ5+Ut+51bxxVoaygbGHN4BLNFlpK+tau9YP6Wl8156oTl+o75qWFy1MT01fmfns18MXi80bV1Za1V/L9s5P/9lctxc2BEorPyy1tr9HuwMTi3Tt/8t4fVScu19ud2Njur61dr9is3S24vbQ4Vra0UHtr4U//8PYHLYteyPHk9cFkcO0W/n5569DS8fWP57psvyn+vDiYv82NHGzuMMVyUT6Oh+rbf+DW7aXF4XfeW7r5KKf7a3I6nGNJbib9bXL65/Y5Heu8b9b3ukpf2epIPaj8dbTLNm6qpcbRDo/rD+q7zED7bejQZrXL8dXlcW9mdKZtRn/9x0dyatvP9KkuLbZVfFP8d3E1X+XjlvE/KuXzfzJtj842VdQjW/aU1mVrDq9KI7K+5WOtC36+vs6ORyVPwF/kF/mtR89/peX1v/lc7c7rUUuL7Y+LZPvHxT8c2tCjrKr3SEfX9UjNV59O6zTzPNqI6pDnr+bHjTq38Yry42499hM6/v+uGMz/5YHxfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKdfkfS0K68kJ5McTnKonK8my+tjHjxGe5WB4nHS3DGPk/Ozp+i4ocXDPMwHObjbGQEAAAAAAADwZFya+PrTzz4pb/Xv43vyG5UkP2l809+b5HDxN33jE3Oz010q6kturHyl37+9HG6Uv76/Ov9lOfdSl5X29vQBAHim/TIAAP//JS1j1w==") ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0xa, 0x5, 0x3a) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r3 = syz_open_pts(r2, 0x141601) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000003f40)={0x9, 0xffff, 0x8a3, 0x807, 0xf, "5cac1e1af00ed0fb"}) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) r4 = syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cae, 0x40, 0x5, 0xd6}, &(0x7f0000000100), &(0x7f00000000c0)) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x22, &(0x7f0000000380)={&(0x7f0000003000)}, 0x1) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x6) fchdir(r6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffbffffe, 0xfffffffc}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0xa) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) write(r8, &(0x7f0000000a00)="c7", 0x1) sendfile(r8, r7, 0x0, 0x3ffff) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x1001) 1.992356452s ago: executing program 3 (id=5715): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, 0x1}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x34, 0x0, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x1, 0x800, 0x0, @private1, @rand_addr=' \x01\x00', 0x1, 0x7, 0x18f, 0x1}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) bind$netlink(r10, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r11, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) r13 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r13, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r14}, 0xc) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r16, @ANYBLOB="08000b000000000008000200ac14143f080009c05c"], 0x54}}, 0x4000000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201400}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x108, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.849985235s ago: executing program 3 (id=5716): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0xc0}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 1.825666037s ago: executing program 3 (id=5719): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) 1.748968744s ago: executing program 3 (id=5722): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x48043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe654, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x110140, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0xdd86, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 1.621950145s ago: executing program 3 (id=5726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) r1 = syz_io_uring_setup(0x4f53, &(0x7f0000000080)={0x0, 0x34bc, 0x200, 0x2, 0xf8}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r1, 0x5f6c, 0x32cf, 0x2, &(0x7f0000000180)={[0x9]}, 0x8) inotify_init1(0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b0400000000000000000200000068000480540001800a0001006d697463680000004400028008000240000000002c000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e820800000001006c696d6974000000100001800b000100736f636b657400000900010073797a30400000000904020073797a3200000000140000001100010000000000000000000100000a"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000000) 1.621719965s ago: executing program 8 (id=5727): perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.592529048s ago: executing program 3 (id=5728): dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000080)={[{@data_err_ignore}, {@errors_remount}, {@sysvgroups}, {@norecovery}, {@nodioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mprotect(&(0x7f000028d000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9, 0xfc}}}}}]}}]}}, 0x0) r4 = open(&(0x7f0000000140)='./file1\x00', 0x26842, 0x21) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 1.582537209s ago: executing program 8 (id=5729): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0xc0}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 1.554429731s ago: executing program 8 (id=5731): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0xb00, 0x2000000}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000faf9000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000047, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r8, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x1e, 0x8, 0x9b, 0x0}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYRES32=r8], 0x3, 0x2d1, &(0x7f0000000500)="$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") 1.078822293s ago: executing program 4 (id=5740): syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lstat(&(0x7f0000000180)='.\x00', &(0x7f0000000400)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x10008000}, 0x1204c811) 988.882522ms ago: executing program 7 (id=5742): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000008c430184b41934a10c0002800800"], 0x64}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x403, 0x6, 0x20599, 0x9, 0x2, 0x0, 0x7ffffffe, 0xffd}, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9, 0xfff8}, {0x6, 0xc}, {0x1, 0x5}}}, 0x24}}, 0x20040000) clock_gettime(0x0, &(0x7f00000072c0)={0x0, 0x0}) r7 = socket(0x2, 0x3, 0xff) shutdown(r7, 0x1) sendmmsg$inet(r7, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7", 0x14}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000070c0)=[{{&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)=""/148, 0x94}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/80, 0x50}, {&(0x7f0000001300)=""/231, 0xe7}], 0x4, &(0x7f0000001400)=""/250, 0xfa}, 0x1}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001500)=""/230, 0xe6}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f0000001600)=""/163, 0xa3}], 0x3, &(0x7f0000001700)=""/255, 0xff}, 0xd0}, {{&(0x7f0000001800)=@l2, 0x80, &(0x7f0000002980)=[{&(0x7f0000001880)=""/241, 0xf1}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x2, &(0x7f00000029c0)=""/57, 0x39}, 0x2}, {{&(0x7f0000002a00)=@nfc, 0x80, &(0x7f0000003c80)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/254, 0xfe}, {&(0x7f0000003b80)=""/193, 0xc1}], 0x3, &(0x7f0000003cc0)=""/252, 0xfc}, 0x9}, {{&(0x7f0000003dc0)=@nl=@unspec, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003e40)=""/238, 0xee}], 0x1}}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000003f80)=""/133, 0x85}, {&(0x7f0000004040)=""/230, 0xe6}, {&(0x7f0000004140)=""/95, 0x5f}, {&(0x7f00000041c0)=""/85, 0x55}, {&(0x7f0000004240)=""/167, 0xa7}, {&(0x7f0000004300)=""/42, 0x2a}, {&(0x7f0000004340)=""/97, 0x61}, {&(0x7f00000043c0)=""/254, 0xfe}], 0x8, &(0x7f0000004540)=""/240, 0xf0}, 0x9}, {{&(0x7f0000004640)=@nl=@proc, 0x80, &(0x7f0000005a40)=[{&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/37, 0x25}, {&(0x7f0000005700)=""/135, 0x87}, {&(0x7f00000057c0)=""/251, 0xfb}, {&(0x7f00000058c0)=""/105, 0x69}, {&(0x7f0000005940)=""/248, 0xf8}], 0x6, &(0x7f0000005ac0)=""/240, 0xf0}, 0x1}, {{&(0x7f0000005bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, &(0x7f0000007080)}, 0x31e0}], 0x8, 0x102, &(0x7f0000007300)={r5, r6+10000000}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 964.479584ms ago: executing program 4 (id=5743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e40)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}]}, 0x50}}, 0x0) 875.636452ms ago: executing program 4 (id=5745): open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) lsetxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)=@random={'security.', '\x00'}, 0x0, 0x0, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) getsockopt(r1, 0x28, 0x1, 0x0, &(0x7f0000000000)) 643.652142ms ago: executing program 4 (id=5746): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x304}, "f62d440c0079ecf0", "53c2608fb763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 558.37305ms ago: executing program 8 (id=5748): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x600) r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0xf}, 0x6, 0x1, 0x1, 0x0, 0x81, 0x6}, 0x20) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x5a7, &(0x7f0000001000)="$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") sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="148a03ad10fe0a5609b0b8f72b070c944d8e1ff9792c6b", 0x17}], 0x1, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}], 0x30}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000200)="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", 0xff}, {&(0x7f0000000380)="33e435d24d958792a2bf82fd2d12665057b7bb7a3d013329a2c5b02e309ed8ad140bf60df4cff2d43afd5d751b57872ac6b6eba519dacf0d8d1f9b3ce667b10bf568cdafd6", 0x45}, {&(0x7f0000000300)="193236e6721d8868b3d37586f02c0d046f7114433b387d210ba185105c2cb3", 0x1f}, {&(0x7f0000000400)="6206bfeaf513d78b5f6c5e62bcbca3d192435a8e11d8775bbd76318a2fa38d616f2fbe15d96ba6c7261d7ebe9f789930366db4e652dd0b213031826f7aa20c07a359d5b1de35496ac22fcf74afaf82b5eab6288ed800efd0459950d1578c2e5e2c2c2f4d323ddf802314ef8ec7766cb6db91de2a1fc4", 0x76}, {&(0x7f0000000480)="4b3cc681ad314d4169f99e8789788838594c7c3c4f2d05bcd82a92f294839728a55b0362fffe11d4e878e0d17bd2a1cccd3cad2e52bd600e4bf3adf2fd9995c80b76f1474b3e2dc85e3e2ea92fb7c5c4ed38fbdb8722c91c57ef47c39abc459a877985063249fb95964e5d08276caf845b666495fec0729986e5b85bc4ceeabc04132ef559a4a3873457184eead8eb0a71d3b424f2354f9f9e435d701cb53699eefca6", 0xa3}, {&(0x7f0000000540)="2372124ee86d24456aa15b8ed43f39df798b1538f6251567f761b604734f23e6d07f45aeb57a0862d3a17fd71c56f3bd7fd8a467eaef", 0x36}], 0x6}}], 0x2, 0x80) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000680)={0x8, 'pimreg1\x00', {'dvmrp0\x00'}, 0x8}) 557.34119ms ago: executing program 4 (id=5749): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x8000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000280)) writev(r1, &(0x7f0000000040)=[{&(0x7f00000002c0)="06", 0x1}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 267.732986ms ago: executing program 6 (id=5754): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0xc0}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400"], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 266.119616ms ago: executing program 6 (id=5755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e40)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}]}, 0x50}}, 0x0) 201.632552ms ago: executing program 6 (id=5756): open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) lsetxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)=@random={'security.', '\x00'}, 0x0, 0x0, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) getsockopt(r1, 0x28, 0x1, 0x0, &(0x7f0000000000)) 136.978028ms ago: executing program 6 (id=5757): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) pwritev(r0, 0x0, 0x0, 0xe, 0x200004) sysinfo(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f00000034c0)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) 136.546328ms ago: executing program 6 (id=5758): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cdg', 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x44, 0xfffffffd, 0x3, 0x3}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x3) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmmsg$inet(r3, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f0000000e80)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002500)=[{&(0x7f0000000ec0)="708307d3e357bf9dc2e9505d343cbfe3da86f1ef7bafc59397b8a256743bcb66a911b327dae33e30c629845aa6ca8e0c566e362db1a35852d6daf8c9fd497bcb2599da1fb761580fb48b4e997084b97d4173696599c85e8c757dcaedf264aa4f8f7c15b7861beda965604fa2c9940ccc31bc2e274e7396b9caa06c77d84fce56ad7683c12d794d70b97b75a7676ec1e228972cdfc0fb2969656b91014f95abbd073e51c8ec6ae5c38c825b60841661bad06d95674cc2389dbdedad88", 0xbc}, {0x0}, {&(0x7f0000001080)="49215bccebc8a00e8eced196d69df4791b546721e808879b7b525a1bbdddd89ad46912c2320098f4a018e7808fc3d31b9d71316e1744e1ab2e91886f033de701d11102b1d732f46ebe70f5be696fe4c601c2383334cdc7010af4ca897858ed77ba4b8f4f1345105887d381deee77b8a511f3a802dcc0620ace54561573813ced951b3b96be6dd24fad6e40c0195e526f17d956bc360fd244c69179d4b910217ccaf400f8c0324a152a0471213498a82fd613f556514f49b4e4d8f7e9a2a30e4eb52622449661db", 0xc7}, {&(0x7f0000001180)}, {&(0x7f0000001240)="a05b9741c1fa370ebe48f69f51f8793e40e515bb03f8b61b401da04bf123797251ba7527fc3a4b307327732b5bc6a1554ae177a367b56dd8cf799ddd2ec3c6ea8b7120dd870e8e70a4db1fe6ad1ac120aceeaf7a54bfcf5a25de9372fdd6cd7f732b3e434e3d71b1d64b5fb15c74f65c0c61733b8fb3f8d5672a659c7f110f5fe042cae80c206f3c2f959bcebfc29ac7ef0e7dfb4dbad201cecc5fd1f515cb1673b797c488f87c9d6ff62b268cb00d77df2da0ee05b4e10e0f4f3540c63a7498f57d2af2", 0xc4}, {&(0x7f0000001340)}, {&(0x7f0000001500)}], 0x7}}, {{&(0x7f0000002680)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x3, 0x8004) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, 0x0) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) 133.566878ms ago: executing program 7 (id=5759): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) (async, rerun: 64) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) (async, rerun: 64) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x106, 0x4}}, 0x20) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) (async) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 105.440961ms ago: executing program 7 (id=5760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x304}, "f62d440c0079ecf0", "53c2608fb763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 82.963942ms ago: executing program 7 (id=5761): ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x7) 44.679696ms ago: executing program 6 (id=5762): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000001a00)=""/4113, 0x41100, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=ANY=[@ANYBLOB="020300031a0200000000000000000000040019"], 0x10d0}}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fe402001004ca1e100000000000001000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x80, 0x1, 0x1fc000, 0xff, 0x3}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e23, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffff9d7}}, 0x0, 0x81, 0x5, 0x4, 0x86, 0x1, 0x8}, 0x9c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0xfffffefb}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019540)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000090900020073797a31000000000900010073797a310000000014000380100000800c00018006000100ffd7"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 656.06µs ago: executing program 7 (id=5763): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202080002000d0001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 503.82µs ago: executing program 4 (id=5764): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 0s ago: executing program 7 (id=5765): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$eJzs3U1rJMUfB/DfJJPH/SeTv66ruyAWelGEcZODJy9BdkEMKNEsqKdeM9EhkwcyQyAi7njyJPgyRD16E8Q3kIsXz4IgkovHPYgtyUw085BsYjIJyOdz6aK6vlXV6U5DD1303itfrK2u1MsrWSOGCoUobo5E8WGKFEMxHC3NeOHeTz8//dY7774+v7BwZzGlu/Nvz76cUpp+5vv3Pv7m2R8a1+59O/3dWOzODO39PvfL7o3dm3t/fh3VeqrW0/pGI2Xp/sZGI7tfq6Tlan21nNKbtUpWr6Tqer2y1bF/pbaxubmTsvXlqcnNrUq9nrL1nbRa2UmNQmps7aTsg6y6nsrlcpqaDM5j6auHeZ5H5PlIjEae5/lETMa1+F9MxXSUYib+H4/F43E9nogb8WQ8FTcPWl31vAEAAAAAAAAAAAAAAAAAAOC/5RHr/wvW/wMAAAAAAAAAAAAAAAAAAMDgda//L0b4/j8AAAAAAAAAAAAAAAAAAABcskd8/79r/f+L1v8DAAAAAAAAAAAAAAAAAADAIIy3NospjUesfba9tL3U2rbq51eiGrWoxO0oxR9xsPq/pVW++9rCndvpwEy8tPagnX+wvTTcmZ8dKcVMoW9+diIiUkqd+bGYPJqfi1Jc7z/+XGv8rvx4PP/cfv7TVr4cpfjx/diIWixHFNpHf5D/ZDalV99YmOjM39pvd6zhAZ8WAAAAuEjl9Lfe5/dmu1Hf/a1d7efz1G5ZOOH3ga7n82LcKl7VUXOovvPRalarVbb+ZWH0+H5Gz9dzT6EQEVkcrZme/HVxf/BT9nN4uV3QfI4Uhi+6wxMLIye3Occ5jeKp/5gDKkSzuyYvRZy1n9++PFIzfub4+QpD7cssqzVPfbFFM88HOrG+/4xjJ6WOv2cUBnxP4vL8c9KveiYAAAAAAAAAAACcRd+3/yYioud9wA97ag5fD++M9/Z8/OifX8IRAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sQPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK8CAAD//w+Ty90=") r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[], 0x32600) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r1, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'wg0\x00', 0x3}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) dup(r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000340)='./file0\x00', 0x80000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, r6, 0x507, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8002}, 0x20000050) ioctl$HIDIOCGDEVINFO(r3, 0x801c4803, &(0x7f0000000240)=""/10) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): sive=1 [ 444.726440][ T4909] chnl_net:caif_netlink_parms(): no params data found [ 444.872182][T20896] syz_tun (unregistering): left allmulticast mode [ 444.902510][ T4955] batman_adv: batadv0: Adding interface: ipvlan2 [ 444.909130][ T4955] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.955581][ T4955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.966088][ T4955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.976124][ T4955] batman_adv: batadv0: Interface activated: ipvlan2 [ 445.066528][ T4909] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.077263][ T4909] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.086088][ T4909] bridge_slave_0: entered allmulticast mode [ 445.093521][ T4909] bridge_slave_0: entered promiscuous mode [ 445.127677][ T4909] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.134807][ T4909] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.142749][ T4909] bridge_slave_1: entered allmulticast mode [ 445.155274][ T4909] bridge_slave_1: entered promiscuous mode [ 445.177566][ T4972] lo speed is unknown, defaulting to 1000 [ 445.250137][ T4909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.380014][ T4909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.412294][ T4949] syzkaller0: entered promiscuous mode [ 445.420925][ T4949] syzkaller0: entered allmulticast mode [ 445.430639][ T4909] team0: Port device team_slave_0 added [ 445.441337][ T4909] team0: Port device team_slave_1 added [ 445.458624][ T4909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.465657][ T4909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.536823][ T4909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.565328][ T4909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.589125][ T4909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.646358][ T4909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.738587][ T4909] hsr_slave_0: entered promiscuous mode [ 445.751771][ T4909] hsr_slave_1: entered promiscuous mode [ 445.763582][ T4909] debugfs: 'hsr0' already exists in 'hsr' [ 445.779865][ T4909] Cannot create hsr debugfs directory [ 445.943536][ T4909] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 445.963176][ T5012] loop5: detected capacity change from 0 to 1024 [ 445.979766][ T5012] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 446.059924][ T5012] JBD2: no valid journal superblock found [ 446.060198][ T4909] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 446.065708][ T5012] EXT4-fs (loop5): Could not load journal inode [ 446.097483][ T5018] loop9: detected capacity change from 0 to 512 [ 446.129261][ T5012] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000 [ 446.150898][ T4909] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 446.162498][ T5018] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 446.176044][ T5018] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 446.200445][ T4909] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 446.258372][ T5018] EXT4-fs (loop9): 1 truncate cleaned up [ 446.274724][ T5018] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.279905][ T5018] EXT4-fs: group quota file already specified [ 446.345277][ T2299] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.367413][ T4909] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 446.382412][ T4909] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 446.390861][ T4909] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 446.393981][ T4909] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 446.462576][ T5040] lo speed is unknown, defaulting to 1000 [ 446.480685][ T5047] __nla_validate_parse: 2 callbacks suppressed [ 446.480698][ T5047] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4786'. [ 446.496237][ T5047] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4786'. [ 446.545593][ T5047] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4786'. [ 446.609839][ T4909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.633339][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4786'. [ 446.637958][ T4909] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.691713][ T4909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 446.705542][ T4909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.749863][ T5040] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4786'. [ 446.800775][ T5064] hub 8-0:1.0: USB hub found [ 446.805528][ T5064] hub 8-0:1.0: 8 ports detected [ 446.820674][ T5061] netlink: 'syz.5.4791': attribute type 10 has an invalid length. [ 446.862352][ T5061] macvlan1: entered allmulticast mode [ 446.872580][ T5061] veth1_vlan: entered allmulticast mode [ 446.882345][ T5061] team0: Port device macvlan1 added [ 446.907923][ T9611] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.915014][ T9611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.976042][ T9611] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.983126][ T9611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.124796][ T5058] lo speed is unknown, defaulting to 1000 [ 447.201545][ T4909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.220810][T13965] IPVS: starting estimator thread 0... [ 447.252433][ T5074] lo speed is unknown, defaulting to 1000 [ 447.299582][ T5081] loop9: detected capacity change from 0 to 512 [ 447.309702][ T5075] IPVS: using max 2304 ests per chain, 115200 per kthread [ 447.331923][ T5081] EXT4-fs: Ignoring removed oldalloc option [ 447.362092][ T5081] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.4796: bad orphan inode 39 [ 447.404636][ T5081] loop9: lost filesystem error report for type 5 error -117 [ 447.405111][ T5081] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.501998][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 447.502024][ T28] audit: type=1400 audit(1771373904.083:8621): avc: denied { setattr } for pid=5080 comm="syz.9.4796" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 447.575819][ T2299] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.640057][ T4909] veth0_vlan: entered promiscuous mode [ 447.661935][ T28] audit: type=1400 audit(1771373904.243:8622): avc: denied { create } for pid=5072 comm="syz.8.4795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 447.666280][ T5105] loop5: detected capacity change from 0 to 512 [ 447.764747][ T4909] veth1_vlan: entered promiscuous mode [ 447.796926][ T5105] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 447.832862][ T5105] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 447.847798][ T4909] veth0_macvtap: entered promiscuous mode [ 447.862447][ T4909] veth1_macvtap: entered promiscuous mode [ 447.879541][ T5105] EXT4-fs (loop5): 1 truncate cleaned up [ 447.886038][ T5105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.903939][ T4909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.913988][ T4909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.922589][ T5105] EXT4-fs: group quota file already specified [ 447.958151][T21320] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.967654][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.976990][ T28] audit: type=1400 audit(1771373904.553:8623): avc: denied { write } for pid=5122 comm="syz.3.4810" lport=47914 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 447.998544][T21320] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.011616][ T28] audit: type=1400 audit(1771373904.553:8624): avc: denied { getopt } for pid=5122 comm="syz.3.4810" lport=47914 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 448.049275][ T28] audit: type=1400 audit(1771373904.623:8625): avc: denied { read } for pid=5128 comm="syz.5.4812" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 448.049348][T13965] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 448.099734][ T28] audit: type=1400 audit(1771373904.623:8626): avc: denied { open } for pid=5128 comm="syz.5.4812" path="/dev/input/event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 448.126281][T13965] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 448.178992][ T28] audit: type=1400 audit(1771373904.623:8627): avc: denied { ioctl } for pid=5128 comm="syz.5.4812" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 448.179020][ T28] audit: type=1400 audit(1771373904.623:8628): avc: denied { read write } for pid=5128 comm="syz.5.4812" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 448.240745][T21320] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.256148][ T28] audit: type=1400 audit(1771373904.623:8629): avc: denied { open } for pid=5128 comm="syz.5.4812" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 448.284393][ T5141] FAULT_INJECTION: forcing a failure. [ 448.284393][ T5141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.291668][T21320] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.306525][ T5141] CPU: 1 UID: 0 PID: 5141 Comm: syz.9.4818 Tainted: G W syzkaller #0 PREEMPT(full) [ 448.306567][ T5141] Tainted: [W]=WARN [ 448.306575][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.306587][ T5141] Call Trace: [ 448.306593][ T5141] [ 448.306600][ T5141] __dump_stack+0x1d/0x30 [ 448.306620][ T5141] dump_stack_lvl+0x95/0xd0 [ 448.306701][ T5141] dump_stack+0x15/0x1b [ 448.306721][ T5141] should_fail_ex+0x263/0x280 [ 448.306745][ T5141] should_fail+0xb/0x20 [ 448.306821][ T5141] should_fail_usercopy+0x1a/0x20 [ 448.306844][ T5141] _copy_to_user+0x20/0xa0 [ 448.306921][ T5141] sctp_getsockopt_context+0x2d4/0x330 [ 448.306952][ T5141] sctp_getsockopt+0x444/0xaa0 [ 448.306974][ T5141] sock_common_getsockopt+0x60/0x70 [ 448.307047][ T5141] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 448.307086][ T5141] do_sock_getsockopt+0x1c4/0x210 [ 448.307123][ T5141] __x64_sys_getsockopt+0x11d/0x1a0 [ 448.307213][ T5141] x64_sys_call+0x2dcf/0x3020 [ 448.307235][ T5141] do_syscall_64+0x12c/0x370 [ 448.307343][ T5141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.307363][ T5141] RIP: 0033:0x7fcafa88c629 [ 448.307377][ T5141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.307466][ T5141] RSP: 002b:00007fcaf92df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 448.307561][ T5141] RAX: ffffffffffffffda RBX: 00007fcafab05fa0 RCX: 00007fcafa88c629 [ 448.307574][ T5141] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000003 [ 448.307640][ T5141] RBP: 00007fcaf92df090 R08: 00002000000000c0 R09: 0000000000000000 [ 448.307653][ T5141] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.307666][ T5141] R13: 00007fcafab06038 R14: 00007fcafab05fa0 R15: 00007ffe8750dc28 [ 448.307686][ T5141] [ 448.336935][ T28] audit: type=1400 audit(1771373904.914:8630): avc: denied { append } for pid=5128 comm="syz.5.4812" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 448.450500][ T5151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=5151 comm=syz.6.4748 [ 448.486996][ T5153] loop9: detected capacity change from 0 to 512 [ 448.646679][ T5153] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 448.646710][ T5153] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 448.660192][ T5153] EXT4-fs (loop9): 1 truncate cleaned up [ 448.660697][ T5153] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.661569][ T5153] EXT4-fs: group quota file already specified [ 448.675488][ T2299] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.822595][ T5174] loop9: detected capacity change from 0 to 2048 [ 448.890429][ T5180] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4834'. [ 448.903083][ T5180] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4834'. [ 448.908349][ T5184] loop3: detected capacity change from 0 to 1024 [ 448.936891][ T5184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.951494][ T5186] loop5: detected capacity change from 0 to 512 [ 448.970553][ T5186] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 448.986009][ T5186] EXT4-fs (loop5): mount failed [ 449.021649][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.055158][ T5195] loop3: detected capacity change from 0 to 256 [ 449.103888][ T9613] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.127523][ T9613] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.161322][ T9613] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.174567][ T9613] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.205425][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4840'. [ 449.290419][ T5212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4845'. [ 449.293846][ T5213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4845'. [ 449.321307][ T5212] netlink: 'syz.3.4845': attribute type 11 has an invalid length. [ 449.838092][ T5271] loop5: detected capacity change from 0 to 8192 [ 449.852022][ T5271] tipc: Enabling of bearer rejected, failed to enable media [ 449.895360][ T5273] loop5: detected capacity change from 0 to 512 [ 450.151294][ T5278] loop9: detected capacity change from 0 to 1024 [ 450.163071][ T5278] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 450.186860][ T5278] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #3: block 1: comm syz.9.4872: lblock 1 mapped to illegal pblock 1 (length 1) [ 450.201628][ T5278] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 450.204298][ T5278] EXT4-fs error (device loop9): ext4_acquire_dquot:7003: comm syz.9.4872: Failed to acquire dquot type 0 [ 450.213372][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 450.213391][ C0] EXT4-fs (loop9): initial error at time 1771373906: ext4_map_blocks:818: inode 3: block 1 [ 450.213427][ C0] EXT4-fs (loop9): last error at time 1771373906: ext4_map_blocks:818: inode 3: block 1 [ 450.257254][ T5278] loop9: lost filesystem error report for type 5 error -117 [ 450.257478][ T5278] EXT4-fs error (device loop9): ext4_free_blocks:6726: comm syz.9.4872: Freeing blocks not in datazone - block = 0, count = 4096 [ 450.278761][ T5278] loop9: lost filesystem error report for type 5 error -117 [ 450.280033][ T5278] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.4872: Invalid inode bitmap blk 0 in block_group 0 [ 450.300643][ T9613] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 450.314874][ T9613] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 450.314931][ T5278] loop9: lost filesystem error report for type 5 error -117 [ 450.324020][ T9613] EXT4-fs error (device loop9): ext4_release_dquot:7039: comm kworker/u8:17: Failed to release dquot type 0 [ 450.329480][ T5278] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 450.332068][ T9613] loop9: lost filesystem error report for type 5 error -117 [ 450.348778][ T5278] loop9: lost filesystem error report for type 5 error -117 [ 450.359586][ T5278] EXT4-fs (loop9): 1 orphan inode deleted [ 450.378090][ T5278] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.393387][ T5278] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.521501][ T5311] EXT4-fs: inline encryption not supported [ 450.551969][ T5311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.569283][ T5311] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.594944][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.771396][ T5336] lo speed is unknown, defaulting to 1000 [ 450.845241][ T5347] pimreg: entered allmulticast mode [ 450.855118][ T5347] pimreg: left allmulticast mode [ 451.198402][ T5386] lo speed is unknown, defaulting to 1000 [ 451.282683][ T5399] netlink: 'syz.5.4925': attribute type 21 has an invalid length. [ 451.345029][ T5399] netlink: 'syz.5.4925': attribute type 4 has an invalid length. [ 451.414297][ T5399] netlink: 'syz.5.4925': attribute type 5 has an invalid length. [ 451.522643][ T5414] __nla_validate_parse: 15 callbacks suppressed [ 451.522692][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4929'. [ 451.749298][ T5435] lo speed is unknown, defaulting to 1000 [ 451.925895][ T5443] syzkaller0: entered promiscuous mode [ 451.939493][ T5443] syzkaller0: entered allmulticast mode [ 452.070097][ T5461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 452.078264][ T5461] System zones: 1-20 [ 452.083835][ T5461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.191871][ T5473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.205595][ T4909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.227548][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.240836][ T5477] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4957'. [ 452.268071][ T5477] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4957'. [ 452.442221][ T5501] set_capacity_and_notify: 4 callbacks suppressed [ 452.442234][ T5501] loop6: detected capacity change from 0 to 512 [ 452.473733][ T5506] lo speed is unknown, defaulting to 1000 [ 452.482092][ T5505] loop9: detected capacity change from 0 to 1024 [ 452.529496][ T5501] __quota_error: 12 callbacks suppressed [ 452.529509][ T5501] Quota error (device loop6): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 452.545809][ T5501] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 452.549091][ T5505] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.561487][ T5501] EXT4-fs (loop6): mount failed [ 452.624351][ T2299] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.781000][ T5528] netlink: 'syz.6.4972': attribute type 21 has an invalid length. [ 452.788996][ T5528] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4972'. [ 452.798116][ T5528] netlink: 'syz.6.4972': attribute type 4 has an invalid length. [ 452.821204][ T5528] netlink: 'syz.6.4972': attribute type 5 has an invalid length. [ 452.830279][ T5528] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4972'. [ 452.910916][ T5535] loop5: detected capacity change from 0 to 512 [ 452.917633][ T5535] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 452.929363][ T5535] netlink: 'syz.5.4976': attribute type 1 has an invalid length. [ 452.938594][ T5535] netlink: 'syz.5.4976': attribute type 4 has an invalid length. [ 452.950483][ T5535] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4976'. [ 452.959822][ T5539] loop9: detected capacity change from 0 to 512 [ 452.980887][ T5539] EXT4-fs warning (device loop9): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 452.995517][ T5539] EXT4-fs (loop9): mount failed [ 453.072181][ T5546] lo speed is unknown, defaulting to 1000 [ 453.203181][ T28] audit: type=1400 audit(1771373909.784:8640): avc: denied { map } for pid=5556 comm="syz.5.4986" path="socket:[77280]" dev="sockfs" ino=77280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 453.239602][ T28] audit: type=1400 audit(1771373909.784:8641): avc: denied { read } for pid=5556 comm="syz.5.4986" path="socket:[77280]" dev="sockfs" ino=77280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 453.273124][ T5566] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4988'. [ 453.287379][ T5561] FAULT_INJECTION: forcing a failure. [ 453.287379][ T5561] name failslab, interval 1, probability 0, space 0, times 0 [ 453.306698][ T5561] CPU: 0 UID: 0 PID: 5561 Comm: syz.6.4989 Tainted: G W syzkaller #0 PREEMPT(full) [ 453.306725][ T5561] Tainted: [W]=WARN [ 453.306730][ T5561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.306746][ T5561] Call Trace: [ 453.306751][ T5561] [ 453.306757][ T5561] __dump_stack+0x1d/0x30 [ 453.306777][ T5561] dump_stack_lvl+0x95/0xd0 [ 453.306795][ T5561] dump_stack+0x15/0x1b [ 453.306814][ T5561] should_fail_ex+0x263/0x280 [ 453.306836][ T5561] should_failslab+0x8c/0xb0 [ 453.306862][ T5561] kmem_cache_alloc_noprof+0x66/0x400 [ 453.306886][ T5561] ? vm_area_dup+0x33/0x2c0 [ 453.306902][ T5561] vm_area_dup+0x33/0x2c0 [ 453.306916][ T5561] __split_vma+0xe9/0x640 [ 453.306939][ T5561] ? lockref_put_return+0xf7/0x130 [ 453.306962][ T5561] vma_modify+0xb2e/0xd00 [ 453.306984][ T5561] vma_modify_flags+0x182/0x210 [ 453.307009][ T5561] mprotect_fixup+0x312/0x5d0 [ 453.307035][ T5561] do_mprotect_pkey+0x67b/0x920 [ 453.307066][ T5561] __x64_sys_mprotect+0x48/0x60 [ 453.307091][ T5561] x64_sys_call+0x2768/0x3020 [ 453.307110][ T5561] do_syscall_64+0x12c/0x370 [ 453.307127][ T5561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.307145][ T5561] RIP: 0033:0x7fcc68e2c629 [ 453.307160][ T5561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.307176][ T5561] RSP: 002b:00007fcc67887028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 453.307195][ T5561] RAX: ffffffffffffffda RBX: 00007fcc690a5fa0 RCX: 00007fcc68e2c629 [ 453.307207][ T5561] RDX: 000000000000000b RSI: 0000000000004000 RDI: 0000200000ff7000 [ 453.307217][ T5561] RBP: 00007fcc67887090 R08: 0000000000000000 R09: 0000000000000000 [ 453.307227][ T5561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.307237][ T5561] R13: 00007fcc690a6038 R14: 00007fcc690a5fa0 R15: 00007ffc4a447cb8 [ 453.307253][ T5561] [ 453.460703][ T5571] netlink: 'syz.3.4990': attribute type 21 has an invalid length. [ 453.472440][ T5570] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 453.495797][ T5571] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4990'. [ 453.523871][ T5570] block device autoloading is deprecated and will be removed. [ 453.545500][ T5571] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4990'. [ 453.608900][ T5575] bond0: entered promiscuous mode [ 453.614399][ T5575] bond_slave_0: entered promiscuous mode [ 453.663125][ T5575] bond_slave_1: entered promiscuous mode [ 453.704284][ T5575] batadv_slave_0: entered promiscuous mode [ 453.712759][ T5575] batadv_slave_0: left promiscuous mode [ 453.741333][ T5575] bond0: left promiscuous mode [ 453.749683][ T5575] bond_slave_0: left promiscuous mode [ 453.756939][ T5575] bond_slave_1: left promiscuous mode [ 453.901543][ T5592] lo speed is unknown, defaulting to 1000 [ 454.042795][ T28] audit: type=1400 audit(1771373910.624:8642): avc: denied { connect } for pid=5618 comm="syz.6.5011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 454.094328][ T5636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5013'. [ 454.137703][ T28] audit: type=1400 audit(1771373910.624:8643): avc: denied { write } for pid=5618 comm="syz.6.5011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 454.158255][ T5632] loop5: detected capacity change from 0 to 512 [ 454.219716][ T28] audit: type=1400 audit(1771373910.654:8644): avc: denied { read } for pid=5618 comm="syz.6.5011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 454.253228][ T5642] loop6: detected capacity change from 0 to 1024 [ 454.281708][ T5642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.297235][ T5632] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 454.319065][ T5632] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 454.354664][ T5642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 454.404967][ T5632] EXT4-fs (loop5): 1 truncate cleaned up [ 454.430872][ T5632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.482236][ T5642] System zones: 0-1, 3-36 [ 454.492361][ T5683] lo speed is unknown, defaulting to 1000 [ 454.564603][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.598479][ T5642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.702087][ T5692] lo speed is unknown, defaulting to 1000 [ 455.055671][ T5713] validate_nla: 2 callbacks suppressed [ 455.055687][ T5713] netlink: 'syz.5.5033': attribute type 39 has an invalid length. [ 455.167782][ T4909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.187182][ T5713] hsr_slave_1 (unregistering): left promiscuous mode [ 455.373271][ T28] audit: type=1400 audit(1771373911.944:8645): avc: denied { write } for pid=5742 comm="syz.5.5046" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 455.420276][ T5749] pimreg: entered allmulticast mode [ 455.431210][ T5749] pimreg: left allmulticast mode [ 455.445867][ T5751] lo speed is unknown, defaulting to 1000 [ 455.742385][ T5771] netlink: 'syz.3.5058': attribute type 39 has an invalid length. [ 455.756777][ T5771] hsr_slave_1 (unregistering): left promiscuous mode [ 455.862906][ T28] audit: type=1400 audit(1771373912.444:8646): avc: denied { create } for pid=5781 comm="syz.3.5062" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 455.908736][ T28] audit: type=1326 audit(1771373912.464:8647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.3.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d9c629 code=0x7ffc0000 [ 455.918328][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 456.022395][ T5790] wireguard0: entered promiscuous mode [ 456.035344][ T28] audit: type=1326 audit(1771373912.464:8648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5781 comm="syz.3.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d9c629 code=0x7ffc0000 [ 456.073916][ T5790] wireguard0: entered allmulticast mode [ 456.112142][ T5793] lo speed is unknown, defaulting to 1000 [ 456.278758][ T5802] pimreg: entered allmulticast mode [ 456.293828][ T5802] pimreg: left allmulticast mode [ 456.448885][ T5814] loop5: detected capacity change from 0 to 512 [ 456.483034][ T5814] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 456.497736][ T5814] EXT4-fs (loop5): mount failed [ 456.637412][ T5820] __nla_validate_parse: 11 callbacks suppressed [ 456.637432][ T5820] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5073'. [ 456.670102][ T5820] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5073'. [ 456.966646][ T5826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5075'. [ 457.120211][ T5830] lo speed is unknown, defaulting to 1000 [ 457.148742][ T5831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5077'. [ 457.172846][ T5831] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5077'. [ 457.202067][ T5833] loop6: detected capacity change from 0 to 512 [ 457.209732][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5077'. [ 457.220393][ T5833] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 457.223070][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5077'. [ 457.247790][ T5833] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 457.258519][ T5833] EXT4-fs (loop6): 1 truncate cleaned up [ 457.268129][ T5833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.332084][ T4909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.448699][ T5849] pimreg: entered allmulticast mode [ 457.455285][ T5849] pimreg: left allmulticast mode [ 457.522291][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5086'. [ 457.553139][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 457.553153][ T28] audit: type=1400 audit(1771373914.135:8679): avc: denied { write } for pid=5859 comm="syz.3.5088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 457.585029][ T28] audit: type=1400 audit(1771373914.165:8680): avc: denied { bind } for pid=5859 comm="syz.3.5088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 457.602204][ T5862] loop5: detected capacity change from 0 to 512 [ 457.606634][ T28] audit: type=1400 audit(1771373914.165:8681): avc: denied { node_bind } for pid=5859 comm="syz.3.5088" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 457.642584][ T5864] netlink: 'syz.3.5088': attribute type 1 has an invalid length. [ 457.655676][ T5862] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 457.670356][ T5862] EXT4-fs (loop5): mount failed [ 457.781231][ T5864] 8021q: adding VLAN 0 to HW filter on device bond3 [ 457.828668][ T5871] lo speed is unknown, defaulting to 1000 [ 457.865817][ T5874] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5090'. [ 457.875353][ T5874] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5090'. [ 457.911011][ T5878] loop6: detected capacity change from 0 to 512 [ 457.932189][ T5878] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 457.946970][ T5878] EXT4-fs (loop6): mount failed [ 458.475648][ T28] audit: type=1326 audit(1771373915.055:8682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.8.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4aef1c629 code=0x7ffc0000 [ 458.500789][ T28] audit: type=1326 audit(1771373915.075:8683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.8.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4aef1c629 code=0x7ffc0000 [ 458.524497][ T28] audit: type=1326 audit(1771373915.075:8684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.8.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4aef1c629 code=0x7ffc0000 [ 458.550685][ T28] audit: type=1326 audit(1771373915.075:8685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.8.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4aef1c629 code=0x7ffc0000 [ 458.577444][ T28] audit: type=1326 audit(1771373915.075:8686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.8.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd4aef1c629 code=0x7ffc0000 [ 458.655177][ T5925] FAULT_INJECTION: forcing a failure. [ 458.655177][ T5925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.668564][ T28] audit: type=1326 audit(1771373915.075:8687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.8.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd4aef1c392 code=0x7ffc0000 [ 458.668593][ T28] audit: type=1326 audit(1771373915.085:8688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5907 comm="syz.8.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd4aeedcece code=0x7ffc0000 [ 458.710964][ T5923] bond0: entered promiscuous mode [ 458.719925][ T5925] CPU: 0 UID: 0 PID: 5925 Comm: syz.3.5112 Tainted: G W syzkaller #0 PREEMPT(full) [ 458.720019][ T5925] Tainted: [W]=WARN [ 458.720026][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.720038][ T5925] Call Trace: [ 458.720045][ T5925] [ 458.720053][ T5925] __dump_stack+0x1d/0x30 [ 458.720078][ T5925] dump_stack_lvl+0x95/0xd0 [ 458.720204][ T5925] dump_stack+0x15/0x1b [ 458.720224][ T5925] should_fail_ex+0x263/0x280 [ 458.720248][ T5925] should_fail+0xb/0x20 [ 458.720348][ T5925] should_fail_usercopy+0x1a/0x20 [ 458.720445][ T5925] _copy_from_user+0x1c/0xb0 [ 458.720470][ T5925] ___sys_sendmsg+0xc1/0x1e0 [ 458.720507][ T5925] __x64_sys_sendmsg+0xd4/0x160 [ 458.720577][ T5925] x64_sys_call+0x194c/0x3020 [ 458.720599][ T5925] do_syscall_64+0x12c/0x370 [ 458.720621][ T5925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.720642][ T5925] RIP: 0033:0x7f00f4d9c629 [ 458.720729][ T5925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.720872][ T5925] RSP: 002b:00007f00f37f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.720892][ T5925] RAX: ffffffffffffffda RBX: 00007f00f5015fa0 RCX: 00007f00f4d9c629 [ 458.720906][ T5925] RDX: 0000000020008040 RSI: 00002000000000c0 RDI: 0000000000000004 [ 458.720918][ T5925] RBP: 00007f00f37f7090 R08: 0000000000000000 R09: 0000000000000000 [ 458.720932][ T5925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.720965][ T5925] R13: 00007f00f5016038 R14: 00007f00f5015fa0 R15: 00007ffe2ce968a8 [ 458.721049][ T5925] [ 458.920971][ T5923] bond_slave_0: entered promiscuous mode [ 458.930530][ T5923] bond_slave_1: entered promiscuous mode [ 458.941629][ T5923] bond0: left promiscuous mode [ 458.946675][ T5923] bond_slave_0: left promiscuous mode [ 458.952817][ T5923] bond_slave_1: left promiscuous mode [ 459.031295][ T5944] netlink: 'syz.5.5119': attribute type 3 has an invalid length. [ 459.040263][ T5943] loop6: detected capacity change from 0 to 1024 [ 459.046739][ T5942] loop9: detected capacity change from 0 to 512 [ 459.053272][ T5943] EXT4-fs: Ignoring removed nobh option [ 459.053368][ T5943] ext4: Unknown parameter 'subj_type' [ 459.074027][ T5940] lo speed is unknown, defaulting to 1000 [ 459.081206][ T5944] netlink: 'syz.5.5119': attribute type 8 has an invalid length. [ 459.107076][ T5942] EXT4-fs warning (device loop9): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 459.122608][ T5942] EXT4-fs (loop9): mount failed [ 459.278911][ T5959] lo speed is unknown, defaulting to 1000 [ 459.339274][ T5973] loop3: detected capacity change from 0 to 512 [ 459.362220][ T5973] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 459.377567][ T5973] EXT4-fs (loop3): mount failed [ 459.424289][ T5979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.455324][ T5979] macvlan3: entered promiscuous mode [ 459.460784][ T5979] macvlan3: entered allmulticast mode [ 459.568937][ T6004] loop3: detected capacity change from 0 to 8192 [ 459.628200][ T6004] loop3: detected capacity change from 8192 to 0 [ 459.628244][ C0] I/O error, dev loop3, sector 32 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 459.645476][ T6004] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 459.681638][ T6011] loop3: detected capacity change from 0 to 512 [ 459.701761][ T6011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.716274][ T6011] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.753705][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.823632][ T6019] netlink: 'syz.8.5145': attribute type 3 has an invalid length. [ 459.924340][ T6037] lo speed is unknown, defaulting to 1000 [ 459.977873][ T6037] lo speed is unknown, defaulting to 1000 [ 460.134565][ T6052] loop6: detected capacity change from 0 to 512 [ 460.142359][ T6037] lo speed is unknown, defaulting to 1000 [ 460.192168][ T6052] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 460.241043][ T6052] EXT4-fs (loop6): mount failed [ 460.259023][ T6037] lo speed is unknown, defaulting to 1000 [ 460.402782][ T6037] lo speed is unknown, defaulting to 1000 [ 460.652598][ T6037] lo speed is unknown, defaulting to 1000 [ 460.759670][ T6037] lo speed is unknown, defaulting to 1000 [ 460.850489][ T6096] uprobe: syz.6.5176:6096 failed to unregister, leaking uprobe [ 460.872093][ T6099] loop5: detected capacity change from 0 to 512 [ 460.942762][ T6099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.975505][ T6099] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.002743][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.027221][ T6111] cgroup: name respecified [ 461.032321][ T6111] netlink: 'syz.3.5181': attribute type 21 has an invalid length. [ 461.049127][ T6111] netlink: 'syz.3.5181': attribute type 4 has an invalid length. [ 461.056914][ T6111] netlink: 'syz.3.5181': attribute type 5 has an invalid length. [ 461.138542][ T6120] FAULT_INJECTION: forcing a failure. [ 461.138542][ T6120] name failslab, interval 1, probability 0, space 0, times 0 [ 461.184093][ T6120] CPU: 0 UID: 0 PID: 6120 Comm: syz.5.5184 Tainted: G W syzkaller #0 PREEMPT(full) [ 461.184121][ T6120] Tainted: [W]=WARN [ 461.184127][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.184138][ T6120] Call Trace: [ 461.184146][ T6120] [ 461.184153][ T6120] __dump_stack+0x1d/0x30 [ 461.184187][ T6120] dump_stack_lvl+0x95/0xd0 [ 461.184272][ T6120] dump_stack+0x15/0x1b [ 461.184289][ T6120] should_fail_ex+0x263/0x280 [ 461.184309][ T6120] should_failslab+0x8c/0xb0 [ 461.184342][ T6120] kmem_cache_alloc_noprof+0x66/0x400 [ 461.184437][ T6120] ? security_inode_alloc+0x37/0x100 [ 461.184457][ T6120] security_inode_alloc+0x37/0x100 [ 461.184476][ T6120] inode_init_always_gfp+0x4b7/0x500 [ 461.184551][ T6120] ? __pfx_sock_alloc_inode+0x10/0x10 [ 461.184600][ T6120] alloc_inode+0x58/0x170 [ 461.184635][ T6120] do_accept+0xa0/0x390 [ 461.184661][ T6120] io_accept+0x1de/0x490 [ 461.184689][ T6120] __io_issue_sqe+0xfd/0x2d0 [ 461.184857][ T6120] io_issue_sqe+0x206/0xc00 [ 461.184890][ T6120] ? io_accept_prep+0x260/0x290 [ 461.184913][ T6120] io_submit_sqes+0x7fb/0x1270 [ 461.184956][ T6120] __se_sys_io_uring_enter+0x1c9/0xf50 [ 461.185019][ T6120] ? __fget_files+0x184/0x1c0 [ 461.185040][ T6120] ? mutex_unlock+0x4e/0x90 [ 461.185075][ T6120] ? fput+0x8f/0xc0 [ 461.185125][ T6120] __x64_sys_io_uring_enter+0x78/0x90 [ 461.185155][ T6120] x64_sys_call+0x1e16/0x3020 [ 461.185199][ T6120] do_syscall_64+0x12c/0x370 [ 461.185221][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.185268][ T6120] RIP: 0033:0x7f48fb0dc629 [ 461.185285][ T6120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.185304][ T6120] RSP: 002b:00007f48f9b37028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 461.185357][ T6120] RAX: ffffffffffffffda RBX: 00007f48fb355fa0 RCX: 00007f48fb0dc629 [ 461.185381][ T6120] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000004 [ 461.185395][ T6120] RBP: 00007f48f9b37090 R08: 0000000000000000 R09: 0000000000000000 [ 461.185408][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.185421][ T6120] R13: 00007f48fb356038 R14: 00007f48fb355fa0 R15: 00007ffdcf679768 [ 461.185441][ T6120] [ 461.200070][ T6122] pimreg: entered allmulticast mode [ 461.201195][ T6122] pimreg: left allmulticast mode [ 461.469195][ T6143] bond0: entered promiscuous mode [ 461.469304][ T6143] bond_slave_0: entered promiscuous mode [ 461.470224][ T6143] bond_slave_1: entered promiscuous mode [ 461.582494][ T6143] batadv_slave_0: entered promiscuous mode [ 461.583703][ T6143] batadv_slave_0: left promiscuous mode [ 461.589913][ T6143] bond0: left promiscuous mode [ 461.589961][ T6143] bond_slave_0: left promiscuous mode [ 461.591553][ T6143] bond_slave_1: left promiscuous mode [ 461.745497][ T6163] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 461.745582][ T6163] EXT4-fs (loop5): mount failed [ 461.809339][ T6170] pimreg: entered allmulticast mode [ 461.863185][ T6170] pimreg: left allmulticast mode [ 461.965533][ T6176] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 461.983860][ T6176] EXT4-fs (loop3): mount failed [ 462.043849][ T6187] __nla_validate_parse: 24 callbacks suppressed [ 462.043862][ T6187] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5203'. [ 462.086372][ T6189] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.109475][ T6189] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5205'. [ 462.149545][ T4909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.215867][ T6203] pimreg: entered allmulticast mode [ 462.239780][ T6203] pimreg: left allmulticast mode [ 462.301003][ T6214] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 462.316548][ T6214] EXT4-fs (loop3): mount failed [ 462.460800][ T6230] FAULT_INJECTION: forcing a failure. [ 462.460800][ T6230] name failslab, interval 1, probability 0, space 0, times 0 [ 462.474402][ T6230] CPU: 1 UID: 0 PID: 6230 Comm: syz.6.5222 Tainted: G W syzkaller #0 PREEMPT(full) [ 462.474469][ T6230] Tainted: [W]=WARN [ 462.474476][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.474537][ T6230] Call Trace: [ 462.474544][ T6230] [ 462.474553][ T6230] __dump_stack+0x1d/0x30 [ 462.474578][ T6230] dump_stack_lvl+0x95/0xd0 [ 462.474599][ T6230] dump_stack+0x15/0x1b [ 462.474649][ T6230] should_fail_ex+0x263/0x280 [ 462.474676][ T6230] should_failslab+0x8c/0xb0 [ 462.474705][ T6230] kmem_cache_alloc_noprof+0x66/0x400 [ 462.474794][ T6230] ? audit_log_start+0x34c/0x730 [ 462.474851][ T6230] audit_log_start+0x34c/0x730 [ 462.474952][ T6230] ? kstrtouint_from_user+0xa8/0xf0 [ 462.474975][ T6230] audit_seccomp+0x47/0x100 [ 462.475008][ T6230] ? __seccomp_filter+0x8db/0x1350 [ 462.475038][ T6230] __seccomp_filter+0x8ec/0x1350 [ 462.475115][ T6230] ? __rcu_read_unlock+0x4e/0x70 [ 462.475184][ T6230] ? __fget_files+0x184/0x1c0 [ 462.475205][ T6230] ? mutex_lock+0x57/0x90 [ 462.475277][ T6230] ? mutex_unlock+0x4e/0x90 [ 462.475305][ T6230] __secure_computing+0x81/0x150 [ 462.475328][ T6230] do_syscall_64+0xd3/0x370 [ 462.475395][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.475417][ T6230] RIP: 0033:0x7fcc68e2c629 [ 462.475433][ T6230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.475464][ T6230] RSP: 002b:00007fcc67887028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 462.475543][ T6230] RAX: ffffffffffffffda RBX: 00007fcc690a5fa0 RCX: 00007fcc68e2c629 [ 462.475558][ T6230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 462.475572][ T6230] RBP: 00007fcc67887090 R08: 0000000000000000 R09: 0000000000000000 [ 462.475586][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.475599][ T6230] R13: 00007fcc690a6038 R14: 00007fcc690a5fa0 R15: 00007ffc4a447cb8 [ 462.475620][ T6230] [ 462.528564][ T6232] lo speed is unknown, defaulting to 1000 [ 462.568164][ T6235] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5224'. [ 462.693390][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5224'. [ 462.870118][ T6249] pimreg: entered allmulticast mode [ 462.876833][ T6249] pimreg: left allmulticast mode [ 462.980482][ T6265] set_capacity_and_notify: 4 callbacks suppressed [ 462.980514][ T6265] loop5: detected capacity change from 0 to 512 [ 462.998304][ T6265] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 463.013668][ T6265] EXT4-fs (loop5): mount failed [ 463.112495][ T6272] lo speed is unknown, defaulting to 1000 [ 463.265369][ T6282] bond0: entered promiscuous mode [ 463.272583][ T6282] bond_slave_0: entered promiscuous mode [ 463.281814][ T6282] bond_slave_1: entered promiscuous mode [ 463.316263][ T6282] batadv_slave_0: entered promiscuous mode [ 463.359258][ T6294] pimreg: entered allmulticast mode [ 463.372303][ T6294] pimreg: left allmulticast mode [ 463.386114][ T6298] ALSA: seq fatal error: cannot create timer (-19) [ 463.422520][ T6302] loop3: detected capacity change from 0 to 512 [ 463.440086][ T6302] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 463.454885][ T6302] EXT4-fs (loop3): mount failed [ 463.519016][ T6313] loop3: detected capacity change from 0 to 512 [ 463.534958][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 463.534972][ T28] audit: type=1326 audit(1771373920.115:8747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafa88c629 code=0x7ffc0000 [ 463.565731][ T28] audit: type=1326 audit(1771373920.155:8748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafa88c629 code=0x7ffc0000 [ 463.603379][ T28] audit: type=1326 audit(1771373920.155:8749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcafa88c629 code=0x7ffc0000 [ 463.627361][ T6313] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 463.635399][ T6313] System zones: 1-20 [ 463.648738][ T6325] netlink: 'syz.6.5258': attribute type 6 has an invalid length. [ 463.650954][ T28] audit: type=1326 audit(1771373920.155:8750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafa88c629 code=0x7ffc0000 [ 463.658062][ T6313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.680643][ T28] audit: type=1326 audit(1771373920.155:8751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcafa88c629 code=0x7ffc0000 [ 463.719314][ T28] audit: type=1400 audit(1771373920.155:8752): avc: denied { getopt } for pid=6315 comm="syz.9.5252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 463.741568][ T28] audit: type=1326 audit(1771373920.155:8753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafa88c629 code=0x7ffc0000 [ 463.765088][ T28] audit: type=1326 audit(1771373920.155:8754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcafa88dec7 code=0x7ffc0000 [ 463.783500][ T6327] loop9: detected capacity change from 0 to 512 [ 463.818550][ T6331] loop6: detected capacity change from 0 to 1024 [ 463.827486][ T6331] EXT4-fs: Invalid want_extra_isize 3 [ 463.831065][ T6335] pimreg: entered allmulticast mode [ 463.840778][ T6327] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 463.846549][ T6331] loop6: detected capacity change from 0 to 128 [ 463.874200][ T6335] pimreg: left allmulticast mode [ 463.891229][ T6327] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.5257: inode has both inline data and extents flags [ 463.900782][ T28] audit: type=1326 audit(1771373920.155:8755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcafa84cece code=0x7ffc0000 [ 463.928685][ T28] audit: type=1326 audit(1771373920.155:8756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.9.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcafa84cece code=0x7ffc0000 [ 463.967158][ T6327] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.967795][ T6327] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5257: couldn't read orphan inode 15 (err -117) [ 463.988756][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 463.988772][ C1] EXT4-fs (loop9): initial error at time 1771373920: ext4_orphan_get:1391: inode 15 [ 463.988797][ C1] EXT4-fs (loop9): last error at time 1771373920: ext4_orphan_get:1391: inode 15 [ 464.014713][ T6327] loop9: lost filesystem error report for type 5 error -117 [ 464.015630][ T6327] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.082170][ T2299] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.127146][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.218433][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5270'. [ 464.246057][ T2575] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 464.263568][ T2575] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 464.274354][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5272'. [ 464.655092][ T6367] loop3: detected capacity change from 0 to 128 [ 464.727657][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5275'. [ 464.830983][ T6373] loop9: detected capacity change from 0 to 512 [ 464.856922][ T6373] EXT4-fs warning (device loop9): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 464.874352][ T6373] EXT4-fs (loop9): mount failed [ 464.948606][ T6388] loop9: detected capacity change from 0 to 512 [ 464.948894][ T6388] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 465.025900][ T6394] FAULT_INJECTION: forcing a failure. [ 465.025900][ T6394] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 465.025932][ T6394] CPU: 0 UID: 0 PID: 6394 Comm: syz.6.5286 Tainted: G W syzkaller #0 PREEMPT(full) [ 465.025957][ T6394] Tainted: [W]=WARN [ 465.026010][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.026042][ T6394] Call Trace: [ 465.026049][ T6394] [ 465.026082][ T6394] __dump_stack+0x1d/0x30 [ 465.026107][ T6394] dump_stack_lvl+0x95/0xd0 [ 465.026191][ T6394] dump_stack+0x15/0x1b [ 465.026207][ T6394] should_fail_ex+0x263/0x280 [ 465.026227][ T6394] should_fail_alloc_page+0xf2/0x100 [ 465.026254][ T6394] __alloc_frozen_pages_noprof+0x108/0x360 [ 465.026297][ T6394] alloc_pages_mpol+0xb3/0x260 [ 465.026320][ T6394] folio_alloc_mpol_noprof+0x39/0x80 [ 465.026344][ T6394] shmem_get_folio_gfp+0x3da/0xd60 [ 465.026373][ T6394] shmem_write_begin+0xfc/0x1f0 [ 465.026441][ T6394] generic_perform_write+0x183/0x490 [ 465.026466][ T6394] shmem_file_write_iter+0xc5/0xf0 [ 465.026565][ T6394] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 465.026637][ T6394] vfs_write+0x5a6/0x9f0 [ 465.026669][ T6394] ksys_write+0xdc/0x1a0 [ 465.026699][ T6394] __x64_sys_write+0x40/0x50 [ 465.026879][ T6394] x64_sys_call+0x27e1/0x3020 [ 465.026954][ T6394] do_syscall_64+0x12c/0x370 [ 465.026972][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.026990][ T6394] RIP: 0033:0x7fcc68decece [ 465.027083][ T6394] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 465.027164][ T6394] RSP: 002b:00007fcc67886da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 465.027181][ T6394] RAX: ffffffffffffffda RBX: 00007fcc678876c0 RCX: 00007fcc68decece [ 465.027193][ T6394] RDX: 0000000000040000 RSI: 00007fcc5f467000 RDI: 0000000000000006 [ 465.027205][ T6394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 465.027255][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 465.027266][ T6394] R13: 00007fcc67886ee0 R14: 00007fcc67886ea0 R15: 00007fcc5f467000 [ 465.027285][ T6394] [ 465.116723][ T6396] bond0: entered promiscuous mode [ 465.122080][ T6396] bond_slave_0: entered promiscuous mode [ 465.125273][ T6396] bond_slave_1: entered promiscuous mode [ 465.172763][ T6396] bond0: left promiscuous mode [ 465.172897][ T6396] bond_slave_0: left promiscuous mode [ 465.174057][ T6396] bond_slave_1: left promiscuous mode [ 465.465904][ T6426] loop5: detected capacity change from 0 to 2048 [ 465.713495][ T6449] lo speed is unknown, defaulting to 1000 [ 465.732386][ T6451] lo speed is unknown, defaulting to 1000 [ 465.809238][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.827726][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.837279][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.846666][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.857169][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.862922][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.010124][ T6482] EXT4-fs warning (device loop9): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 466.024773][ T6482] EXT4-fs (loop9): mount failed [ 466.139673][ T6491] lo speed is unknown, defaulting to 1000 [ 466.298141][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 466.473731][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5336'. [ 466.671818][ T6537] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5344'. [ 466.703195][ T6539] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5345'. [ 466.793594][ T6476] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 466.871001][ T6545] lo speed is unknown, defaulting to 1000 [ 466.909430][ T6547] netlink: 'syz.3.5348': attribute type 1 has an invalid length. [ 466.966092][ T6550] EXT4-fs: Ignoring removed orlov option [ 466.973255][ T6550] EXT4-fs: Ignoring removed nobh option [ 467.008308][ T6550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.078491][ T6560] EXT4-fs warning (device loop9): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 467.100137][ T6560] EXT4-fs (loop9): mount failed [ 467.103460][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.447946][ T6586] EXT4-fs warning (device loop9): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 467.462663][ T6586] EXT4-fs (loop9): mount failed [ 467.589172][ T6595] pimreg: entered allmulticast mode [ 467.639616][ T6595] pimreg: left allmulticast mode [ 467.725052][ T6610] EXT4-fs: Ignoring removed oldalloc option [ 467.732121][ T6610] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 467.747822][ T6610] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #11: comm syz.3.5368: corrupted in-inode xattr: invalid ea_ino [ 467.765024][ T6610] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 467.765205][ T6610] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.5368: couldn't read orphan inode 11 (err -117) [ 467.774458][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 467.774477][ C0] EXT4-fs (loop3): initial error at time 1771373924: ext4_iget_extra_inode:5025: inode 11 [ 467.774515][ C0] EXT4-fs (loop3): last error at time 1771373924: ext4_iget_extra_inode:5025: inode 11 [ 467.813188][ T6610] loop3: lost filesystem error report for type 5 error -117 [ 467.813953][ T6610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.869677][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.003713][ T6627] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 468.019156][ T6627] EXT4-fs (loop5): mount failed [ 468.111838][ T6643] FAULT_INJECTION: forcing a failure. [ 468.111838][ T6643] name failslab, interval 1, probability 0, space 0, times 0 [ 468.124973][ T6643] CPU: 0 UID: 0 PID: 6643 Comm: syz.5.5383 Tainted: G W syzkaller #0 PREEMPT(full) [ 468.125038][ T6643] Tainted: [W]=WARN [ 468.125042][ T6643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.125049][ T6643] Call Trace: [ 468.125053][ T6643] [ 468.125058][ T6643] __dump_stack+0x1d/0x30 [ 468.125074][ T6643] dump_stack_lvl+0x95/0xd0 [ 468.125099][ T6643] dump_stack+0x15/0x1b [ 468.125111][ T6643] should_fail_ex+0x263/0x280 [ 468.125135][ T6643] ? audit_log_d_path+0x8d/0x150 [ 468.125146][ T6643] should_failslab+0x8c/0xb0 [ 468.125164][ T6643] __kmalloc_cache_noprof+0x5f/0x410 [ 468.125185][ T6643] audit_log_d_path+0x8d/0x150 [ 468.125196][ T6643] audit_log_d_path_exe+0x42/0x70 [ 468.125207][ T6643] audit_log_task+0x1e8/0x250 [ 468.125224][ T6643] audit_seccomp+0x60/0x100 [ 468.125294][ T6643] ? __seccomp_filter+0x8db/0x1350 [ 468.125308][ T6643] __seccomp_filter+0x8ec/0x1350 [ 468.125322][ T6643] ? cgroup1_freezing+0x56/0x60 [ 468.125335][ T6643] ? freezing_slow_path+0xf1/0x100 [ 468.125452][ T6643] ? _raw_spin_unlock_irq+0x9/0x30 [ 468.125465][ T6643] ? __set_current_blocked+0x284/0x2e0 [ 468.125485][ T6643] __secure_computing+0x81/0x150 [ 468.125531][ T6643] do_syscall_64+0xd3/0x370 [ 468.125589][ T6643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.125601][ T6643] RIP: 0033:0x7f48fb09cece [ 468.125611][ T6643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 468.125777][ T6643] RSP: 002b:00007f48f9b36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.125798][ T6643] RAX: ffffffffffffffda RBX: 00007f48f9b376c0 RCX: 00007f48fb09cece [ 468.125806][ T6643] RDX: 000000000000000f RSI: 00007f48f9b370a0 RDI: 0000000000000004 [ 468.125814][ T6643] RBP: 00007f48f9b37090 R08: 0000000000000000 R09: 0000000000000000 [ 468.125828][ T6643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.125835][ T6643] R13: 00007f48fb356038 R14: 00007f48fb355fa0 R15: 00007ffdcf679768 [ 468.125846][ T6643] [ 468.427524][ T6655] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5388'. [ 468.439431][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5388'. [ 468.652825][ T6675] set_capacity_and_notify: 9 callbacks suppressed [ 468.652839][ T6675] loop6: detected capacity change from 0 to 128 [ 468.827164][ T6681] bond0: entered promiscuous mode [ 468.832678][ T6681] bond_slave_0: entered promiscuous mode [ 468.843113][ T6681] bond_slave_1: entered promiscuous mode [ 468.888226][ T6681] bond0: left promiscuous mode [ 468.893874][ T6681] bond_slave_0: left promiscuous mode [ 468.906613][ T6681] bond_slave_1: left promiscuous mode [ 469.016434][ T6699] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 469.046538][ T6710] loop3: detected capacity change from 0 to 512 [ 469.058431][ T6710] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 469.073748][ T6710] EXT4-fs (loop3): mount failed [ 469.100919][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5411'. [ 469.129343][ T6708] 9p: Bad value for 'rfdno' [ 469.172060][ T6717] pimreg: entered allmulticast mode [ 469.185832][ T6717] pimreg: left allmulticast mode [ 469.274281][ T6723] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5414'. [ 469.375858][ T6731] netlink: 'syz.6.5419': attribute type 1 has an invalid length. [ 469.404364][ T6736] loop5: detected capacity change from 0 to 128 [ 469.413961][ T6731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.447059][ T6739] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 469.470397][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 469.470410][ T28] audit: type=1400 audit(1771373926.056:8869): avc: denied { block_suspend } for pid=6740 comm="syz.5.5422" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 469.499389][ T6745] Invalid argument reading file caps for ./file0 [ 469.520646][ T6749] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5424'. [ 469.529877][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5424'. [ 469.556273][ T6753] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5426'. [ 469.584061][ T6756] pimreg: entered allmulticast mode [ 469.590536][ T6756] pimreg: left allmulticast mode [ 469.640772][ T28] audit: type=1326 audit(1771373926.226:8870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.6.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc68e2c629 code=0x7ffc0000 [ 469.641010][ T6759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=6759 comm=syz.6.5428 [ 469.665345][ T28] audit: type=1326 audit(1771373926.226:8871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.6.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc68e2c629 code=0x7ffc0000 [ 469.701976][ T28] audit: type=1326 audit(1771373926.226:8872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.6.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcc68e2c629 code=0x7ffc0000 [ 469.725523][ T28] audit: type=1326 audit(1771373926.266:8873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.6.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc68e2c629 code=0x7ffc0000 [ 469.749477][ T28] audit: type=1326 audit(1771373926.266:8874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.6.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc68e2c629 code=0x7ffc0000 [ 469.773167][ T28] audit: type=1326 audit(1771373926.276:8875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.6.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fcc68e2c629 code=0x7ffc0000 [ 469.801921][ T28] audit: type=1326 audit(1771373926.276:8876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.6.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc68e2c629 code=0x7ffc0000 [ 469.826665][ T28] audit: type=1326 audit(1771373926.276:8877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6758 comm="syz.6.5428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc68e2c629 code=0x7ffc0000 [ 469.861181][ T6762] syzkaller0: entered allmulticast mode [ 469.873164][ T6762] syzkaller0: entered promiscuous mode [ 469.900492][ T6762] syzkaller0 (unregistering): left allmulticast mode [ 469.911959][ T6768] loop3: detected capacity change from 0 to 128 [ 469.914461][ T6762] syzkaller0 (unregistering): left promiscuous mode [ 469.946058][ T6771] FAULT_INJECTION: forcing a failure. [ 469.946058][ T6771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.959237][ T6771] CPU: 0 UID: 0 PID: 6771 Comm: syz.3.5433 Tainted: G W syzkaller #0 PREEMPT(full) [ 469.959289][ T6771] Tainted: [W]=WARN [ 469.959295][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.959308][ T6771] Call Trace: [ 469.959313][ T6771] [ 469.959320][ T6771] __dump_stack+0x1d/0x30 [ 469.959341][ T6771] dump_stack_lvl+0x95/0xd0 [ 469.959420][ T6771] dump_stack+0x15/0x1b [ 469.959440][ T6771] should_fail_ex+0x263/0x280 [ 469.959511][ T6771] should_fail+0xb/0x20 [ 469.959522][ T6771] should_fail_usercopy+0x1a/0x20 [ 469.959553][ T6771] _copy_to_user+0x20/0xa0 [ 469.959569][ T6771] simple_read_from_buffer+0xb5/0x130 [ 469.959587][ T6771] proc_fail_nth_read+0x10e/0x150 [ 469.959605][ T6771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.959696][ T6771] vfs_read+0x1ab/0x7f0 [ 469.959717][ T6771] ? __rcu_read_unlock+0x4e/0x70 [ 469.959804][ T6771] ? __fget_files+0x184/0x1c0 [ 469.959816][ T6771] ? mutex_lock+0x57/0x90 [ 469.959857][ T6771] ksys_read+0xdc/0x1a0 [ 469.959873][ T6771] __x64_sys_read+0x40/0x50 [ 469.959888][ T6771] x64_sys_call+0x2886/0x3020 [ 469.959975][ T6771] do_syscall_64+0x12c/0x370 [ 469.959987][ T6771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.960054][ T6771] RIP: 0033:0x7f00f4d5cece [ 469.960064][ T6771] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 469.960127][ T6771] RSP: 002b:00007f00f37f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 469.960140][ T6771] RAX: ffffffffffffffda RBX: 00007f00f37f76c0 RCX: 00007f00f4d5cece [ 469.960148][ T6771] RDX: 000000000000000f RSI: 00007f00f37f70a0 RDI: 0000000000000004 [ 469.960156][ T6771] RBP: 00007f00f37f7090 R08: 0000000000000000 R09: 0000000000000000 [ 469.960163][ T6771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.960220][ T6771] R13: 00007f00f5016038 R14: 00007f00f5015fa0 R15: 00007ffe2ce968a8 [ 469.960312][ T6771] [ 470.194572][ T28] audit: type=1400 audit(1771373926.776:8878): avc: denied { create } for pid=6776 comm="syz.9.5435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 470.250289][ T6779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5437'. [ 470.325222][ T6789] pimreg: entered allmulticast mode [ 470.332002][ T6789] pimreg: left allmulticast mode [ 470.475813][ T6792] netlink: 182 bytes leftover after parsing attributes in process `syz.8.5440'. [ 470.477347][ T6812] loop5: detected capacity change from 0 to 1024 [ 470.499190][ T6812] EXT4-fs: Ignoring removed orlov option [ 470.512997][ T6815] FAULT_INJECTION: forcing a failure. [ 470.512997][ T6815] name failslab, interval 1, probability 0, space 0, times 0 [ 470.532450][ T6815] CPU: 1 UID: 0 PID: 6815 Comm: syz.3.5447 Tainted: G W syzkaller #0 PREEMPT(full) [ 470.532554][ T6815] Tainted: [W]=WARN [ 470.532560][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 470.532570][ T6815] Call Trace: [ 470.532575][ T6815] [ 470.532582][ T6815] __dump_stack+0x1d/0x30 [ 470.532639][ T6815] dump_stack_lvl+0x95/0xd0 [ 470.532758][ T6815] dump_stack+0x15/0x1b [ 470.532778][ T6815] should_fail_ex+0x263/0x280 [ 470.532802][ T6815] ? __pfx_proc_alloc_inode+0x10/0x10 [ 470.532879][ T6815] should_failslab+0x8c/0xb0 [ 470.532908][ T6815] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 470.533011][ T6815] ? proc_alloc_inode+0x34/0x90 [ 470.533035][ T6815] ? __d_alloc+0x2c7/0x340 [ 470.533058][ T6815] ? __pfx_proc_alloc_inode+0x10/0x10 [ 470.533127][ T6815] proc_alloc_inode+0x34/0x90 [ 470.533161][ T6815] alloc_inode+0x40/0x170 [ 470.533177][ T6815] new_inode+0x1d/0xe0 [ 470.533229][ T6815] proc_setup_self+0x6c/0x150 [ 470.533307][ T6815] proc_fill_super+0x26f/0x320 [ 470.533377][ T6815] ? __pfx_proc_fill_super+0x10/0x10 [ 470.533404][ T6815] get_tree_nodev+0x83/0x100 [ 470.533516][ T6815] proc_get_tree+0x1c/0x30 [ 470.533611][ T6815] vfs_get_tree+0x57/0x1d0 [ 470.533711][ T6815] do_new_mount+0x288/0x8d0 [ 470.533738][ T6815] ? security_capable+0x7b/0x90 [ 470.533760][ T6815] path_mount+0x4d0/0xbc0 [ 470.533853][ T6815] __se_sys_mount+0x28c/0x2e0 [ 470.533891][ T6815] ? fput+0x8f/0xc0 [ 470.533911][ T6815] __x64_sys_mount+0x67/0x80 [ 470.534016][ T6815] x64_sys_call+0x2d61/0x3020 [ 470.534041][ T6815] do_syscall_64+0x12c/0x370 [ 470.534063][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.534123][ T6815] RIP: 0033:0x7f00f4d9c629 [ 470.534204][ T6815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.534311][ T6815] RSP: 002b:00007f00f37d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 470.534328][ T6815] RAX: ffffffffffffffda RBX: 00007f00f5016090 RCX: 00007f00f4d9c629 [ 470.534341][ T6815] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 470.534355][ T6815] RBP: 00007f00f37d6090 R08: 0000000000000000 R09: 0000000000000000 [ 470.534389][ T6815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.534402][ T6815] R13: 00007f00f5016128 R14: 00007f00f5016090 R15: 00007ffe2ce968a8 [ 470.534425][ T6815] [ 470.534720][ T6812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.556293][ T6815] proc_fill_super: can't allocate /proc/self [ 470.872804][ T6828] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5454'. [ 471.095443][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.162993][ T6837] pimreg: entered allmulticast mode [ 471.201698][ T6837] pimreg: left allmulticast mode [ 471.399773][ T6855] syzkaller0: entered promiscuous mode [ 471.407524][ T6855] syzkaller0: entered allmulticast mode [ 471.431575][ T6859] loop5: detected capacity change from 0 to 512 [ 471.447344][ T6859] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 471.462689][ T6859] EXT4-fs (loop5): mount failed [ 471.579158][ T6869] netlink: 'syz.3.5470': attribute type 1 has an invalid length. [ 471.658345][ T6878] 8021q: adding VLAN 0 to HW filter on device bond3 [ 471.672744][ T6871] netlink: 'syz.8.5469': attribute type 16 has an invalid length. [ 471.755262][ T6889] loop9: detected capacity change from 0 to 512 [ 471.785266][ T6889] netlink: 'syz.9.5474': attribute type 10 has an invalid length. [ 471.908692][ T6902] sit0: entered promiscuous mode [ 471.917897][ T6902] netlink: 'syz.3.5481': attribute type 1 has an invalid length. [ 472.025207][ T5531] syz_tun (unregistering): left allmulticast mode [ 472.035510][ T5531] syz_tun (unregistering): left promiscuous mode [ 472.042009][ T5531] bridge0: port 3(syz_tun) entered disabled state [ 472.051766][ T6909] lo speed is unknown, defaulting to 1000 [ 472.095605][ T6914] loop3: detected capacity change from 0 to 128 [ 472.276646][ T6932] netlink: 'syz.5.5493': attribute type 13 has an invalid length. [ 472.380153][ T6941] loop5: detected capacity change from 0 to 128 [ 472.501908][ T6938] loop6: detected capacity change from 0 to 512 [ 472.552194][ T6938] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 472.562702][ T6938] System zones: 0-2, 18-18, 34-34 [ 472.574453][ T6938] EXT4-fs (loop6): too many log groups per flexible block group [ 472.606324][ T6938] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 472.614101][ T6938] EXT4-fs (loop6): mount failed [ 472.742078][ T6968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.773807][ T6968] Cannot find set identified by id 65535 to match [ 472.817175][ T4909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.907875][ T6979] netlink: 'syz.6.5508': attribute type 10 has an invalid length. [ 473.038686][ T6986] FAULT_INJECTION: forcing a failure. [ 473.038686][ T6986] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 473.052837][ T6986] CPU: 0 UID: 0 PID: 6986 Comm: syz.6.5511 Tainted: G W syzkaller #0 PREEMPT(full) [ 473.052868][ T6986] Tainted: [W]=WARN [ 473.052875][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.052918][ T6986] Call Trace: [ 473.052926][ T6986] [ 473.052934][ T6986] __dump_stack+0x1d/0x30 [ 473.052957][ T6986] dump_stack_lvl+0x95/0xd0 [ 473.053008][ T6986] dump_stack+0x15/0x1b [ 473.053024][ T6986] should_fail_ex+0x263/0x280 [ 473.053056][ T6986] should_fail_alloc_page+0xf2/0x100 [ 473.053083][ T6986] __alloc_frozen_pages_noprof+0x108/0x360 [ 473.053104][ T6986] alloc_pages_mpol+0xb3/0x260 [ 473.053128][ T6986] alloc_pages_noprof+0x8f/0x130 [ 473.053241][ T6986] pte_alloc_one+0x1e/0xd0 [ 473.053258][ T6986] __pte_alloc+0x32/0x2c0 [ 473.053280][ T6986] handle_mm_fault+0x204e/0x3020 [ 473.053305][ T6986] ? vma_start_read+0x1c7/0x2c0 [ 473.053350][ T6986] do_user_addr_fault+0x62f/0x1050 [ 473.053376][ T6986] ? ksys_mmap_pgoff+0xc1/0x310 [ 473.053393][ T6986] ? __x64_sys_mmap+0x49/0x70 [ 473.053425][ T6986] ? trace_page_fault_user+0x1f/0xe0 [ 473.053485][ T6986] exc_page_fault+0x62/0xa0 [ 473.053509][ T6986] asm_exc_page_fault+0x26/0x30 [ 473.053525][ T6986] RIP: 0033:0x7fcc68ce3b0e [ 473.053538][ T6986] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 473.053700][ T6986] RSP: 002b:00007fcc678863c0 EFLAGS: 00010246 [ 473.053715][ T6986] RAX: 0000000000000001 RBX: 00007fcc67886480 RCX: 0000000000000101 [ 473.053725][ T6986] RDX: 000000000000003f RSI: 0000000000000001 RDI: 00007fcc67886520 [ 473.053734][ T6986] RBP: 0000000000000102 R08: 00007fcc5f467000 R09: 0000000000000000 [ 473.053744][ T6986] R10: 0000000000000000 R11: 00007fcc67886490 R12: 0000000000000001 [ 473.053754][ T6986] R13: 00007fcc68ee2200 R14: 0000000000000000 R15: 00007fcc67886520 [ 473.053860][ T6986] [ 473.053946][ T6986] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 473.323661][ T6986] GPT:first_usable_lbas don't match. [ 473.328360][ T6990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.329224][ T6986] GPT:34 != 290 [ 473.348570][ T6990] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.362113][ T6986] GPT: Use GNU Parted to correct GPT errors. [ 473.368342][ T6986] loop6: p1 p2 p3 [ 473.386212][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.445970][ T6998] __nla_validate_parse: 14 callbacks suppressed [ 473.445998][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5516'. [ 473.691623][ T5656] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.712138][ T5656] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.738249][ T6994] syzkaller0: entered promiscuous mode [ 473.743849][ T6994] syzkaller0: entered allmulticast mode [ 473.834688][ T5656] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.845385][ T6967] syz.8.5506 (6967) used greatest stack depth: 5304 bytes left [ 473.929032][ T7020] 9p: Bad value for 'rfdno' [ 473.940220][ T5656] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.999427][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5528'. [ 474.004252][ T5656] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.046212][ T5656] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.122054][ T7038] set_capacity_and_notify: 4 callbacks suppressed [ 474.122069][ T7038] loop6: detected capacity change from 0 to 512 [ 474.144198][ T5656] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.156473][ T5656] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.171881][ T7038] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 474.186700][ T7038] EXT4-fs (loop6): mount failed [ 474.209135][ T7010] lo speed is unknown, defaulting to 1000 [ 474.421520][ T5656] dummy0: left allmulticast mode [ 474.448226][ T5656] dummy0: left promiscuous mode [ 474.465787][ T5656] bridge0: port 4(dummy0) entered disabled state [ 474.485199][ T5656] bridge_slave_1: left allmulticast mode [ 474.507087][ T5656] bridge_slave_1: left promiscuous mode [ 474.524787][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.570413][ T5656] bridge_slave_0: left allmulticast mode [ 474.594461][ T5656] bridge_slave_0: left promiscuous mode [ 474.603642][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.760085][ T5656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.769964][ T7063] loop5: detected capacity change from 0 to 512 [ 474.776668][ T7063] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 474.785983][ T7063] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5535'. [ 474.797657][ T5656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.807467][ T5656] bond0 (unregistering): Released all slaves [ 474.825607][ T7010] chnl_net:caif_netlink_parms(): no params data found [ 474.852091][ T7065] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 474.967424][ T5656] hsr_slave_0: left promiscuous mode [ 474.971947][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 474.972025][ T28] audit: type=1400 audit(1771373931.557:8909): avc: denied { override_creds } for pid=7064 comm="syz.5.5536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 475.005246][ T5656] hsr_slave_1: left promiscuous mode [ 475.019657][ T5656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.027344][ T5656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.029594][ T7085] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5538'. [ 475.054015][ T5656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.056303][ T7085] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5538'. [ 475.061905][ T5656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.088024][ T5656] veth1_macvtap: left promiscuous mode [ 475.097374][ T5656] veth0_macvtap: left promiscuous mode [ 475.102987][ T5656] veth1_vlan: left allmulticast mode [ 475.108621][ T5656] veth1_vlan: left promiscuous mode [ 475.113919][ T5656] veth0_vlan: left promiscuous mode [ 475.201087][ T5656] team0 (unregistering): Port device macvlan1 removed [ 475.230568][ T5656] team0 (unregistering): Port device team_slave_1 removed [ 475.241096][ T5656] team0 (unregistering): Port device team_slave_0 removed [ 475.244298][ T7085] loop6: detected capacity change from 0 to 1024 [ 475.304736][ T3085] lo speed is unknown, defaulting to 1000 [ 475.313898][ T3085] infiniband syz2: ib_query_port failed (-19) [ 475.335985][ T7085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 475.361422][ T7010] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.370082][ T7010] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.377925][ T7010] bridge_slave_0: entered allmulticast mode [ 475.383905][ T28] audit: type=1400 audit(1771373931.967:8910): avc: denied { rename } for pid=7084 comm="syz.6.5538" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 475.407659][ T7010] bridge_slave_0: entered promiscuous mode [ 475.414416][ T7010] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.421699][ T7010] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.428985][ T7010] bridge_slave_1: entered allmulticast mode [ 475.435559][ T7010] bridge_slave_1: entered promiscuous mode [ 475.438198][ T7085] SELinux: Context system_u:object_r:devicekit_var_lib_t:s0 is not valid (left unmapped). [ 475.442310][ T28] audit: type=1400 audit(1771373932.017:8911): avc: denied { mac_admin } for pid=7084 comm="syz.6.5538" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 475.535034][ T28] audit: type=1400 audit(1771373932.117:8912): avc: denied { relabelto } for pid=7084 comm="syz.6.5538" name="file1" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:devicekit_var_lib_t:s0" [ 475.572644][ T7010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.622140][ T7010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.698198][ T7010] team0: Port device team_slave_0 added [ 475.714446][ T7010] team0: Port device team_slave_1 added [ 475.739646][ T28] audit: type=1400 audit(1771373932.317:8913): avc: denied { watch } for pid=7084 comm="syz.6.5538" path="/158/file1/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.753600][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.776332][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.813737][ T28] audit: type=1400 audit(1771373932.327:8914): avc: denied { rename } for pid=7084 comm="syz.6.5538" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.816017][ T7010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.847978][ T7125] loop5: detected capacity change from 0 to 512 [ 475.855041][ T7125] EXT4-fs: Ignoring removed oldalloc option [ 475.861735][ T7125] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 475.880027][ T7125] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #11: comm syz.5.5546: corrupted in-inode xattr: invalid ea_ino [ 475.885161][ T28] audit: type=1400 audit(1771373932.327:8915): avc: denied { read write } for pid=7084 comm="syz.6.5538" name="file1" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 475.893986][ T7125] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 475.918485][ T28] audit: type=1400 audit(1771373932.327:8916): avc: denied { open } for pid=7084 comm="syz.6.5538" path="/158/file1/file1" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 475.924472][ T7125] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5546: couldn't read orphan inode 11 (err -117) [ 475.927632][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 475.927651][ C0] EXT4-fs (loop5): initial error at time 1771373932: ext4_iget_extra_inode:5025: inode 11 [ 475.927685][ C0] EXT4-fs (loop5): last error at time 1771373932: ext4_iget_extra_inode:5025: inode 11 [ 475.989634][ T7125] loop5: lost filesystem error report for type 5 error -117 [ 475.998427][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.015612][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.047099][ T7133] loop3: detected capacity change from 0 to 512 [ 476.072843][ T7133] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 476.073206][ T7010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.087729][ T7133] EXT4-fs (loop3): mount failed [ 476.104038][ T7125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.116656][ T4909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 476.127283][ T7125] FAULT_INJECTION: forcing a failure. [ 476.127283][ T7125] name failslab, interval 1, probability 0, space 0, times 0 [ 476.162149][ T7125] CPU: 0 UID: 0 PID: 7125 Comm: syz.5.5546 Tainted: G W syzkaller #0 PREEMPT(full) [ 476.162183][ T7125] Tainted: [W]=WARN [ 476.162190][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 476.162203][ T7125] Call Trace: [ 476.162210][ T7125] [ 476.162218][ T7125] __dump_stack+0x1d/0x30 [ 476.162243][ T7125] dump_stack_lvl+0x95/0xd0 [ 476.162265][ T7125] dump_stack+0x15/0x1b [ 476.162309][ T7125] should_fail_ex+0x263/0x280 [ 476.162333][ T7125] ? cgroup_show_path+0x6a/0x2b0 [ 476.162361][ T7125] should_failslab+0x8c/0xb0 [ 476.162392][ T7125] __kmalloc_cache_noprof+0x5f/0x410 [ 476.162458][ T7125] ? __pfx_cgroup_show_path+0x10/0x10 [ 476.162482][ T7125] cgroup_show_path+0x6a/0x2b0 [ 476.162552][ T7125] ? kernfs_sop_show_path+0xa4/0xf0 [ 476.162606][ T7125] ? __pfx_cgroup_show_path+0x10/0x10 [ 476.162633][ T7125] kernfs_sop_show_path+0xb6/0xf0 [ 476.162650][ T7125] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 476.162670][ T7125] show_path+0x5a/0x80 [ 476.162727][ T7125] show_mountinfo+0xe5/0x690 [ 476.162749][ T7125] m_show+0x3e/0x50 [ 476.162772][ T7125] traverse+0x149/0x3a0 [ 476.162828][ T7125] seq_lseek+0xb5/0x170 [ 476.162848][ T7125] __x64_sys_lseek+0xe8/0x160 [ 476.162911][ T7125] x64_sys_call+0x27ec/0x3020 [ 476.162932][ T7125] do_syscall_64+0x12c/0x370 [ 476.162950][ T7125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.162971][ T7125] RIP: 0033:0x7f48fb0dc629 [ 476.163045][ T7125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.163060][ T7125] RSP: 002b:00007f48f9b37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 476.163127][ T7125] RAX: ffffffffffffffda RBX: 00007f48fb355fa0 RCX: 00007f48fb0dc629 [ 476.163143][ T7125] RDX: 0000000000000000 RSI: 000000000000fffd RDI: 0000000000000004 [ 476.163157][ T7125] RBP: 00007f48f9b37090 R08: 0000000000000000 R09: 0000000000000000 [ 476.163170][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.163184][ T7125] R13: 00007f48fb356038 R14: 00007f48fb355fa0 R15: 00007ffdcf679768 [ 476.163227][ T7125] [ 476.312400][ T7010] hsr_slave_0: entered promiscuous mode [ 476.353645][ T7147] loop6: detected capacity change from 0 to 128 [ 476.376649][ T7010] hsr_slave_1: entered promiscuous mode [ 476.401094][ T7010] debugfs: 'hsr0' already exists in 'hsr' [ 476.405141][ T7147] msdos: Unknown parameter '000000000000000000000030x0000000000000003ÿÿÿÿ' [ 476.409195][ T7010] Cannot create hsr debugfs directory [ 476.416352][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.755425][ T7147] loop6: detected capacity change from 0 to 512 [ 476.799475][ T7147] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 476.825986][ T7147] EXT4-fs (loop6): orphan cleanup on readonly fs [ 476.834644][ T7147] EXT4-fs error (device loop6): ext4_quota_enable:7190: comm syz.6.5548: Bad quota inum: 1, type: 1 [ 476.870827][ T7147] loop6: lost filesystem error report for type 5 error -117 [ 476.876621][ T7147] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=1). Please run e2fsck to fix. [ 476.898596][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 476.898616][ C0] EXT4-fs (loop6): initial error at time 1771373933: ext4_quota_enable:7190 [ 476.898653][ C0] EXT4-fs (loop6): last error at time 1771373933: ext4_quota_enable:7190 [ 476.915177][ T28] audit: type=1400 audit(1771373933.457:8917): avc: denied { setopt } for pid=7190 comm="syz.8.5557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 476.946266][ T7147] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 476.953462][ T7147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 476.974010][ T7147] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5548'. [ 477.051996][ T7209] batadv_slave_0: Caught tx_queue_len zero misconfig [ 477.101424][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5565'. [ 477.127017][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5565'. [ 477.136229][ T7010] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 477.163094][ T4909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.204803][ T7010] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 477.209081][ T7227] loop6: detected capacity change from 0 to 512 [ 477.217134][ T28] audit: type=1400 audit(1771373933.787:8918): avc: denied { create } for pid=7224 comm="syz.6.5567" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 477.266855][ T7227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.300108][ T7227] ext4 filesystem being mounted at /bus supports timestamps until 2038-01-19 (0x7fffffff) [ 477.343678][ T7010] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 477.396437][ T7227] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.418797][ T7010] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 477.626955][ T7010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.647309][ T7010] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.657717][T19004] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.664770][T19004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.680491][ T7269] loop6: detected capacity change from 0 to 512 [ 477.694012][ T5659] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.701188][ T5659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.716225][ T7269] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 477.730832][ T7269] EXT4-fs (loop6): mount failed [ 477.746608][ T7010] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 477.757290][ T7010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 477.998726][ T7010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.103239][ T7313] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5579'. [ 478.183547][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5580'. [ 478.237116][ T7010] veth0_vlan: entered promiscuous mode [ 478.251890][ T7010] veth1_vlan: entered promiscuous mode [ 478.267399][ T7334] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 478.279804][ T7334] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 478.304928][ T7010] veth0_macvtap: entered promiscuous mode [ 478.313624][ T7010] veth1_macvtap: entered promiscuous mode [ 478.348455][ T7346] macvlan2: entered promiscuous mode [ 478.362438][ T7346] macvlan2: entered allmulticast mode [ 478.368995][ T7346] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 478.391856][ T7010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.418434][ T7010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.452153][ T7363] pimreg: entered allmulticast mode [ 478.460757][ T2239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.473808][ T2239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.493228][ T2239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.501538][ T7371] loop3: detected capacity change from 0 to 512 [ 478.506336][ T2239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.551620][ T7371] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 478.566965][ T7371] EXT4-fs (loop3): mount failed [ 478.590702][ T7381] __nla_validate_parse: 1 callbacks suppressed [ 478.590715][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5590'. [ 478.670848][ T7389] netlink: 'syz.6.5592': attribute type 15 has an invalid length. [ 478.681248][ T7389] netlink: 25 bytes leftover after parsing attributes in process `syz.6.5592'. [ 478.721479][ T7385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.768424][ T7398] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5521'. [ 478.798850][ T7385] EXT4-fs error (device loop5): __ext4_find_entry:1615: inode #2: comm syz.5.5591: reading directory lblock 0 [ 478.834838][ T7385] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 478.845038][ T7385] EXT4-fs (loop5): I/O error while writing superblock [ 478.853493][ T7409] Symlink component flag not implemented [ 478.859491][ T7409] Symlink component flag not implemented (15) [ 478.890707][ T7385] EXT4-fs error (device loop5): ext4_get_inode_loc:4920: inode #18: block 6: comm syz.5.5591: unable to read itable block [ 478.942489][ T7413] EXT4-fs error (device loop5): __ext4_find_entry:1615: inode #2: comm syz.5.5591: reading directory lblock 0 [ 478.948144][ T7418] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 478.971863][ T7413] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 478.986282][ T7418] JBD2: no valid journal superblock found [ 479.010283][ T7426] pimreg: entered allmulticast mode [ 479.019330][ T7418] EXT4-fs (loop6): Could not load journal inode [ 479.040769][ T7413] EXT4-fs (loop5): I/O error while writing superblock [ 479.040783][ T7385] EXT4-fs (loop5): previous I/O error to superblock detected [ 479.083496][ T7440] tmpfs: Unknown parameter 'ÿÿÿÿ' [ 479.087111][ T7385] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 479.119555][ T7385] EXT4-fs (loop5): I/O error while writing superblock [ 479.140880][ T7385] EXT4-fs error (device loop5): ext4_get_inode_loc:4920: inode #18: block 6: comm syz.5.5591: unable to read itable block [ 479.156034][ T7385] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 479.164450][ T7385] EXT4-fs (loop5): I/O error while writing superblock [ 479.200147][ T7385] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: IO failure [ 479.214284][ T7385] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 479.222840][ T7385] EXT4-fs (loop5): I/O error while writing superblock [ 479.228450][ T7453] set_capacity_and_notify: 4 callbacks suppressed [ 479.228464][ T7453] loop6: detected capacity change from 0 to 8192 [ 479.230451][ T7385] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #18: comm syz.5.5591: mark_inode_dirty error [ 479.254530][ T7385] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 479.267992][ T7385] EXT4-fs (loop5): I/O error while writing superblock [ 479.288832][ T7453] loop6: p1 < > p2 < > p3 p4 < > [ 479.293759][ T7385] EXT4-fs error (device loop5): ext4_get_inode_loc:4920: inode #18: block 6: comm syz.5.5591: unable to read itable block [ 479.306075][ T7453] loop6: partition table partially beyond EOD, truncated [ 479.317766][ T7453] loop6: p1 start 67108864 is beyond EOD, truncated [ 479.323997][ T7465] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 479.345074][ T7453] loop6: p3 start 100859904 is beyond EOD, truncated [ 479.367506][ T7385] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 479.404040][ T7385] EXT4-fs (loop5): I/O error while writing superblock [ 479.418543][ T7385] EXT4-fs error (device loop5): ext4_get_max_inline_size:121: inode #18: comm syz.5.5591: can't get inode location 18 [ 479.431735][ T7385] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 479.441275][ T7385] EXT4-fs (loop5): I/O error while writing superblock [ 479.454970][ T7385] EXT4-fs error (device loop5): ext4_get_inode_loc:4920: inode #18: block 6: comm syz.5.5591: unable to read itable block [ 479.476000][ T7385] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 479.493474][ T7385] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: IO failure [ 479.540598][ T7385] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 479.652294][T26845] udevd[26845]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 479.664456][T27189] udevd[27189]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 479.868236][ T7520] loop4: detected capacity change from 0 to 512 [ 479.891010][ T7520] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5622'. [ 479.924762][ T7522] loop6: detected capacity change from 0 to 512 [ 479.957648][ T7520] netlink: 'syz.4.5622': attribute type 4 has an invalid length. [ 479.966402][ T7522] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 479.981142][ T7522] EXT4-fs (loop6): mount failed [ 479.981625][ T7520] netlink: 'syz.4.5622': attribute type 4 has an invalid length. [ 480.021870][ T9605] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.035289][ T9605] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.155937][ T9605] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.174373][ T9605] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.207062][ T9605] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.241319][ T9605] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.254143][ T7551] loop4: detected capacity change from 0 to 1024 [ 480.280721][ T7551] EXT4-fs: Ignoring removed orlov option [ 480.294792][ T7551] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 480.307329][ T9605] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.319619][ T9605] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.337321][ T7551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.404579][ T9605] bridge_slave_1: left allmulticast mode [ 480.424433][ T7010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.434622][ T9605] bridge_slave_1: left promiscuous mode [ 480.442800][ T9605] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.472236][ T9605] bridge_slave_0: left allmulticast mode [ 480.478422][ T9605] bridge_slave_0: left promiscuous mode [ 480.494125][ T9605] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.667579][ T9605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.678016][ T9605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.688320][ T9605] bond0 (unregistering): Released all slaves [ 480.771989][ T9605] hsr_slave_0: left promiscuous mode [ 480.792901][ T9605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.834360][ T9605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.845188][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 480.845203][ T28] audit: type=1400 audit(1771373937.427:8929): avc: denied { getopt } for pid=7612 comm="syz.3.5639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 480.876909][ T9605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.884292][ T9605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.891297][ T28] audit: type=1400 audit(1771373937.447:8930): avc: denied { ioctl } for pid=7621 comm="syz.4.5641" path="socket:[86190]" dev="sockfs" ino=86190 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 480.932042][ T9605] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 480.941780][ T7608] loop6: detected capacity change from 0 to 512 [ 480.949020][ T9605] batman_adv: batadv0: Removing interface: ipvlan2 [ 480.959632][ T7608] EXT4-fs: Ignoring removed nobh option [ 480.971696][ T9605] veth1_macvtap: left promiscuous mode [ 480.977369][ T9605] veth0_macvtap: left promiscuous mode [ 480.983242][ T9605] veth1_vlan: left allmulticast mode [ 480.989450][ T9605] veth1_vlan: left promiscuous mode [ 480.994776][ T9605] veth0_vlan: left promiscuous mode [ 481.006004][ T7608] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 481.031340][ T7608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 481.047078][ T7608] EXT4-fs (loop6): orphan cleanup on readonly fs [ 481.066116][ T7608] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.5638: attempt to clear invalid blocks 1024 len 1 [ 481.087241][ T7608] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 481.087430][ T7608] EXT4-fs (loop6): Remounting filesystem read-only [ 481.096601][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 481.096628][ C1] EXT4-fs (loop6): initial error at time 1771373937: ext4_clear_blocks:876: inode 11 [ 481.096671][ C1] EXT4-fs (loop6): last error at time 1771373937: ext4_clear_blocks:876: inode 11 [ 481.130210][ T9605] pimreg (unregistering): left allmulticast mode [ 481.131692][ T7608] EXT4-fs (loop6): 1 truncate cleaned up [ 481.147446][ T7608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 481.170490][ T9605] team0 (unregistering): Port device macvlan1 removed [ 481.191978][ T9605] team0 (unregistering): Port device team_slave_1 removed [ 481.201123][ T9605] team0 (unregistering): Port device team_slave_0 removed [ 481.296685][ T7552] chnl_net:caif_netlink_parms(): no params data found [ 481.389699][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.396908][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.404079][ T7552] bridge_slave_0: entered allmulticast mode [ 481.411254][ T7552] bridge_slave_0: entered promiscuous mode [ 481.418268][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.425452][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.432625][ T7552] bridge_slave_1: entered allmulticast mode [ 481.440217][ T7552] bridge_slave_1: entered promiscuous mode [ 481.465262][ T7552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.481815][ T7552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.513799][ T7552] team0: Port device team_slave_0 added [ 481.521006][ T7552] team0: Port device team_slave_1 added [ 481.535145][ T7681] pimreg: entered allmulticast mode [ 481.547001][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.553964][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.581064][ T7552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.592732][ T7681] pimreg: left allmulticast mode [ 481.601271][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.609077][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.636106][ T7552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.659813][ T4909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 481.681134][ T7552] hsr_slave_0: entered promiscuous mode [ 481.689506][ T7552] hsr_slave_1: entered promiscuous mode [ 481.697219][ T7552] debugfs: 'hsr0' already exists in 'hsr' [ 481.702934][ T7552] Cannot create hsr debugfs directory [ 481.709732][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.716964][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.827302][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5660'. [ 481.885673][ T7717] loop3: detected capacity change from 0 to 512 [ 481.903579][ T7717] EXT4-fs: Ignoring removed bh option [ 481.918606][ T7717] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 482.005922][ T7717] EXT4-fs (loop3): 1 truncate cleaned up [ 482.014063][ T7717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.036484][ T7739] syz_tun: entered allmulticast mode [ 482.043326][ T7739] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 482.086944][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5659'. [ 482.207272][ T28] audit: type=1400 audit(1771373938.797:8931): avc: denied { map } for pid=7715 comm="syz.3.5659" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 482.286649][ T7717] random: crng reseeded on system resumption [ 482.463205][ T28] audit: type=1400 audit(1771373938.797:8932): avc: denied { execute } for pid=7715 comm="syz.3.5659" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 482.524600][ T7552] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 482.542710][ T28] audit: type=1400 audit(1771373938.797:8933): avc: denied { reparent } for pid=7715 comm="syz.3.5659" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 482.567231][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.585000][ T28] audit: type=1400 audit(1771373938.797:8934): avc: denied { add_name } for pid=7715 comm="syz.3.5659" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 482.589024][ T7552] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 482.641522][ T28] audit: type=1400 audit(1771373938.877:8935): avc: denied { write } for pid=7715 comm="syz.3.5659" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 482.644196][ T7552] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 482.672225][ T7767] nfs4: Bad value for 'source' [ 482.692928][ T28] audit: type=1400 audit(1771373938.877:8936): avc: denied { open } for pid=7715 comm="syz.3.5659" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 482.721578][ T28] audit: type=1400 audit(1771373939.277:8937): avc: denied { ioctl } for pid=7743 comm="syz.8.5667" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86352 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 482.750615][ T7552] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 482.766450][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5671'. [ 482.833721][ T28] audit: type=1400 audit(1771373939.417:8938): avc: denied { ioctl } for pid=7766 comm="syz.3.5671" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 482.943225][ T7797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5676'. [ 482.956856][ T7800] loop6: detected capacity change from 0 to 512 [ 483.006917][ T7800] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.5675: corrupted inode contents [ 483.019120][ T7552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.033285][ T7552] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.045984][ T7800] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 483.046129][ T7800] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #3: comm syz.6.5675: mark_inode_dirty error [ 483.055190][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 483.055224][ C0] EXT4-fs (loop6): initial error at time 1771373939: ext4_do_update_inode:5569: inode 3 [ 483.055252][ C0] EXT4-fs (loop6): last error at time 1771373939: ext4_do_update_inode:5569: inode 3 [ 483.098905][ T7800] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 483.103615][ T5659] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.119756][ T5659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.131888][ T7800] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #3: comm syz.6.5675: corrupted inode contents [ 483.160013][ T7800] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 483.160197][ T7800] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.5675: mark_inode_dirty error [ 483.193756][ T5659] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.200821][ T5659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.210797][ T7800] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 483.211359][ T7800] EXT4-fs error (device loop6): ext4_acquire_dquot:7003: comm syz.6.5675: Failed to acquire dquot type 0 [ 483.236962][ T7800] loop6: lost filesystem error report for type 5 error -117 [ 483.237780][ T7800] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.5675: corrupted inode contents [ 483.275037][ T7800] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 483.275167][ T7800] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #16: comm syz.6.5675: mark_inode_dirty error [ 483.297346][ T7800] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 483.298193][ T7800] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.5675: corrupted inode contents [ 483.312706][ T7552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.320868][ T7800] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 483.328027][ T7800] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.5675: mark_inode_dirty error [ 483.360460][ T7800] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 483.360684][ T7800] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.5675: corrupted inode contents [ 483.392046][ T7800] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 483.392505][ T7800] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 483.428812][ T7800] loop6: lost filesystem error report for type 5 error -117 [ 483.429921][ T7800] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.5675: corrupted inode contents [ 483.460145][ T7800] EXT4-fs error (device loop6): ext4_truncate:4587: inode #16: comm syz.6.5675: mark_inode_dirty error [ 483.485602][ T7800] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 483.507616][ T7800] loop6: lost filesystem error report for type 5 error -117 [ 483.508110][ T7800] EXT4-fs (loop6): 1 truncate cleaned up [ 483.528060][ T7800] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.550692][ T7800] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.583294][ T7790] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #3: comm syz.6.5675: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 483.583294][ T7790] [ 483.608310][ T7790] EXT4-fs error (device loop6): ext4_empty_dir:3118: inode #12: block 13: comm syz.6.5675: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 483.636338][ T7800] netlink: 71 bytes leftover after parsing attributes in process `syz.6.5675'. [ 483.702001][ T4909] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.754099][ T7552] veth0_vlan: entered promiscuous mode [ 483.761164][ T9605] EXT4-fs error (device loop6): ext4_release_dquot:7039: comm kworker/u8:15: Failed to release dquot type 1 [ 483.783340][ T7552] veth1_vlan: entered promiscuous mode [ 483.789648][ T9605] loop6: lost filesystem error report for type 5 error -117 [ 483.816884][ T7875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5683'. [ 483.828786][ T7552] veth0_macvtap: entered promiscuous mode [ 483.843021][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5683'. [ 483.854006][ T7552] veth1_macvtap: entered promiscuous mode [ 483.872905][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.897499][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.927103][ T7881] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7881 comm=syz.6.5684 [ 484.122645][ T5656] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.168821][ T5656] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.190006][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.208233][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.237207][ T7902] loop3: detected capacity change from 0 to 8192 [ 484.302066][ T7913] netlink: 176 bytes leftover after parsing attributes in process `syz.8.5688'. [ 484.338415][ T7923] loop4: detected capacity change from 0 to 512 [ 484.356333][ T7923] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 484.371784][ T7923] EXT4-fs (loop4): mount failed [ 484.381746][ T7925] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5624'. [ 484.391510][ T7925] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5624'. [ 484.823678][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5698'. [ 484.833136][ T7979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5698'. [ 484.847016][ T7979] lo speed is unknown, defaulting to 1000 [ 484.852860][ T7979] lo speed is unknown, defaulting to 1000 [ 484.858927][ T7979] lo speed is unknown, defaulting to 1000 [ 484.878426][ T7979] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 484.889222][ T7979] lo speed is unknown, defaulting to 1000 [ 484.898370][ T7979] lo speed is unknown, defaulting to 1000 [ 484.908718][ T7979] lo speed is unknown, defaulting to 1000 [ 484.920714][ T7979] lo speed is unknown, defaulting to 1000 [ 484.932940][ T7979] lo speed is unknown, defaulting to 1000 [ 484.940019][ T7979] lo speed is unknown, defaulting to 1000 [ 484.948491][ T7979] lo speed is unknown, defaulting to 1000 [ 484.957673][ T7979] lo speed is unknown, defaulting to 1000 [ 484.968438][ T7979] lo speed is unknown, defaulting to 1000 [ 484.977616][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5698'. [ 484.987867][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5698'. [ 485.020984][ T8012] netlink: 'syz.8.5701': attribute type 15 has an invalid length. [ 485.296639][ T8061] loop4: detected capacity change from 0 to 512 [ 485.316812][ T8061] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 485.332159][ T8061] EXT4-fs (loop4): mount failed [ 485.580496][ T8071] lo speed is unknown, defaulting to 1000 [ 485.693384][ T8075] netlink: 'syz.3.5715': attribute type 11 has an invalid length. [ 485.996797][ T8101] lo speed is unknown, defaulting to 1000 [ 486.002540][ T8101] lo speed is unknown, defaulting to 1000 [ 486.026947][ T8101] lo speed is unknown, defaulting to 1000 [ 486.040103][ T8101] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 486.067320][ T8101] lo speed is unknown, defaulting to 1000 [ 486.075445][ T8101] lo speed is unknown, defaulting to 1000 [ 486.081675][ T8106] loop3: detected capacity change from 0 to 1024 [ 486.084270][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 486.084283][ T28] audit: type=1400 audit(1771373942.668:8941): avc: denied { lock } for pid=8111 comm="syz.8.5731" path="socket:[86874]" dev="sockfs" ino=86874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 486.088620][ T8101] lo speed is unknown, defaulting to 1000 [ 486.095595][ T8106] EXT4-fs: Ignoring removed orlov option [ 486.123808][ T8101] lo speed is unknown, defaulting to 1000 [ 486.137094][ T8106] EXT4-fs: Ignoring removed nobh option [ 486.144111][ T28] audit: type=1400 audit(1771373942.728:8942): avc: denied { read } for pid=8109 comm="syz.7.5730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 486.150068][ T8101] lo speed is unknown, defaulting to 1000 [ 486.208361][ T8101] lo speed is unknown, defaulting to 1000 [ 486.226796][ T8101] lo speed is unknown, defaulting to 1000 [ 486.238432][ T8106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.242994][ T8101] lo speed is unknown, defaulting to 1000 [ 486.275857][ T8127] random: crng reseeded on system resumption [ 486.313355][ T8130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8130 comm=syz.7.5736 [ 486.335259][ T8101] lo speed is unknown, defaulting to 1000 [ 486.360561][ T8106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.441159][ T28] audit: type=1400 audit(1771373943.028:8943): avc: denied { read } for pid=8135 comm="syz.6.5739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 486.464370][ T8106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.518171][ T28] audit: type=1326 audit(1771373943.108:8944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.4.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9bf3c629 code=0x7ffc0000 [ 486.551958][ T28] audit: type=1326 audit(1771373943.138:8945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.4.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f9f9bf3c629 code=0x7ffc0000 [ 486.582888][ T28] audit: type=1326 audit(1771373943.138:8946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.4.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9bf3c629 code=0x7ffc0000 [ 486.669797][ T28] audit: type=1326 audit(1771373943.138:8947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.4.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f9bf3c629 code=0x7ffc0000 [ 486.702484][ T28] audit: type=1326 audit(1771373943.138:8948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.4.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9bf3c629 code=0x7ffc0000 [ 486.818153][ T28] audit: type=1326 audit(1771373943.138:8949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.4.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9f9bf3c629 code=0x7ffc0000 [ 486.883248][ T28] audit: type=1326 audit(1771373943.138:8950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.4.5740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f9bf3c629 code=0x7ffc0000 [ 486.903111][ T40] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.927009][ T40] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.944447][ T40] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.992784][ T40] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.001739][ T8157] random: crng reseeded on system resumption [ 487.163949][ T8169] pimreg: entered allmulticast mode [ 487.186241][ T8169] pimreg: left allmulticast mode [ 487.296395][ T8165] loop4: detected capacity change from 0 to 512 [ 487.336164][ T8165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.374195][ T8165] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 487.597899][ T7010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.722383][ T8199] loop7: detected capacity change from 0 to 8192 [ 487.753220][ T8202] loop4: detected capacity change from 0 to 128 [ 487.899967][ T8199] ================================================================== [ 487.908089][ T8199] BUG: KCSAN: data-race in fat12_ent_put / fat_mirror_bhs [ 487.915217][ T8199] [ 487.917534][ T8199] write to 0xffff888105c08419 of 1 bytes by task 8204 on cpu 1: [ 487.925161][ T8199] fat12_ent_put+0x74/0x170 [ 487.929661][ T8199] fat_ent_write+0x6c/0xe0 [ 487.934082][ T8199] fat_chain_add+0x16c/0x490 [ 487.938683][ T8199] fat_get_block+0x46c/0x5e0 [ 487.943277][ T8199] __block_write_begin_int+0x400/0xf90 [ 487.945864][ T8205] program syz.7.5765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 487.948742][ T8199] cont_write_begin+0x5fe/0x970 [ 487.962745][ T8199] fat_write_begin+0x4f/0xe0 [ 487.967342][ T8199] cont_write_begin+0x1b0/0x970 [ 487.972194][ T8199] fat_write_begin+0x4f/0xe0 [ 487.976785][ T8199] generic_cont_expand_simple+0xb0/0x150 [ 487.982411][ T8199] fat_cont_expand+0x3e/0x170 [ 487.987076][ T8199] fat_setattr+0x2a4/0x870 [ 487.991497][ T8199] notify_change+0x872/0x8f0 [ 487.996113][ T8199] do_ftruncate+0x349/0x3d0 [ 488.000623][ T8199] __x64_sys_ftruncate+0x68/0xc0 [ 488.005566][ T8199] x64_sys_call+0x2beb/0x3020 [ 488.010247][ T8199] do_syscall_64+0x12c/0x370 [ 488.014834][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.020721][ T8199] [ 488.023035][ T8199] read to 0xffff888105c08400 of 512 bytes by task 8199 on cpu 0: [ 488.030743][ T8199] fat_mirror_bhs+0x1df/0x320 [ 488.035427][ T8199] fat_alloc_clusters+0xb48/0xc50 [ 488.040452][ T8199] fat_get_block+0x258/0x5e0 [ 488.045034][ T8199] __block_write_begin_int+0x400/0xf90 [ 488.045347][ T8206] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 488.050491][ T8199] cont_write_begin+0x5fe/0x970 [ 488.050516][ T8199] fat_write_begin+0x4f/0xe0 [ 488.067420][ T8199] generic_perform_write+0x183/0x490 [ 488.072708][ T8199] __generic_file_write_iter+0x9e/0x120 [ 488.078257][ T8199] generic_file_write_iter+0x8d/0x310 [ 488.083635][ T8199] vfs_write+0x5a6/0x9f0 [ 488.087877][ T8199] ksys_write+0xdc/0x1a0 [ 488.092126][ T8199] __x64_sys_write+0x40/0x50 [ 488.096721][ T8199] x64_sys_call+0x27e1/0x3020 [ 488.098367][ T8206] FAT-fs (loop7): Filesystem has been set read-only [ 488.101402][ T8199] do_syscall_64+0x12c/0x370 [ 488.112547][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.118439][ T8199] [ 488.120754][ T8199] Reported by Kernel Concurrency Sanitizer on: [ 488.126900][ T8199] CPU: 0 UID: 0 PID: 8199 Comm: syz.7.5765 Tainted: G W syzkaller #0 PREEMPT(full) [ 488.137747][ T8199] Tainted: [W]=WARN [ 488.141538][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.151581][ T8199] ================================================================== [ 488.209767][ T8199] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 488.233018][ T8205] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 488.265439][ T8199] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 488.347670][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.