last executing test programs: 1m56.024811812s ago: executing program 0 (id=18): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704700001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 1m54.748408136s ago: executing program 0 (id=28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYBLOB], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) shutdown(r0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r2, 0xd44, 0x44c1, 0x7, 0x0, 0x0) shutdown(r0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004500)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}}, @NFT_MSG_DELRULE={0x18, 0x8, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x4}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x1) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x12002) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1m54.15971805s ago: executing program 0 (id=36): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x15, 0x0, &(0x7f0000001600)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) getsockopt$packet_int(r2, 0x107, 0x15, 0x0, &(0x7f0000001600)) (async) 1m54.061181696s ago: executing program 0 (id=37): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x20, 0x0, 0xf0}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0xbea4fc69cfdbc2a6}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = getpgid(0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x1000, 0xfffffffffffffeff}, 0x102013, 0x0, 0x7, 0x7, 0x3, 0x8d5e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r8, 0x0, r7, 0x0, 0x6, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r9 = syz_pidfd_open(r6, 0x0) pidfd_getfd(r9, r9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 1m52.593278232s ago: executing program 0 (id=49): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) close(r0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x521, &(0x7f0000000980)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140), 0x1, 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e24, @private=0xa010100}, 0xa) syz_init_net_socket$llc(0x1a, 0x1, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 1m52.313329977s ago: executing program 0 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000180001000000000000000000020080000000ff0500000000060015000200000014001681100008000c00018006000100000a1b00"], 0x38}}, 0x0) (async) unshare(0x8040480) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async, rerun: 32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x4, 0x5, [0xc, 0xfbff, 0x1000, 0x9, 0xac58]}, &(0x7f0000000300)=0x12) (rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={r4, @in={{0x2, 0x4e23, @local}}, 0x0, 0xba3, 0xe53a, 0xbc1, 0x45, 0x5, 0x9}, &(0x7f0000000340)=0x9c) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x6c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) finit_module(r1, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x55, &(0x7f0000000140)=ANY=[@ANYBLOB="18f70000000000000000000000000000000000000000000000000000000000005357019b14e1963a3da1e91f28b60f24eaa87da3217f2cf3ab49bfa32e94d78bdf7d4f592057a8ccb1fdbee26ff7ba93b6ed0edd4994c4707616e6fe81cb83a00d6966e810c3fcab10e758b880242b5aa2bb737ef05d31a0f613b332a1672a6d3d5be94467019d63773d775046e5b4388cba4fb0da6459bfb7fbdb6a45f3f9e6ba56c1b662"], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffffb6, 0x0, 0x0, 0x12, '\x00', 0x0, 0x24}, 0x94) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) (async, rerun: 32) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (rerun: 32) ftruncate(r10, 0x100) (async) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) getsockopt$sock_int(r10, 0x1, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) quotactl_fd$Q_QUOTAOFF(r0, 0x1, r9, 0x0) 1m52.298040929s ago: executing program 32 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000180001000000000000000000020080000000ff0500000000060015000200000014001681100008000c00018006000100000a1b00"], 0x38}}, 0x0) (async) unshare(0x8040480) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async, rerun: 32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x4, 0x5, [0xc, 0xfbff, 0x1000, 0x9, 0xac58]}, &(0x7f0000000300)=0x12) (rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={r4, @in={{0x2, 0x4e23, @local}}, 0x0, 0xba3, 0xe53a, 0xbc1, 0x45, 0x5, 0x9}, &(0x7f0000000340)=0x9c) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x6c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r7, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) finit_module(r1, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x55, &(0x7f0000000140)=ANY=[@ANYBLOB="18f70000000000000000000000000000000000000000000000000000000000005357019b14e1963a3da1e91f28b60f24eaa87da3217f2cf3ab49bfa32e94d78bdf7d4f592057a8ccb1fdbee26ff7ba93b6ed0edd4994c4707616e6fe81cb83a00d6966e810c3fcab10e758b880242b5aa2bb737ef05d31a0f613b332a1672a6d3d5be94467019d63773d775046e5b4388cba4fb0da6459bfb7fbdb6a45f3f9e6ba56c1b662"], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffffb6, 0x0, 0x0, 0x12, '\x00', 0x0, 0x24}, 0x94) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) (async, rerun: 32) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (rerun: 32) ftruncate(r10, 0x100) (async) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) getsockopt$sock_int(r10, 0x1, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) quotactl_fd$Q_QUOTAOFF(r0, 0x1, r9, 0x0) 1m38.443573522s ago: executing program 2 (id=168): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000921) read(r0, 0x0, 0x20) close(r0) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) socket$inet6(0xa, 0xa, 0x7c) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x80000000c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 1m38.267042552s ago: executing program 2 (id=171): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r0, 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) 1m38.197565236s ago: executing program 2 (id=172): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/udp\x00') preadv(r2, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/204, 0xcc}], 0x1, 0x101, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r5, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff8}]}]}, 0x50}}, 0x0) 1m38.194148626s ago: executing program 2 (id=173): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0xfffffff9, 0x4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/137, 0x89}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/23, 0x17}, 0x80}], 0x2, 0x45833af92e4b39ff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000140)="54c11dc7047af229616f84c1734b80d2522dbcd492f1ad1732f64c9f775c1334ab9386f2ceed3af4e64a24a9571acf4ee39ad3def422845ed60098088bb78e99a25215601b0b724a5d2b8e552cd357b017", 0x51, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000300)={{0xffffffffffffffff, &(0x7f0000000180)=')*\x00', 0x802, &(0x7f00000001c0)={@_ha_fsid={[0x734, 0x81]}, {0x7cb, 0x1, 0x3, 0x1}}, 0x400, &(0x7f0000000240), &(0x7f0000000280)=0xe4}, {[0x3ff, 0x8, 0x344, 0x4]}, 0x10001, 0x19, &(0x7f00000002c0)=""/25}) recvmsg$unix(r2, &(0x7f0000000580)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000480)=""/15, 0xf}, {&(0x7f00000004c0)=""/57, 0x39}, {&(0x7f0000000600)=""/199, 0xc7}, {&(0x7f0000001740)=""/205, 0xcd}], 0x5, &(0x7f0000001e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x2000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000100)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") 1m37.642985348s ago: executing program 2 (id=177): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00002500bfa200000000000007020000f8ffffffb703000008000000b7040000610cc0f520ca0133c4eb8b2af13b000000008500"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r0) 1m36.725630431s ago: executing program 2 (id=191): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) (async) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8b101a, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000082d0e6"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000580)="120000001200e7ef007b00000000000000a1", 0x3e, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400018102000000ac14140f000000000000000014000200020000006401010000000000000000000d0001007564703a73"], 0x54}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000002040)=""/94, 0x5e}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000001fc0)=""/84, 0x54}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x4000000000000f8, 0x0, &(0x7f0000003700)={0x77359400}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5916}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) 1m36.633258507s ago: executing program 33 (id=191): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) (async) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8b101a, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000082d0e6"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000580)="120000001200e7ef007b00000000000000a1", 0x3e, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400018102000000ac14140f000000000000000014000200020000006401010000000000000000000d0001007564703a73"], 0x54}}, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000002040)=""/94, 0x5e}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000001fc0)=""/84, 0x54}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x4000000000000f8, 0x0, &(0x7f0000003700)={0x77359400}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5916}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) 1m29.299164632s ago: executing program 3 (id=244): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7b1, &(0x7f0000001640)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x3, 0x0, &(0x7f0000001600)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xcb45, 0x1, 0x2, 0x29a}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xb0) 1m28.880000726s ago: executing program 3 (id=253): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sched_setscheduler(r0, 0x3, &(0x7f00000000c0)=0x7) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setpriority(0x1, r0, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) ioctl$TIOCMBIC(r3, 0x5417, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 1m27.982007508s ago: executing program 3 (id=259): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nodioread_nolock}, {@quota}]}, 0x1, 0x51b, &(0x7f00000008c0)="$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") ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$RTC_UIE_OFF(r1, 0x7004) 1m27.807471878s ago: executing program 3 (id=264): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000, r0}, 0x18) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x6, 0x26240) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000002c0)={0xca, ""/202}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d290b37ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) 1m27.573783642s ago: executing program 3 (id=267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYBLOB], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) shutdown(r0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r2, 0xd44, 0x44c1, 0x7, 0x0, 0x0) shutdown(r0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004500)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x18, 0x8, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x4}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x1) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x12002) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) 1m27.022441624s ago: executing program 3 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000040)={0x200000, 0x84202003, 0xdb, 0x0, 0x20400003, 0x7}) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 1m26.987414656s ago: executing program 34 (id=275): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000040)={0x200000, 0x84202003, 0xdb, 0x0, 0x20400003, 0x7}) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 13.929103582s ago: executing program 4 (id=927): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x18, 0x1, 0x0) r4 = syz_io_uring_setup(0x4f3, &(0x7f0000000380)={0x0, 0x486e, 0x80, 0x2, 0x167}, &(0x7f0000001040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) add_key(&(0x7f0000000140)='asymmetric\x00', 0x0, &(0x7f00000003c0)="3005dfb68c729c", 0x7, r0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 6.1998855s ago: executing program 4 (id=975): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd={0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x7000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0xfffffdfc}]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048}, 0x20000150) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000100)) move_pages(0x0, 0x5, &(0x7f0000000140)=[&(0x7f00003af000/0x1000)=nil, &(0x7f00008a2000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000870000/0x2000)=nil], &(0x7f0000000180)=[0x1], 0x0, 0x4) 4.737368725s ago: executing program 4 (id=1001): socket$inet(0x2, 0x3, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1000000, &(0x7f0000000040)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000180)={[{@noswap}, {@inode32}]}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="f8000000160001002bbd700001dcdf25fe8000000000000000000000000000bbfe8800000000000000000000000001014e2300004e2400000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b507000000000000000000000000000006000000000000000900000000000000faffffffffffffffffffffff000000000300000000000000020000000000000002000000000020000100000000000100f9ffffff2abd700000000000020002060100000000000000070000004f070000"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x39000, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f10c0, 0x43) futimesat(r6, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={{0x0, 0xea60}}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x2, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r7, &(0x7f0000000500)='limits\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.857370387s ago: executing program 7 (id=1004): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = io_uring_setup(0x3f1, &(0x7f0000000140)={0x0, 0x3, 0x3000}) poll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0x3, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x1c, 0x10, 0x1, 0x1, {0x3, 0x23, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) io_uring_setup(0x3f1, &(0x7f0000000140)={0x0, 0x3, 0x3000}) (async) poll(&(0x7f0000000080)=[{r0, 0x200}], 0x1, 0x6) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0x3, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x1c, 0x10, 0x1, 0x1, {0x3, 0x23, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) (async) 3.541407215s ago: executing program 7 (id=1008): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x2, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 3.385657474s ago: executing program 7 (id=1010): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x42, 0xa01, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x2, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x20, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000084) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x802, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d366f1a5e09021f3ab7c8f8176e17a665e8fce8d5cf34d0b84eafa3d4f79bb4060eecc3c9949a9a850008000028967333e0418fc23b09d21f3e21dbd3f87b", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',dfltgid=', @ANYRESHEX=r4, @ANYBLOB=',debug=0x0000000000000006,dfltuid=', @ANYRESHEX=r5, @ANYBLOB="2c6e6f6465766d61702c736d61636b66736861743dcccccccccccccccccccccccccccc2c6673757569643d04383839373464642d373930612d633734372d343634342d30313962623061002c00"]) r6 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c596972656374696f2c64a16e74756964ffff36f4e0075e736e0d0d12d7e5eb7eacb3e009a6", @ANYRESHEX=0xee01, @ANYBLOB=',\x00']) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000200)='system_u:object_r:run_init_exec_t:s0\x00', 0x25, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000030a010800000000000000000200797a3000000000140000001100010000000000000000000000000a"], 0x50}}, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmsg(r7, &(0x7f0000002c40)={&(0x7f0000000140)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, 0x0, 0xfffffe79, 0x0, 0x59}, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") mkdir(&(0x7f0000000000)='./control\x00', 0x81) rmdir(&(0x7f0000000040)='./control\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) listxattr(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 3.204916174s ago: executing program 1 (id=1011): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd={0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0xfffffdfc}]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048}, 0x20000150) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000100)) move_pages(0x0, 0x5, &(0x7f0000000140)=[&(0x7f00003af000/0x1000)=nil, &(0x7f00008a2000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000870000/0x2000)=nil], &(0x7f0000000180)=[0x1], 0x0, 0x4) 2.961840788s ago: executing program 7 (id=1013): futex(0x0, 0x6, 0x2, 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r1, &(0x7f0000000200)={&(0x7f0000000080)=@sco={0x1f, @none}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)=""/176, 0xb0}, {&(0x7f00000003c0)=""/158, 0x9e}], 0x2, &(0x7f0000000140)=""/41, 0x29}, 0x10020) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x2021, 0x10000, 0x0, 0x6, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000248000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e61740014000480080002400000000008000140000000002c000000020a01010000"], 0xc4}}, 0x0) listen(r0, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1008205, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@jqfmt_vfsv1}]}, 0x81, 0x63e, &(0x7f00000004c0)="$eJzs3c1rHG8dAPDvzGbT5NdoWpFii2LAQwvSvNRi1YttL/ZQsGAPIh4amqSGbtrQpGBroSl4UFAQ8SrSi/+AdylevYmg3jwLVaTiQaUrMzuTLpvddLu/7Es7nw9M9plnZvZ5vjt5dp6Z2ZkJoLIWsj9pxOmIuJVEzLdNm4vWxIVivlf/fHI7G5JoNr/1jySSIq+c/3Xxejz7k0TMRMQfrkZ8qnaw3J1Hj++uNpotTyOWdre2l3YePT6/ubV6Z/3O+r2VC1+5eGn5qysXV44kzjKua9e/+dmf/vB7X974Y+N8EpfjZv0Ha51xHJWFWIjXRYjt+VMRcSlLdPlc3jdlCMmY68FgasX/Yz0iTsV81OLY/rT52PzJWCsHDFWzFtEEKirZb//18VYEGLGyH1Du2w9jP3iSvbzS2gE6GP9U69hIzOT7Rh+9SvL9pFK2v3viCMrPyvjfkzO/zIbocRxi6gjK6WXvWUR8plv8SV63E/lRnCz+NNK25bL0ckRMF59FOmD5Cx3jo/7/e5f429dDFu/l4jXLvzpg+eOOH4BqenGl2JDvZWNvtn9Zz7Ds/0RH/ycpzg11brsGMe7tX+/+X7m9n8mPkacd/bDsM7jR/S3rnRl//fG1n/cqv73/lw1Z+WVfcBRePos40xH/j/LOXLK//pMu/d9sllt9lvGNP/39Wq9p446/+TzibNf9nzdntLLU0u7WdpnXcX5yaWOzsb7c+tu1jN/+/ru/7lX+wPEfGyDYLrL1Hz3iP2z9Z3nbfZbxmxvPt3pNm3tr/OnfppObeWq6yPn+6u7ug5WI6eR6MUtb/oX9Bbt+PZXzlO+RxX/uC93b/yHx5yt6r8/4t79991UrdfAsad/r/8C3Su51s8869JLFvzbg+v9Zn2X8+zsPP9eRNVsmDot/9uBbJf1+5gAAAAAAAFBFaX4ONkkX99NpurjYuob30/FR2ri/s/vFjfsP761FnMt/D1lPyzPd863xJBtfKX4PW45f6Bj/UkScjIhf1Gbz8cXb9xtr4w4eAAAAAAAAAAAAAAAAAAAAJsTx4vr/8jnV/6q1rv/vy+6pIdcOGLphPmAOmGzaP1RX3v77eILrET1zCpggtv9QXdo/VJf2D9Wl/UN1tdp/HwcAgQ+O7T9Ul/YP1aX9AwAAAMAH6eTnX/wliYi9r83mQ2a6mFYfa82AYWtv4zN9LbEwtLoAo1Ub6WLAJNk/9e/Xv1A5fe3j/6e4OeDwqwOMQdItM+8cNA9v/C+6LgkAAAAAAAAAAAAADMHZ067/h6pK43fvMnuz2Xw6vMoAI9X/hfwHbhLuHgDwnnPrf6gu+/hQXV8vXt92FX/PewO6/h8AAAAAAAAAAAAARmYuH5J0sXgE6Fyk6eJixCci4kTUk43NxvpyRHwyIv5cqx/LxlfGXWkAAAAAAAAAAAAAAAAAAAD4wOw8enx3tdFYf9Ce+G+WaHadNJxE+XSxfmbuUeePkyifgjqCSN85EcnoC52NiEmIfTiJqbacJGIvW/MTUbEHOzER1UjzaozxSwkAAAAAAAAAAAAAAAAAACqq7drj7s78asQ1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDRe/P8/8ETyVveZ9wxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADvp/8HAAD//x8yOGw=") 2.418290359s ago: executing program 1 (id=1016): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x12, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0xfe86, 0xfffffff9, 0x1ff, 0xe, "01040000000000002400a14b5ea25c999600"}) r6 = syz_open_pts(r5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TCFLSH(r6, 0x540b, 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.25194288s ago: executing program 5 (id=1018): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_io_uring_setup(0x8c7, &(0x7f0000000240)={0x0, 0xad04, 0x1000, 0x2, 0x40002003}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x1d, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x42}, 0x0, 0x844}) io_uring_enter(r2, 0x37cd, 0x3e80, 0x0, 0x0, 0x0) 1.738413379s ago: executing program 5 (id=1019): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x6, 0x8, 0x80}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 1.583494508s ago: executing program 5 (id=1020): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mq_unlink(0x0) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RVERSION(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1300000065ffff64ffffee0600395032303030"], 0x13) 1.457542876s ago: executing program 4 (id=1021): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70385ffffff0000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x4d}, 0x94) 1.430472547s ago: executing program 6 (id=1022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400003000408000140000000000900010073797a300000000008000a4000000002"], 0x124}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20004400}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, 0x0, 0x3, {0x2, 0x1, 0x4}}, 0x18, &(0x7f0000000100)={&(0x7f0000000240)="299b1d226ba022acb756c9400f023abf0e94686758b5a5614d6ad9187550520a75aa2c06d49bb675e3663641dcfff8a5ae1dac4c802e854707f095c532fdaa0f531a53eb18ad3b64217d4c67071fe1c7c1b1e1a27b83d9e5bfd01d566bed5f0386964a96da57f427e7f8d6da83a9b417297e70bf5068c9593dbb56c0cea05bf0d0bfd839998fc5564dea88744f5db8d905f0bd02065db29c9bd8a1d03f3f851a4a07abc3c32b7d47bf2602829b6a94f022b4752ea16b9b579098b0527e92e779", 0xc0}}, 0x4004889) 1.399747159s ago: executing program 5 (id=1023): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x70}, 0x1, 0x7}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000002040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0xa0, 0x138, 0x138, 0x0, 0xa0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7f, 0x1, @local, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0xff000000, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x81}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_vlan\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x8, 0x6}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1.334510762s ago: executing program 6 (id=1024): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$rds(r0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x8}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRES64], &(0x7f00000016c0)=""/251, 0x1a, 0xfb, 0x1}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) fcntl$setpipe(r0, 0x407, 0x8001a0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) setpriority(0x0, 0x1, 0xa7a8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_config_ext={0x8}, 0x10000, 0x9f3af70, 0xfffffffd, 0x7, 0x2, 0xffff, 0x1000, 0x0, 0x0, 0x0, 0x10000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x1357, 0x0, 0x0, 0x0) 1.333305422s ago: executing program 7 (id=1025): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="a0005bf8", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffff, 0x6, 0x7ff, 0x2, 0xa, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x400c14, &(0x7f0000000400)={[{}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x41, 0x7c5, &(0x7f0000000dc0)="$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") r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb212) mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0xfffffffffefffff2, 0x4031, 0xffffffffffffffff, 0x75431000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000010000000000000ff030000850000002800000018110000", @ANYRES32=r10, @ANYBLOB="0000000200b702000000000000850000008600000095000000000000006e307b7080578e8e20bd44870ebebea70b96b5a5a26b7087"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.264835977s ago: executing program 1 (id=1026): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x7, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc06, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xbe}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.03360019s ago: executing program 1 (id=1027): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x41, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffefc}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call, @ringbuf_query]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x8000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1, 0x1}]}}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 1.006358882s ago: executing program 1 (id=1028): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x400) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x3e7, "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"}, &(0x7f0000000100)=0x3ef) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x2400c840) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468802, 0x40, 0x1, 0x3, 0x7ffffffc}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) symlink(0x0, &(0x7f0000000240)='./file0\x00') sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x141, 0x141, 0x5, [@union={0xa, 0x3, 0x0, 0x5, 0x1, 0x14000000, [{0x3, 0x5, 0x5}, {0xa, 0x1}, {0xf, 0x0, 0x75}]}, @func={0xc, 0x0, 0x0, 0xc, 0x3}, @enum={0x7, 0x5, 0x0, 0x6, 0x4, [{0xe}, {0x7, 0x83b}, {0x10, 0x7}, {0x165cb3ab, 0x5}, {0x4, 0x8}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}, @func={0x2, 0x0, 0x0, 0xc, 0x2}, @restrict={0x7, 0x0, 0x0, 0xb, 0x5}, @var={0x5, 0x0, 0x0, 0xe, 0x1, 0x3}, @ptr={0x10, 0x0, 0x0, 0x2, 0x2}, @datasec={0x7, 0x9, 0x0, 0xf, 0x1, [{0x5, 0x6, 0x3}, {0x2, 0x7, 0x8}, {0x3, 0x5, 0x9f3e}, {0x3, 0x2, 0x1ff}, {0x3, 0x200, 0x1}, {0x4, 0x80000001, 0x6}, {0x5, 0x8, 0xff}, {0x1, 0x8, 0x3}, {0x4, 0x975, 0x4}], "10"}, @func={0xf, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61, 0x10, 0x0]}}, &(0x7f0000000100), 0x161, 0x0, 0x0, 0xc1c}, 0x28) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1410, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0x88}}, 0x0) 895.799178ms ago: executing program 5 (id=1029): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_io_uring_setup(0x8c7, &(0x7f0000000240)={0x0, 0xad04, 0x1000, 0x2, 0x40002003}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x1d, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x42}, 0x0, 0x844}) io_uring_enter(r2, 0x37cd, 0x3e80, 0x0, 0x0, 0x0) 693.70343ms ago: executing program 4 (id=1030): r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r0, r1, 0x0, 0x9) write$binfmt_script(r1, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) syz_socket_connect_nvme_tcp() sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x605, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xc}, {}, {0x5, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffeb, 0x9}}]}}]}, 0x3c}}, 0x20004084) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 468.483103ms ago: executing program 6 (id=1031): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x6, 0x28000000}, 0x0) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r2, 0x6, 0x28000000}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x10, 0xa}, 0x8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0x119) r4 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r4, 0x84}], 0x1, 0x3ff) (async) poll(&(0x7f0000000100)=[{r4, 0x84}], 0x1, 0x3ff) sendto$inet(r4, &(0x7f0000000280)="9f", 0x1, 0x11, &(0x7f0000004ff0)={0x2, 0x2000, @rand_addr=0xfffffffffffffffe}, 0x10) (async) sendto$inet(r4, &(0x7f0000000280)="9f", 0x1, 0x11, &(0x7f0000004ff0)={0x2, 0x2000, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0x8) (async) listen(r4, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) accept4(r4, 0x0, 0x0, 0x0) (async) accept4(r4, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@dioread_nolock}, {@lazytime}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8H7nZO7k3O/ebe7+m5OTckgKE1kf1TiHg5Ir5JIg5GRJKvG4185cTadqv3r85mSxKNxqd/Jc3tsnrrtVrP259XXoqI376KOF7Y2G5teWWhVC6ni3l9sl65NFlbXjlxoVKaT+fTi9MzM6fenpl+7913+hbrG2f/+f6T2x+e+vro6ne/3D10M4nTcSBf1x7HE7jWXpmIifw9GYvTj2w41YfGdoJd+f/JgPeD7RnJ83wssj7gYIzkWQ/8/30ZEQ1gSCXyH4ZUaxzQurbv03Xwc+PeB2sXQBvjH137bCT2NK+N9q0mD10ZZde7431oP2vj1z9v3cyW6N/nEABbunY9Ik6Ojm7s/5K8/9u+kz1s82gb+j94dm5n4583O41/Cuvjn+gw/tnfIXe3Y+v8L9ztQzNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq59/JctWfutsWC+H3dHdz/8nLlSvfQkMbe7dz3ilY7j32T9+Ccdjn/2fpztsY0j6a3Xuq3bOv6nq/FTxOsdj/+DGa1k8/nJyeb5MNk6Kzb6+8aR37u1P+j4s+O/b/P4x5P2+dra47fx455/027rHoo/ej//dyWfNcut+ccrpXp9cSpiV/LxxsenHzy3VW9tn8V/7Ojm/V+n839vRHzeY/w3Dv/8ak/xD+j4zz3W8X/8wp2PvvihW/u99X9vNUvH8kd66f963cEnee8AAAAAAABgpylExIFICsX1cqFQLK7d33E49hXK1Vr9+Pnq0sW5aH5XdjzGCq2Z7oNt90NM5ffDturTj9RnIuJQRHw7srdZL85Wy3ODDh4AAAAAAAAAAAAAAAAAAAB2iP1dvv+f+WNk0HsHPHV+8huG15b5349fegJ2JH//YXjJfxhe8h+Gl/yH4SX/YXjJfxhe8h+Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACAvjp75ky2NFbvX53N6nOXl5cWqpdPzKW1hWJlabY4W128VJyvVufLaXG2Wtnq9crV6qWp6Vi6MllPa/XJ2vLKuUp16WL93IVKaT49l449k6gAAAAAAAAAAAAAAAAAAADg+VJbXlkolcvpooLCtgqjO2M3FPpcGHTPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//xVY3tw==") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10008, 0x8, 0x1, 0x5, 0x20009, 0x1b, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) (async) r7 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r7, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) (async) preadv2(r7, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read(r3, &(0x7f0000000000)=""/43, 0x2b) 454.927514ms ago: executing program 5 (id=1032): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0xa, 0x3, 0xff) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x3, 0xfffff03c}, {0x6, 0x25, 0x3, 0x207}]}, 0x10) getsockname(r0, &(0x7f00000000c0)=@phonet, &(0x7f00000001c0)=0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0xcc1727eb31643679, @loopback, @private2, 0x1, 0x8, 0x1, 0x8001}}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000008c0)={0x0, 0xfad8, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000940)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) lseek(r1, 0x550, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000001000000000000000000000a2dcf7b204000000000000000700000085100000fbffffff9500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) 325.170371ms ago: executing program 4 (id=1033): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x102) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) (async) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x1, 0x282, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x3, 0x0, 0x0, "ee6a491530f05065"}}, 0x38}}, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f640d967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c8348100"/4195, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") (async) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc2}}) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x1) (async) r5 = getpid() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xfffffffffffffff1], 0x0, 0x0, 0x1, 0x1, r5}}, 0x40) r7 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x2000000000006) 318.451722ms ago: executing program 6 (id=1034): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22420}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}, 0x1, 0xd9ff}, 0x20004000) 232.161377ms ago: executing program 6 (id=1035): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000080)) r1 = inotify_init1(0x800) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) quotactl_fd$Q_GETQUOTA(r1, 0x0, r2, &(0x7f0000000200)) (async) shutdown(0xffffffffffffffff, 0x1) (async) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'erspan0\x00'}) (async) recvmmsg(r3, &(0x7f0000002a80)=[{{&(0x7f0000000340)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001880)=[{&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/36, 0x24}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/218, 0xda}, {&(0x7f0000001580)=""/116, 0x74}, {&(0x7f0000001600)=""/194, 0xc2}, {&(0x7f0000001700)=""/119, 0x77}, {&(0x7f0000001780)=""/196, 0xc4}], 0x8, &(0x7f0000001900)=""/98, 0x62}, 0x9}, {{&(0x7f0000001980)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a00)=""/203, 0xcb}, {&(0x7f0000001b00)=""/23, 0x17}, {&(0x7f0000001b40)=""/67, 0x43}, {&(0x7f0000001bc0)=""/97, 0x61}], 0x4, &(0x7f0000001c80)=""/110, 0x6e}, 0x2}, {{&(0x7f0000001d00)=@l2, 0x80, &(0x7f0000002180)=[{&(0x7f0000001d80)=""/219, 0xdb}, {&(0x7f0000001e80)=""/216, 0xd8}, {&(0x7f0000001f80)=""/154, 0x9a}, {&(0x7f0000002040)=""/69, 0x45}, {&(0x7f00000020c0)=""/69, 0x45}, {&(0x7f0000002140)=""/41, 0x29}], 0x6, &(0x7f0000002200)=""/17, 0x11}, 0x4}, {{&(0x7f0000002240)=@can, 0x80, &(0x7f00000022c0), 0x0, &(0x7f0000002300)=""/116, 0x74}, 0x52}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002380)=""/244, 0xf4}, {&(0x7f0000002480)=""/90, 0x5a}, {&(0x7f0000002500)=""/135, 0x87}, {&(0x7f00000025c0)=""/239, 0xef}, {&(0x7f00000026c0)=""/100, 0x64}], 0x5, &(0x7f00000027c0)=""/109, 0x6d}, 0xd7e}, {{&(0x7f0000002840)=@alg, 0x80, &(0x7f0000002a00)=[{&(0x7f00000028c0)=""/189, 0xbd}, {&(0x7f0000002980)=""/96, 0x60}], 0x2, &(0x7f0000002a40)=""/12, 0xc}, 0x5}], 0x6, 0x40000000, &(0x7f0000002c00)) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000803, r2, &(0x7f0000002c40)={0x6, 0x8, 0x4, 0x5, 0x3, 0x4, 0x9, 0x5, 0xd95}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000002dc0)={r3, &(0x7f0000002cc0)='erspan0\x00', 0x2000, &(0x7f0000002d00)={@align=0x401, {0x8, 0x4, 0x3, 0x4}}, 0x50, &(0x7f0000002d40), &(0x7f0000002d80)=0xffffff80}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000002e00)='&()\\\x00', &(0x7f0000002e40)='+\x00', 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ec0), r4) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000002fc0)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f00)={0x50, r5, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004080}, 0x804) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003040), r4) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000003140)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003100)={&(0x7f0000003080)={0x54, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048084}, 0x0) r7 = open(&(0x7f0000003180)='./file0\x00', 0x311000, 0x20) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000031c0)={0xffffffffffffffff}) (async) r9 = socket$kcm(0x29, 0x2, 0x0) accept4(r9, 0x0, &(0x7f0000003240), 0x400) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000003280), &(0x7f00000032c0)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$BLKGETNRZONES(r7, 0x80041285, &(0x7f0000003300)=0x2) (async) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003400)={&(0x7f0000003380)={0x74, r5, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x200000, 0x57}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x53, 0x80, [@measure_req={0x26, 0xf, {0x5, 0x81, 0x0, "d17db13dd47204d2aa1bb9b4"}}, @mesh_chsw={0x76, 0x6, {0xe, 0x9, 0xe, 0x95}}, @preq={0x82, 0x2b, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x0, 0x24aa, @broadcast, 0x61, @value=@device_b, 0x1ff, 0x4, 0x1, [{{0x1}, @broadcast, 0x746d}]}}, @dsss={0x3, 0x1, 0xd}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0xa1, 0xcd}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x1289e0e27317c8ab) (async) dup(r7) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000003f80)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003f40)={&(0x7f00000034c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x7d8, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7b0, 0x3, 0x0, 0x1, [{0x4}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa71}]}, {0x66c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x338, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "d09ef041a74259162896083fe581d5e142058fcfc6902a3419dea0d5ac1a9351f0a23069857731d800a003bfa62b7fd7a306b6e15e9f18165bb8c2a49d037ecb5124accd9e6189bfa0496f33fcc95b2b7a08cfabb4600abf51f072f80196d7fcc9b1655f76ceb464e0b69aa6e7a089f43ffefabdb29d2078a5467c08ea7f9fbc95de1845fb50061cc556617452c9468e38442b12db46caa5d00b410dd8ee6944ceef72bfbfa8db5b4e9a896b05c6ecf17c68998fd84e63de33ccc3cc857c4d8af71173efa6ed453d287374645d51aeb350ef"}, @NFTA_DATA_VALUE={0x5e, 0x1, "e86c0162d40f28b8a6e91e9781bfe0642949f9230cc7a7b970cd21b40a3af2cdac418a317507c9618926578b91aabb2418a33c0220a24b7e620c7580da3a706afdaf1f1e77c228e32987dcafd9bb9e01ee4a2f5d994105e25091"}, @NFTA_DATA_VALUE={0x2a, 0x1, "cd1785972c546c3e7984ac331026c27bf0f16c4301c7dea3773a5cf3711fa681b02566d378cf"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xef, 0x1, "24ef9c16fbaf2081900dbe9488e2db5f97d5d0475952cc067aebdf26e101e1e34910b4ea0f7bb9fd65acc9e4dfcf17ed8981742f68d24e9e603557809c6e0e8b93738a127ff75fd26bb525eef5a99e8eeb5bece3f417348e1db87a4600698a04fb292d6a6f1b213c6ce8a88d5cca319bd069cb0437b6a099d37698cbb65b6145947646fe23aa7dfefecac8807a41187f2d8a7b2e2769ab2e3a2ce9aa1fe77ef7a21c1001e54bba624d0cfc266e560326ab52ab38c181804eaa20843d2fa61da5659947d7a9547cf2c0c52b2c8f7a9ff43cda2b6d503bb899ae41687c0335cb36ce18b8654c544db0086030"}]}, @NFTA_SET_ELEM_KEY={0x128, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "07871ac01225d1bdad013d"}, @NFTA_DATA_VALUE={0xf5, 0x1, "dcd3cd1bad4f62d99b47ddb241b4ff2debd3b5b98b33ea6b9bffe145044422adf88182bb8ada420ba0343982adeba552b5c71612295aad847ccd401c1b16095c43de5e3015333a8f8731daef92fdff971b674acd6bea46b0ba5342bd6036be5dc2c662e38d22473330d4076b3b435e84650a5b5a674c04a58ce96af2370afda392153b1027a404bf4079603913849ff708f60f3eb826678756a7a1fee08c78185e7f299b58bd939cd8df0e1d73d5f4737208372b93a82d36684ff44bce4589283abe784239486a98ea52a724784cb11ede7be61db6bd3935c30cdf162d8ef38736fcbab6e8563ea535337d38d7dc0f7c31"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x866c2fabf43ad116}]}]}, @NFTA_SET_ELEM_KEY={0x154, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5a, 0x1, "587a4fbe7625548c384af5437bddd0630d11adfd5290ed4b2547187c14e8089959021c118e6f7f618eaf732121cf7198826259a583eb953aa375fd8c1b3823a8aa4ff3d5b825b376cdf0ea421d81272926df564dc6a6"}, @NFTA_DATA_VALUE={0xb7, 0x1, "03c5d7aea688c58e032a7d4089f17ab6fc5ce912d43f393763f12f0e5d9a5b09589c03c76cbcac96b38f52b30373b90ae37263bd1cfe3361c4f673b19385f3f7c0063617fa709cc1479898020d798d8ef630df5bb0c4875ed9c906d11bf98285e622fcb15743f894aaaf2c6099a54723caaf1ca9436697f8d6b9634d880e3d973921c163e665d6cfd5354752447e1d229671ca3dd6b6ab3585283b0581c9444049b2bb0a5ce92a8a13058a6d162ce0ae3f2238"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xb4, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x78, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x8}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}]}, {0x124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x114, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x4c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9ea}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x541}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xa}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xff}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x174, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x158, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd535}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x78, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd0f}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0xa70}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005400)={0x7, 0x9, &(0x7f0000003fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f}, [@alu={0x7, 0x1, 0x2, 0x8, 0x6, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}, @generic={0xa, 0x5, 0xd, 0x4, 0x7}, @exit, @alu={0x7, 0x0, 0x6, 0x9, 0x1, 0xc, 0x10}]}, &(0x7f0000004040)='GPL\x00', 0x6, 0x1000, &(0x7f0000004080)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, r4, 0x8, &(0x7f0000005080)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000050c0)={0x0, 0x1, 0x1, 0xfffffffc}, 0x10, 0x0, r8, 0x2, &(0x7f0000005380)=[r4, r7, r4, 0xffffffffffffffff, r4, r8, r8, 0xffffffffffffffff, r4, r7], &(0x7f00000053c0)=[{0x1, 0x4, 0xb, 0x4}, {0x3, 0x4, 0x9, 0x3}], 0x10, 0x2}, 0x94) 95.203315ms ago: executing program 6 (id=1036): unshare(0x6e040400) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x0, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x26000400) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}}, 0x24044850) close(r1) pwritev2(r1, &(0x7f0000000b00)=[{&(0x7f0000000000)="5b7b391b7e4596d203ae7a46785af0a6989c24ffb65493e107a0bff1ad6a0e73d416d1e49f47a3382b3561c024ebf8a506f69429bb122fb748a23d89f1dcbcef9ac1", 0x42}, {&(0x7f0000000680)="092f9051922505d41bbe325e4223c181c2fe9f0f35c67ac7db038ad61338c99b7cb5b30f7fa8a56af940de8a10235e377e5ee536f2f6847705726182a1f6eaa3281909c1b7a289334bfbc027c67c0d145efb9b96a4295b180a680569f6e7bbd2ae9cf94b8cc875bed50034da9aa25b2d3a3260f6f96e4db59e17a7687cf34eb40d332993a02932c91922eccfd823d01f01be77302a41cbfb423053b2988b593af2b8f0791389ee06903dfc7b2d23f4e57b43a94b5bc5f66b885580e22dce194116d51a1ee2dee7a0334201436635", 0xce}, {&(0x7f00000003c0)="5ceb5f22dd714fffbe3f4aa70820e767f0ff690aa8e83922c63888003a7f718260ec9f24b937317d9ac14e3144f103f20bf10ee61a2b238b0489fff8afb94f6f7fde4519daaf0e36b849081bf665b5a66a40caaaa116b2c8c9975642d7610ce24fddfa26a2f5a07bbf133cbe92143952f8d5798421edbfae4c8fbee0917a8aa0c1aa0f1b063fd9d3983bdc0481aa4909654bd0bc01483f440298091e3c3130bb64ab668c5e2dab5da15e37ee01dcb4185e49", 0xb2}, {&(0x7f0000000780)="a1e10c7a94d7dfe1f843ecb1ef248eb1f6c9dc43149515d9e91779557116db07fdbdc9627f5e96fd44d8766239383b6490b211ce430cc242630de474d250ba8c90ea0c3894fddf543520772a65ad6fdbce6af9c71c829cd867394cbe83b5391955485383bd12a83d1e6a1df381c8babcbe59eabe81ad160be8fca8442e90644a7256590d59ad2cb2217bcf5d36bdbb180d9becce600439132dffe541838dc060520affdd50e52d1aadb9498771e1899b4e80c03b9dae272776a8b01b7a125be7c7e09821c50ad0e84d2669094078b70d13c97b9de750d1125f83ba31133c3420", 0xe0}, {&(0x7f0000000580)="06f67d00c5036d47a974809737c82442ced9ab41e7d8aee56e742a0e31c826eb3b2b6f5b4c395b12fe943b373b57a6546efd35cdc985205df572a6c618e542c59c6adb1123ee471314eb163f371f0725cecb754651d0f2756fadc500b12366b345a8ddae1e6f9d40446acbbe07412e02b4a111f12d084254a0be06d6a1a5e78de596f5a56df769f8c3efaef604159779a636569e027811", 0x97}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000000880)="4739ada5c622d397eec1d60c8fc7ed5a0e424496cd8984e55217bbf0df8d04d558c907938fca37658cb017c1bd825be54c3d796387c17d322e08b89cace545b1a2c9606f1eabd73078c11eee046c81c7b6f4373f179f4c9abee3b98fb14d3a40d558f539981e9891ba801c8de2b6323ca8a8574a059fea4658123fdb9c4002542b702e8597f27fb1a48a18713c8a1c15d8e8bef24411147343b07ad5956c625a0bf5eb4932de05d1a726ac34fc5765eae2653112", 0xb4}, {&(0x7f0000000940)="bdae0e820f56b6730c73090e5bcc2ae212dd9f73cd2a0c2ae9eee610064e5d1487b42989c815668a800c9283c88f1c16176030ff53e1a2d90030960190c0ddb7153090a376932f541ba79add2de0643e7dea9f972b9cd4803a62e95b1fe6bd2d6183efc45f1cca61f87e3601fc3b7ab725dc03f1a9a074f9fe62a617164fac437e17eab960127314ac968e96ffa06c7c7e934e28efe1e54a164e66c1f74267dca84198669424d88a3ac54a2bd238eb844a8a687e5841a82312f5a3676463be16b4791ed2438209addcf156339160291a46dfa9cd8887679fab1e7793fd", 0xdd}, {&(0x7f0000000a40)="6a77f7c8e76ca17b6851a00a80f66c0f368f6468630e4633f0ae3f226bead490432cfaccdb85f80e8d0fdc70eacfdbcef035f6300370a3f8cc768f8d3a5555971dbf44e29973e710e017b26ebec19dc9c821eee575989f5b6d6a76531fb3a72fcffebce0076f4225b230f0454f01d23525408a3ec9ea39f9099a372fde902589d246740ee72240da983b0f895477cc861fdd0c6ab178a570d0abb0acf95bf332906b8955197cccac02deaa3c28659ffcf4500412f9", 0xb5}, {&(0x7f0000000200)="08fcfd208b4aed789d19d8c316fe87999150fc0b871916ffcb6a17a5f55c", 0x1e}], 0xa, 0x5, 0x80000001, 0x17) 87.732075ms ago: executing program 1 (id=1037): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd={0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfff0720, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0xfffffdfc}]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048}, 0x20000150) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000100)) move_pages(0x0, 0x5, &(0x7f0000000140)=[&(0x7f00003af000/0x1000)=nil, &(0x7f00008a2000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000870000/0x2000)=nil], &(0x7f0000000180)=[0x1], 0x0, 0x4) 0s ago: executing program 7 (id=1038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x1, 0x12) getdents64(r3, &(0x7f0000001240)=""/4096, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002c40)=[{0x0, 0xdd12}, {0x0, 0x1068}], 0x2, 0x0, 0x0, 0x9006}, 0x4000) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047459, &(0x7f0000001200)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x220141, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f00000000c0)=0x6) kernel console output (not intermixed with test programs): ][ T6038] dump_stack_lvl+0x95/0xd0 [ 93.436216][ T6038] dump_stack+0x15/0x1b [ 93.436248][ T6038] should_fail_ex+0x263/0x280 [ 93.436289][ T6038] should_failslab+0x8c/0xb0 [ 93.436325][ T6038] kmem_cache_alloc_noprof+0x66/0x400 [ 93.436396][ T6038] ? skb_clone+0x151/0x1f0 [ 93.436432][ T6038] skb_clone+0x151/0x1f0 [ 93.436466][ T6038] __netlink_deliver_tap+0x2c9/0x500 [ 93.436506][ T6038] netlink_unicast+0x66b/0x690 [ 93.436547][ T6038] netlink_sendmsg+0x5c8/0x6f0 [ 93.436580][ T6038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.436606][ T6038] ____sys_sendmsg+0x5af/0x600 [ 93.436640][ T6038] ___sys_sendmsg+0x195/0x1e0 [ 93.436754][ T6038] __x64_sys_sendmsg+0xd4/0x160 [ 93.436792][ T6038] x64_sys_call+0x194c/0x3020 [ 93.436891][ T6038] do_syscall_64+0x12c/0x370 [ 93.436935][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.436962][ T6038] RIP: 0033:0x7f68a0e5bf79 [ 93.436981][ T6038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.437014][ T6038] RSP: 002b:00007f689f8b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.437039][ T6038] RAX: ffffffffffffffda RBX: 00007f68a10d5fa0 RCX: 00007f68a0e5bf79 [ 93.437056][ T6038] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 93.437072][ T6038] RBP: 00007f689f8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.437088][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.437103][ T6038] R13: 00007f68a10d6038 R14: 00007f68a10d5fa0 R15: 00007ffdb48cb1c8 [ 93.437128][ T6038] [ 93.437378][ T6038] tipc: Enabling of bearer rejected, failed to enable media [ 93.442622][ T6029] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.476: corrupted xattr block 33: invalid ea_ino [ 93.527132][ T6042] syzkaller0: entered promiscuous mode [ 93.568926][ T6029] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 93.640290][ T6042] syzkaller0: entered allmulticast mode [ 93.761448][ T4923] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.836574][ T6064] __nla_validate_parse: 2 callbacks suppressed [ 93.836624][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'. [ 93.902928][ T6066] xfrm0 speed is unknown, defaulting to 1000 [ 94.042316][ T6066] lo speed is unknown, defaulting to 1000 [ 94.318666][ T6066] FAULT_INJECTION: forcing a failure. [ 94.318666][ T6066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.332115][ T6066] CPU: 1 UID: 0 PID: 6066 Comm: syz.1.484 Tainted: G W syzkaller #0 PREEMPT(full) [ 94.332168][ T6066] Tainted: [W]=WARN [ 94.332216][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.332231][ T6066] Call Trace: [ 94.332241][ T6066] [ 94.332251][ T6066] __dump_stack+0x1d/0x30 [ 94.332299][ T6066] dump_stack_lvl+0x95/0xd0 [ 94.332336][ T6066] dump_stack+0x15/0x1b [ 94.332382][ T6066] should_fail_ex+0x263/0x280 [ 94.332408][ T6066] should_fail+0xb/0x20 [ 94.332467][ T6066] should_fail_usercopy+0x1a/0x20 [ 94.332499][ T6066] _copy_from_user+0x1c/0xb0 [ 94.332531][ T6066] ___sys_sendmsg+0xc1/0x1e0 [ 94.332644][ T6066] __x64_sys_sendmsg+0xd4/0x160 [ 94.332681][ T6066] x64_sys_call+0x194c/0x3020 [ 94.332716][ T6066] do_syscall_64+0x12c/0x370 [ 94.332873][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.332895][ T6066] RIP: 0033:0x7f39bc75bf79 [ 94.332915][ T6066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.332932][ T6066] RSP: 002b:00007f39bb1af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.332998][ T6066] RAX: ffffffffffffffda RBX: 00007f39bc9d5fa0 RCX: 00007f39bc75bf79 [ 94.333012][ T6066] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 94.333027][ T6066] RBP: 00007f39bb1af090 R08: 0000000000000000 R09: 0000000000000000 [ 94.333049][ T6066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.333131][ T6066] R13: 00007f39bc9d6038 R14: 00007f39bc9d5fa0 R15: 00007ffd6defe888 [ 94.333153][ T6066] [ 94.587418][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.496'. [ 94.668283][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.487'. [ 94.693877][ T6099] tipc: Enabling of bearer rejected, failed to enable media [ 95.164233][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.490'. [ 95.182268][ T6115] netem: incorrect gi model size [ 95.199127][ T6115] netem: change failed [ 95.263700][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.7.491'. [ 95.328365][ T6144] netlink: 44 bytes leftover after parsing attributes in process `syz.5.495'. [ 95.479550][ T6150] loop5: detected capacity change from 0 to 4096 [ 95.494439][ T6150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.659921][ T4923] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.767024][ T6154] xfrm0 speed is unknown, defaulting to 1000 [ 96.055305][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 96.055330][ T28] audit: type=1400 audit(1771131543.480:845): avc: denied { create } for pid=6158 comm="syz.4.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.380083][ T6154] lo speed is unknown, defaulting to 1000 [ 96.969330][ T28] audit: type=1400 audit(1771131544.420:846): avc: denied { mount } for pid=6166 comm="syz.1.502" name="/" dev="autofs" ino=14430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 97.023526][ T6172] xfrm0 speed is unknown, defaulting to 1000 [ 97.036511][ T6176] loop4: detected capacity change from 0 to 512 [ 97.156745][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 97.179580][ T6176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.192925][ T6190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.201772][ T6190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.210700][ T6190] loop9: detected capacity change from 0 to 7 [ 97.226342][ T6176] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.259387][ T6172] lo speed is unknown, defaulting to 1000 [ 97.269333][ T6176] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.505: corrupted xattr block 33: invalid ea_ino [ 97.289008][ T6176] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 97.306635][ T6176] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.505: corrupted xattr block 33: invalid ea_ino [ 97.331691][ T6176] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 97.350203][ T6188] loop5: detected capacity change from 0 to 512 [ 97.367781][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.492041][ T6188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.614523][ T6188] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.752326][ T28] audit: type=1400 audit(1771131545.170:847): avc: denied { read write } for pid=6209 comm="syz.7.515" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 97.780287][ T28] audit: type=1400 audit(1771131545.170:848): avc: denied { open } for pid=6209 comm="syz.7.515" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 98.396093][ T28] audit: type=1400 audit(1771131545.830:849): avc: denied { create } for pid=6212 comm="syz.7.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 98.529838][ T28] audit: type=1400 audit(1771131545.890:850): avc: denied { connect } for pid=6214 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.561673][ T28] audit: type=1400 audit(1771131545.890:851): avc: denied { write } for pid=6214 comm="syz.1.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 98.581850][ T28] audit: type=1400 audit(1771131545.970:852): avc: denied { ioctl } for pid=6214 comm="syz.1.517" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 98.909869][ T4923] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.939719][ T6230] netlink: 'syz.6.522': attribute type 1 has an invalid length. [ 98.947890][ T6230] netlink: 668 bytes leftover after parsing attributes in process `syz.6.522'. [ 99.015912][ T6236] loop5: detected capacity change from 0 to 512 [ 99.047484][ T6236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.047559][ T6236] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.048022][ T6236] FAULT_INJECTION: forcing a failure. [ 99.048022][ T6236] name failslab, interval 1, probability 0, space 0, times 0 [ 99.048121][ T6236] CPU: 1 UID: 0 PID: 6236 Comm: syz.5.523 Tainted: G W syzkaller #0 PREEMPT(full) [ 99.048152][ T6236] Tainted: [W]=WARN [ 99.048160][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.048176][ T6236] Call Trace: [ 99.048183][ T6236] [ 99.048191][ T6236] __dump_stack+0x1d/0x30 [ 99.048236][ T6236] dump_stack_lvl+0x95/0xd0 [ 99.048307][ T6236] dump_stack+0x15/0x1b [ 99.048343][ T6236] should_fail_ex+0x263/0x280 [ 99.048374][ T6236] should_failslab+0x8c/0xb0 [ 99.048411][ T6236] kmem_cache_alloc_noprof+0x66/0x400 [ 99.048517][ T6236] ? do_getname+0x2e/0x1c0 [ 99.048542][ T6236] do_getname+0x2e/0x1c0 [ 99.048566][ T6236] getname_flags+0x1d/0x30 [ 99.048589][ T6236] __se_sys_newlstat+0x48/0x3f0 [ 99.048624][ T6236] ? mutex_lock+0x57/0x90 [ 99.048726][ T6236] ? mutex_unlock+0x4e/0x90 [ 99.048757][ T6236] ? fput+0x8f/0xc0 [ 99.048783][ T6236] ? ksys_write+0x194/0x1a0 [ 99.048894][ T6236] __x64_sys_newlstat+0x31/0x40 [ 99.048937][ T6236] x64_sys_call+0x1b8c/0x3020 [ 99.049003][ T6236] do_syscall_64+0x12c/0x370 [ 99.049042][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.049084][ T6236] RIP: 0033:0x7f63a76fbf79 [ 99.049104][ T6236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.049126][ T6236] RSP: 002b:00007f63a614f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 99.049149][ T6236] RAX: ffffffffffffffda RBX: 00007f63a7975fa0 RCX: 00007f63a76fbf79 [ 99.049164][ T6236] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 99.049177][ T6236] RBP: 00007f63a614f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.049190][ T6236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.049249][ T6236] R13: 00007f63a7976038 R14: 00007f63a7975fa0 R15: 00007fff6c54e028 [ 99.049274][ T6236] [ 99.170648][ T4923] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.193202][ T6243] bond2: entered allmulticast mode [ 99.211690][ T6246] xfrm0 speed is unknown, defaulting to 1000 [ 99.245648][ T28] audit: type=1400 audit(1771131546.680:853): avc: denied { write } for pid=6247 comm="syz.5.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.256812][ T6243] bridge2: entered promiscuous mode [ 99.256836][ T6243] bridge2: entered allmulticast mode [ 99.258741][ T6243] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 99.320177][ T6246] lo speed is unknown, defaulting to 1000 [ 99.332297][ T6241] xfrm0 speed is unknown, defaulting to 1000 [ 99.901142][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 99.915306][ T28] audit: type=1400 audit(1771131547.340:854): avc: denied { ioctl } for pid=6260 comm="syz.1.531" path="socket:[13699]" dev="sockfs" ino=13699 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.056166][ T6241] lo speed is unknown, defaulting to 1000 [ 100.381281][ T6272] veth1_vlan: mtu less than device minimum [ 100.536501][ T6281] loop6: detected capacity change from 0 to 512 [ 100.587154][ T6281] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.608239][ T6281] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.645940][ T6281] FAULT_INJECTION: forcing a failure. [ 100.645940][ T6281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.659506][ T6281] CPU: 0 UID: 0 PID: 6281 Comm: syz.6.537 Tainted: G W syzkaller #0 PREEMPT(full) [ 100.659540][ T6281] Tainted: [W]=WARN [ 100.659548][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.659576][ T6281] Call Trace: [ 100.659585][ T6281] [ 100.659594][ T6281] __dump_stack+0x1d/0x30 [ 100.659627][ T6281] dump_stack_lvl+0x95/0xd0 [ 100.659657][ T6281] dump_stack+0x15/0x1b [ 100.659684][ T6281] should_fail_ex+0x263/0x280 [ 100.659751][ T6281] should_fail+0xb/0x20 [ 100.659806][ T6281] should_fail_usercopy+0x1a/0x20 [ 100.659838][ T6281] strncpy_from_user+0x27/0x250 [ 100.659881][ T6281] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 100.659925][ T6281] do_getname+0x59/0x1c0 [ 100.659948][ T6281] getname_flags+0x1d/0x30 [ 100.660008][ T6281] __se_sys_newlstat+0x48/0x3f0 [ 100.660038][ T6281] ? mutex_lock+0x57/0x90 [ 100.660101][ T6281] ? mutex_unlock+0x4e/0x90 [ 100.660131][ T6281] ? fput+0x8f/0xc0 [ 100.660212][ T6281] ? ksys_write+0x194/0x1a0 [ 100.660242][ T6281] __x64_sys_newlstat+0x31/0x40 [ 100.660263][ T6281] x64_sys_call+0x1b8c/0x3020 [ 100.660302][ T6281] do_syscall_64+0x12c/0x370 [ 100.660346][ T6281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.660371][ T6281] RIP: 0033:0x7f36f548bf79 [ 100.660391][ T6281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.660468][ T6281] RSP: 002b:00007f36f3edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 100.660493][ T6281] RAX: ffffffffffffffda RBX: 00007f36f5705fa0 RCX: 00007f36f548bf79 [ 100.660540][ T6281] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 100.660577][ T6281] RBP: 00007f36f3edf090 R08: 0000000000000000 R09: 0000000000000000 [ 100.660594][ T6281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.660609][ T6281] R13: 00007f36f5706038 R14: 00007f36f5705fa0 R15: 00007ffd2c0fb288 [ 100.660630][ T6281] [ 100.868515][ T6301] loop7: detected capacity change from 0 to 512 [ 100.875542][ T6294] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 100.959193][ T6301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.985628][ T6308] loop4: detected capacity change from 0 to 2048 [ 100.997369][ T6301] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.008216][ T4360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.017998][ T3306] loop4: p1 < > p4 [ 101.023424][ T3306] loop4: p4 size 8388608 extends beyond EOD, truncated [ 101.034844][ T6301] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.542: corrupted xattr block 33: invalid ea_ino [ 101.065258][ T6308] loop4: p1 < > p4 [ 101.087618][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 101.087636][ T28] audit: type=1400 audit(1771131548.540:858): avc: denied { create } for pid=6314 comm="syz.6.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.115162][ T6308] loop4: p4 size 8388608 extends beyond EOD, truncated [ 101.129867][ T6316] xfrm0 speed is unknown, defaulting to 1000 [ 101.136869][ T6301] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 101.152772][ T28] audit: type=1400 audit(1771131548.570:859): avc: denied { ioctl } for pid=6314 comm="syz.6.545" path="socket:[13775]" dev="sockfs" ino=13775 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.152873][ T3001] loop4: p1 < > p4 [ 101.184266][ T6301] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.542: corrupted xattr block 33: invalid ea_ino [ 101.214626][ T6317] cgroup: Unknown subsys name 'cpuset' [ 101.220348][ T6301] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 101.235515][ T3001] loop4: p4 size 8388608 extends beyond EOD, truncated [ 101.277900][ T6316] lo speed is unknown, defaulting to 1000 [ 101.288426][ T6317] netlink: 24 bytes leftover after parsing attributes in process `syz.5.547'. [ 101.298545][ T6320] xfrm0 speed is unknown, defaulting to 1000 [ 101.330781][ T4930] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.351232][ T6322] loop5: detected capacity change from 0 to 256 [ 101.364872][ T28] audit: type=1400 audit(1771131548.810:860): avc: denied { watch watch_reads } for pid=6321 comm="syz.5.549" path="/46/file0/file0" dev="loop5" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 101.730376][ T6334] loop7: detected capacity change from 0 to 8192 [ 101.839514][ T6320] lo speed is unknown, defaulting to 1000 [ 102.103901][ T6340] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 102.148306][ T6340] FAT-fs (loop7): Filesystem has been set read-only [ 102.225045][ T28] audit: type=1400 audit(1771131549.650:861): avc: denied { setattr } for pid=6314 comm="syz.6.545" name="RXRPC" dev="sockfs" ino=13775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.290547][ T28] audit: type=1400 audit(1771131549.740:862): avc: denied { prog_load } for pid=6348 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 102.372919][ T28] audit: type=1400 audit(1771131549.760:863): avc: denied { bpf } for pid=6348 comm="syz.1.553" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.436593][ T28] audit: type=1400 audit(1771131549.760:864): avc: denied { perfmon } for pid=6348 comm="syz.1.553" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.492000][ T28] audit: type=1400 audit(1771131549.770:865): avc: denied { open } for pid=6347 comm="syz.5.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 102.540324][ T6356] loop6: detected capacity change from 0 to 512 [ 102.547692][ T6360] Driver unsupported XDP return value 0 on prog (id 122) dev N/A, expect packet loss! [ 102.566388][ T28] audit: type=1400 audit(1771131549.770:866): avc: denied { kernel } for pid=6347 comm="syz.5.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 102.647718][ T6356] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.653281][ T28] audit: type=1400 audit(1771131549.780:867): avc: denied { read write } for pid=4930 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.671592][ T6356] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.741554][ T6356] FAULT_INJECTION: forcing a failure. [ 102.741554][ T6356] name failslab, interval 1, probability 0, space 0, times 0 [ 102.755616][ T6356] CPU: 0 UID: 0 PID: 6356 Comm: syz.6.556 Tainted: G W syzkaller #0 PREEMPT(full) [ 102.755662][ T6356] Tainted: [W]=WARN [ 102.755669][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.755682][ T6356] Call Trace: [ 102.755690][ T6356] [ 102.755699][ T6356] __dump_stack+0x1d/0x30 [ 102.755728][ T6356] dump_stack_lvl+0x95/0xd0 [ 102.755786][ T6356] dump_stack+0x15/0x1b [ 102.755833][ T6356] should_fail_ex+0x263/0x280 [ 102.755914][ T6356] should_failslab+0x8c/0xb0 [ 102.755950][ T6356] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 102.755991][ T6356] ? __d_alloc+0x37/0x340 [ 102.756036][ T6356] ? __account_obj_stock+0x211/0x350 [ 102.756148][ T6356] __d_alloc+0x37/0x340 [ 102.756179][ T6356] d_alloc_parallel+0x54/0xce0 [ 102.756277][ T6356] ? lockref_get_not_dead+0x120/0x1c0 [ 102.756511][ T6356] ? __rcu_read_unlock+0x4e/0x70 [ 102.756548][ T6356] ? try_to_unlazy+0x39d/0x580 [ 102.756578][ T6356] __lookup_slow+0x96/0x260 [ 102.756617][ T6356] lookup_slow+0x3c/0x60 [ 102.756650][ T6356] path_lookupat+0x2f7/0x500 [ 102.756691][ T6356] ? filename_lookup+0xdf/0x390 [ 102.756719][ T6356] filename_lookup+0x190/0x390 [ 102.756757][ T6356] vfs_statx+0x96/0x170 [ 102.756782][ T6356] __se_sys_newlstat+0x66/0x3f0 [ 102.756813][ T6356] ? mutex_lock+0x57/0x90 [ 102.756919][ T6356] ? mutex_unlock+0x4e/0x90 [ 102.756946][ T6356] ? fput+0x8f/0xc0 [ 102.756983][ T6356] ? ksys_write+0x194/0x1a0 [ 102.757013][ T6356] __x64_sys_newlstat+0x31/0x40 [ 102.757089][ T6356] x64_sys_call+0x1b8c/0x3020 [ 102.757121][ T6356] do_syscall_64+0x12c/0x370 [ 102.757156][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.757178][ T6356] RIP: 0033:0x7f36f548bf79 [ 102.757271][ T6356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.757340][ T6356] RSP: 002b:00007f36f3edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 102.757360][ T6356] RAX: ffffffffffffffda RBX: 00007f36f5705fa0 RCX: 00007f36f548bf79 [ 102.757374][ T6356] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 102.757386][ T6356] RBP: 00007f36f3edf090 R08: 0000000000000000 R09: 0000000000000000 [ 102.757399][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.757414][ T6356] R13: 00007f36f5706038 R14: 00007f36f5705fa0 R15: 00007ffd2c0fb288 [ 102.757493][ T6356] [ 102.763351][ T6370] netlink: 'syz.1.561': attribute type 12 has an invalid length. [ 103.039341][ T4360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.060299][ T6365] netlink: 48 bytes leftover after parsing attributes in process `syz.7.560'. [ 103.128544][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.563'. [ 103.134523][ T6373] dvmrp0: entered allmulticast mode [ 103.310775][ T6383] netlink: 'syz.1.564': attribute type 1 has an invalid length. [ 103.319269][ T6383] netlink: 668 bytes leftover after parsing attributes in process `syz.1.564'. [ 103.344692][ T6390] xfrm0 speed is unknown, defaulting to 1000 [ 103.367197][ T6389] netlink: 24 bytes leftover after parsing attributes in process `syz.7.567'. [ 103.420522][ T6389] netlink: 28 bytes leftover after parsing attributes in process `syz.7.567'. [ 103.490290][ T6397] loop4: detected capacity change from 0 to 256 [ 103.520345][ T6397] FAT-fs (loop4): bogus logical sector size 0 [ 103.539109][ T6397] FAT-fs (loop4): Can't find a valid FAT filesystem [ 103.676623][ T6411] loop4: detected capacity change from 0 to 512 [ 103.685700][ T6409] netlink: 'syz.7.572': attribute type 33 has an invalid length. [ 103.704856][ T6390] lo speed is unknown, defaulting to 1000 [ 103.714930][ T6409] netlink: 152 bytes leftover after parsing attributes in process `syz.7.572'. [ 103.735685][ T6411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.775096][ T6411] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.835798][ T6416] netlink: 'syz.1.574': attribute type 12 has an invalid length. [ 103.837844][ T6411] FAULT_INJECTION: forcing a failure. [ 103.837844][ T6411] name failslab, interval 1, probability 0, space 0, times 0 [ 103.865342][ T6411] CPU: 1 UID: 0 PID: 6411 Comm: syz.4.573 Tainted: G W syzkaller #0 PREEMPT(full) [ 103.865415][ T6411] Tainted: [W]=WARN [ 103.865424][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.865440][ T6411] Call Trace: [ 103.865449][ T6411] [ 103.865460][ T6411] __dump_stack+0x1d/0x30 [ 103.865491][ T6411] dump_stack_lvl+0x95/0xd0 [ 103.865550][ T6411] dump_stack+0x15/0x1b [ 103.865578][ T6411] should_fail_ex+0x263/0x280 [ 103.865617][ T6411] should_failslab+0x8c/0xb0 [ 103.865650][ T6411] __kmalloc_noprof+0xb8/0x4e0 [ 103.865674][ T6411] ? ext4_find_extent+0x16b/0x7a0 [ 103.865791][ T6411] ext4_find_extent+0x16b/0x7a0 [ 103.865837][ T6411] ? widen_string+0x98/0x210 [ 103.865869][ T6411] ext4_ext_map_blocks+0x10d/0x2fb0 [ 103.865953][ T6411] ? vsnprintf+0x7ee/0x860 [ 103.866013][ T6411] ? ebitmap_get_bit+0xc0/0xf0 [ 103.866056][ T6411] ext4_map_query_blocks+0xb2/0x550 [ 103.866091][ T6411] ? ext4_es_lookup_extent+0x3ae/0x570 [ 103.866154][ T6411] ? xas_load+0x413/0x430 [ 103.866192][ T6411] ext4_map_blocks+0x306/0x970 [ 103.866270][ T6411] ext4_getblk+0x128/0x530 [ 103.866304][ T6411] ext4_bread_batch+0x5c/0x320 [ 103.866331][ T6411] __ext4_find_entry+0x852/0xdf0 [ 103.866353][ T6411] ? kmem_cache_alloc_lru_noprof+0x1eb/0x410 [ 103.866502][ T6411] ? __rcu_read_unlock+0x4e/0x70 [ 103.866527][ T6411] ? d_alloc_parallel+0xc01/0xce0 [ 103.866557][ T6411] ext4_lookup+0xcd/0x3a0 [ 103.866586][ T6411] __lookup_slow+0x19d/0x260 [ 103.866622][ T6411] lookup_slow+0x3c/0x60 [ 103.866651][ T6411] path_lookupat+0x2f7/0x500 [ 103.866678][ T6411] filename_lookup+0x190/0x390 [ 103.866709][ T6411] vfs_statx+0x96/0x170 [ 103.866762][ T6411] __se_sys_newlstat+0x66/0x3f0 [ 103.866874][ T6411] ? mutex_lock+0x57/0x90 [ 103.866912][ T6411] ? mutex_unlock+0x4e/0x90 [ 103.866965][ T6411] ? fput+0x8f/0xc0 [ 103.866992][ T6411] ? ksys_write+0x194/0x1a0 [ 103.867070][ T6411] __x64_sys_newlstat+0x31/0x40 [ 103.867096][ T6411] x64_sys_call+0x1b8c/0x3020 [ 103.867131][ T6411] do_syscall_64+0x12c/0x370 [ 103.867177][ T6411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.867199][ T6411] RIP: 0033:0x7f794cbbbf79 [ 103.867217][ T6411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.867235][ T6411] RSP: 002b:00007f794b60f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 103.867294][ T6411] RAX: ffffffffffffffda RBX: 00007f794ce35fa0 RCX: 00007f794cbbbf79 [ 103.867308][ T6411] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 103.867322][ T6411] RBP: 00007f794b60f090 R08: 0000000000000000 R09: 0000000000000000 [ 103.867338][ T6411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.867375][ T6411] R13: 00007f794ce36038 R14: 00007f794ce35fa0 R15: 00007ffca603f238 [ 103.867401][ T6411] [ 104.241538][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.323862][ T6425] netlink: 'syz.6.578': attribute type 1 has an invalid length. [ 104.336001][ T6425] netlink: 668 bytes leftover after parsing attributes in process `syz.6.578'. [ 104.445743][ T6431] netlink: 1392 bytes leftover after parsing attributes in process `syz.7.579'. [ 104.493386][ T6442] binfmt_misc: register: failed to install interpreter file ./file0 [ 104.620773][ T6453] netlink: 48 bytes leftover after parsing attributes in process `syz.6.586'. [ 104.654057][ T6457] loop4: detected capacity change from 0 to 4096 [ 104.688053][ T6457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.715387][ T6466] syzkaller1: entered promiscuous mode [ 104.721335][ T6466] syzkaller1: entered allmulticast mode [ 104.732397][ T6453] netlink: 20 bytes leftover after parsing attributes in process `syz.6.586'. [ 104.762884][ T6466] xfrm0 speed is unknown, defaulting to 1000 [ 104.878464][ T6466] lo speed is unknown, defaulting to 1000 [ 104.879426][ T6464] netlink: 132 bytes leftover after parsing attributes in process `syz.6.586'. [ 104.925623][ T6471] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.589'. [ 104.965861][ T6469] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.589'. [ 104.982236][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.046663][ T6469] loop7: detected capacity change from 0 to 4096 [ 105.122268][ T6469] EXT4-fs warning (device loop7): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.209013][ T6469] EXT4-fs (loop7): mount failed [ 105.400176][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.409180][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.561753][ T6499] loop7: detected capacity change from 0 to 512 [ 105.612997][ T6499] EXT4-fs: Ignoring removed orlov option [ 105.647025][ T6499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.677809][ T6499] EXT4-fs (loop7): orphan cleanup on readonly fs [ 105.711777][ T6499] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.593: bg 0: block 248: padding at end of block bitmap is not set [ 105.765269][ T6499] loop7: lost filesystem error report for type 5 error -117 [ 105.775253][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 105.791218][ C0] EXT4-fs (loop7): last error at time 1771131553: ext4_validate_block_bitmap:441 [ 105.815333][ T6499] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.593: Failed to acquire dquot type 1 [ 105.849835][ T6499] loop7: lost filesystem error report for type 5 error -117 [ 105.853803][ T6499] EXT4-fs (loop7): 1 truncate cleaned up [ 105.936234][ T6499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.391313][ T3667] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.477163][ T28] kauditd_printk_skb: 151 callbacks suppressed [ 106.477182][ T28] audit: type=1400 audit(1771131553.930:1016): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 106.513106][ T3667] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.536247][ T36] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.585564][ T6511] loop5: detected capacity change from 0 to 1024 [ 106.596096][ T28] audit: type=1400 audit(1771131553.960:1017): avc: denied { setopt } for pid=6505 comm="syz.4.595" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.630440][ T6506] pim6reg: entered allmulticast mode [ 106.651419][ T6511] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 106.669253][ T28] audit: type=1400 audit(1771131554.040:1018): avc: denied { create } for pid=6507 comm="syz.6.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.687160][ T6506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.595'. [ 106.701981][ T6511] System zones: 0-1, 3-36 [ 106.715421][ T6506] tipc: Enabling of bearer rejected, failed to enable media [ 106.724164][ T6515] loop6: detected capacity change from 0 to 164 [ 106.749341][ T6508] pim6reg: left allmulticast mode [ 106.760228][ T6511] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.597: bad orphan inode 134217728 [ 106.798596][ T28] audit: type=1400 audit(1771131554.040:1019): avc: denied { setopt } for pid=6507 comm="syz.6.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.798714][ T6511] loop5: lost filesystem error report for type 5 error -117 [ 106.828315][ T6511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.870697][ T36] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.883222][ T28] audit: type=1400 audit(1771131554.070:1020): avc: denied { connect } for pid=6505 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.914430][ T28] audit: type=1400 audit(1771131554.070:1021): avc: denied { write } for pid=6505 comm="syz.4.595" lport=55745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.936430][ T28] audit: type=1400 audit(1771131554.070:1022): avc: denied { create } for pid=6505 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 106.986126][ T28] audit: type=1400 audit(1771131554.290:1023): avc: denied { mount } for pid=6507 comm="syz.6.596" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 107.011176][ T28] audit: type=1400 audit(1771131554.420:1024): avc: denied { mounton } for pid=6507 comm="syz.6.596" path="/68/file1" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.080279][ T28] audit: type=1400 audit(1771131554.420:1025): avc: denied { bind } for pid=6507 comm="syz.6.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.350346][ T4930] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.448108][ T4923] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.759035][ T6554] loop7: detected capacity change from 0 to 512 [ 107.796631][ T6554] EXT4-fs (loop7): 1 orphan inode deleted [ 107.803153][ T6554] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.881084][ T4930] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.083573][ T6573] netlink: 'syz.5.616': attribute type 12 has an invalid length. [ 108.264002][ T6580] loop5: detected capacity change from 0 to 512 [ 108.325129][ T6580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.348121][ T6585] loop4: detected capacity change from 0 to 512 [ 108.375845][ T6580] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.392104][ T6585] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.423993][ T6585] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.454746][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.618'. [ 108.464602][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.618'. [ 108.490919][ T6580] netlink: 'syz.5.618': attribute type 12 has an invalid length. [ 108.521396][ T6585] EXT4-fs error (device loop4): ext4_init_orphan_info:583: inode #15: comm syz.4.619: iget: bad extra_isize 63 (inode size 256) [ 108.537719][ T6585] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.545794][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 108.548047][ T6585] EXT4-fs (loop4): get orphan inode failed [ 108.562048][ C0] EXT4-fs (loop4): initial error at time 1771131555: ext4_init_orphan_info:583: inode 15 [ 108.562093][ C0] EXT4-fs (loop4): last error at time 1771131555: ext4_init_orphan_info:583: inode 15 [ 108.695860][ T4923] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.720361][ T6585] EXT4-fs (loop4): mount failed [ 108.805533][ T6594] loop5: detected capacity change from 0 to 256 [ 108.942302][ T6601] xfrm0 speed is unknown, defaulting to 1000 [ 109.011970][ T6497] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 109.022130][ T6497] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 109.032133][ T6497] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 109.042411][ T6497] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 109.051509][ T6497] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 109.060398][ T6497] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 109.074687][ T6497] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 109.082983][ T6497] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 109.092498][ T6497] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 109.131308][ T6613] FAULT_INJECTION: forcing a failure. [ 109.131308][ T6613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.150658][ T6497] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 109.160767][ T6611] netlink: 'syz.5.627': attribute type 12 has an invalid length. [ 109.186180][ T6497] hid-generic 0103:0004:0000.0006: hidraw0: HID v0.02 Device [syz0] on syz1 [ 109.205287][ T6613] CPU: 0 UID: 0 PID: 6613 Comm: syz.6.628 Tainted: G W syzkaller #0 PREEMPT(full) [ 109.205325][ T6613] Tainted: [W]=WARN [ 109.205334][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.205350][ T6613] Call Trace: [ 109.205357][ T6613] [ 109.205366][ T6613] __dump_stack+0x1d/0x30 [ 109.205468][ T6613] dump_stack_lvl+0x95/0xd0 [ 109.205493][ T6613] dump_stack+0x15/0x1b [ 109.205520][ T6613] should_fail_ex+0x263/0x280 [ 109.205554][ T6613] should_fail+0xb/0x20 [ 109.205588][ T6613] should_fail_usercopy+0x1a/0x20 [ 109.205623][ T6613] _copy_from_user+0x1c/0xb0 [ 109.205663][ T6613] do_sys_poll+0x137/0xc10 [ 109.205688][ T6613] ? avc_has_perm+0x101/0x190 [ 109.205776][ T6613] ? selinux_file_open+0x2e6/0x330 [ 109.205860][ T6613] ? timespec64_add_safe+0x106/0x150 [ 109.205927][ T6613] __x64_sys_poll+0x12c/0x230 [ 109.205955][ T6613] x64_sys_call+0x2891/0x3020 [ 109.206181][ T6613] do_syscall_64+0x12c/0x370 [ 109.206229][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.206420][ T6613] RIP: 0033:0x7f36f548bf79 [ 109.206445][ T6613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.206471][ T6613] RSP: 002b:00007f36f3edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 109.206499][ T6613] RAX: ffffffffffffffda RBX: 00007f36f5705fa0 RCX: 00007f36f548bf79 [ 109.206518][ T6613] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 109.206542][ T6613] RBP: 00007f36f3edf090 R08: 0000000000000000 R09: 0000000000000000 [ 109.206557][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.206569][ T6613] R13: 00007f36f5706038 R14: 00007f36f5705fa0 R15: 00007ffd2c0fb288 [ 109.206590][ T6613] [ 109.210317][ T6601] lo speed is unknown, defaulting to 1000 [ 109.746837][ T6631] netlink: 'syz.6.634': attribute type 13 has an invalid length. [ 109.805848][ T6601] __nla_validate_parse: 1 callbacks suppressed [ 109.805867][ T6601] netlink: 20 bytes leftover after parsing attributes in process `syz.7.623'. [ 109.900977][ T6607] loop7: detected capacity change from 0 to 512 [ 109.942757][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.952623][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.002031][ T6607] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 110.024474][ T6607] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 110.093862][ T6607] System zones: 0-1, 15-15, 18-18, 34-34 [ 110.130598][ T6607] EXT4-fs (loop7): orphan cleanup on readonly fs [ 110.175418][ T6607] EXT4-fs warning (device loop7): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 110.268953][ T6607] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 110.283488][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.295565][ T6607] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.623: bad orphan inode 16 [ 110.336850][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.348956][ T6607] loop7: lost filesystem error report for type 5 error -117 [ 110.349135][ T6607] ext4_test_bit(bit=15, block=18) = 1 [ 110.358819][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 110.358842][ C1] EXT4-fs (loop7): initial error at time 1771131557: ext4_orphan_get:1417 [ 110.358864][ C1] EXT4-fs (loop7): last error at time 1771131557: ext4_orphan_get:1417 [ 110.420532][ T6607] is_bad_inode(inode)=0 [ 110.440785][ T6607] NEXT_ORPHAN(inode)=0 [ 110.450894][ T6607] max_ino=32 [ 110.455118][ T6607] i_nlink=2 [ 110.540079][ T6607] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.622147][ T6497] lo speed is unknown, defaulting to 1000 [ 110.633661][ T6497] syz0: Port: 1 Link DOWN [ 110.647418][ T4033] lo speed is unknown, defaulting to 1000 [ 110.661997][ T3667] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.695777][ T3667] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.736877][ T3667] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.770206][ T3667] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.805353][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.7.623'. [ 110.976506][ T6650] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa) failed with errno=-22 [ 111.115102][ T4930] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.212026][ T6655] No such timeout policy "syz1" [ 111.341786][ T6668] netlink: 20 bytes leftover after parsing attributes in process `syz.7.643'. [ 111.468550][ T6676] loop4: detected capacity change from 0 to 512 [ 111.479594][ T6676] ext4: Unknown parameter 'posixacl' [ 111.599597][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 111.599688][ T28] audit: type=1400 audit(1771131559.050:1124): avc: denied { read write } for pid=6673 comm="syz.7.646" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.601003][ T6674] loop7: detected capacity change from 0 to 8192 [ 111.608948][ T28] audit: type=1400 audit(1771131559.050:1125): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.692437][ T28] audit: type=1400 audit(1771131559.050:1126): avc: denied { ioctl } for pid=6673 comm="syz.7.646" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.724254][ T28] audit: type=1400 audit(1771131559.100:1127): avc: denied { mounton } for pid=6673 comm="syz.7.646" path="/68/bus" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.769512][ T6683] loop4: detected capacity change from 0 to 512 [ 111.783727][ T6683] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 111.845448][ T28] audit: type=1400 audit(1771131559.210:1128): avc: denied { prog_load } for pid=6682 comm="syz.4.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.870504][ T28] audit: type=1400 audit(1771131559.210:1129): avc: denied { bpf } for pid=6682 comm="syz.4.649" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.902629][ T28] audit: type=1400 audit(1771131559.210:1130): avc: denied { perfmon } for pid=6682 comm="syz.4.649" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.927945][ T6686] netlink: 32 bytes leftover after parsing attributes in process `syz.5.650'. [ 111.933375][ T6683] EXT4-fs (loop4): orphan cleanup on readonly fs [ 111.991498][ T28] audit: type=1400 audit(1771131559.250:1131): avc: denied { create } for pid=6684 comm="syz.5.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.023508][ T6683] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 112.048483][ T28] audit: type=1400 audit(1771131559.250:1132): avc: denied { write } for pid=6684 comm="syz.5.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.048516][ T28] audit: type=1400 audit(1771131559.250:1133): avc: denied { prog_run } for pid=6684 comm="syz.5.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 112.048944][ T6683] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 112.049108][ T6683] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.649: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 112.049285][ T6683] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 112.049554][ T6683] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.649: couldn't read orphan inode 13 (err -117) [ 112.049590][ T6683] loop4: lost filesystem error report for type 5 error -117 [ 112.050180][ T6683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.056546][ T6683] netlink: 16 bytes leftover after parsing attributes in process `syz.4.649'. [ 112.085477][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.645'. [ 112.094356][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.260308][ T6696] netlink: 'syz.4.654': attribute type 1 has an invalid length. [ 112.260346][ T6696] netlink: 668 bytes leftover after parsing attributes in process `syz.4.654'. [ 112.861313][ T6725] FAULT_INJECTION: forcing a failure. [ 112.861313][ T6725] name failslab, interval 1, probability 0, space 0, times 0 [ 112.903966][ T6725] CPU: 0 UID: 0 PID: 6725 Comm: syz.7.661 Tainted: G W syzkaller #0 PREEMPT(full) [ 112.904006][ T6725] Tainted: [W]=WARN [ 112.904013][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 112.904025][ T6725] Call Trace: [ 112.904118][ T6725] [ 112.904191][ T6725] __dump_stack+0x1d/0x30 [ 112.904276][ T6725] dump_stack_lvl+0x95/0xd0 [ 112.904307][ T6725] dump_stack+0x15/0x1b [ 112.904333][ T6725] should_fail_ex+0x263/0x280 [ 112.904427][ T6725] should_failslab+0x8c/0xb0 [ 112.904581][ T6725] __kmalloc_noprof+0xb8/0x4e0 [ 112.904602][ T6725] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 112.904656][ T6725] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 112.904770][ T6725] genl_start+0xe0/0x390 [ 112.904928][ T6725] __netlink_dump_start+0x334/0x520 [ 112.904963][ T6725] genl_family_rcv_msg_dumpit+0x1a5/0x210 [ 112.905144][ T6725] ? __pfx_genl_start+0x10/0x10 [ 112.905183][ T6725] ? __pfx_genl_dumpit+0x10/0x10 [ 112.905220][ T6725] ? __pfx_genl_done+0x10/0x10 [ 112.905265][ T6725] genl_rcv_msg+0x400/0x470 [ 112.905376][ T6725] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 112.905412][ T6725] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 112.905447][ T6725] netlink_rcv_skb+0x123/0x220 [ 112.905536][ T6725] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.905585][ T6725] genl_rcv+0x28/0x40 [ 112.905619][ T6725] netlink_unicast+0x5c0/0x690 [ 112.905647][ T6725] netlink_sendmsg+0x5c8/0x6f0 [ 112.905678][ T6725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.905705][ T6725] ____sys_sendmsg+0x5af/0x600 [ 112.905742][ T6725] ___sys_sendmsg+0x195/0x1e0 [ 112.905863][ T6725] __x64_sys_sendmsg+0xd4/0x160 [ 112.905895][ T6725] x64_sys_call+0x194c/0x3020 [ 112.905927][ T6725] do_syscall_64+0x12c/0x370 [ 112.906053][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.906156][ T6725] RIP: 0033:0x7f68a0e5bf79 [ 112.906177][ T6725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.906201][ T6725] RSP: 002b:00007f689f8b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.906226][ T6725] RAX: ffffffffffffffda RBX: 00007f68a10d5fa0 RCX: 00007f68a0e5bf79 [ 112.906260][ T6725] RDX: 0000000020000044 RSI: 00002000000002c0 RDI: 0000000000000005 [ 112.906276][ T6725] RBP: 00007f689f8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.906292][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.906329][ T6725] R13: 00007f68a10d6038 R14: 00007f68a10d5fa0 R15: 00007ffdb48cb1c8 [ 112.906428][ T6725] [ 113.293282][ T6713] netlink: 64 bytes leftover after parsing attributes in process `syz.5.657'. [ 113.640590][ T6749] loop5: detected capacity change from 0 to 512 [ 113.667100][ T6751] netlink: 'syz.6.668': attribute type 12 has an invalid length. [ 113.728207][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'. [ 113.761071][ T6749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.779541][ T6749] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.808342][ T6749] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.669: corrupted xattr block 33: invalid ea_ino [ 113.864429][ T6749] forcing mempool usage for fserror_report+0x1b4/0x500 [ 113.881548][ T6760] netlink: 24 bytes leftover after parsing attributes in process `syz.6.670'. [ 113.913309][ T6749] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 113.942348][ T6749] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.669: corrupted xattr block 33: invalid ea_ino [ 113.971749][ T6749] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 114.018179][ T6762] loop6: detected capacity change from 0 to 512 [ 114.064726][ T6762] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.082134][ T4923] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.137286][ T6762] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.243619][ T6762] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.671: corrupted xattr block 33: invalid ea_ino [ 114.272603][ T6770] loop5: detected capacity change from 0 to 1024 [ 114.280838][ T6762] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 114.281656][ T6770] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 114.322159][ T6762] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.671: corrupted xattr block 33: invalid ea_ino [ 114.346163][ T6770] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.379411][ T6762] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 114.400575][ T6770] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 114.425748][ T6770] EXT4-fs (loop5): orphan cleanup on readonly fs [ 114.447998][ T4360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.463276][ T6770] EXT4-fs error (device loop5): ext4_read_inode_bitmap:167: comm syz.5.672: Inode bitmap for bg 0 marked uninitialized [ 114.505434][ T6770] loop5: lost filesystem error report for type 5 error -117 [ 114.515467][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 114.525311][ T6770] EXT4-fs (loop5): Remounting filesystem read-only [ 114.533292][ C1] EXT4-fs (loop5): initial error at time 1771131561: ext4_read_inode_bitmap:167 [ 114.553150][ C1] EXT4-fs (loop5): last error at time 1771131561: ext4_read_inode_bitmap:167 [ 114.586119][ T6770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.676030][ T4923] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.793504][ T6795] FAULT_INJECTION: forcing a failure. [ 114.793504][ T6795] name failslab, interval 1, probability 0, space 0, times 0 [ 114.818502][ T6795] CPU: 1 UID: 0 PID: 6795 Comm: syz.7.681 Tainted: G W syzkaller #0 PREEMPT(full) [ 114.818545][ T6795] Tainted: [W]=WARN [ 114.818554][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.818570][ T6795] Call Trace: [ 114.818579][ T6795] [ 114.818587][ T6795] __dump_stack+0x1d/0x30 [ 114.818671][ T6795] dump_stack_lvl+0x95/0xd0 [ 114.818700][ T6795] dump_stack+0x15/0x1b [ 114.818727][ T6795] should_fail_ex+0x263/0x280 [ 114.818820][ T6795] should_failslab+0x8c/0xb0 [ 114.818855][ T6795] __kmalloc_cache_node_noprof+0x6b/0x480 [ 114.818883][ T6795] ? __get_vm_area_node+0x106/0x1d0 [ 114.818935][ T6795] __get_vm_area_node+0x106/0x1d0 [ 114.818974][ T6795] __vmalloc_node_range_noprof+0x291/0x12b0 [ 114.818998][ T6795] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 114.819032][ T6795] ? selinux_file_open+0x2e6/0x330 [ 114.819110][ T6795] ? __rcu_read_unlock+0x4e/0x70 [ 114.819135][ T6795] ? avc_has_perm_noaudit+0xab/0x130 [ 114.819168][ T6795] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 114.819210][ T6795] __vmalloc_noprof+0xa4/0xf0 [ 114.819326][ T6795] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 114.819448][ T6795] bpf_prog_alloc_no_stats+0x47/0x390 [ 114.819480][ T6795] ? bpf_prog_alloc+0x2a/0x150 [ 114.819520][ T6795] bpf_prog_alloc+0x3c/0x150 [ 114.819634][ T6795] bpf_prog_load+0x506/0x1140 [ 114.819670][ T6795] ? security_bpf+0x2b/0x90 [ 114.819720][ T6795] __sys_bpf+0x505/0x7e0 [ 114.819790][ T6795] __x64_sys_bpf+0x41/0x50 [ 114.819867][ T6795] x64_sys_call+0x10cb/0x3020 [ 114.819970][ T6795] do_syscall_64+0x12c/0x370 [ 114.820015][ T6795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.820044][ T6795] RIP: 0033:0x7f68a0e5bf79 [ 114.820135][ T6795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.820155][ T6795] RSP: 002b:00007f689f8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.820234][ T6795] RAX: ffffffffffffffda RBX: 00007f68a10d5fa0 RCX: 00007f68a0e5bf79 [ 114.820248][ T6795] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 114.820262][ T6795] RBP: 00007f689f8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 114.820278][ T6795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.820294][ T6795] R13: 00007f68a10d6038 R14: 00007f68a10d5fa0 R15: 00007ffdb48cb1c8 [ 114.820384][ T6795] [ 114.820393][ T6795] syz.7.681: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 115.008545][ T6791] __nla_validate_parse: 1 callbacks suppressed [ 115.008596][ T6791] netlink: 32 bytes leftover after parsing attributes in process `syz.5.679'. [ 115.087902][ T6795] ,cpuset=/,mems_allowed=0 [ 115.136612][ T6795] CPU: 1 UID: 0 PID: 6795 Comm: syz.7.681 Tainted: G W syzkaller #0 PREEMPT(full) [ 115.136728][ T6795] Tainted: [W]=WARN [ 115.136734][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.136748][ T6795] Call Trace: [ 115.136776][ T6795] [ 115.136787][ T6795] __dump_stack+0x1d/0x30 [ 115.136821][ T6795] dump_stack_lvl+0x95/0xd0 [ 115.136848][ T6795] dump_stack+0x15/0x1b [ 115.136899][ T6795] warn_alloc+0x145/0x1c0 [ 115.136926][ T6795] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 115.136950][ T6795] ? selinux_file_open+0x2e6/0x330 [ 115.137043][ T6795] ? __rcu_read_unlock+0x4e/0x70 [ 115.137090][ T6795] ? avc_has_perm_noaudit+0xab/0x130 [ 115.137123][ T6795] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 115.137156][ T6795] __vmalloc_noprof+0xa4/0xf0 [ 115.137176][ T6795] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 115.137295][ T6795] bpf_prog_alloc_no_stats+0x47/0x390 [ 115.137346][ T6795] ? bpf_prog_alloc+0x2a/0x150 [ 115.137441][ T6795] bpf_prog_alloc+0x3c/0x150 [ 115.137483][ T6795] bpf_prog_load+0x506/0x1140 [ 115.137520][ T6795] ? security_bpf+0x2b/0x90 [ 115.137601][ T6795] __sys_bpf+0x505/0x7e0 [ 115.137668][ T6795] __x64_sys_bpf+0x41/0x50 [ 115.137754][ T6795] x64_sys_call+0x10cb/0x3020 [ 115.137787][ T6795] do_syscall_64+0x12c/0x370 [ 115.137846][ T6795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.137953][ T6795] RIP: 0033:0x7f68a0e5bf79 [ 115.138044][ T6795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.138068][ T6795] RSP: 002b:00007f689f8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.138089][ T6795] RAX: ffffffffffffffda RBX: 00007f68a10d5fa0 RCX: 00007f68a0e5bf79 [ 115.138178][ T6795] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 115.138195][ T6795] RBP: 00007f689f8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 115.138209][ T6795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.138223][ T6795] R13: 00007f68a10d6038 R14: 00007f68a10d5fa0 R15: 00007ffdb48cb1c8 [ 115.138306][ T6795] [ 115.138473][ T6795] Mem-Info: [ 115.215687][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 115.231201][ T6801] loop6: detected capacity change from 0 to 512 [ 115.277556][ T6795] active_anon:21338 inactive_anon:147 isolated_anon:0 [ 115.277556][ T6795] active_file:27700 inactive_file:2352 isolated_file:0 [ 115.277556][ T6795] unevictable:0 dirty:467 writeback:1 [ 115.277556][ T6795] slab_reclaimable:3756 slab_unreclaimable:55112 [ 115.277556][ T6795] mapped:35014 shmem:11249 pagetables:1545 [ 115.277556][ T6795] sec_pagetables:0 bounce:0 [ 115.277556][ T6795] kernel_misc_reclaimable:0 [ 115.277556][ T6795] free:1808534 free_pcp:21303 free_cma:0 [ 115.545294][ T6795] Node 0 active_anon:77580kB inactive_anon:588kB active_file:110800kB inactive_file:9408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143536kB dirty:1868kB writeback:4kB shmem:37224kB kernel_stack:4736kB pagetables:6180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 115.597967][ T6801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.625567][ T6795] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.659470][ T6801] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.686892][ T6801] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.682: corrupted xattr block 33: invalid ea_ino [ 115.700667][ T6795] lowmem_reserve[]: 0 2879 7857 7857 [ 115.710898][ T6801] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 115.725790][ T6795] Node 0 DMA32 free:2944800kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948324kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 115.776281][ T6801] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.682: corrupted xattr block 33: invalid ea_ino [ 115.827065][ T6807] netlink: 'syz.1.683': attribute type 1 has an invalid length. [ 115.836290][ T6801] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 115.847626][ T6795] lowmem_reserve[]: 0 0 4978 4978 [ 115.854551][ T6795] Node 0 Normal free:4282408kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:78232kB inactive_anon:588kB active_file:110800kB inactive_file:9412kB unevictable:0kB writepending:1876kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:80864kB local_pcp:57232kB free_cma:0kB [ 115.937810][ T6809] loop5: detected capacity change from 0 to 8192 [ 115.947189][ T6795] lowmem_reserve[]: 0 0 0 0 [ 115.952229][ T6795] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 115.970619][ T6807] 8021q: adding VLAN 0 to HW filter on device bond4 [ 115.980256][ T4360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.007505][ T6809] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 116.025411][ T6809] FAT-fs (loop5): Filesystem has been set read-only [ 116.035332][ T6809] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 116.037678][ T6795] Node 0 [ 116.055095][ T6809] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 116.072420][ T6814] tipc: Enabling of bearer rejected, failed to enable media [ 116.082131][ T6795] DMA32: 2*4kB (M) 1*8kB (M) [ 116.082221][ T6809] syz.5.684: attempt to access beyond end of device [ 116.082221][ T6809] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 116.082248][ T6809] Buffer I/O error on dev loop5, logical block 57847, async page read [ 116.116806][ T6795] 5*16kB (M) 2*32kB (M) 2*64kB (M) 4*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944800kB [ 116.119826][ T6813] loop6: detected capacity change from 0 to 512 [ 116.162475][ T6795] Node 0 Normal: 1329*4kB (UM) 485*8kB (UM) 85*16kB (UM) 356*32kB (UME) 414*64kB (M) 40*128kB (UM) 95*256kB (UME) 85*512kB (UME) 54*1024kB (UM) 43*2048kB (UM) 981*4096kB (UM) = 4282940kB [ 116.179957][ T6809] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 116.220108][ T6807] vlan2: entered allmulticast mode [ 116.228703][ T6795] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 116.235528][ T6809] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 116.255900][ T6809] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 116.274650][ T6795] 41843 total pagecache pages [ 116.303283][ T6807] veth0_to_bond: entered allmulticast mode [ 116.311391][ T6795] 149 pages in swap cache [ 116.319236][ T6813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.325596][ T6795] Free swap = 124408kB [ 116.360566][ T6795] Total swap = 124996kB [ 116.395340][ T6795] 2097051 pages RAM [ 116.410133][ T6795] 0 pages HighMem/MovableOnly [ 116.429696][ T6813] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.453998][ T6807] bond4: (slave vlan2): making interface the new active one [ 116.456176][ T6795] 81570 pages reserved [ 116.504935][ T6818] netlink: 32 bytes leftover after parsing attributes in process `syz.5.686'. [ 116.519256][ T6818] program syz.5.686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.551242][ T6807] bond4: (slave vlan2): Enslaving as an active interface with an up link [ 116.553400][ T6821] netlink: 28 bytes leftover after parsing attributes in process `syz.6.685'. [ 116.599615][ T6813] 8021q: VLANs not supported on gre0 [ 116.610152][ T28] kauditd_printk_skb: 136 callbacks suppressed [ 116.610189][ T28] audit: type=1400 audit(1771131564.060:1270): avc: denied { mount } for pid=6819 comm="syz.7.687" name="/" dev="ramfs" ino=16560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 116.645745][ T6821] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.685: corrupted xattr block 33: invalid ea_ino [ 116.687614][ T6821] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 116.700420][ T6821] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.685: corrupted xattr block 33: invalid ea_ino [ 116.722681][ T6821] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 116.756696][ T28] audit: type=1400 audit(1771131564.210:1271): avc: denied { create } for pid=6825 comm="syz.4.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 116.818204][ T4360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.894569][ T28] audit: type=1400 audit(1771131564.340:1272): avc: denied { validate_trans } for pid=6836 comm="syz.7.691" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 116.917163][ T6832] FAULT_INJECTION: forcing a failure. [ 116.917163][ T6832] name failslab, interval 1, probability 0, space 0, times 0 [ 116.930629][ T28] audit: type=1400 audit(1771131564.340:1273): avc: denied { read append } for pid=6836 comm="syz.7.691" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 116.970955][ T6832] CPU: 1 UID: 0 PID: 6832 Comm: syz.4.689 Tainted: G W syzkaller #0 PREEMPT(full) [ 116.970988][ T6832] Tainted: [W]=WARN [ 116.970995][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 116.971045][ T6832] Call Trace: [ 116.971063][ T6832] [ 116.971073][ T6832] __dump_stack+0x1d/0x30 [ 116.971116][ T6832] dump_stack_lvl+0x95/0xd0 [ 116.971144][ T6832] dump_stack+0x15/0x1b [ 116.971165][ T6832] should_fail_ex+0x263/0x280 [ 116.971197][ T6832] ? nl802154_dump_wpan_phy+0x7a/0x4d0 [ 116.971255][ T6832] should_failslab+0x8c/0xb0 [ 116.971381][ T6832] __kmalloc_cache_noprof+0x5f/0x410 [ 116.971450][ T6832] ? __mutex_lock_slowpath+0xa/0x10 [ 116.971487][ T6832] nl802154_dump_wpan_phy+0x7a/0x4d0 [ 116.971525][ T6832] genl_dumpit+0xac/0x110 [ 116.971595][ T6832] netlink_dump+0x455/0x8a0 [ 116.971693][ T6832] ? genl_start+0x117/0x390 [ 116.971743][ T6832] __netlink_dump_start+0x43e/0x520 [ 116.971794][ T6832] genl_family_rcv_msg_dumpit+0x1a5/0x210 [ 116.971834][ T6832] ? __pfx_genl_start+0x10/0x10 [ 116.971880][ T6832] ? __pfx_genl_dumpit+0x10/0x10 [ 116.971966][ T6832] ? __pfx_genl_done+0x10/0x10 [ 116.972019][ T6832] genl_rcv_msg+0x400/0x470 [ 116.972061][ T6832] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 116.972104][ T6832] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 116.972216][ T6832] netlink_rcv_skb+0x123/0x220 [ 116.972249][ T6832] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.972376][ T6832] genl_rcv+0x28/0x40 [ 116.972436][ T6832] netlink_unicast+0x5c0/0x690 [ 116.972471][ T6832] netlink_sendmsg+0x5c8/0x6f0 [ 116.972529][ T6832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.972559][ T6832] ____sys_sendmsg+0x5af/0x600 [ 116.972631][ T6832] ___sys_sendmsg+0x195/0x1e0 [ 116.972684][ T6832] __x64_sys_sendmsg+0xd4/0x160 [ 116.972723][ T6832] x64_sys_call+0x194c/0x3020 [ 116.972757][ T6832] do_syscall_64+0x12c/0x370 [ 116.972839][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.972927][ T6832] RIP: 0033:0x7f794cbbbf79 [ 116.972948][ T6832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.972972][ T6832] RSP: 002b:00007f794b60f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.973065][ T6832] RAX: ffffffffffffffda RBX: 00007f794ce35fa0 RCX: 00007f794cbbbf79 [ 116.973124][ T6832] RDX: 0000000020000044 RSI: 00002000000002c0 RDI: 0000000000000005 [ 116.973141][ T6832] RBP: 00007f794b60f090 R08: 0000000000000000 R09: 0000000000000000 [ 116.973154][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.973170][ T6832] R13: 00007f794ce36038 R14: 00007f794ce35fa0 R15: 00007ffca603f238 [ 116.973197][ T6832] [ 116.979692][ T28] audit: type=1400 audit(1771131564.340:1274): avc: denied { open } for pid=6836 comm="syz.7.691" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.395673][ T28] audit: type=1400 audit(1771131564.470:1275): avc: denied { create } for pid=6836 comm="syz.7.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 117.462895][ T6841] xfrm0 speed is unknown, defaulting to 1000 [ 117.466079][ T28] audit: type=1400 audit(1771131564.470:1276): avc: denied { write } for pid=6836 comm="syz.7.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 117.567032][ T28] audit: type=1400 audit(1771131564.950:1277): avc: denied { mount } for pid=6840 comm="syz.5.693" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 117.618101][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.647154][ T28] audit: type=1400 audit(1771131564.960:1278): avc: denied { bind } for pid=6839 comm="syz.6.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.685475][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.709690][ T6847] loop9: detected capacity change from 0 to 7 [ 117.738775][ T28] audit: type=1400 audit(1771131564.980:1279): avc: denied { allowed } for pid=6844 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 117.838689][ T6841] lo speed is unknown, defaulting to 1000 [ 118.176061][ T6863] loop4: detected capacity change from 0 to 8192 [ 118.207063][ T6865] xfrm0 speed is unknown, defaulting to 1000 [ 118.310942][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'. [ 118.336342][ T6871] netlink: 40 bytes leftover after parsing attributes in process `syz.1.701'. [ 118.416543][ T6865] lo speed is unknown, defaulting to 1000 [ 118.511178][ T6879] loop4: detected capacity change from 0 to 1024 [ 118.530000][ T6879] EXT4-fs: Ignoring removed orlov option [ 118.574786][ T6883] loop5: detected capacity change from 0 to 128 [ 118.589308][ T6879] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 118.623697][ T6881] FAULT_INJECTION: forcing a failure. [ 118.623697][ T6881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.664375][ T6881] CPU: 1 UID: 0 PID: 6881 Comm: syz.1.705 Tainted: G W syzkaller #0 PREEMPT(full) [ 118.664418][ T6881] Tainted: [W]=WARN [ 118.664461][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.664476][ T6881] Call Trace: [ 118.664483][ T6881] [ 118.664492][ T6881] __dump_stack+0x1d/0x30 [ 118.664578][ T6881] dump_stack_lvl+0x95/0xd0 [ 118.664667][ T6881] dump_stack+0x15/0x1b [ 118.664693][ T6881] should_fail_ex+0x263/0x280 [ 118.664717][ T6881] should_fail+0xb/0x20 [ 118.664797][ T6881] should_fail_usercopy+0x1a/0x20 [ 118.664830][ T6881] _copy_to_user+0x20/0xa0 [ 118.664861][ T6881] simple_read_from_buffer+0xb5/0x130 [ 118.664898][ T6881] proc_fail_nth_read+0x10e/0x150 [ 118.664952][ T6881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.664985][ T6881] vfs_read+0x1ab/0x7f0 [ 118.664990][ T6879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.665022][ T6881] ? __rcu_read_unlock+0x4e/0x70 [ 118.665045][ T6881] ? __fget_files+0x184/0x1c0 [ 118.665145][ T6881] ? mutex_lock+0x57/0x90 [ 118.665297][ T6881] ksys_read+0xdc/0x1a0 [ 118.665396][ T6881] __x64_sys_read+0x40/0x50 [ 118.665488][ T6881] x64_sys_call+0x2886/0x3020 [ 118.665576][ T6881] do_syscall_64+0x12c/0x370 [ 118.665757][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.665896][ T6881] RIP: 0033:0x7f39bc71c84e [ 118.665953][ T6881] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 118.665990][ T6881] RSP: 002b:00007f39bb1aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.666057][ T6881] RAX: ffffffffffffffda RBX: 00007f39bb1af6c0 RCX: 00007f39bc71c84e [ 118.666103][ T6881] RDX: 000000000000000f RSI: 00007f39bb1af0a0 RDI: 0000000000000004 [ 118.666149][ T6881] RBP: 00007f39bb1af090 R08: 0000000000000000 R09: 0000000000000000 [ 118.666193][ T6881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.666230][ T6881] R13: 00007f39bc9d6038 R14: 00007f39bc9d5fa0 R15: 00007ffd6defe888 [ 118.666263][ T6881] [ 118.667530][ T6883] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.953660][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.000487][ T6883] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.216669][ T4923] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.490225][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.712'. [ 119.515540][ T6908] xfrm0 speed is unknown, defaulting to 1000 [ 119.537071][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.712'. [ 119.596884][ T6908] lo speed is unknown, defaulting to 1000 [ 119.789563][ T6920] macsec0: entered promiscuous mode [ 119.821053][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 119.886658][ T6920] veth1_macvtap: left promiscuous mode [ 119.959014][ T6920] macsec0 (unregistering): left promiscuous mode [ 120.020439][ T6926] netlink: 'syz.4.717': attribute type 10 has an invalid length. [ 120.045643][ T6926] macvlan1: entered allmulticast mode [ 120.056847][ T6926] veth1_vlan: entered allmulticast mode [ 120.074823][ T6926] team0: Port device macvlan1 added [ 120.091626][ T6924] loop7: detected capacity change from 0 to 8192 [ 120.529264][ T6947] xfrm0 speed is unknown, defaulting to 1000 [ 120.614396][ T6947] lo speed is unknown, defaulting to 1000 [ 120.830460][ T6957] loop7: detected capacity change from 0 to 1024 [ 121.086789][ T6957] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 121.097867][ T6957] System zones: 0-1, 3-36 [ 121.111594][ T6957] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.725: bad orphan inode 134217728 [ 121.174908][ T6957] loop7: lost filesystem error report for type 5 error -117 [ 121.175248][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 121.193432][ C0] EXT4-fs (loop7): initial error at time 1771131568: ext4_orphan_get:1417 [ 121.202492][ C0] EXT4-fs (loop7): last error at time 1771131568: ext4_orphan_get:1417 [ 121.221842][ T6957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.699385][ T28] kauditd_printk_skb: 176 callbacks suppressed [ 121.699405][ T28] audit: type=1400 audit(1771131569.140:1456): avc: denied { read } for pid=6993 comm="syz.4.728" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.699442][ T28] audit: type=1400 audit(1771131569.140:1457): avc: denied { open } for pid=6993 comm="syz.4.728" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.699535][ T28] audit: type=1400 audit(1771131569.140:1458): avc: denied { ioctl } for pid=6993 comm="syz.4.728" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.707855][ T28] audit: type=1400 audit(1771131569.160:1459): avc: denied { unmount } for pid=4930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 121.720110][ T28] audit: type=1400 audit(1771131569.170:1460): avc: denied { create } for pid=6998 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.721667][ T28] audit: type=1400 audit(1771131569.170:1461): avc: denied { write } for pid=6998 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.722773][ T4930] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.759737][ T28] audit: type=1400 audit(1771131569.210:1462): avc: denied { create } for pid=6998 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.767321][ T28] audit: type=1400 audit(1771131569.220:1463): avc: denied { write } for pid=6998 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.121443][ T28] audit: type=1400 audit(1771131569.490:1464): avc: denied { read } for pid=6998 comm="syz.4.729" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 122.121629][ T28] audit: type=1400 audit(1771131569.490:1465): avc: denied { open } for pid=6998 comm="syz.4.729" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 122.540521][ T7005] xfrm0 speed is unknown, defaulting to 1000 [ 123.007976][ T7018] 9pnet_fd: p9_fd_create_unix (7018): problem connecting socket: ./file1: -1 [ 124.102810][ T7005] lo speed is unknown, defaulting to 1000 [ 124.258102][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.733'. [ 124.579187][ T7033] netlink: 'syz.6.738': attribute type 1 has an invalid length. [ 124.588352][ T7033] netlink: 668 bytes leftover after parsing attributes in process `syz.6.738'. [ 124.725644][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.742'. [ 124.813035][ T7053] netlink: 'syz.6.740': attribute type 4 has an invalid length. [ 125.062873][ T7062] loop4: detected capacity change from 0 to 2048 [ 125.105390][ T7064] netlink: 20 bytes leftover after parsing attributes in process `syz.6.746'. [ 125.163145][ T7064] loop6: detected capacity change from 0 to 1024 [ 125.194044][ T3302] Alternate GPT is invalid, using primary GPT. [ 125.208594][ T3302] loop4: p2 p3 p7 [ 125.242159][ T7062] Alternate GPT is invalid, using primary GPT. [ 125.242633][ T7072] syzkaller0: entered promiscuous mode [ 125.250599][ T7064] EXT4-fs: Ignoring removed bh option [ 125.257024][ T7072] syzkaller0: entered allmulticast mode [ 125.270748][ T7062] loop4: p2 p3 p7 [ 125.314264][ T7077] loop5: detected capacity change from 0 to 512 [ 125.344228][ T7064] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.374767][ T7079] netlink: 'syz.1.751': attribute type 1 has an invalid length. [ 125.400288][ T7079] netlink: 668 bytes leftover after parsing attributes in process `syz.1.751'. [ 125.444173][ T7064] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.461926][ T7077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.495480][ T7077] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.524219][ T7086] netlink: 76 bytes leftover after parsing attributes in process `syz.1.752'. [ 125.621821][ T7064] EXT4-fs (loop6): orphan cleanup on readonly fs [ 125.644488][ T7088] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.750: corrupted xattr block 33: invalid ea_ino [ 125.686494][ T7064] EXT4-fs error (device loop6): ext4_quota_enable:7194: comm syz.6.746: inode #2304: comm syz.6.746: iget: illegal inode # [ 125.698563][ T7088] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 125.735889][ T7088] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.750: corrupted xattr block 33: invalid ea_ino [ 125.753015][ T7064] loop6: lost filesystem error report for type 5 error -117 [ 125.755237][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 125.770412][ C0] EXT4-fs (loop6): initial error at time 1771131573: ext4_quota_enable:7194 [ 125.780153][ C0] EXT4-fs (loop6): last error at time 1771131573: ext4_quota_enable:7194 [ 125.790246][ T7064] EXT4-fs error (device loop6): ext4_quota_enable:7197: comm syz.6.746: Bad quota inode: 2304, type: 2 [ 125.810066][ T7093] loop7: detected capacity change from 0 to 128 [ 125.819355][ T7088] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 125.819451][ T7064] loop6: lost filesystem error report for type 5 error -117 [ 125.835154][ T7064] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 125.874769][ T7093] syz.7.754: attempt to access beyond end of device [ 125.874769][ T7093] loop7: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 125.935997][ T4923] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.974470][ T7093] syz.7.754: attempt to access beyond end of device [ 125.974470][ T7093] loop7: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 125.976246][ T7093] syz.7.754: attempt to access beyond end of device [ 125.976246][ T7093] loop7: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 125.976283][ T7093] Buffer I/O error on dev loop7, logical block 87, lost async page write [ 125.976306][ T7093] syz.7.754: attempt to access beyond end of device [ 125.976306][ T7093] loop7: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 125.976333][ T7093] Buffer I/O error on dev loop7, logical block 88, lost async page write [ 126.030052][ T7093] syz.7.754: attempt to access beyond end of device [ 126.030052][ T7093] loop7: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 126.030427][ T7093] syz.7.754: attempt to access beyond end of device [ 126.030427][ T7093] loop7: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 126.030456][ T7093] Buffer I/O error on dev loop7, logical block 91, lost async page write [ 126.030474][ T7093] syz.7.754: attempt to access beyond end of device [ 126.030474][ T7093] loop7: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 126.030550][ T7093] Buffer I/O error on dev loop7, logical block 92, lost async page write [ 126.030680][ T7093] syz.7.754: attempt to access beyond end of device [ 126.030680][ T7093] loop7: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 126.030918][ T7093] syz.7.754: attempt to access beyond end of device [ 126.030918][ T7093] loop7: rw=8390657, sector=206, nr_sectors = 2 limit=128 [ 126.030943][ T7093] Buffer I/O error on dev loop7, logical block 103, lost async page write [ 126.031029][ T7093] syz.7.754: attempt to access beyond end of device [ 126.031029][ T7093] loop7: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 126.031051][ T7093] Buffer I/O error on dev loop7, logical block 104, lost async page write [ 126.031366][ T7093] Buffer I/O error on dev loop7, logical block 107, lost async page write [ 126.031459][ T7093] Buffer I/O error on dev loop7, logical block 108, lost async page write [ 126.031793][ T7093] Buffer I/O error on dev loop7, logical block 119, lost async page write [ 126.031865][ T7093] Buffer I/O error on dev loop7, logical block 120, lost async page write [ 126.141145][ T7064] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 126.389207][ T7064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.931306][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 126.931323][ T28] audit: type=1400 audit(1771131574.380:1522): avc: denied { bind } for pid=7115 comm="syz.4.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.007527][ T7064] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.027233][ T28] audit: type=1400 audit(1771131574.430:1523): avc: denied { mount } for pid=7119 comm="syz.5.762" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 127.063188][ T7121] bond1: entered allmulticast mode [ 127.103039][ T28] audit: type=1400 audit(1771131574.550:1524): avc: denied { prog_load } for pid=7123 comm="syz.6.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 127.145674][ T7121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.163296][ T28] audit: type=1400 audit(1771131574.590:1525): avc: denied { bpf } for pid=7123 comm="syz.6.763" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.217328][ T7127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.764'. [ 127.239038][ T28] audit: type=1400 audit(1771131574.590:1526): avc: denied { perfmon } for pid=7123 comm="syz.6.763" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.312291][ T28] audit: type=1400 audit(1771131574.610:1527): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.345511][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.5.765'. [ 127.399676][ T28] audit: type=1400 audit(1771131574.610:1528): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.505414][ T28] audit: type=1400 audit(1771131574.610:1529): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 127.637054][ T28] audit: type=1400 audit(1771131574.680:1530): avc: denied { allowed } for pid=7123 comm="syz.6.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 127.721670][ T28] audit: type=1400 audit(1771131574.740:1531): avc: denied { create } for pid=7128 comm="syz.5.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.964059][ T7159] loop9: detected capacity change from 0 to 7 [ 128.032175][ T7150] loop7: detected capacity change from 0 to 512 [ 128.269074][ T7150] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.764551][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.774'. [ 129.086819][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.097825][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.229058][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.244287][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.314199][ T3667] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.335337][ T3667] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.406482][ T3667] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.426723][ T4930] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.438995][ T3667] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.613233][ T7218] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 129.648924][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.7.782'. [ 129.665510][ T7218] netlink: 668 bytes leftover after parsing attributes in process `syz.1.784'. [ 129.773592][ T7229] netlink: 'syz.4.785': attribute type 1 has an invalid length. [ 129.805369][ T7229] netlink: 668 bytes leftover after parsing attributes in process `syz.4.785'. [ 129.947316][ T7234] tmpfs: Unknown parameter '000000000000000005699' [ 130.948022][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.794'. [ 131.520609][ T7276] netlink: 'syz.1.796': attribute type 1 has an invalid length. [ 131.723792][ T7288] loop5: detected capacity change from 0 to 512 [ 131.810887][ T7288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.835522][ T7288] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.944497][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 131.944513][ T28] audit: type=1400 audit(1771131579.390:1666): avc: denied { unmount } for pid=4923 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 132.038211][ T7299] syzkaller0: entered promiscuous mode [ 132.044480][ T7299] syzkaller0: entered allmulticast mode [ 132.118873][ T4923] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.158591][ T7305] netlink: 28 bytes leftover after parsing attributes in process `syz.6.803'. [ 132.239246][ T7302] loop7: detected capacity change from 0 to 4096 [ 132.292323][ T7307] netlink: 'syz.1.806': attribute type 1 has an invalid length. [ 132.348990][ T7302] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.379331][ T7307] netlink: 668 bytes leftover after parsing attributes in process `syz.1.806'. [ 132.565080][ T7302] netlink: 'syz.7.805': attribute type 17 has an invalid length. [ 132.640814][ T7302] netlink: 152 bytes leftover after parsing attributes in process `syz.7.805'. [ 132.697094][ T28] audit: type=1400 audit(1771131579.490:1667): avc: denied { ioctl } for pid=7298 comm="syz.6.803" path="socket:[16213]" dev="sockfs" ino=16213 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.728700][ T28] audit: type=1400 audit(1771131579.530:1668): avc: denied { create } for pid=7298 comm="syz.6.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.750154][ T28] audit: type=1400 audit(1771131579.530:1669): avc: denied { write } for pid=7298 comm="syz.6.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.773429][ T28] audit: type=1400 audit(1771131579.600:1670): avc: denied { create } for pid=7296 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.799200][ T28] audit: type=1400 audit(1771131579.710:1671): avc: denied { map_create } for pid=7306 comm="syz.1.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 132.823862][ T28] audit: type=1400 audit(1771131579.710:1672): avc: denied { open } for pid=7306 comm="syz.1.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 132.944867][ T7302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.962804][ T28] audit: type=1400 audit(1771131579.710:1673): avc: denied { kernel } for pid=7306 comm="syz.1.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 133.005334][ T28] audit: type=1400 audit(1771131579.720:1674): avc: denied { write } for pid=7306 comm="syz.1.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 133.034835][ T28] audit: type=1400 audit(1771131579.770:1675): avc: denied { mounton } for pid=7300 comm="syz.7.805" path="/93/file0" dev="tmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 133.560669][ T4930] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.787896][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.810'. [ 134.926468][ T7360] netlink: 'syz.4.821': attribute type 12 has an invalid length. [ 135.057651][ T7365] loop4: detected capacity change from 0 to 512 [ 135.150275][ T7369] loop6: detected capacity change from 0 to 1024 [ 135.157739][ T7365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.182460][ T7369] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.225998][ T7365] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.250234][ T7369] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 135.269078][ T7365] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.822: corrupted xattr block 33: invalid ea_ino [ 135.272192][ T7369] EXT4-fs (loop6): orphan cleanup on readonly fs [ 135.297652][ T7381] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 135.343166][ T7369] EXT4-fs error (device loop6): ext4_acquire_dquot:7003: comm syz.6.824: Failed to acquire dquot type 0 [ 135.346234][ T7365] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 135.354946][ T7369] loop6: lost filesystem error report for type 5 error -117 [ 135.364500][ T7381] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 135.364524][ T7369] EXT4-fs error (device loop6): ext4_acquire_dquot:7003: comm syz.6.824: Failed to acquire dquot type 0 [ 135.372600][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 135.372633][ C1] EXT4-fs (loop6): initial error at time 1771131582: ext4_acquire_dquot:7003 [ 135.372658][ C1] EXT4-fs (loop6): last error at time 1771131582: ext4_acquire_dquot:7003 [ 135.425368][ T7369] loop6: lost filesystem error report for type 5 error -117 [ 135.425625][ T7369] EXT4-fs error (device loop6): ext4_free_blocks:6726: comm syz.6.824: Freeing blocks not in datazone - block = 0, count = 4096 [ 135.447973][ T7365] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.822: corrupted xattr block 33: invalid ea_ino [ 135.477408][ T7369] loop6: lost filesystem error report for type 5 error -117 [ 135.477772][ T7369] EXT4-fs error (device loop6): ext4_acquire_dquot:7003: comm syz.6.824: Failed to acquire dquot type 0 [ 135.505791][ T7369] loop6: lost filesystem error report for type 5 error -117 [ 135.505939][ T7369] EXT4-fs (loop6): 1 orphan inode deleted [ 135.535403][ T7369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.557028][ T7391] loop5: detected capacity change from 0 to 512 [ 135.566537][ T7365] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 135.599993][ T7391] EXT4-fs (loop5): filesystem is read-only [ 135.616338][ T7391] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 135.634151][ T4360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.657313][ T7391] EXT4-fs (loop5): filesystem is read-only [ 135.663711][ T7391] EXT4-fs (loop5): orphan cleanup on readonly fs [ 135.682835][ T7391] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.828: bg 0: block 64: padding at end of block bitmap is not set [ 135.697635][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.6.830'. [ 135.709011][ T7391] loop5: lost filesystem error report for type 5 error -117 [ 135.709300][ T7391] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 135.717240][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 135.717260][ C1] EXT4-fs (loop5): initial error at time 1771131583: ext4_validate_block_bitmap:441 [ 135.717281][ C1] EXT4-fs (loop5): last error at time 1771131583: ext4_validate_block_bitmap:441 [ 135.767438][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.796276][ T7399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.831054][ T7391] loop5: lost filesystem error report for type 5 error -117 [ 135.831381][ T7391] EXT4-fs (loop5): 1 orphan inode deleted [ 135.856230][ T7391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 135.954328][ T4923] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.057963][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.835'. [ 136.064888][ T7418] netlink: 'syz.6.836': attribute type 1 has an invalid length. [ 136.076371][ T7418] netlink: 668 bytes leftover after parsing attributes in process `syz.6.836'. [ 136.189167][ T7431] netlink: 'syz.6.838': attribute type 39 has an invalid length. [ 136.217255][ T7433] loop4: detected capacity change from 0 to 512 [ 136.235677][ T7419] bridge1: entered allmulticast mode [ 136.257502][ T7433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.281700][ T7433] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.295774][ T7433] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.841: corrupted xattr block 33: invalid ea_ino [ 136.312588][ T7433] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 136.322113][ T7433] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.841: corrupted xattr block 33: invalid ea_ino [ 136.351198][ T7433] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 136.357483][ T7443] loop7: detected capacity change from 0 to 764 [ 136.385815][ T7443] rock: directory entry would overflow storage [ 136.392828][ T7443] rock: sig=0x5245, size=8, remaining=5 [ 136.419651][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.589683][ T7460] netlink: 'syz.1.849': attribute type 1 has an invalid length. [ 136.600220][ T7460] netlink: 668 bytes leftover after parsing attributes in process `syz.1.849'. [ 136.832898][ T7475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7475 comm=syz.6.854 [ 136.869078][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.851'. [ 136.896171][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.854'. [ 136.970615][ T28] kauditd_printk_skb: 189 callbacks suppressed [ 136.970652][ T28] audit: type=1400 audit(1771131584.420:1859): avc: denied { ioctl } for pid=7477 comm="syz.6.855" path="socket:[17592]" dev="sockfs" ino=17592 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 137.174821][ T28] audit: type=1400 audit(1771131584.470:1860): avc: denied { ioctl } for pid=7453 comm="syz.4.847" path="socket:[17580]" dev="sockfs" ino=17580 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.228806][ T28] audit: type=1400 audit(1771131584.470:1861): avc: denied { watch } for pid=7477 comm="syz.6.855" path="/126/file0" dev="tmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.257722][ T28] audit: type=1400 audit(1771131584.600:1862): avc: denied { write } for pid=7487 comm="syz.6.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 137.283708][ T28] audit: type=1400 audit(1771131584.680:1863): avc: denied { unmount } for pid=4930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 137.319746][ T7499] pim6reg9: entered allmulticast mode [ 137.345619][ T28] audit: type=1400 audit(1771131584.710:1864): avc: denied { read } for pid=7487 comm="syz.6.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.387775][ T28] audit: type=1400 audit(1771131584.760:1865): avc: denied { write } for pid=7487 comm="syz.6.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.421152][ T7502] loop6: detected capacity change from 0 to 512 [ 137.469008][ T7506] netlink: 'syz.4.862': attribute type 1 has an invalid length. [ 137.488743][ T7506] netlink: 668 bytes leftover after parsing attributes in process `syz.4.862'. [ 137.510060][ T7502] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 137.522961][ T7502] EXT4-fs (loop6): orphan cleanup on readonly fs [ 137.537719][ T28] audit: type=1400 audit(1771131584.760:1866): avc: denied { create } for pid=7498 comm="syz.7.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.590703][ T7502] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #16: comm syz.6.858: corrupted inode contents [ 137.625769][ T7514] netlink: 56 bytes leftover after parsing attributes in process `syz.4.866'. [ 137.645741][ T28] audit: type=1400 audit(1771131584.770:1867): avc: denied { ioctl } for pid=7498 comm="syz.7.860" path="socket:[18546]" dev="sockfs" ino=18546 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.655596][ T7502] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 137.715420][ T7502] EXT4-fs (loop6): Remounting filesystem read-only [ 137.725391][ T28] audit: type=1400 audit(1771131584.770:1868): avc: denied { setopt } for pid=7498 comm="syz.7.860" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.731784][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 137.759085][ C1] EXT4-fs (loop6): initial error at time 1771131585: ext4_do_update_inode:5569: inode 16 [ 137.769495][ C1] EXT4-fs (loop6): last error at time 1771131585: ext4_do_update_inode:5569: inode 16 [ 137.815606][ T7502] EXT4-fs (loop6): 1 truncate cleaned up [ 137.825443][ T3695] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 137.851225][ T3695] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 137.863728][ T7522] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 137.869362][ T3695] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 137.893969][ T7502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.898563][ T7522] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 138.017973][ T7534] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.873'. [ 138.433065][ T4360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.489949][ T7541] netlink: 'syz.5.876': attribute type 1 has an invalid length. [ 138.570078][ T7541] netlink: 668 bytes leftover after parsing attributes in process `syz.5.876'. [ 138.814148][ T7557] loop6: detected capacity change from 0 to 512 [ 138.847810][ T7557] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.864282][ T7549] delete_channel: no stack [ 138.926438][ T7557] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.009552][ T7571] loop4: detected capacity change from 0 to 2048 [ 139.076801][ T3302] loop4: p3 p4 < > [ 139.080908][ T3302] loop4: p3 start 263168 is beyond EOD, truncated [ 139.111441][ T7571] loop4: p3 p4 < > [ 139.120726][ T7571] loop4: p3 start 263168 is beyond EOD, truncated [ 139.337095][ T4360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.532410][ T7596] loop5: detected capacity change from 0 to 512 [ 139.596032][ T7596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.672083][ T7596] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.709150][ T7562] loop7: detected capacity change from 0 to 512 [ 140.774839][ T7562] EXT4-fs: Ignoring removed i_version option [ 140.789570][ T4923] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.937899][ T7562] EXT4-fs (loop7): 1 truncate cleaned up [ 140.997267][ T7635] __nla_validate_parse: 2 callbacks suppressed [ 140.997302][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'. [ 141.043234][ T7562] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.496383][ T4930] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.622965][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.908'. [ 141.681606][ T7670] netlink: 'syz.4.912': attribute type 18 has an invalid length. [ 141.693348][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'. [ 141.789818][ T7670] netlink: 'syz.4.912': attribute type 18 has an invalid length. [ 141.790045][ T3667] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.808642][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'. [ 141.817981][ T3667] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.835352][ T3667] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.843802][ T3667] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.852427][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'. [ 141.927377][ T7683] netlink: 'syz.7.916': attribute type 1 has an invalid length. [ 141.943605][ T7683] netlink: 668 bytes leftover after parsing attributes in process `syz.7.916'. [ 142.026894][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.914'. [ 142.036106][ T28] kauditd_printk_skb: 158 callbacks suppressed [ 142.036122][ T28] audit: type=1400 audit(1771131589.480:2021): avc: denied { create } for pid=7672 comm="syz.5.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.101738][ T28] audit: type=1400 audit(1771131589.480:2022): avc: denied { write } for pid=7672 comm="syz.5.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.325563][ T7690] loop6: detected capacity change from 0 to 512 [ 142.367756][ T28] audit: type=1400 audit(1771131589.820:2023): avc: denied { mounton } for pid=7688 comm="syz.6.918" path="/136/bus" dev="tmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 142.429912][ T7690] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.494514][ T7690] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.525371][ T28] audit: type=1400 audit(1771131589.940:2024): avc: denied { mount } for pid=7688 comm="syz.6.918" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 142.625361][ T28] audit: type=1400 audit(1771131590.060:2025): avc: denied { add_name } for pid=7688 comm="syz.6.918" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.695542][ T28] audit: type=1400 audit(1771131590.060:2026): avc: denied { create } for pid=7688 comm="syz.6.918" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.815250][ T28] audit: type=1400 audit(1771131590.060:2027): avc: denied { read append open } for pid=7688 comm="syz.6.918" path="/136/bus/pids.current" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.904708][ T4360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.918232][ T28] audit: type=1400 audit(1771131590.060:2028): avc: denied { write } for pid=7688 comm="syz.6.918" path="/136/bus/bus" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 143.011400][ T28] audit: type=1400 audit(1771131590.070:2029): avc: denied { create } for pid=7688 comm="syz.6.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.101272][ T28] audit: type=1400 audit(1771131590.070:2030): avc: denied { getopt } for pid=7688 comm="syz.6.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.449783][ T7719] loop7: detected capacity change from 0 to 1024 [ 143.627775][ T7719] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.352046][ T7734] bridge_slave_0: left allmulticast mode [ 144.376534][ T7734] bridge_slave_0: left promiscuous mode [ 144.395539][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.433681][ T4930] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.445988][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.930'. [ 144.504987][ T7740] loop7: detected capacity change from 0 to 2048 [ 144.522322][ T7740] EXT4-fs: Invalid want_extra_isize 29590 [ 144.853015][ T7734] bridge_slave_1: left allmulticast mode [ 144.877277][ T7734] bridge_slave_1: left promiscuous mode [ 144.896955][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.910322][ T7742] netlink: 'syz.6.932': attribute type 6 has an invalid length. [ 145.035862][ T7734] bond0: (slave bond_slave_0): Releasing backup interface [ 145.054269][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.7.935'. [ 145.079127][ T7734] bond0: (slave bond_slave_1): Releasing backup interface [ 145.141830][ T7734] team0: Port device team_slave_0 removed [ 145.178753][ T7734] team0: Port device team_slave_1 removed [ 145.179099][ T7734] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 145.179888][ T7747] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 145.247722][ T7766] netlink: 'syz.5.937': attribute type 10 has an invalid length. [ 145.329715][ T7766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.331678][ T7766] team0: Port device bond0 added [ 145.748496][ T7784] syzkaller0: entered promiscuous mode [ 145.780730][ T7784] syzkaller0: entered allmulticast mode [ 145.828157][ T7784] loop5: detected capacity change from 0 to 128 [ 145.893720][ T7784] EXT4-fs: Invalid want_extra_isize 671379910 [ 145.963485][ T7792] netlink: 'syz.7.941': attribute type 1 has an invalid length. [ 146.014141][ T7792] netlink: 668 bytes leftover after parsing attributes in process `syz.7.941'. [ 146.132813][ T7784] xfrm0 speed is unknown, defaulting to 1000 [ 147.269118][ T7804] random: crng reseeded on system resumption [ 147.446893][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 147.446911][ T28] audit: type=1400 audit(1771131594.720:2118): avc: denied { map_read map_write } for pid=7803 comm="syz.6.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 147.565271][ T28] audit: type=1400 audit(1771131594.720:2119): avc: denied { read write } for pid=7803 comm="syz.6.944" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 147.600257][ T7787] xfrm0 speed is unknown, defaulting to 1000 [ 147.650244][ T7784] lo speed is unknown, defaulting to 1000 [ 147.705354][ T28] audit: type=1400 audit(1771131594.720:2120): avc: denied { ioctl open } for pid=7803 comm="syz.6.944" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 147.748724][ T28] audit: type=1400 audit(1771131594.940:2121): avc: denied { ioctl } for pid=7803 comm="syz.6.944" path="socket:[18058]" dev="sockfs" ino=18058 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 147.825316][ T28] audit: type=1400 audit(1771131595.110:2122): avc: denied { create } for pid=7810 comm="syz.6.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.864471][ T28] audit: type=1400 audit(1771131595.110:2123): avc: denied { setopt } for pid=7810 comm="syz.6.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 147.945315][ T28] audit: type=1400 audit(1771131595.380:2124): avc: denied { create } for pid=7810 comm="syz.6.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.979241][ T28] audit: type=1400 audit(1771131595.390:2125): avc: denied { setopt } for pid=7810 comm="syz.6.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.042737][ T28] audit: type=1400 audit(1771131595.440:2126): avc: denied { create } for pid=7819 comm="syz.1.949" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.084456][ T7787] lo speed is unknown, defaulting to 1000 [ 148.146418][ T28] audit: type=1400 audit(1771131595.440:2127): avc: denied { write } for pid=7819 comm="syz.1.949" name="file0" dev="tmpfs" ino=1205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.476099][ T7833] program syz.1.952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.760634][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.956'. [ 148.816067][ T7848] netlink: 40 bytes leftover after parsing attributes in process `syz.5.956'. [ 149.200633][ T7860] loop6: detected capacity change from 0 to 2048 [ 149.378000][ T7865] netlink: 88 bytes leftover after parsing attributes in process `syz.1.963'. [ 149.410090][ T7860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.553372][ T7872] netlink: 32 bytes leftover after parsing attributes in process `syz.7.964'. [ 149.919104][ T4360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.718510][ T7891] loop6: detected capacity change from 0 to 512 [ 150.777907][ T7891] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.896240][ T7891] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 150.918407][ T7891] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042e018, mo2=0002] [ 150.935308][ T7891] System zones: 0-1, 15-15, 18-18, 34-34 [ 150.943735][ T7900] x_tables: duplicate underflow at hook 2 [ 150.975506][ T7891] EXT4-fs (loop6): orphan cleanup on readonly fs [ 150.985377][ T7900] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 151.006113][ T7891] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.970: bg 0: block 15: invalid block bitmap [ 151.095458][ T7891] loop6: lost filesystem error report for type 5 error -117 [ 151.095655][ T7891] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 151.105238][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 151.105258][ C0] EXT4-fs (loop6): initial error at time 1771131598: ext4_validate_block_bitmap:432 [ 151.105284][ C0] EXT4-fs (loop6): last error at time 1771131598: ext4_validate_block_bitmap:432 [ 151.191271][ T7891] loop6: lost filesystem error report for type 5 error -117 [ 151.191685][ T7891] EXT4-fs (loop6): 1 truncate cleaned up [ 151.230546][ T7917] netlink: 32 bytes leftover after parsing attributes in process `syz.7.976'. [ 151.245465][ T7891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 151.264250][ T7919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48424 sclass=netlink_route_socket pid=7919 comm=syz.5.977 [ 151.311929][ T7925] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20003 [ 151.322611][ T7924] loop5: detected capacity change from 0 to 128 [ 151.338749][ T4360] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.401814][ T7924] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.418148][ T7934] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.980'. [ 151.431022][ T7930] netlink: 'syz.1.982': attribute type 1 has an invalid length. [ 151.446933][ T7924] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.453851][ T7930] netlink: 668 bytes leftover after parsing attributes in process `syz.1.982'. [ 151.502104][ T7936] netlink: 8 bytes leftover after parsing attributes in process `syz.6.980'. [ 151.637818][ T4923] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.039252][ T7979] netlink: 'syz.6.994': attribute type 1 has an invalid length. [ 152.050276][ T7979] netlink: 668 bytes leftover after parsing attributes in process `syz.6.994'. [ 152.093514][ T7977] loop7: detected capacity change from 0 to 8192 [ 152.108396][ T7982] loop5: detected capacity change from 0 to 128 [ 152.121087][ T7982] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.154086][ T7982] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.165836][ T7977] loop7: p1 p2 p4 [ 152.171918][ T7977] loop7: p4 size 262144 extends beyond EOD, truncated [ 152.193050][ T7985] xfrm0 speed is unknown, defaulting to 1000 [ 152.253394][ T4923] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.279758][ T7977] netlink: 64 bytes leftover after parsing attributes in process `syz.7.992'. [ 152.548700][ T7985] lo speed is unknown, defaulting to 1000 [ 152.635415][ T28] kauditd_printk_skb: 151 callbacks suppressed [ 152.635433][ T28] audit: type=1400 audit(1771131600.090:2279): avc: denied { ioctl } for pid=7999 comm="syz.7.1000" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18365 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 152.857904][ T28] audit: type=1400 audit(1771131600.310:2280): avc: denied { mount } for pid=8003 comm="syz.4.1001" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.000170][ T28] audit: type=1400 audit(1771131600.340:2281): avc: denied { remount } for pid=8003 comm="syz.4.1001" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.023642][ T28] audit: type=1400 audit(1771131600.480:2282): avc: denied { create } for pid=8003 comm="syz.4.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.059326][ T28] audit: type=1400 audit(1771131600.480:2283): avc: denied { write } for pid=8003 comm="syz.4.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.088096][ T28] audit: type=1400 audit(1771131600.480:2284): avc: denied { nlmsg_write } for pid=8003 comm="syz.4.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.130853][ T28] audit: type=1400 audit(1771131600.510:2285): avc: denied { create } for pid=8002 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.228788][ T28] audit: type=1400 audit(1771131600.510:2286): avc: denied { setopt } for pid=8002 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.309705][ T28] audit: type=1400 audit(1771131600.580:2287): avc: denied { read } for pid=8003 comm="syz.4.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.523398][ T28] audit: type=1400 audit(1771131600.820:2288): avc: denied { name_connect } for pid=7984 comm="syz.6.996" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 153.610807][ T8019] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1004'. [ 153.798107][ T8036] loop7: detected capacity change from 0 to 128 [ 153.832879][ T8036] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.865834][ T8036] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.977871][ T4930] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.025655][ T8044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8044 comm=syz.7.1010 [ 154.066233][ T8044] 9p: Bad value for 'rfdno' [ 154.136803][ T8047] loop7: detected capacity change from 0 to 128 [ 154.201465][ T8047] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.269524][ T8047] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.320220][ T8044] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1010'. [ 154.401658][ T4930] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.460489][ T8053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.486443][ T8053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.564116][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1013'. [ 155.358922][ T8069] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1017'. [ 155.457300][ T8055] loop7: detected capacity change from 0 to 1024 [ 155.526273][ T8055] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.550025][ T8055] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 155.575173][ T8055] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 155.637103][ T8055] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 155.652001][ T8055] EXT4-fs (loop7): orphan cleanup on readonly fs [ 155.668543][ T8055] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.1013: Inode bitmap for bg 0 marked uninitialized [ 155.688043][ T8055] loop7: lost filesystem error report for type 5 error -117 [ 155.702851][ T8055] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.749136][ T8055] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.976149][ T8084] xt_TPROXY: Can be used only with -p tcp or -p udp [ 156.059415][ T8089] loop7: detected capacity change from 0 to 512 [ 156.104453][ T8089] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.1025: inode has both inline data and extents flags [ 156.167827][ T8089] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.168021][ T8089] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1025: couldn't read orphan inode 15 (err -117) [ 156.179769][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 156.179788][ C1] EXT4-fs (loop7): initial error at time 1771131603: ext4_orphan_get:1391: inode 15 [ 156.179819][ C1] EXT4-fs (loop7): last error at time 1771131603: ext4_orphan_get:1391: inode 15 [ 156.242340][ T8089] loop7: lost filesystem error report for type 5 error -117 [ 156.246075][ T8089] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.560143][ T8120] syzkaller0: entered promiscuous mode [ 156.587349][ T8120] syzkaller0: entered allmulticast mode [ 156.639136][ T8123] loop4: detected capacity change from 0 to 512 [ 157.000256][ T3695] bio_check_eod: 27 callbacks suppressed [ 157.000337][ T3695] kworker/u8:25: attempt to access beyond end of device [ 157.000337][ T3695] loop4: rw=1, sector=2384, nr_sectors = 2048 limit=512 [ 157.047628][ T3695] kworker/u8:25: attempt to access beyond end of device [ 157.047628][ T3695] loop4: rw=1, sector=4432, nr_sectors = 2448 limit=512 [ 157.104079][ T3695] kworker/u8:25: attempt to access beyond end of device [ 157.104079][ T3695] loop4: rw=1, sector=6880, nr_sectors = 5552 limit=512 [ 157.156403][ T3695] kworker/u8:25: attempt to access beyond end of device [ 157.156403][ T3695] loop4: rw=1, sector=12432, nr_sectors = 2048 limit=512 [ 157.192434][ T3695] kworker/u8:25: attempt to access beyond end of device [ 157.192434][ T3695] loop4: rw=1, sector=14480, nr_sectors = 1984 limit=512 [ 157.254757][ T8148] xfrm0 speed is unknown, defaulting to 1000 [ 157.369249][ T8150] ================================================================== [ 157.380925][ T8150] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 157.393370][ T8150] [ 157.397706][ T8150] write to 0xffff888104ae5b00 of 8 bytes by task 8149 on cpu 0: [ 157.407032][ T8150] mas_wr_store_entry+0x20c5/0x2ed0 [ 157.413772][ T8150] mas_store_prealloc+0x72e/0xa70 [ 157.424082][ T8150] vma_complete+0x3c7/0x850 [ 157.432039][ T8150] __split_vma+0x593/0x640 [ 157.438106][ T8150] vma_modify+0xb2e/0xd00 [ 157.443669][ T8150] vma_modify_flags+0x182/0x210 [ 157.449360][ T8150] mprotect_fixup+0x312/0x5d0 [ 157.459115][ T8150] do_mprotect_pkey+0x67b/0x920 [ 157.465180][ T8150] __x64_sys_mprotect+0x48/0x60 [ 157.470851][ T8150] x64_sys_call+0x2768/0x3020 [ 157.478809][ T8150] do_syscall_64+0x12c/0x370 [ 157.484254][ T8150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.493195][ T8150] [ 157.495565][ T8150] read to 0xffff888104ae5b00 of 8 bytes by task 8150 on cpu 1: [ 157.507256][ T8150] mas_state_walk+0x485/0x650 [ 157.513401][ T8150] mas_walk+0x60/0x150 [ 157.518323][ T8150] lock_vma_under_rcu+0xc9/0x210 [ 157.525145][ T8150] do_user_addr_fault+0x232/0x1050 [ 157.532969][ T8150] exc_page_fault+0x62/0xa0 [ 157.540844][ T8150] asm_exc_page_fault+0x26/0x30 [ 157.547051][ T8150] [ 157.550131][ T8150] value changed: 0xffff88811c334f0e -> 0xffff888104ae5b00 [ 157.561888][ T8150] [ 157.566248][ T8150] Reported by Kernel Concurrency Sanitizer on: [ 157.573590][ T8150] CPU: 1 UID: 0 PID: 8150 Comm: syz.1.1037 Tainted: G W syzkaller #0 PREEMPT(full) [ 157.590142][ T8150] Tainted: [W]=WARN [ 157.594622][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.608250][ T8150] ================================================================== [ 157.635720][ T4930] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.667198][ T8148] lo speed is unknown, defaulting to 1000 [ 157.732054][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 157.732074][ T28] audit: type=1400 audit(1771131605.180:2398): avc: denied { read } for pid=8159 comm="syz.7.1038" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 157.813209][ T28] audit: type=1400 audit(1771131605.180:2399): avc: denied { open } for pid=8159 comm="syz.7.1038" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 157.888301][ T28] audit: type=1400 audit(1771131605.230:2400): avc: denied { bind } for pid=8159 comm="syz.7.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 157.951710][ T28] audit: type=1400 audit(1771131605.230:2401): avc: denied { ioctl } for pid=8159 comm="syz.7.1038" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1