last executing test programs: 2m19.513929396s ago: executing program 3 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x2, 0x12) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x14, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in=@private=0xa010102, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) syz_usbip_server_init(0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24000010}, 0x40844) write$usbip_server(r4, 0x0, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGMRU(r7, 0x80047453, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r8) 2m15.071587969s ago: executing program 3 (id=761): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) pidfd_getfd(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x2d, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000540)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r7, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 2m14.597584295s ago: executing program 3 (id=762): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x6, 0x2}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) futex_waitv(&(0x7f0000001480)=[{0x9, &(0x7f0000001440)=0x9, 0x2}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, &(0x7f0000000100)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x200, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) 2m13.688328096s ago: executing program 3 (id=765): set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) set_mempolicy(0x2, &(0x7f0000000040)=0x7fffffffffffffff, 0x946c) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x19, 0xa, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) io_setup(0x325, &(0x7f0000000540)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2m11.240311745s ago: executing program 3 (id=770): set_mempolicy(0x4005, 0x0, 0x7) set_mempolicy(0x2, &(0x7f0000000040)=0x7fffffffffffffff, 0x946c) socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x19, 0xa, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f00000000c0)={0x3, 0x800}) io_setup(0x325, &(0x7f0000000540)) 2m9.021805481s ago: executing program 3 (id=776): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x2, 0x12) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x14, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in=@private=0xa010102, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) syz_usbip_server_init(0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24000010}, 0x40844) write$usbip_server(r5, 0x0, 0x0) r8 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGMRU(r8, 0x80047453, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r9) 1m53.780651234s ago: executing program 32 (id=776): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x2, 0x12) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x14, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in=@private=0xa010102, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) syz_usbip_server_init(0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24000010}, 0x40844) write$usbip_server(r5, 0x0, 0x0) r8 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGMRU(r8, 0x80047453, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r9) 1m0.583644028s ago: executing program 5 (id=1075): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0xc000, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) unshare(0x28020480) ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000040)) 1m0.509069008s ago: executing program 5 (id=1077): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c02", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 1m0.477281279s ago: executing program 5 (id=1078): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000940)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffffffffffdcb, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x200}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x4}]}}]}, 0x40}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) timer_settime(r3, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0xe4c}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}}, &(0x7f0000020800)) 1m0.39520891s ago: executing program 5 (id=1081): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(r4, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff8a0a43cdec5908060001080006040009875e647adf0187ba0100aaaaaaaaaabbac"], 0x0) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) 59.600436899s ago: executing program 5 (id=1083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x3, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x10, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x1, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 59.284606803s ago: executing program 5 (id=1086): r0 = socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000001c40)='net/ip_tables_targets\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0xc8, 0x401) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000200)=""/100) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c}, 0x94) 59.251997523s ago: executing program 33 (id=1086): r0 = socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000001c40)='net/ip_tables_targets\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0xc8, 0x401) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000200)=""/100) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c}, 0x94) 6.556415141s ago: executing program 1 (id=1399): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000240)={0x6, 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20040880) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000600)=@x25, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)="ffa8", 0xfffffffffffffd46}, {&(0x7f0000000380)="3cd9", 0x2}, {&(0x7f0000000300)="deb823f0631ff13bb089f583bc54791dfb6a"}, {&(0x7f0000000680)="43f6e421a71bd786bf82e44aa7a29e1af9607958df05cba4fbd51f1359a52c1089e4219e02ff1ec71f9ab5ee4aeb2df1494657ec9464410056ea8b85c799bab367c86ead5c98e804d6b758100328a7a1f4a86bd91356cb585c9c8cf290b9cb2b4742d349d8285d6ee299a505469598335fe7dcc3d7477a2d436c0ae0cee31437466124fbf55fb6bce2d1ecfb38b4", 0xffffffffffffff4a}], 0x2, 0x0, 0xfffffffffffffed4}, 0x40810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x200, 0x1, 0x40024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) capset(&(0x7f0000000480)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0x1000000}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) syz_emit_ethernet(0x1016, &(0x7f00000010c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa"], 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x578, &(0x7f00000013c0)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f00000000c0)=0x8004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_targets\x00') preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000140)=""/195, 0xc3}], 0x1, 0x36, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000000000000020000"], 0x40}, 0xfffe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x21, 0x5d, &(0x7f0000000000)="e716483140296ccff861fcb4b84ac53137a3872d9874e79c0b6c832d3ad0ecd11f", &(0x7f00000000c0)=""/93, 0x5, 0x0, 0x6c, 0x80, &(0x7f0000000140)="d4ca6d9aeed877718e2e7b1e8c1cae55afe372074f40b6f43d2fde64df29612b945bc830df8fd04ffb02cde3be1e8a303675419376a3d143470ce5c12bb1c03850d054a263ad2652ddae5d71926dbe835306b0290edba2bf62be9a15ffb7745c093353d998999f916229075c", &(0x7f00000001c0)="54d66ef7af9a5b8838be6abc99d283b717f42774ca7330d02e17e68abd028efcae86ed920abb6aebe68f57d6de3379a473203e31a4080a2822b7181acb9d3b15a7f1687a68469ebd5e9535080f2fb0a63c457497065beea546957468ed3cb79c8f4aedc79ba7e973694d2455f3f233c06d028a41e2eaac93eb5ee360e47dbb13", 0x5, 0x0, 0x2}, 0x50) 5.899718169s ago: executing program 1 (id=1402): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, 0x0}}], 0x1, 0x0) io_uring_setup(0x134a, &(0x7f0000019080)={0x0, 0x1f89, 0x0, 0x3, 0x286}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)="10", 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006"], 0xa0}}, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000000)) r3 = open(&(0x7f0000000040)='./file0\x00', 0x181000, 0x120) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000140)={0xbb8, 0x0, 0x5, 0x100, 0x0, 0x0, {0x3, 0x0, 0x3}, [{{0x254, 0x1, {{0x2, 0xffff}, 0x3, 0x7, 0x1, 0x4, 0x27, 'syz1\x00', "8eecbc83c655d5ba2d21e30c01e26962497bbfccf5c3d24c3a43ad7f4f291220", "119e3d034ec6a8f2502f518f1801d8df6527e99b2d3557eb7bf630922c7fdc37", [{0x6, 0x3, {0x1, 0x7}}, {0x200, 0x3}, {0x600, 0x0, {0x6, 0x400}}, {0x1, 0x6, {0x1, 0x4}}, {0x401, 0x4, {0x2, 0xffffffff}}, {0x5, 0xba, {0x0, 0x10}}, {0xfff, 0xdd21, {0x0, 0x2}}, {0x6, 0x6c, {0x2, 0x2460432a}}, {0x7f, 0x9, {0x3, 0x9}}, {0x7, 0x7, {0x1, 0x40}}, {0x4, 0x1, {0x0, 0x9}}, {0x1288, 0x64f, {0x1, 0x7}}, {0xe, 0x4, {0x1, 0x80000001}}, {0x0, 0x101, {0x2, 0xf0}}, {0x3, 0x5, {0x2, 0x7}}, {0xe0, 0x6, {0x0, 0x7}}, {0xd, 0xf709, {0x2, 0x7}}, {0x4, 0x5, {0x0, 0x5}}, {0x8, 0x2, {0x1, 0xdce}}, {0x8, 0x4, {0x2, 0x1}}, {0xa34, 0x2, {0x2, 0x2}}, {0xab, 0x40, {0x3}}, {0x7, 0x8, {0x2, 0x5}}, {0x0, 0x6, {0x0, 0x2}}, {0x8, 0x7, {0x2, 0x7fff}}, {0x8, 0x1, {0x2, 0x7}}, {0x2, 0xffdb, {0x3, 0x56}}, {0x2, 0x6, {0x0, 0xd3c}}, {0xe75, 0x8, {0x2, 0x6}}, {0x7, 0x4, {0x0, 0x2}}, {0xfa, 0x3, {0x1, 0x4}}, {0x1, 0xa67, {0x3, 0xfffff001}}, {0x3a, 0xfffd, {0x2, 0x4}}, {0x800, 0x5, {0x0, 0x8}}, {0xa1, 0xd4b, {0x3}}, {0x101, 0x7ff, {0x0, 0x9}}, {0x0, 0x2, {0x2, 0x5}}, {0x7fff, 0x2, {0x1, 0xfffffff9}}, {0x7, 0x7, {0x1}}, {0x2, 0x66, {0x3, 0x80000000}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0xff, 0x40, 0x9, 0x9, 0x5, 'syz1\x00', "3f6e5c81909b44781b39c642e03f0367461dd60ee33ca0cd7e707b416e4ccfd3", "17644ae3e59a44ac01feddc6ff659752ae3b8f3052c2d4210173f75a1f15f3f0", [{0x5, 0x100, {0x3, 0xffff}}, {0xc, 0x4, {0x1, 0xff}}, {0x3, 0x8, {0x0, 0xffffff23}}, {0x3, 0x9, {0x3, 0x3}}, {0x13, 0x9, {0x1, 0x8}}, {0x10, 0x17, {0x0, 0xd5}}, {0x8001, 0x6, {0x2, 0x7}}, {0xd, 0x7, {0x3, 0x750}}, {0x9, 0xe0, {0x0, 0x4}}, {0x2, 0xce, {0x2, 0x4}}, {0xee7, 0x89, {0x0, 0x9}}, {0x8000, 0x8, {0x1, 0xffffffff}}, {0x6, 0x4, {0x3, 0x2}}, {0x0, 0x3, {0x3, 0x7f}}, {0x32c4, 0x2, {0x3, 0x2}}, {0x377e, 0x8, {0x3, 0x57c}}, {0x7ff, 0x1a, {0x3, 0x6}}, {0x3709, 0x5, {0x1, 0x1}}, {0xb, 0x9, {0x0, 0xd58}}, {0x3, 0xfff8, {0x3, 0x5}}, {0x1000, 0x3, {0x0, 0x68b2e405}}, {0xc17, 0xe1, {0x3, 0x80000000}}, {0x18, 0x6, {0x1, 0x6}}, {0x7, 0x2, {0x3, 0xffffff37}}, {0x40, 0x1a, {0x1, 0x5}}, {0x0, 0x80, {0x0, 0x8}}, {0x1, 0x0, {0x2, 0x1}}, {0xa8, 0x0, {0x2, 0x400}}, {0xffff, 0x5, {0x3, 0x8000}}, {0x4, 0x3, {0x1, 0x9}}, {0x2, 0x10, {0x1, 0x1}}, {0x5, 0x100, {0x0, 0x73}}, {0x4d7, 0x4, {0x0, 0x72e}}, {0x1ff, 0x2, {0x1, 0x9}}, {0x10, 0x0, {0x3, 0x5}}, {0x0, 0x8, {0x1, 0x7}}, {0x8, 0x8, {0x2, 0x120}}, {0x435, 0x3, {0x1, 0xbd}}, {0x1470, 0x8, {0x2, 0x1a64}}, {0x39e, 0x44, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x4, 0x4, 0x6, 0x2, 0x11, 'syz0\x00', "bdb282d72123cc6f8336132fd2b0165c23a31343510657da502439f948e8c001", "9e9770d7c454eb10cd9cfb1816468b4ebeff7cbd33400d4a207212aa5eb0cba3", [{0x3, 0x0, {0x0, 0xffffffff}}, {0x8, 0xd, {0x0, 0x73e}}, {0x1, 0x0, {0x2, 0x6}}, {0x6, 0x6, {0x3, 0x1}}, {0x8, 0x1ff, {0x0, 0x2}}, {0x0, 0x28c, {0x1, 0xc0}}, {0x0, 0x5, {0x2, 0x8}}, {0x8, 0x9, {0x0, 0x400}}, {0x7, 0x2, {0x3, 0x8000}}, {0x0, 0xb, {0x1, 0x40}}, {0x5, 0x1c00, {0x0, 0x1ff}}, {0x400, 0x8, {0x1, 0x68a}}, {0x8001, 0x4, {0x1, 0x40}}, {0x7, 0x401, {0x0, 0xff}}, {0xf892, 0x5}, {0x4a, 0x6, {0x1, 0xe}}, {0x5, 0xfff3, {0x0, 0x3}}, {0x7, 0x504b, {0x0, 0x5}}, {0xfff, 0xfffc, {0xf674b98e00be85c9, 0x10}}, {0x1, 0x2, {0x1, 0xffffffff}}, {0x2, 0xee6e, {0x3, 0x2}}, {0x6, 0x1, {0x0, 0xf}}, {0x5, 0x0, {0x3, 0x9}}, {0x6, 0x80, {0x1, 0x7ff}}, {0x5, 0x2, {0x0, 0x3a}}, {0x4, 0x1, {0x2, 0x4}}, {0xf, 0x40}, {0x0, 0x0, {0x0, 0x3c}}, {0x5, 0xad, {0x3, 0xd}}, {0x7, 0x24, {0x2, 0x9}}, {0x2, 0x200, {0x0, 0x7}}, {0x83a6, 0x0, {0x5, 0x2}}, {0x1, 0x5, {0x1, 0x1}}, {0x580, 0xfff6, {0x0, 0x4205}}, {0x1e6f, 0x2, {0x0, 0x7}}, {0x5, 0xd, {0x1, 0x3}}, {0x9, 0x7, {0x3, 0x1}}, {0x2, 0x3, {0x1, 0xe}}, {0x5, 0x769, {0x2, 0x5}}, {0x9, 0x8, {0x1, 0x40}}]}}}, {{0x254, 0x1, {{0x3, 0x80000001}, 0x2, 0x4, 0xfff, 0xcda3, 0x6, 'syz1\x00', "efc0ed1d4ea1db8c754d09e5ee083b610cb1fab2c9494253118216873c1e177b", "678db7815dfcfe1757ae3991fffb55bd00107aafbb7dff754dee68115c152ca4", [{0xfffd, 0x2, {0x1, 0x8}}, {0x7a5d, 0x915, {0x1, 0xcc}}, {0x5, 0x2, {0x2, 0x5}}, {0x67, 0x8, {0x0, 0x3}}, {0x9, 0x3, {0x0, 0x40100}}, {0x2, 0xc, {0x1, 0x1165e384}}, {0xe, 0x5, {0x2, 0x5}}, {0x7, 0xa9d, {0x3, 0xfffffffe}}, {0x2, 0x1, {0x0, 0x1}}, {0x7, 0x1, {0x2, 0xe}}, {0x8, 0xb, {0x2, 0x7}}, {0xa2, 0x8, {0x0, 0x2}}, {0xff87, 0x101, {0x0, 0x6def}}, {0xc, 0x2, {0x3, 0x2}}, {0x7ff, 0x4, {0x3, 0xa}}, {0x7, 0x1, {0x3, 0x7}}, {0xffff, 0x3, {0x2}}, {0x9, 0x5, {0x3, 0xfffffffd}}, {0x4, 0xb, {0x2, 0x3}}, {0x6, 0xa2, {0x0, 0x1}}, {0xf, 0x9, {0x1, 0x5}}, {0xc00, 0x7, {0x3, 0xdf}}, {0x1d3, 0x7, {0x3, 0x80000000}}, {0xf1, 0x0, {0x2, 0xfcc}}, {0x0, 0xff, {0x1, 0x9}}, {0x3, 0x2, {0x3, 0x7ddb}}, {0x9, 0x8, {0x0, 0x3}}, {0xfff8, 0x4, {0x2, 0x34d}}, {0x8, 0x3, {0x3, 0xdc}}, {0x81, 0x7, {0x1, 0x6}}, {0x4, 0x0, {0x2, 0x7ff}}, {0x7, 0x3, {0x2, 0x5}}, {0x1000, 0x6, {0x3, 0xf0fe}}, {0x67d5, 0xda}, {0x4, 0x3, {0x3, 0x1}}, {0x5, 0x7, {0x0, 0x40}}, {0x81, 0x6, {0x2, 0xffffffff}}, {0xf001, 0x4, {0x0, 0x1}}, {0x8, 0x6, {0x1, 0x5}}, {0xf7a, 0x6, {0x3, 0x7fffffff}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x9, 0x78, 0x0, 0x2, 0x1e, 'syz0\x00', "cf07d03305d6309fddb3f04aa495ce3235f66db5c1f04e9dd5926b588eec1c49", "fbfdea734131718e3f31fb413b2ee5d30b64c5d97b663d5cd5bb1c2835d2c784", [{0x359b, 0x400, {0x0, 0x6}}, {0x7, 0xb18, {0x0, 0x3}}, {0x2, 0x7, {0x2, 0x6}}, {0x6, 0x0, {0x3, 0x7}}, {0x2, 0x1530, {0x1, 0x800}}, {0xf800, 0x9, {0x106d05f1d2151e1e, 0xe}}, {0x1ff, 0x0, {0x1}}, {0x7, 0x7, {0x3, 0x6}}, {0x1, 0xfffa, {0x0, 0xffffffff}}, {0x1, 0x2190, {0x3, 0x200}}, {0x8000, 0xf, {0x1, 0x1}}, {0x80, 0x3, {0x2, 0x3}}, {0x2b75, 0x8, {0x0, 0x8}}, {0x7, 0x0, {0x2, 0x5}}, {0xf, 0xfff9, {0x1, 0x4}}, {0xfffd, 0x8, {0x1, 0x8}}, {0x9, 0x6, {0x1, 0x69}}, {0x82, 0xff, {0x1, 0x3ff}}, {0x7, 0x4, {0x6, 0x3ff}}, {0x9, 0xa, {0x3, 0x10}}, {0x80, 0x8000, {0x3, 0x7}}, {0xa, 0x8000, {0x2, 0x7}}, {0x3, 0x5, {0x0, 0x2}}, {0x100, 0x7fff, {0x2, 0xfffffff8}}, {0x2, 0x9, {0x1, 0x8}}, {0x1, 0xfff2, {0x3, 0x9}}, {0x80, 0x3, {0x3, 0x7fff}}, {0x2, 0x8, {0x0, 0x9}}, {0xa2, 0x1, {0x3, 0x2}}, {0x83, 0x5f94, {0x0, 0xfb}}, {0x4, 0x200, {0x2}}, {0xc, 0xfbff, {0x3, 0x8}}, {0x0, 0x280, {0x3, 0x4e}}, {0x1be9, 0x1, {0x3, 0x1}}, {0x7, 0xff, {0x2, 0x100}}, {0x4, 0x8f8, {0x3, 0x1}}, {0x8, 0x6a, {0x2, 0x2}}, {0x1, 0xdfd2, {0x1, 0x8}}, {0x7, 0x1, {0x2, 0x8}}, {0x0, 0xd8, {0x0, 0x4}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000001}, 0xc000) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 5.684470272s ago: executing program 1 (id=1405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) getpeername$qrtr(r2, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x24}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xae}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x29, 0xb, 0xf, 0x10, 0x68, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x20, 0x101, 0xe}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xd, 0x0, &(0x7f0000001b80)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) fchdir(r4) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) move_mount(r4, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0x9362, 0x0) 5.317426536s ago: executing program 1 (id=1408): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x10006}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) r1 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x9) fchdir(r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8800) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x81, {{0x2, 0x4e23, @multicast1}}}, 0x88) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xc0, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xeeb1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0xe}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10048090}, 0x4000) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @empty, 0x10005}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff3, @empty, 0x3}, 0x1c) 5.275561077s ago: executing program 1 (id=1410): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10100, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r3 = io_uring_setup(0x3a58, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x101d0) creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x140) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') 4.746856713s ago: executing program 1 (id=1413): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xffffffff) r0 = getpid() r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0100000000005f00"], 0x0, 0x34}, 0x28) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x100400, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x20000000000003c3, &(0x7f0000000800)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r10) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x81}, 0x100000, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r1, &(0x7f0000000100)=@random={'os2.', '\x00'}, &(0x7f0000000340)=""/241, 0xf1) 4.671444114s ago: executing program 6 (id=1414): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket(0x2d, 0x2, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000540)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r8, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 3.770199125s ago: executing program 2 (id=1418): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000240)={0x6, 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20040880) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000600)=@x25, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)="ffa8", 0xfffffffffffffd46}, {&(0x7f0000000380)="3cd9", 0x2}, {&(0x7f0000000300)="deb823f0631ff13bb089f583bc54791dfb6a"}, {&(0x7f0000000680)="43f6e421a71bd786bf82e44aa7a29e1af9607958df05cba4fbd51f1359a52c1089e4219e02ff1ec71f9ab5ee4aeb2df1494657ec9464410056ea8b85c799bab367c86ead5c98e804d6b758100328a7a1f4a86bd91356cb585c9c8cf290b9cb2b4742d349d8285d6ee299a505469598335fe7dcc3d7477a2d436c0ae0cee31437466124fbf55fb6bce2d1ecfb38b4", 0xffffffffffffff4a}], 0x2, 0x0, 0xfffffffffffffed4}, 0x40810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x200, 0x1, 0x40024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) capset(&(0x7f0000000480)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0x1000000}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) syz_emit_ethernet(0x1016, &(0x7f00000010c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa"], 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x578, &(0x7f00000013c0)="$eJzs3d9rU2cfAPDvSdP689UKIu/7XgzBizmcqW33w8Fg7nJsMmG7d6GNRZoaaVKxnTC9mDe7GTIYY8LYH7D7Xcr+gf0VwibIkLJdjEHGSU9qbJOmrdFE8/nAaZ8n55w+55vnfE+fJychAQyt4+mPXMT/IuLrJOJwy7p8ZCuPr223+ujGTLokUa9/8kcSSfZYc/sk+30gq/w3In75MuJUbnO71eWV+WK5XFrM6hO1hasT1eWV05cXinOludKVqenps29OT73z9ls9i/W1C3999/G9D85+dWL1258eHLmTxLk4mK1rjeMp3GytHC/+k5VG49yGDSd70NggSfp9AOzKSJbno5FeAw7HSJb1wMvvi4ioA0Mqkf8wpJrjgObcvkfz4BfGw/fXJkCN2Mda48+vvTYSextzo/2ryRMzo3S+O96D9tM2fv797p10ia1fh9jXpQ6wIzdvRcSZfH7z9T/Jrn+7d6bx4vHWNrYxbP9/oJ/upeOf19uN/3Lr459oM/450CZ3d6N7/uce9KCZjtLx37ttx7/rl67xkaz2n8aYbzS5dLlcOhMRhyLiZNS73vo4u3q/3mld6/gvXdL2m2PB7Dge5Pc8uc9ssVaMiLFdhvyEh7ci/p9vF3+y3v9Jm/5Pn48L22zjWOnuK53WdY//2ar/GPFq2/5/3K3J1vcnJxrnw0TzrNjsz9vHfu3Ufr/jT/t//9bxjyet92urO2/jh71/lzqt2+35P5Z82ig3k+B6sVZbnIwYSz7a/PjU432b9eb2afwnT2x9/Wt3/qeTr8+2Gf/to7c7bjoI/T+7o/7feeH+h59/36n97fX/G43SyeyR7PrXXnaubPcAn/b5AwAAAAAAgEGSi4iDkeQK6+VcrlBYe3/H0difK1eqtVOXKktXZqPxWdnxGM0173Qfbnk/xGT2fthmfWpDfToijkTENyP7GvXCTKU82+/gAQAAAAAAAAAAAAAAAAAAYEAc6PD5/9RvI/0+OuCZa3yxwZ5+HwXQD12/8r8X3/QEDKSu+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXTh/Pl3qq49uzKT12WvLS/OVa6dnS9X5wsLSTGGmsni1MFepzJVLhZnKQre/V65Urk5OxdL1iVqpWpuoLq9cXKgsXaldvLxQnCtdLI0+l6gAAAAAAAAAAAAAAAAAAADgxVJdXpkvlsulRYWOhfdiIA7jWQa4Zle755/foR6KiMF4xl6owq2se3e2Vx8vSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwwb8BAAD//6qSL+k=") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f00000000c0)=0x8004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_targets\x00') r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000000000000020000"], 0x40}, 0xfffe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x21, 0x5d, &(0x7f0000000000)="e716483140296ccff861fcb4b84ac53137a3872d9874e79c0b6c832d3ad0ecd11f", &(0x7f00000000c0)=""/93, 0x5, 0x0, 0x6c, 0x80, &(0x7f0000000140)="d4ca6d9aeed877718e2e7b1e8c1cae55afe372074f40b6f43d2fde64df29612b945bc830df8fd04ffb02cde3be1e8a303675419376a3d143470ce5c12bb1c03850d054a263ad2652ddae5d71926dbe835306b0290edba2bf62be9a15ffb7745c093353d998999f916229075c", &(0x7f00000001c0)="54d66ef7af9a5b8838be6abc99d283b717f42774ca7330d02e17e68abd028efcae86ed920abb6aebe68f57d6de3379a473203e31a4080a2822b7181acb9d3b15a7f1687a68469ebd5e9535080f2fb0a63c457497065beea546957468ed3cb79c8f4aedc79ba7e973694d2455f3f233c06d028a41e2eaac93eb5ee360e47dbb13", 0x5, 0x0, 0x2}, 0x50) 3.768535585s ago: executing program 6 (id=1419): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) pidfd_getfd(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x2d, 0x2, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000540)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r7, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 3.565725847s ago: executing program 2 (id=1420): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.452757848s ago: executing program 2 (id=1421): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x8}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x8301, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socketpair(0x21, 0x6, 0x800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r4 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.444918438s ago: executing program 6 (id=1422): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x8}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x8301, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socketpair(0x21, 0x6, 0x800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) socket$kcm(0xa, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r4 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.908473335s ago: executing program 0 (id=1425): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10100, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r2 = io_uring_setup(0x3a58, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x101d0) 2.862656935s ago: executing program 0 (id=1426): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"/305], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 2.828406006s ago: executing program 0 (id=1427): connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x4, 0xd, 0xc}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x8]}]}, 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x454, &(0x7f0000000740)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x60c, &(0x7f0000001340)="$eJzs3c9vVNUeAPDvnWlLS+G1kJf3Hm/xaPJiIFFaWsAQ4wK2xjT4I27cWGlBQoGmrdGiCSXBjYlxY4yJKxfif6FEtq50ows3rgwJUcPSxDF3Oredae/0x9D2AvfzSYa59557e85l+u05c+acMwGU1lD6TyXiUETMJBEDyeJyWlc0EoeWznvwx/vn00cStdorvyWRNI5l5yeN5/7Gxb0R8f23SRysrs13buH65Ynp6anZxv7I/JWZkbmF68cuXZm4OHVx6urYs2OnT508dXr0eEf3dWPtobQ47wx8OP76l5//mYx+9fN4EmfihcaJzfexXYZiqP5/kqxN6j+93ZkVpNr4PWl+iZOuAgvElmSvX3dE/DsGohorL95AfPBSoYUDdlQtiagBJZWIfyiprB2Qvbdf/T64UkirBNgN988udQCsjf+upb7B6K33Dex9kERzt04SEZ31zLXaFxHf3R2/deHu+K3Z/TvTDwfkW7wZEf9piv+eLCWpx/9g9MZgPf4rLfGftgvONZ7T4y93mP/qrmLxD7tnKf57c+r/lfiPNvH/RlP8v9lh/kMrm2/1tcR/X6e3BAAAAAAAAKV152xEPJM3/qeyPP4ncsb/9EfEmW3If2jV/trP/yv3tiEbIMf9sxHP547/rUR1afTvYLXxOf/++niA7uTCpemp4xHxj4g4Gt170v3RdfI49tHBz9qlDTXG/2WPNP/0eeWMyr2uPa3XTE7MTzzsfQMR929G/Dd3/G+yXP8nOfV/+vdgZpN5HHzq9rl2aRvHP7BTal9EHMmt/5Pu7Jxk/fU5RurtgZGsVbDW/977+Ot2+Xca/5aYgIeX1v978+M/O2UwaV6vZ27reZxY6Kq1S+u0/d+TvFpfciabrvDuxPz87GhEX/JiNT3acnxs62WGJ1EWD1m8pPF/9P/r9//ltf/7ImJx1c9Ofm+dU5z511/9v7Qrj/Y/FCeN/8kt1f9tN5LFiNyksduD3zRl2bIc3ubq/5P1uv5o44j+P1jyaRZNPa3HcwK0Ky9pt8sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+CSkTsi6QyvLxdqQwPR/RHxD9jb2X62tz80xeuvX11Mk2rf/9/Jfum34Gl/ST7/v/Bpv2xVfsnIuJARHxS7avvD5+/Nj1Z9M0DAAAAAAAAAAAAAAAAAADAI6K/zfz/1K/VoksH7LiuogsAFCYn/n8oohzA7lP/Q3mJfygv8Q/lJf6hvMQ/lJf4h/IS/1Be4h8AAAAAAJ4oBw7f+SmJiMXn+uqPVE8jrbvQkgE7rVJ0AYDCWOIHysvQHygv7/GBZIP03rYXJbFnox+ee3Fq5vwmigYAAAAAAAAAAAAANBw5ZP4/lJX5/1Be5v9DeWXz/w8XXA5g93X8Hr/tnF7gcbTeGgDtw32jlQMAAAAAAAAAAAAAgO0yt3D98sT09NTs7m382PjSr9xz+iJil8uTbbxWRKbFbtRqtRv1l+IRKc9jvpENhd/8Vb35UbAzG9lcv81dVdAfJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYI2/AwAA//+sQRxN") ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e24, @multicast1}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus/file0\x00', 0x4040, 0x12) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x21}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4094}, 0xc010) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r1, 0x0, 0xa53c) r4 = msgget$private(0x0, 0x790) msgsnd(r4, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000580108805400070100000000000000000800050000000000080005000000000008000500000000000800050000000000080005000000000008000500000000000800050000000000080006000000000008000500000000002c0007800800050000000000080006000000000008000600000000000800050000000000080005000000000044000780080005000000000008000500000000000800060000000000080006000000000008000500000000000800060000000000080006000000000008000500000000002c000780080006"], 0x198}}, 0x0) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, 0xee01, 0x52, 0x7}, 0x0, 0x0, 0xc7af, 0x4, 0x7fff, 0x7fffffff, 0x5, 0xff, 0x8, 0x401}) 2.732402707s ago: executing program 0 (id=1428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknodat$loop(0xffffffffffffffff, 0x0, 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x34310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x4, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000002000/0x2000)=nil) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1a00801, &(0x7f0000000500)=ANY=[@ANYBLOB='iocharset=iso8853-5,check=strict,session=0x0000000000000033,overriderockperm,map=off,iocharset=cp850,nocompress,nojoliet,dmode=0x0000000000000008,norock,mode=0x0000000000000f10,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6d61703d6e6f726d616c2c007ee2282ea04703e8a1c2e3f6e2c4e05f1ba94796def398358a18e267947a3238dea5ff5be4cd79956395d818ac11982e007b6347785707c1cd167c78460955c9d65ab2f1144896dcab7ef6ab87eb2a34b7ecd0e461ad98431f9c6ae7aa139872baa11bae06c99f3277edaa2b28b9a0b78d"], 0x0, 0x42e, &(0x7f0000000d40)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f00000003c0)=r4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x1004) close(r1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4894) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x33, 0x0, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x4, @multicast2}}, 0x1e) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r7, &(0x7f0000001300)=[{&(0x7f0000002240)=""/4115, 0x1013}], 0x1, 0x146, 0xfffffffc) 2.48766138s ago: executing program 6 (id=1429): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, 0x0}}], 0x1, 0x0) io_uring_setup(0x134a, &(0x7f0000019080)={0x0, 0x1f89, 0x0, 0x3, 0x286}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)="10", 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006"], 0xa0}}, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000000)) r3 = open(&(0x7f0000000040)='./file0\x00', 0x181000, 0x120) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000140)={0xbb8, 0x0, 0x5, 0x100, 0x0, 0x0, {0x3, 0x0, 0x3}, [{{0x254, 0x1, {{0x2, 0xffff}, 0x3, 0x7, 0x1, 0x4, 0x27, 'syz1\x00', "8eecbc83c655d5ba2d21e30c01e26962497bbfccf5c3d24c3a43ad7f4f291220", "119e3d034ec6a8f2502f518f1801d8df6527e99b2d3557eb7bf630922c7fdc37", [{0x6, 0x3, {0x1, 0x7}}, {0x200, 0x3}, {0x600, 0x0, {0x6, 0x400}}, {0x1, 0x6, {0x1, 0x4}}, {0x401, 0x4, {0x2, 0xffffffff}}, {0x5, 0xba, {0x0, 0x10}}, {0xfff, 0xdd21, {0x0, 0x2}}, {0x6, 0x6c, {0x2, 0x2460432a}}, {0x7f, 0x9, {0x3, 0x9}}, {0x7, 0x7, {0x1, 0x40}}, {0x4, 0x1, {0x0, 0x9}}, {0x1288, 0x64f, {0x1, 0x7}}, {0xe, 0x4, {0x1, 0x80000001}}, {0x0, 0x101, {0x2, 0xf0}}, {0x3, 0x5, {0x2, 0x7}}, {0xe0, 0x6, {0x0, 0x7}}, {0xd, 0xf709, {0x2, 0x7}}, {0x4, 0x5, {0x0, 0x5}}, {0x8, 0x2, {0x1, 0xdce}}, {0x8, 0x4, {0x2, 0x1}}, {0xa34, 0x2, {0x2, 0x2}}, {0xab, 0x40, {0x3}}, {0x7, 0x8, {0x2, 0x5}}, {0x0, 0x6, {0x0, 0x2}}, {0x8, 0x7, {0x2, 0x7fff}}, {0x8, 0x1, {0x2, 0x7}}, {0x2, 0xffdb, {0x3, 0x56}}, {0x2, 0x6, {0x0, 0xd3c}}, {0xe75, 0x8, {0x2, 0x6}}, {0x7, 0x4, {0x0, 0x2}}, {0xfa, 0x3, {0x1, 0x4}}, {0x1, 0xa67, {0x3, 0xfffff001}}, {0x3a, 0xfffd, {0x2, 0x4}}, {0x800, 0x5, {0x0, 0x8}}, {0xa1, 0xd4b, {0x3}}, {0x101, 0x7ff, {0x0, 0x9}}, {0x0, 0x2, {0x2, 0x5}}, {0x7fff, 0x2, {0x1, 0xfffffff9}}, {0x7, 0x7, {0x1}}, {0x2, 0x66, {0x3, 0x80000000}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0xff, 0x40, 0x9, 0x9, 0x5, 'syz1\x00', "3f6e5c81909b44781b39c642e03f0367461dd60ee33ca0cd7e707b416e4ccfd3", "17644ae3e59a44ac01feddc6ff659752ae3b8f3052c2d4210173f75a1f15f3f0", [{0x5, 0x100, {0x3, 0xffff}}, {0xc, 0x4, {0x1, 0xff}}, {0x3, 0x8, {0x0, 0xffffff23}}, {0x3, 0x9, {0x3, 0x3}}, {0x13, 0x9, {0x1, 0x8}}, {0x10, 0x17, {0x0, 0xd5}}, {0x8001, 0x6, {0x2, 0x7}}, {0xd, 0x7, {0x3, 0x750}}, {0x9, 0xe0, {0x0, 0x4}}, {0x2, 0xce, {0x2, 0x4}}, {0xee7, 0x89, {0x0, 0x9}}, {0x8000, 0x8, {0x1, 0xffffffff}}, {0x6, 0x4, {0x3, 0x2}}, {0x0, 0x3, {0x3, 0x7f}}, {0x32c4, 0x2, {0x3, 0x2}}, {0x377e, 0x8, {0x3, 0x57c}}, {0x7ff, 0x1a, {0x3, 0x6}}, {0x3709, 0x5, {0x1, 0x1}}, {0xb, 0x9, {0x0, 0xd58}}, {0x3, 0xfff8, {0x3, 0x5}}, {0x1000, 0x3, {0x0, 0x68b2e405}}, {0xc17, 0xe1, {0x3, 0x80000000}}, {0x18, 0x6, {0x1, 0x6}}, {0x7, 0x2, {0x3, 0xffffff37}}, {0x40, 0x1a, {0x1, 0x5}}, {0x0, 0x80, {0x0, 0x8}}, {0x1, 0x0, {0x2, 0x1}}, {0xa8, 0x0, {0x2, 0x400}}, {0xffff, 0x5, {0x3, 0x8000}}, {0x4, 0x3, {0x1, 0x9}}, {0x2, 0x10, {0x1, 0x1}}, {0x5, 0x100, {0x0, 0x73}}, {0x4d7, 0x4, {0x0, 0x72e}}, {0x1ff, 0x2, {0x1, 0x9}}, {0x10, 0x0, {0x3, 0x5}}, {0x0, 0x8, {0x1, 0x7}}, {0x8, 0x8, {0x2, 0x120}}, {0x435, 0x3, {0x1, 0xbd}}, {0x1470, 0x8, {0x2, 0x1a64}}, {0x39e, 0x44, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x4, 0x4, 0x6, 0x2, 0x11, 'syz0\x00', "bdb282d72123cc6f8336132fd2b0165c23a31343510657da502439f948e8c001", "9e9770d7c454eb10cd9cfb1816468b4ebeff7cbd33400d4a207212aa5eb0cba3", [{0x3, 0x0, {0x0, 0xffffffff}}, {0x8, 0xd, {0x0, 0x73e}}, {0x1, 0x0, {0x2, 0x6}}, {0x6, 0x6, {0x3, 0x1}}, {0x8, 0x1ff, {0x0, 0x2}}, {0x0, 0x28c, {0x1, 0xc0}}, {0x0, 0x5, {0x2, 0x8}}, {0x8, 0x9, {0x0, 0x400}}, {0x7, 0x2, {0x3, 0x8000}}, {0x0, 0xb, {0x1, 0x40}}, {0x5, 0x1c00, {0x0, 0x1ff}}, {0x400, 0x8, {0x1, 0x68a}}, {0x8001, 0x4, {0x1, 0x40}}, {0x7, 0x401, {0x0, 0xff}}, {0xf892, 0x5}, {0x4a, 0x6, {0x1, 0xe}}, {0x5, 0xfff3, {0x0, 0x3}}, {0x7, 0x504b, {0x0, 0x5}}, {0xfff, 0xfffc, {0xf674b98e00be85c9, 0x10}}, {0x1, 0x2, {0x1, 0xffffffff}}, {0x2, 0xee6e, {0x3, 0x2}}, {0x6, 0x1, {0x0, 0xf}}, {0x5, 0x0, {0x3, 0x9}}, {0x6, 0x80, {0x1, 0x7ff}}, {0x5, 0x2, {0x0, 0x3a}}, {0x4, 0x1, {0x2, 0x4}}, {0xf, 0x40}, {0x0, 0x0, {0x0, 0x3c}}, {0x5, 0xad, {0x3, 0xd}}, {0x7, 0x24, {0x2, 0x9}}, {0x2, 0x200, {0x0, 0x7}}, {0x83a6, 0x0, {0x5, 0x2}}, {0x1, 0x5, {0x1, 0x1}}, {0x580, 0xfff6, {0x0, 0x4205}}, {0x1e6f, 0x2, {0x0, 0x7}}, {0x5, 0xd, {0x1, 0x3}}, {0x9, 0x7, {0x3, 0x1}}, {0x2, 0x3, {0x1, 0xe}}, {0x5, 0x769, {0x2, 0x5}}, {0x9, 0x8, {0x1, 0x40}}]}}}, {{0x254, 0x1, {{0x3, 0x80000001}, 0x2, 0x4, 0xfff, 0xcda3, 0x6, 'syz1\x00', "efc0ed1d4ea1db8c754d09e5ee083b610cb1fab2c9494253118216873c1e177b", "678db7815dfcfe1757ae3991fffb55bd00107aafbb7dff754dee68115c152ca4", [{0xfffd, 0x2, {0x1, 0x8}}, {0x7a5d, 0x915, {0x1, 0xcc}}, {0x5, 0x2, {0x2, 0x5}}, {0x67, 0x8, {0x0, 0x3}}, {0x9, 0x3, {0x0, 0x40100}}, {0x2, 0xc, {0x1, 0x1165e384}}, {0xe, 0x5, {0x2, 0x5}}, {0x7, 0xa9d, {0x3, 0xfffffffe}}, {0x2, 0x1, {0x0, 0x1}}, {0x7, 0x1, {0x2, 0xe}}, {0x8, 0xb, {0x2, 0x7}}, {0xa2, 0x8, {0x0, 0x2}}, {0xff87, 0x101, {0x0, 0x6def}}, {0xc, 0x2, {0x3, 0x2}}, {0x7ff, 0x4, {0x3, 0xa}}, {0x7, 0x1, {0x3, 0x7}}, {0xffff, 0x3, {0x2}}, {0x9, 0x5, {0x3, 0xfffffffd}}, {0x4, 0xb, {0x2, 0x3}}, {0x6, 0xa2, {0x0, 0x1}}, {0xf, 0x9, {0x1, 0x5}}, {0xc00, 0x7, {0x3, 0xdf}}, {0x1d3, 0x7, {0x3, 0x80000000}}, {0xf1, 0x0, {0x2, 0xfcc}}, {0x0, 0xff, {0x1, 0x9}}, {0x3, 0x2, {0x3, 0x7ddb}}, {0x9, 0x8, {0x0, 0x3}}, {0xfff8, 0x4, {0x2, 0x34d}}, {0x8, 0x3, {0x3, 0xdc}}, {0x81, 0x7, {0x1, 0x6}}, {0x4, 0x0, {0x2, 0x7ff}}, {0x7, 0x3, {0x2, 0x5}}, {0x1000, 0x6, {0x3, 0xf0fe}}, {0x67d5, 0xda}, {0x4, 0x3, {0x3, 0x1}}, {0x5, 0x7, {0x0, 0x40}}, {0x81, 0x6, {0x2, 0xffffffff}}, {0xf001, 0x4, {0x0, 0x1}}, {0x8, 0x6, {0x1, 0x5}}, {0xf7a, 0x6, {0x3, 0x7fffffff}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x9, 0x78, 0x0, 0x2, 0x1e, 'syz0\x00', "cf07d03305d6309fddb3f04aa495ce3235f66db5c1f04e9dd5926b588eec1c49", "fbfdea734131718e3f31fb413b2ee5d30b64c5d97b663d5cd5bb1c2835d2c784", [{0x359b, 0x400, {0x0, 0x6}}, {0x7, 0xb18, {0x0, 0x3}}, {0x2, 0x7, {0x2, 0x6}}, {0x6, 0x0, {0x3, 0x7}}, {0x2, 0x1530, {0x1, 0x800}}, {0xf800, 0x9, {0x106d05f1d2151e1e, 0xe}}, {0x1ff, 0x0, {0x1}}, {0x7, 0x7, {0x3, 0x6}}, {0x1, 0xfffa, {0x0, 0xffffffff}}, {0x1, 0x2190, {0x3, 0x200}}, {0x8000, 0xf, {0x1, 0x1}}, {0x80, 0x3, {0x2, 0x3}}, {0x2b75, 0x8, {0x0, 0x8}}, {0x7, 0x0, {0x2, 0x5}}, {0xf, 0xfff9, {0x1, 0x4}}, {0xfffd, 0x8, {0x1, 0x8}}, {0x9, 0x6, {0x1, 0x69}}, {0x82, 0xff, {0x1, 0x3ff}}, {0x7, 0x4, {0x6, 0x3ff}}, {0x9, 0xa, {0x3, 0x10}}, {0x80, 0x8000, {0x3, 0x7}}, {0xa, 0x8000, {0x2, 0x7}}, {0x3, 0x5, {0x0, 0x2}}, {0x100, 0x7fff, {0x2, 0xfffffff8}}, {0x2, 0x9, {0x1, 0x8}}, {0x1, 0xfff2, {0x3, 0x9}}, {0x80, 0x3, {0x3, 0x7fff}}, {0x2, 0x8, {0x0, 0x9}}, {0xa2, 0x1, {0x3, 0x2}}, {0x83, 0x5f94, {0x0, 0xfb}}, {0x4, 0x200, {0x2}}, {0xc, 0xfbff, {0x3, 0x8}}, {0x0, 0x280, {0x3, 0x4e}}, {0x1be9, 0x1, {0x3, 0x1}}, {0x7, 0xff, {0x2, 0x100}}, {0x4, 0x8f8, {0x3, 0x1}}, {0x8, 0x6a, {0x2, 0x2}}, {0x1, 0xdfd2, {0x1, 0x8}}, {0x7, 0x1, {0x2, 0x8}}, {0x0, 0xd8, {0x0, 0x4}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000001}, 0xc000) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2.45709289s ago: executing program 2 (id=1430): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r4) r5 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r5, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r5, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x6da24b7ebfdfaf83}, 0xc) keyctl$read(0xb, r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 2.364514341s ago: executing program 6 (id=1432): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204000, &(0x7f0000000040)={[{@grpquota}, {@barrier_val={'barrier', 0x3d, 0x857}}]}, 0x4, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0xc, 0xc, 0x0, 0x81}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000280)={@remote, @loopback, r2}, 0xc) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x40000000) preadv2(r3, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x14080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000240)={[{@jqfmt_vfsv1}, {@sysvgroups}]}, 0x3, 0x466, &(0x7f0000000940)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$key(0xf, 0x3, 0x2) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file2\x00', 0x80000) sendmsg$key(r6, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) 2.323525492s ago: executing program 4 (id=1433): socket$kcm(0x23, 0x2, 0x0) close(0x3) 2.226184053s ago: executing program 4 (id=1434): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x100cc5c, &(0x7f0000000100)={[{@shortname_mixed}, {@shortname_lower}, {@numtail}, {@nonumtail}, {@utf8no}, {@uni_xlateno}, {@rodir}, {@fat=@dos1xfloppy}, {@numtail}, {@uni_xlateno}, {@shortname_mixed}, {@utf8no}, {@shortname_mixed}, {@rodir}, {@utf8no}, {@utf8}]}, 0x3, 0x305, &(0x7f00000006c0)="$eJzs3U1LY1ccx/H/zYNJtDZZlFJKCwcLpaV4MYHuulCKQmmgRU2hFgrXem1DronkBiGl1CwK3XbdhYsuS6EUupvNMMzWzbyCedq5cTfCyJzh5j4kJtf4MOPDjN/PwhzvOT/PuTmJxqP3ZO+zPzZq6675VGsRrXVqVjpyYEhBEpIUX0c+vrvz4P2lO2/4nyu1MLdcLCmVEJHvfvln6nZr4pv/37yVkd3C93v7pce77y2LPFv+qeqqqqvqWitLrTYaLcMLr1XdmqnU145tubaq1l272QrqrVXHVutOY3Ozraz62uT4ZtN2XWXV26pmt1WroVrNtrJ+tKp1ZZqmmhwXiEghKiWG6gyR7LHByt8HWsu+1lpnOt70G8NtOmEhHdxmXni8uDYG5n9k26EHR/IiR4bLcKBTp55/vH785//DP5n/m2np25Uv58rl+UWlsiIbv29Vtir+rV9/f0Kq4ogtO4ufrBx2XyIGxPA+LnxRnp9RXQX5cGM7yG9vVfwfDnPrQb4oee91Sl9ewnzRz6uj+bSM9+dLkpe34vOlMC+JvvyYfPRBX96UvNz7QRriyJp42V7+16JSn39VHug/120XI3eJ0wMAAAAAAAAAwLmYKtJbvzd6f+o1zUz3Pz6i+u7qt9fOr4/W12ckL4fx6/Mzsev7KXk3dXXnDQAAAADATeK2f65ZjmM3L6aQ/Cs3oou0iHgFkd+mvMGM/IJvByM+Xe9jIjJclRzdxZFC7lO/v38Xg4HJRd5RL6kQXqxRs5z/wqqcxDVOnOkBMD0We89nL/UE5TSNw6tdztpFJvYEw2tdRsWNw/DIO7FttHFy79py0tGRnIicOObZMz0dji1k9cCR6UfBGY/4pvEkWuIDAAAA8Arp+8UJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABckXNtHhbs29/dbK5XJcFbxEcbp0U7Cwy+Tzz7/gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4hp4HAAD//8NKtQM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[]) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x74, 0x24, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xfff2}, {0x1, 0x7}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c010}, 0x40080) 2.152653874s ago: executing program 4 (id=1435): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x20000850) 1.932914547s ago: executing program 4 (id=1436): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) munlockall() mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x44840}, 0x800) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) socket$packet(0x11, 0x3, 0x300) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) (async) munlockall() (async) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) (async) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0xa, 0x5, 0x0) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, 0x0, &(0x7f0000000080)) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x44840}, 0x800) (async) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) (async) 1.810738868s ago: executing program 0 (id=1437): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10100, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r2 = io_uring_setup(0x3a58, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x101d0) 1.534075181s ago: executing program 2 (id=1438): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"/315], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 1.454100933s ago: executing program 0 (id=1439): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110805, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) unshare(0x22020600) bind$nfc_llcp(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000c7000000000000000a000000911104000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003804e"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x22008014) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="050000330851a400100020004000000003f6ff00c5000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', r4, 0x4000, r0}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) 1.440013662s ago: executing program 2 (id=1440): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x8}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x8301, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socketpair(0x21, 0x6, 0x800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r4 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.376385373s ago: executing program 6 (id=1441): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$peekuser(0x3, r1, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x8, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) getpgrp(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1fd) unshare(0x44040200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x80000000}) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x8fe1, 0x1c080, 0xa, 0x20002f7}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x50, r5, 0xc1166000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08bc872f00"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, 0x0) 64.723849ms ago: executing program 4 (id=1442): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, 0x0}}], 0x1, 0x0) io_uring_setup(0x134a, &(0x7f0000019080)={0x0, 0x1f89, 0x0, 0x3, 0x286}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)="10", 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006"], 0xa0}}, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000000)) r3 = open(&(0x7f0000000040)='./file0\x00', 0x181000, 0x120) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000d40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000140)={0xbb8, 0x0, 0x5, 0x100, 0x0, 0x0, {0x3, 0x0, 0x3}, [{{0x254, 0x1, {{0x2, 0xffff}, 0x3, 0x7, 0x1, 0x4, 0x27, 'syz1\x00', "8eecbc83c655d5ba2d21e30c01e26962497bbfccf5c3d24c3a43ad7f4f291220", "119e3d034ec6a8f2502f518f1801d8df6527e99b2d3557eb7bf630922c7fdc37", [{0x6, 0x3, {0x1, 0x7}}, {0x200, 0x3}, {0x600, 0x0, {0x6, 0x400}}, {0x1, 0x6, {0x1, 0x4}}, {0x401, 0x4, {0x2, 0xffffffff}}, {0x5, 0xba, {0x0, 0x10}}, {0xfff, 0xdd21, {0x0, 0x2}}, {0x6, 0x6c, {0x2, 0x2460432a}}, {0x7f, 0x9, {0x3, 0x9}}, {0x7, 0x7, {0x1, 0x40}}, {0x4, 0x1, {0x0, 0x9}}, {0x1288, 0x64f, {0x1, 0x7}}, {0xe, 0x4, {0x1, 0x80000001}}, {0x0, 0x101, {0x2, 0xf0}}, {0x3, 0x5, {0x2, 0x7}}, {0xe0, 0x6, {0x0, 0x7}}, {0xd, 0xf709, {0x2, 0x7}}, {0x4, 0x5, {0x0, 0x5}}, {0x8, 0x2, {0x1, 0xdce}}, {0x8, 0x4, {0x2, 0x1}}, {0xa34, 0x2, {0x2, 0x2}}, {0xab, 0x40, {0x3}}, {0x7, 0x8, {0x2, 0x5}}, {0x0, 0x6, {0x0, 0x2}}, {0x8, 0x7, {0x2, 0x7fff}}, {0x8, 0x1, {0x2, 0x7}}, {0x2, 0xffdb, {0x3, 0x56}}, {0x2, 0x6, {0x0, 0xd3c}}, {0xe75, 0x8, {0x2, 0x6}}, {0x7, 0x4, {0x0, 0x2}}, {0xfa, 0x3, {0x1, 0x4}}, {0x1, 0xa67, {0x3, 0xfffff001}}, {0x3a, 0xfffd, {0x2, 0x4}}, {0x800, 0x5, {0x0, 0x8}}, {0xa1, 0xd4b, {0x3}}, {0x101, 0x7ff, {0x0, 0x9}}, {0x0, 0x2, {0x2, 0x5}}, {0x7fff, 0x2, {0x1, 0xfffffff9}}, {0x7, 0x7, {0x1}}, {0x2, 0x66, {0x3, 0x80000000}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0xff, 0x40, 0x9, 0x9, 0x5, 'syz1\x00', "3f6e5c81909b44781b39c642e03f0367461dd60ee33ca0cd7e707b416e4ccfd3", "17644ae3e59a44ac01feddc6ff659752ae3b8f3052c2d4210173f75a1f15f3f0", [{0x5, 0x100, {0x3, 0xffff}}, {0xc, 0x4, {0x1, 0xff}}, {0x3, 0x8, {0x0, 0xffffff23}}, {0x3, 0x9, {0x3, 0x3}}, {0x13, 0x9, {0x1, 0x8}}, {0x10, 0x17, {0x0, 0xd5}}, {0x8001, 0x6, {0x2, 0x7}}, {0xd, 0x7, {0x3, 0x750}}, {0x9, 0xe0, {0x0, 0x4}}, {0x2, 0xce, {0x2, 0x4}}, {0xee7, 0x89, {0x0, 0x9}}, {0x8000, 0x8, {0x1, 0xffffffff}}, {0x6, 0x4, {0x3, 0x2}}, {0x0, 0x3, {0x3, 0x7f}}, {0x32c4, 0x2, {0x3, 0x2}}, {0x377e, 0x8, {0x3, 0x57c}}, {0x7ff, 0x1a, {0x3, 0x6}}, {0x3709, 0x5, {0x1, 0x1}}, {0xb, 0x9, {0x0, 0xd58}}, {0x3, 0xfff8, {0x3, 0x5}}, {0x1000, 0x3, {0x0, 0x68b2e405}}, {0xc17, 0xe1, {0x3, 0x80000000}}, {0x18, 0x6, {0x1, 0x6}}, {0x7, 0x2, {0x3, 0xffffff37}}, {0x40, 0x1a, {0x1, 0x5}}, {0x0, 0x80, {0x0, 0x8}}, {0x1, 0x0, {0x2, 0x1}}, {0xa8, 0x0, {0x2, 0x400}}, {0xffff, 0x5, {0x3, 0x8000}}, {0x4, 0x3, {0x1, 0x9}}, {0x2, 0x10, {0x1, 0x1}}, {0x5, 0x100, {0x0, 0x73}}, {0x4d7, 0x4, {0x0, 0x72e}}, {0x1ff, 0x2, {0x1, 0x9}}, {0x10, 0x0, {0x3, 0x5}}, {0x0, 0x8, {0x1, 0x7}}, {0x8, 0x8, {0x2, 0x120}}, {0x435, 0x3, {0x1, 0xbd}}, {0x1470, 0x8, {0x2, 0x1a64}}, {0x39e, 0x44, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x4, 0x4, 0x6, 0x2, 0x11, 'syz0\x00', "bdb282d72123cc6f8336132fd2b0165c23a31343510657da502439f948e8c001", "9e9770d7c454eb10cd9cfb1816468b4ebeff7cbd33400d4a207212aa5eb0cba3", [{0x3, 0x0, {0x0, 0xffffffff}}, {0x8, 0xd, {0x0, 0x73e}}, {0x1, 0x0, {0x2, 0x6}}, {0x6, 0x6, {0x3, 0x1}}, {0x8, 0x1ff, {0x0, 0x2}}, {0x0, 0x28c, {0x1, 0xc0}}, {0x0, 0x5, {0x2, 0x8}}, {0x8, 0x9, {0x0, 0x400}}, {0x7, 0x2, {0x3, 0x8000}}, {0x0, 0xb, {0x1, 0x40}}, {0x5, 0x1c00, {0x0, 0x1ff}}, {0x400, 0x8, {0x1, 0x68a}}, {0x8001, 0x4, {0x1, 0x40}}, {0x7, 0x401, {0x0, 0xff}}, {0xf892, 0x5}, {0x4a, 0x6, {0x1, 0xe}}, {0x5, 0xfff3, {0x0, 0x3}}, {0x7, 0x504b, {0x0, 0x5}}, {0xfff, 0xfffc, {0xf674b98e00be85c9, 0x10}}, {0x1, 0x2, {0x1, 0xffffffff}}, {0x2, 0xee6e, {0x3, 0x2}}, {0x6, 0x1, {0x0, 0xf}}, {0x5, 0x0, {0x3, 0x9}}, {0x6, 0x80, {0x1, 0x7ff}}, {0x5, 0x2, {0x0, 0x3a}}, {0x4, 0x1, {0x2, 0x4}}, {0xf, 0x40}, {0x0, 0x0, {0x0, 0x3c}}, {0x5, 0xad, {0x3, 0xd}}, {0x7, 0x24, {0x2, 0x9}}, {0x2, 0x200, {0x0, 0x7}}, {0x83a6, 0x0, {0x5, 0x2}}, {0x1, 0x5, {0x1, 0x1}}, {0x580, 0xfff6, {0x0, 0x4205}}, {0x1e6f, 0x2, {0x0, 0x7}}, {0x5, 0xd, {0x1, 0x3}}, {0x9, 0x7, {0x3, 0x1}}, {0x2, 0x3, {0x1, 0xe}}, {0x5, 0x769, {0x2, 0x5}}, {0x9, 0x8, {0x1, 0x40}}]}}}, {{0x254, 0x1, {{0x3, 0x80000001}, 0x2, 0x4, 0xfff, 0xcda3, 0x6, 'syz1\x00', "efc0ed1d4ea1db8c754d09e5ee083b610cb1fab2c9494253118216873c1e177b", "678db7815dfcfe1757ae3991fffb55bd00107aafbb7dff754dee68115c152ca4", [{0xfffd, 0x2, {0x1, 0x8}}, {0x7a5d, 0x915, {0x1, 0xcc}}, {0x5, 0x2, {0x2, 0x5}}, {0x67, 0x8, {0x0, 0x3}}, {0x9, 0x3, {0x0, 0x40100}}, {0x2, 0xc, {0x1, 0x1165e384}}, {0xe, 0x5, {0x2, 0x5}}, {0x7, 0xa9d, {0x3, 0xfffffffe}}, {0x2, 0x1, {0x0, 0x1}}, {0x7, 0x1, {0x2, 0xe}}, {0x8, 0xb, {0x2, 0x7}}, {0xa2, 0x8, {0x0, 0x2}}, {0xff87, 0x101, {0x0, 0x6def}}, {0xc, 0x2, {0x3, 0x2}}, {0x7ff, 0x4, {0x3, 0xa}}, {0x7, 0x1, {0x3, 0x7}}, {0xffff, 0x3, {0x2}}, {0x9, 0x5, {0x3, 0xfffffffd}}, {0x4, 0xb, {0x2, 0x3}}, {0x6, 0xa2, {0x0, 0x1}}, {0xf, 0x9, {0x1, 0x5}}, {0xc00, 0x7, {0x3, 0xdf}}, {0x1d3, 0x7, {0x3, 0x80000000}}, {0xf1, 0x0, {0x2, 0xfcc}}, {0x0, 0xff, {0x1, 0x9}}, {0x3, 0x2, {0x3, 0x7ddb}}, {0x9, 0x8, {0x0, 0x3}}, {0xfff8, 0x4, {0x2, 0x34d}}, {0x8, 0x3, {0x3, 0xdc}}, {0x81, 0x7, {0x1, 0x6}}, {0x4, 0x0, {0x2, 0x7ff}}, {0x7, 0x3, {0x2, 0x5}}, {0x1000, 0x6, {0x3, 0xf0fe}}, {0x67d5, 0xda}, {0x4, 0x3, {0x3, 0x1}}, {0x5, 0x7, {0x0, 0x40}}, {0x81, 0x6, {0x2, 0xffffffff}}, {0xf001, 0x4, {0x0, 0x1}}, {0x8, 0x6, {0x1, 0x5}}, {0xf7a, 0x6, {0x3, 0x7fffffff}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x9, 0x78, 0x0, 0x2, 0x1e, 'syz0\x00', "cf07d03305d6309fddb3f04aa495ce3235f66db5c1f04e9dd5926b588eec1c49", "fbfdea734131718e3f31fb413b2ee5d30b64c5d97b663d5cd5bb1c2835d2c784", [{0x359b, 0x400, {0x0, 0x6}}, {0x7, 0xb18, {0x0, 0x3}}, {0x2, 0x7, {0x2, 0x6}}, {0x6, 0x0, {0x3, 0x7}}, {0x2, 0x1530, {0x1, 0x800}}, {0xf800, 0x9, {0x106d05f1d2151e1e, 0xe}}, {0x1ff, 0x0, {0x1}}, {0x7, 0x7, {0x3, 0x6}}, {0x1, 0xfffa, {0x0, 0xffffffff}}, {0x1, 0x2190, {0x3, 0x200}}, {0x8000, 0xf, {0x1, 0x1}}, {0x80, 0x3, {0x2, 0x3}}, {0x2b75, 0x8, {0x0, 0x8}}, {0x7, 0x0, {0x2, 0x5}}, {0xf, 0xfff9, {0x1, 0x4}}, {0xfffd, 0x8, {0x1, 0x8}}, {0x9, 0x6, {0x1, 0x69}}, {0x82, 0xff, {0x1, 0x3ff}}, {0x7, 0x4, {0x6, 0x3ff}}, {0x9, 0xa, {0x3, 0x10}}, {0x80, 0x8000, {0x3, 0x7}}, {0xa, 0x8000, {0x2, 0x7}}, {0x3, 0x5, {0x0, 0x2}}, {0x100, 0x7fff, {0x2, 0xfffffff8}}, {0x2, 0x9, {0x1, 0x8}}, {0x1, 0xfff2, {0x3, 0x9}}, {0x80, 0x3, {0x3, 0x7fff}}, {0x2, 0x8, {0x0, 0x9}}, {0xa2, 0x1, {0x3, 0x2}}, {0x83, 0x5f94, {0x0, 0xfb}}, {0x4, 0x200, {0x2}}, {0xc, 0xfbff, {0x3, 0x8}}, {0x0, 0x280, {0x3, 0x4e}}, {0x1be9, 0x1, {0x3, 0x1}}, {0x7, 0xff, {0x2, 0x100}}, {0x4, 0x8f8, {0x3, 0x1}}, {0x8, 0x6a, {0x2, 0x2}}, {0x1, 0xdfd2, {0x1, 0x8}}, {0x7, 0x1, {0x2, 0x8}}, {0x0, 0xd8, {0x0, 0x4}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000001}, 0xc000) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 0s ago: executing program 4 (id=1443): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): issive=1 [ 272.249803][ T1038] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 272.426329][ T6687] loop1: detected capacity change from 0 to 136 [ 273.259090][ T6695] tipc: Enabling of bearer rejected, already enabled [ 273.529318][ T3295] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.332182][ T28] audit: type=1400 audit(1778497114.402:2921): avc: denied { bind } for pid=6723 comm="syz.1.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 274.527657][ T28] audit: type=1400 audit(1778497114.452:2922): avc: denied { listen } for pid=6723 comm="syz.1.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 274.627861][ T28] audit: type=1400 audit(1778497114.452:2923): avc: denied { read } for pid=6723 comm="syz.1.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 274.756818][ T28] audit: type=1400 audit(1778497114.832:2924): avc: denied { write } for pid=6696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.820900][ T6736] netlink: 'syz.0.904': attribute type 1 has an invalid length. [ 274.845109][ T28] audit: type=1400 audit(1778497114.882:2925): avc: denied { write } for pid=6740 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.158566][ T28] audit: type=1400 audit(1778497115.232:2926): avc: denied { write } for pid=6746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.229440][ T28] audit: type=1400 audit(1778497115.302:2927): avc: denied { write } for pid=6758 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.288969][ T6760] loop1: detected capacity change from 0 to 512 [ 275.378015][ T6760] EXT4-fs error (device loop1): __ext4_fill_super:5596: inode #2: comm syz.1.909: iget: checksum invalid [ 275.406907][ T6760] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 275.412423][ T6760] EXT4-fs (loop1): get root inode failed [ 275.422463][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 275.422592][ C1] EXT4-fs (loop1): initial error at time 1778497115: __ext4_fill_super:5596: inode 2 [ 275.422902][ C1] EXT4-fs (loop1): last error at time 1778497115: __ext4_fill_super:5596: inode 2 [ 275.470802][ T6760] EXT4-fs (loop1): mount failed [ 275.488191][ T28] audit: type=1400 audit(1778497115.562:2928): avc: denied { write } for pid=6763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.543206][ T28] audit: type=1400 audit(1778497115.602:2929): avc: denied { write } for pid=6776 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.750917][ T6786] loop5: detected capacity change from 0 to 128 [ 275.769674][ T6786] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 275.846890][ T6786] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.032644][ T6802] loop0: detected capacity change from 0 to 512 [ 276.052137][ T6799] loop2: detected capacity change from 0 to 512 [ 276.100977][ T6804] tipc: Started in network mode [ 276.106012][ T6804] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 276.114978][ T6804] tipc: Enabling of bearer rejected, failed to enable media [ 276.127376][ T6802] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.918: iget: bad i_size value: 38620345925642 [ 276.145320][ T6799] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 276.199615][ T6802] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 276.200213][ T6802] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.918: couldn't read orphan inode 15 (err -117) [ 276.209477][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 276.209501][ C1] EXT4-fs (loop0): initial error at time 1778497116: ext4_orphan_get:1397: inode 15 [ 276.209535][ C1] EXT4-fs (loop0): last error at time 1778497116: ext4_orphan_get:1397: inode 15 [ 276.266878][ T6799] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.916: bad orphan inode 131083 [ 276.277992][ T6799] loop2: lost filesystem error report for type 5 error -117 [ 276.285107][ T6799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.305191][ T6802] loop0: lost filesystem error report for type 5 error -117 [ 276.306458][ T6802] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.555823][ T6809] usb usb9: usbfs: process 6809 (syz.2.916) did not claim interface 0 before use [ 276.589460][ T6809] vhci_hcd vhci_hcd.4: default hub control req: a100 v0000 i0000 l0 [ 276.811053][ T6326] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.894781][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 276.991234][ T6820] loop5: detected capacity change from 0 to 512 [ 277.281311][ T6820] EXT4-fs error (device loop5): __ext4_fill_super:5596: inode #2: comm syz.5.921: iget: checksum invalid [ 277.397457][ T6820] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 277.404116][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 277.419592][ C1] EXT4-fs (loop5): initial error at time 1778497117: __ext4_fill_super:5596: inode 2 [ 277.429133][ C1] EXT4-fs (loop5): last error at time 1778497117: __ext4_fill_super:5596: inode 2 [ 277.491641][ T6820] EXT4-fs (loop5): get root inode failed [ 277.499217][ T6820] EXT4-fs (loop5): mount failed [ 277.528585][ T6824] syzkaller0: entered promiscuous mode [ 277.595486][ T6824] syzkaller0: entered allmulticast mode [ 277.943229][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 277.943246][ T28] audit: type=1400 audit(1778497118.012:2933): avc: denied { write } for pid=6833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.088114][ T28] audit: type=1400 audit(1778497118.072:2934): avc: denied { read } for pid=6846 comm="syz.4.927" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 278.141119][ T6859] loop5: detected capacity change from 0 to 128 [ 278.184451][ T6859] msdos: Bad value for 'dmask' [ 278.221980][ T28] audit: type=1400 audit(1778497118.072:2935): avc: denied { open } for pid=6846 comm="syz.4.927" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 278.247272][ T6860] program syz.4.928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.334721][ T28] audit: type=1400 audit(1778497118.082:2936): avc: denied { getopt } for pid=6846 comm="syz.4.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 278.418869][ T28] audit: type=1400 audit(1778497118.152:2937): avc: denied { write } for pid=6850 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.484570][ T6859] loop5: detected capacity change from 0 to 136 [ 278.940934][ T6864] loop0: detected capacity change from 0 to 256 [ 279.076600][ T6868] loop5: detected capacity change from 0 to 128 [ 279.157975][ T6870] xt_NFQUEUE: number of total queues is 0 [ 279.436881][ T6874] xt_NFQUEUE: number of total queues is 0 [ 279.497944][ T6868] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 279.536887][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.537344][ T6868] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 279.560188][ T28] audit: type=1400 audit(1778497119.632:2938): avc: denied { write } for pid=6867 comm="syz.5.932" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 279.793548][ T6882] tipc: Enabling of bearer rejected, failed to enable media [ 280.297953][ T6326] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.344714][ T28] audit: type=1400 audit(1778497120.402:2939): avc: denied { create } for pid=6889 comm="syz.2.937" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 280.383750][ T6890] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 280.400249][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 280.448704][ T28] audit: type=1400 audit(1778497120.402:2940): avc: denied { write } for pid=6889 comm="syz.2.937" name="file0" dev="tmpfs" ino=879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 280.471164][ T28] audit: type=1400 audit(1778497120.412:2941): avc: denied { open } for pid=6889 comm="syz.2.937" path="/157/file0" dev="tmpfs" ino=879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 280.498646][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.938'. [ 280.539191][ T6896] futex_wake_op: syz.4.938 tries to shift op by -1; fix this program [ 282.414182][ T28] audit: type=1400 audit(1778497122.482:2942): avc: denied { ioctl } for pid=6889 comm="syz.2.937" path="/157/file0" dev="tmpfs" ino=879 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 283.616918][ T28] audit: type=1400 audit(1778497123.692:2943): avc: denied { map } for pid=6912 comm="syz.1.943" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 283.655500][ T6916] loop5: detected capacity change from 0 to 256 [ 284.245137][ T6916] Cannot find set identified by id 0 to match [ 284.318433][ T28] audit: type=1400 audit(1778497123.722:2944): avc: denied { execute } for pid=6912 comm="syz.1.943" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 284.318470][ T28] audit: type=1400 audit(1778497123.722:2945): avc: denied { map } for pid=6912 comm="syz.1.943" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.318542][ T28] audit: type=1400 audit(1778497123.722:2946): avc: denied { read write } for pid=6912 comm="syz.1.943" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.318633][ T28] audit: type=1400 audit(1778497124.332:2947): avc: denied { unlink } for pid=3295 comm="syz-executor" name="file0" dev="tmpfs" ino=879 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 284.370005][ T28] audit: type=1400 audit(1778497124.442:2948): avc: denied { setopt } for pid=6922 comm="syz.1.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 284.374624][ T28] audit: type=1400 audit(1778497124.452:2949): avc: denied { getopt } for pid=6922 comm="syz.1.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 284.376268][ T28] audit: type=1400 audit(1778497124.452:2950): avc: denied { getopt } for pid=6922 comm="syz.1.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 287.100226][ T6957] netlink: 64 bytes leftover after parsing attributes in process `syz.0.955'. [ 287.123786][ T6960] loop2: detected capacity change from 0 to 256 [ 287.458902][ T6957] netlink: 64 bytes leftover after parsing attributes in process `syz.0.955'. [ 288.020935][ T6970] loop0: detected capacity change from 0 to 128 [ 288.050640][ T6970] msdos: Bad value for 'dmask' [ 288.070596][ T6960] xt_NFQUEUE: number of total queues is 0 [ 288.176271][ T6970] loop0: detected capacity change from 0 to 136 [ 288.410238][ T6931] Set syz1 is full, maxelem 65536 reached [ 288.485732][ T6983] loop5: detected capacity change from 0 to 256 [ 288.506379][ T6983] msdos: Unknown parameter '+/úžù+ÿŽ³„í/û‰ùJçFÊÇÐ' [ 288.979326][ T6993] loop1: detected capacity change from 0 to 128 [ 289.056240][ T6993] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.132989][ T6993] ext4 filesystem being mounted at /207/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 289.195245][ T28] audit: type=1400 audit(1778497129.272:2951): avc: denied { write } for pid=6992 comm="syz.1.969" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.493220][ T28] audit: type=1400 audit(1778497129.562:2952): avc: denied { name_connect } for pid=7003 comm="syz.5.972" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 289.520351][ T7007] tipc: Enabling of bearer rejected, already enabled [ 289.585962][ T28] audit: type=1400 audit(1778497129.602:2953): avc: denied { setopt } for pid=7003 comm="syz.5.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 289.629765][ T7010] loop2: detected capacity change from 0 to 256 [ 289.802501][ T7010] xt_NFQUEUE: number of total queues is 0 [ 290.932384][ T7024] loop5: detected capacity change from 0 to 512 [ 290.950767][ T28] audit: type=1400 audit(1778497131.022:2954): avc: denied { read write } for pid=7025 comm="syz.2.980" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 291.192089][ T7024] EXT4-fs error (device loop5): __ext4_fill_super:5596: inode #2: comm syz.5.979: iget: checksum invalid [ 291.222145][ T28] audit: type=1400 audit(1778497131.022:2955): avc: denied { open } for pid=7025 comm="syz.2.980" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 291.329463][ T7024] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 291.344122][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 291.359695][ C1] EXT4-fs (loop5): initial error at time 1778497131: __ext4_fill_super:5596: inode 2 [ 291.369227][ C1] EXT4-fs (loop5): last error at time 1778497131: __ext4_fill_super:5596: inode 2 [ 291.435306][ T7024] EXT4-fs (loop5): get root inode failed [ 291.450406][ T7024] EXT4-fs (loop5): mount failed [ 291.785978][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.287443][ T7056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.991'. [ 292.461603][ T7063] loop0: detected capacity change from 0 to 128 [ 292.538009][ T7065] netlink: 'syz.2.992': attribute type 10 has an invalid length. [ 292.547805][ T7063] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 292.569192][ T7063] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 292.572511][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.616092][ T7068] netlink: 68 bytes leftover after parsing attributes in process `syz.4.993'. [ 292.649607][ T28] audit: type=1400 audit(1778497132.722:2956): avc: denied { write } for pid=7062 comm="syz.0.994" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 292.650012][ T7065] bond0: (slave team0): Enslaving as an active interface with an up link [ 294.181674][ T7078] loop5: detected capacity change from 0 to 256 [ 294.218717][ T7078] FAULT_INJECTION: forcing a failure. [ 294.218717][ T7078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.244912][ T7078] CPU: 1 UID: 0 PID: 7078 Comm: syz.5.999 Not tainted syzkaller #0 PREEMPT(full) [ 294.245003][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.245020][ T7078] Call Trace: [ 294.245027][ T7078] [ 294.245036][ T7078] __dump_stack+0x1d/0x30 [ 294.245066][ T7078] dump_stack_lvl+0x95/0xd0 [ 294.245091][ T7078] dump_stack+0x15/0x1b [ 294.245163][ T7078] should_fail_ex+0x263/0x280 [ 294.245279][ T7078] should_fail+0xb/0x20 [ 294.245309][ T7078] should_fail_usercopy+0x1a/0x20 [ 294.245349][ T7078] strncpy_from_user+0x27/0x250 [ 294.245376][ T7078] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 294.245524][ T7078] do_getname+0x59/0x1c0 [ 294.245548][ T7078] __se_sys_mkdirat+0x21/0xf0 [ 294.245658][ T7078] __x64_sys_mkdirat+0x43/0x50 [ 294.245704][ T7078] x64_sys_call+0x2c4e/0x3020 [ 294.245732][ T7078] do_syscall_64+0x12c/0x3b0 [ 294.245809][ T7078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.245841][ T7078] RIP: 0033:0x7f10ed80bc47 [ 294.245862][ T7078] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.245883][ T7078] RSP: 002b:00007f10ec25ee58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 294.245908][ T7078] RAX: ffffffffffffffda RBX: 00007f10ec25eee0 RCX: 00007f10ed80bc47 [ 294.245925][ T7078] RDX: 00000000000001ff RSI: 00002000000005c0 RDI: 00000000ffffff9c [ 294.246093][ T7078] RBP: 0000200000000080 R08: 0000200000000140 R09: 0000000000000000 [ 294.246110][ T7078] R10: 0000200000000080 R11: 0000000000000246 R12: 00002000000005c0 [ 294.246127][ T7078] R13: 00007f10ec25eea0 R14: 0000000000000000 R15: 0000000000000000 [ 294.246152][ T7078] [ 294.707588][ T7079] tipc: Enabling of bearer rejected, already enabled [ 294.815402][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1006'. [ 295.110554][ T28] audit: type=1400 audit(1778497135.182:2957): avc: denied { watch watch_reads } for pid=7106 comm="syz.2.1008" path="/178" dev="tmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 296.028857][ T7111] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1009'. [ 299.406549][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.457060][ T7137] FAULT_INJECTION: forcing a failure. [ 299.457060][ T7137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.492148][ T7137] CPU: 0 UID: 0 PID: 7137 Comm: syz.0.1019 Not tainted syzkaller #0 PREEMPT(full) [ 299.492175][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.492233][ T7137] Call Trace: [ 299.492242][ T7137] [ 299.492251][ T7137] __dump_stack+0x1d/0x30 [ 299.492283][ T7137] dump_stack_lvl+0x95/0xd0 [ 299.492311][ T7137] dump_stack+0x15/0x1b [ 299.492354][ T7137] should_fail_ex+0x263/0x280 [ 299.492413][ T7137] should_fail+0xb/0x20 [ 299.492502][ T7137] should_fail_usercopy+0x1a/0x20 [ 299.492542][ T7137] _copy_to_user+0x20/0xa0 [ 299.492643][ T7137] simple_read_from_buffer+0xb5/0x130 [ 299.492762][ T7137] proc_fail_nth_read+0x10e/0x150 [ 299.492799][ T7137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.492827][ T7137] vfs_read+0x1ab/0x7f0 [ 299.492857][ T7137] ? fdget+0xbc/0x110 [ 299.493032][ T7137] ? __sys_bind+0xc3/0x290 [ 299.493146][ T7137] ksys_read+0xdc/0x1a0 [ 299.493176][ T7137] __x64_sys_read+0x40/0x50 [ 299.493219][ T7137] x64_sys_call+0x2886/0x3020 [ 299.493269][ T7137] do_syscall_64+0x12c/0x3b0 [ 299.493308][ T7137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.493331][ T7137] RIP: 0033:0x7f97f11ad60e [ 299.493346][ T7137] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 299.493449][ T7137] RSP: 002b:00007f97efc46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.493476][ T7137] RAX: ffffffffffffffda RBX: 00007f97efc476c0 RCX: 00007f97f11ad60e [ 299.493494][ T7137] RDX: 000000000000000f RSI: 00007f97efc470a0 RDI: 0000000000000004 [ 299.493524][ T7137] RBP: 00007f97efc47090 R08: 0000000000000000 R09: 0000000000000000 [ 299.493552][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.493567][ T7137] R13: 00007f97f1466038 R14: 00007f97f1465fa0 R15: 00007fff9d6d8ec8 [ 299.493591][ T7137] [ 299.827293][ T7146] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1023'. [ 300.924487][ T7160] xt_NFQUEUE: number of total queues is 0 [ 300.989313][ T7165] FAULT_INJECTION: forcing a failure. [ 300.989313][ T7165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.032119][ T7165] CPU: 1 UID: 0 PID: 7165 Comm: syz.2.1029 Not tainted syzkaller #0 PREEMPT(full) [ 301.032152][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 301.032166][ T7165] Call Trace: [ 301.032174][ T7165] [ 301.032190][ T7165] __dump_stack+0x1d/0x30 [ 301.032283][ T7165] dump_stack_lvl+0x95/0xd0 [ 301.032310][ T7165] dump_stack+0x15/0x1b [ 301.032398][ T7165] should_fail_ex+0x263/0x280 [ 301.032434][ T7165] should_fail+0xb/0x20 [ 301.032475][ T7165] should_fail_usercopy+0x1a/0x20 [ 301.032511][ T7165] _copy_from_user+0x1c/0xb0 [ 301.032550][ T7165] ___sys_recvmsg+0xaa/0x3b0 [ 301.032595][ T7165] do_recvmmsg+0x1ef/0x560 [ 301.032707][ T7165] ? fput+0x8f/0xc0 [ 301.032729][ T7165] __x64_sys_recvmmsg+0xe5/0x170 [ 301.032764][ T7165] x64_sys_call+0x80f/0x3020 [ 301.032795][ T7165] do_syscall_64+0x12c/0x3b0 [ 301.032873][ T7165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.032961][ T7165] RIP: 0033:0x7f36609acdd9 [ 301.032981][ T7165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.033004][ T7165] RSP: 002b:00007f365f3ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 301.033161][ T7165] RAX: ffffffffffffffda RBX: 00007f3660c25fa0 RCX: 00007f36609acdd9 [ 301.033175][ T7165] RDX: 0000000000000001 RSI: 00002000000099c0 RDI: 0000000000000003 [ 301.033202][ T7165] RBP: 00007f365f3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 301.033217][ T7165] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000001 [ 301.033233][ T7165] R13: 00007f3660c26038 R14: 00007f3660c25fa0 R15: 00007ffcec5031d8 [ 301.033260][ T7165] [ 301.239329][ T7167] loop1: detected capacity change from 0 to 128 [ 301.285226][ T7167] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.303669][ T7167] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 301.326291][ T28] audit: type=1400 audit(1778497141.402:2958): avc: denied { write } for pid=7166 comm="syz.1.1030" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.485510][ T7180] Illegal XDP return value 2161612507 on prog (id 172) dev N/A, expect packet loss! [ 301.499060][ T7183] bond0: (slave veth1_macvtap): Error: Device is in use and cannot be enslaved [ 301.538282][ T28] audit: type=1400 audit(1778497141.612:2959): avc: denied { bind } for pid=7187 comm="syz.5.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 301.562689][ T7188] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 301.604463][ T7191] tipc: Enabling of bearer rejected, already enabled [ 301.631522][ T7192] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1036'. [ 301.958431][ T7198] xt_NFQUEUE: number of total queues is 0 [ 302.167979][ T28] audit: type=1400 audit(1778497141.652:2960): avc: denied { relabelfrom } for pid=7179 comm="syz.4.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 302.187918][ T28] audit: type=1400 audit(1778497141.652:2961): avc: denied { relabelto } for pid=7179 comm="syz.4.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 302.279795][ T28] audit: type=1400 audit(1778497142.352:2962): avc: denied { create } for pid=7203 comm="syz.4.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 302.413283][ T28] audit: type=1400 audit(1778497142.382:2963): avc: denied { bind } for pid=7203 comm="syz.4.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 302.476195][ T28] audit: type=1400 audit(1778497142.552:2964): avc: denied { write } for pid=7208 comm="syz.5.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 302.519801][ T28] audit: type=1400 audit(1778497142.592:2965): avc: denied { write } for pid=7203 comm="syz.4.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 302.617993][ T28] audit: type=1400 audit(1778497142.692:2966): avc: denied { create } for pid=7215 comm="syz.0.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 302.664030][ T7211] netlink: 'syz.2.1038': attribute type 1 has an invalid length. [ 302.736145][ T28] audit: type=1400 audit(1778497142.812:2967): avc: denied { listen } for pid=7218 comm="syz.0.1048" lport=43857 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 302.764958][ T7223] loop0: detected capacity change from 0 to 1024 [ 302.772749][ T7223] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 302.783403][ T7223] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 302.811260][ T7223] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.1048: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 302.829786][ T7223] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 302.829951][ T7223] EXT4-fs (loop0): Remounting filesystem read-only [ 302.839145][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 302.839167][ C0] EXT4-fs (loop0): initial error at time 1778497142: ext4_ext_check_inode:521: inode 11 [ 302.839202][ C0] EXT4-fs (loop0): last error at time 1778497142: ext4_ext_check_inode:521: inode 11 [ 302.872346][ T7223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.954304][ T7228] loop2: detected capacity change from 0 to 1024 [ 302.982992][ T7228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 303.018295][ T7228] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.051229][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.127911][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.184807][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 303.297429][ T7246] gre0 speed is unknown, defaulting to 1000 [ 303.407989][ T7254] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1054'. [ 303.969897][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 304.078542][ T7270] loop2: detected capacity change from 0 to 512 [ 304.087991][ T7270] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 304.108774][ T7273] loop0: detected capacity change from 0 to 128 [ 304.116416][ T7270] EXT4-fs (loop2): 1 truncate cleaned up [ 304.119136][ T7273] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 304.143243][ T7270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.155817][ T7273] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 304.201308][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1063'. [ 304.293287][ T7246] loop1: detected capacity change from 0 to 2048 [ 304.350610][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.358467][ T7246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.423403][ T7289] tipc: Enabling of bearer rejected, already enabled [ 304.784845][ T7299] FAULT_INJECTION: forcing a failure. [ 304.784845][ T7299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.799269][ T7294] syzkaller0: entered promiscuous mode [ 304.805558][ T7294] syzkaller0: entered allmulticast mode [ 304.819583][ T7299] CPU: 1 UID: 0 PID: 7299 Comm: syz.4.1070 Not tainted syzkaller #0 PREEMPT(full) [ 304.819610][ T7299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 304.819624][ T7299] Call Trace: [ 304.819630][ T7299] [ 304.819637][ T7299] __dump_stack+0x1d/0x30 [ 304.819714][ T7299] dump_stack_lvl+0x95/0xd0 [ 304.819833][ T7299] dump_stack+0x15/0x1b [ 304.819852][ T7299] should_fail_ex+0x263/0x280 [ 304.819879][ T7299] should_fail+0xb/0x20 [ 304.819922][ T7299] should_fail_usercopy+0x1a/0x20 [ 304.819994][ T7299] _copy_to_iter+0x251/0xea0 [ 304.820027][ T7299] ? __rcu_read_unlock+0x4e/0x70 [ 304.820208][ T7299] ? fib_route_seq_stop+0xe/0x20 [ 304.820288][ T7299] ? traverse+0x379/0x3a0 [ 304.820315][ T7299] seq_read_iter+0x1d5/0x940 [ 304.820396][ T7299] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 304.820427][ T7299] seq_read+0x279/0x2c0 [ 304.820486][ T7299] ? __pfx_seq_read+0x10/0x10 [ 304.820515][ T7299] proc_reg_read+0x128/0x1c0 [ 304.820547][ T7299] ? __pfx_proc_reg_read+0x10/0x10 [ 304.820660][ T7299] vfs_read+0x1ab/0x7f0 [ 304.820704][ T7299] ? __rcu_read_unlock+0x4e/0x70 [ 304.820725][ T7299] ? __fget_files+0x184/0x1c0 [ 304.820753][ T7299] ? mutex_unlock+0x4e/0x90 [ 304.820775][ T7299] __x64_sys_pread64+0xfd/0x150 [ 304.820807][ T7299] x64_sys_call+0x27b5/0x3020 [ 304.820848][ T7299] do_syscall_64+0x12c/0x3b0 [ 304.820885][ T7299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.820910][ T7299] RIP: 0033:0x7f3afbfecdd9 [ 304.820929][ T7299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.820952][ T7299] RSP: 002b:00007f3afaa3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 304.820976][ T7299] RAX: ffffffffffffffda RBX: 00007f3afc265fa0 RCX: 00007f3afbfecdd9 [ 304.821043][ T7299] RDX: 0000000000018fd4 RSI: 0000200000019140 RDI: 0000000000000005 [ 304.821076][ T7299] RBP: 00007f3afaa3f090 R08: 0000000000000000 R09: 0000000000000000 [ 304.821092][ T7299] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 304.821104][ T7299] R13: 00007f3afc266038 R14: 00007f3afc265fa0 R15: 00007ffe15da1308 [ 304.821124][ T7299] [ 305.118702][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 305.386086][ T7319] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1078'. [ 305.467722][ T7325] loop5: detected capacity change from 0 to 1024 [ 305.482769][ T7327] loop0: detected capacity change from 0 to 128 [ 305.494181][ T7325] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 305.516296][ T7325] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 305.532581][ T7327] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 305.535766][ T7325] EXT4-fs (loop5): invalid journal inode [ 305.565571][ T7327] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.570018][ T7325] EXT4-fs (loop5): can't get journal size [ 305.639703][ T7325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 305.829911][ T7249] Set syz1 is full, maxelem 65536 reached [ 306.047928][ T7333] tipc: Enabling of bearer rejected, already enabled [ 306.201774][ T6326] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /46/file0: bad entry in directory: inode out of bounds - offset=0, inode=511, rec_len=1024, size=1024 fake=0 [ 306.485928][ T7334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.601203][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.788411][ T7352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1091'. [ 306.916021][ T7358] tipc: Enabling of bearer rejected, already enabled [ 307.469326][ T7353] gre0 speed is unknown, defaulting to 1000 [ 307.962300][ T7353] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.971104][ T7353] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.989547][ T7353] bridge_slave_0: entered allmulticast mode [ 307.998883][ T7353] bridge_slave_0: entered promiscuous mode [ 308.007694][ T7353] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.015384][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.023029][ T7353] bridge_slave_1: entered allmulticast mode [ 308.031092][ T7353] bridge_slave_1: entered promiscuous mode [ 308.213281][ T7353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.223930][ T7353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.245552][ T7353] team0: Port device team_slave_0 added [ 308.252357][ T7353] team0: Port device team_slave_1 added [ 308.270191][ T7353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.277237][ T7353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.306263][ T7353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.317984][ T7353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.325177][ T7353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.352081][ T7353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.383028][ T7353] hsr_slave_0: entered promiscuous mode [ 308.389241][ T7353] hsr_slave_1: entered promiscuous mode [ 308.395445][ T7353] debugfs: 'hsr0' already exists in 'hsr' [ 308.401287][ T7353] Cannot create hsr debugfs directory [ 308.429715][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.550899][ T7386] loop0: detected capacity change from 0 to 128 [ 308.573452][ T7386] syz.0.1095: attempt to access beyond end of device [ 308.573452][ T7386] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 308.611651][ T7382] syzkaller0: entered promiscuous mode [ 308.617547][ T7386] syz.0.1095: attempt to access beyond end of device [ 308.617547][ T7386] loop0: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 308.631438][ T7382] syzkaller0: entered allmulticast mode [ 308.643421][ T7386] syz.0.1095: attempt to access beyond end of device [ 308.643421][ T7386] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 308.691531][ T7386] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 308.763327][ T7385] syz.0.1095: attempt to access beyond end of device [ 308.763327][ T7385] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 308.778145][ T7353] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 308.793000][ T7353] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.800593][ T7385] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 308.810620][ T7353] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.817757][ T7385] syz.0.1095: attempt to access beyond end of device [ 308.817757][ T7385] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 308.837870][ T7353] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 308.846080][ T7353] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 308.852848][ T7385] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 308.867682][ T7353] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 308.875094][ T7385] syz.0.1095: attempt to access beyond end of device [ 308.875094][ T7385] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 308.889639][ T7353] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 308.897713][ T7385] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 308.908046][ T7353] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 308.949522][ T7353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.968892][ T7353] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.980017][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.987131][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.012089][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.019237][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.041136][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 309.070649][ T7353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.109279][ T7399] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.1098'. [ 309.120071][ T7399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1098'. [ 309.129583][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 309.129595][ T28] audit: type=1400 audit(1778497149.192:2976): avc: denied { accept } for pid=7398 comm="syz.0.1098" lport=3615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 309.376816][ T7418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1101'. [ 309.416895][ T7353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.451101][ T28] audit: type=1400 audit(1778497149.522:2977): avc: denied { mount } for pid=7421 comm="syz.1.1102" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 309.748886][ T7433] loop2: detected capacity change from 0 to 128 [ 309.795217][ T7433] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 309.818051][ T7433] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 309.843456][ T28] audit: type=1400 audit(1778497149.912:2978): avc: denied { write } for pid=7432 comm="syz.2.1105" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 309.976810][ T7353] veth0_vlan: entered promiscuous mode [ 309.987171][ T7353] veth1_vlan: entered promiscuous mode [ 310.002284][ T7353] veth0_macvtap: entered promiscuous mode [ 310.022727][ T7353] veth1_macvtap: entered promiscuous mode [ 310.031481][ T7445] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1106'. [ 310.058719][ T7353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.080594][ T28] audit: type=1400 audit(1778497150.152:2979): avc: denied { getopt } for pid=7444 comm="syz.4.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 310.262203][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.269816][ T7445] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.805276][ T7445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.928389][ T7445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.401393][ T7353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.427942][ T3376] gre0 speed is unknown, defaulting to 1000 [ 311.444082][ T3376] syz1: Port: 1 Link DOWN [ 311.488241][ T3376] gre0 speed is unknown, defaulting to 1000 [ 311.536925][ T7475] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1110'. [ 311.570948][ T7477] loop1: detected capacity change from 0 to 128 [ 311.586344][ T7477] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.613629][ T7477] ext4 filesystem being mounted at /222/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.212157][ T7460] tipc: Enabling of bearer rejected, already enabled [ 312.219907][ T3437] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.250071][ T3437] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.286494][ T3437] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.462473][ T7485] loop0: detected capacity change from 0 to 128 [ 312.495371][ T28] audit: type=1326 audit(1778497152.452:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7482 comm="syz.4.1112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbfecdd9 code=0x7ffc0000 [ 312.540509][ T7485] msdos: Bad value for 'dmask' [ 312.556639][ T7480] tipc: Enabling of bearer rejected, already enabled [ 312.605684][ T28] audit: type=1326 audit(1778497152.452:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7482 comm="syz.4.1112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbfecdd9 code=0x7ffc0000 [ 312.707172][ T7485] loop0: detected capacity change from 0 to 136 [ 312.713817][ T28] audit: type=1326 audit(1778497152.462:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7482 comm="syz.4.1112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbfecdd9 code=0x7ffc0000 [ 312.801374][ T28] audit: type=1326 audit(1778497152.462:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7482 comm="syz.4.1112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3afbfecdd9 code=0x7ffc0000 [ 312.837413][ T3437] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.861238][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.863740][ T3437] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.892396][ T28] audit: type=1326 audit(1778497152.462:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7482 comm="syz.4.1112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbfecdd9 code=0x7ffc0000 [ 312.923674][ T3437] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.950016][ T3437] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.975816][ T3437] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.991795][ T28] audit: type=1326 audit(1778497152.482:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7482 comm="syz.4.1112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3afbfecdd9 code=0x7ffc0000 [ 313.070563][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1115'. [ 313.083136][ T7494] ipvlan2: entered allmulticast mode [ 313.088766][ T7494] syz_tun: entered allmulticast mode [ 313.398204][ T7506] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1119'. [ 313.424291][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1119'. [ 313.441363][ T7506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.457681][ T3295] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.524389][ T7513] tipc: Enabled bearer , priority 0 [ 313.542830][ T7513] syzkaller0: entered promiscuous mode [ 313.550547][ T7513] syzkaller0: entered allmulticast mode [ 313.572954][ T7513] tipc: Resetting bearer [ 313.605072][ T7508] siw: device registration error -23 [ 313.613964][ T7512] tipc: Resetting bearer [ 313.629001][ T7508] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1120'. [ 313.642258][ T7512] tipc: Disabling bearer [ 313.671660][ T7508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.689161][ T7508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.721969][ T7508] bond0 (unregistering): Released all slaves [ 313.750339][ T7520] tipc: Started in network mode [ 313.755740][ T7520] tipc: Node identity dad30135538c, cluster identity 4711 [ 313.763134][ T7520] tipc: Enabled bearer , priority 0 [ 313.770044][ T7516] syzkaller0: entered promiscuous mode [ 313.777105][ T7516] syzkaller0: entered allmulticast mode [ 313.784493][ T7518] tipc: Enabled bearer , priority 0 [ 313.794945][ T7518] syzkaller0: entered promiscuous mode [ 313.803826][ T7518] syzkaller0: entered allmulticast mode [ 313.812803][ T7516] tipc: Resetting bearer [ 313.820037][ T7518] FAULT_INJECTION: forcing a failure. [ 313.820037][ T7518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.835517][ T7518] CPU: 1 UID: 0 PID: 7518 Comm: syz.4.1123 Not tainted syzkaller #0 PREEMPT(full) [ 313.835630][ T7518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 313.835648][ T7518] Call Trace: [ 313.835655][ T7518] [ 313.835665][ T7518] __dump_stack+0x1d/0x30 [ 313.835761][ T7518] dump_stack_lvl+0x95/0xd0 [ 313.835788][ T7518] dump_stack+0x15/0x1b [ 313.835883][ T7518] should_fail_ex+0x263/0x280 [ 313.835911][ T7518] should_fail+0xb/0x20 [ 313.835963][ T7518] should_fail_usercopy+0x1a/0x20 [ 313.836075][ T7518] _copy_from_user+0x1c/0xb0 [ 313.836237][ T7518] sock_do_ioctl+0xe5/0x230 [ 313.836267][ T7518] sock_ioctl+0x41b/0x610 [ 313.836336][ T7518] ? mutex_lock+0x57/0x90 [ 313.836365][ T7518] ? __pfx_sock_ioctl+0x10/0x10 [ 313.836447][ T7518] __se_sys_ioctl+0xce/0x140 [ 313.836552][ T7518] __x64_sys_ioctl+0x43/0x50 [ 313.836646][ T7518] x64_sys_call+0x1563/0x3020 [ 313.836695][ T7518] do_syscall_64+0x12c/0x3b0 [ 313.836732][ T7518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.836761][ T7518] RIP: 0033:0x7f3afbfecdd9 [ 313.836776][ T7518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.836802][ T7518] RSP: 002b:00007f3afaa3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.836821][ T7518] RAX: ffffffffffffffda RBX: 00007f3afc265fa0 RCX: 00007f3afbfecdd9 [ 313.836836][ T7518] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 313.836853][ T7518] RBP: 00007f3afaa3f090 R08: 0000000000000000 R09: 0000000000000000 [ 313.836948][ T7518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.836964][ T7518] R13: 00007f3afc266038 R14: 00007f3afc265fa0 R15: 00007ffe15da1308 [ 313.836984][ T7518] [ 313.837120][ T7515] tipc: Resetting bearer [ 314.020570][ T7515] tipc: Disabling bearer [ 314.033576][ T7517] tipc: Resetting bearer [ 314.046652][ T7517] tipc: Disabling bearer [ 314.258701][ T28] kauditd_printk_skb: 210 callbacks suppressed [ 314.258719][ T28] audit: type=1326 audit(1778497154.332:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.6.1126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f2e89b6cdd9 code=0x7ffc0000 [ 314.308567][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'. [ 314.332116][ T7540] loop1: detected capacity change from 0 to 128 [ 314.379009][ T7540] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 314.395473][ T7540] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 314.414142][ T28] audit: type=1400 audit(1778497154.482:3197): avc: denied { write } for pid=7539 comm="syz.1.1131" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.459214][ T7545] loop0: detected capacity change from 0 to 512 [ 314.541171][ T7545] EXT4-fs error (device loop0): __ext4_fill_super:5596: inode #2: comm syz.0.1132: iget: checksum invalid [ 314.556129][ T7545] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 314.558117][ T7545] EXT4-fs (loop0): get root inode failed [ 314.568906][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 314.568970][ C0] EXT4-fs (loop0): initial error at time 1778497154: __ext4_fill_super:5596: inode 2 [ 314.569424][ C0] EXT4-fs (loop0): last error at time 1778497154: __ext4_fill_super:5596: inode 2 [ 314.607814][ T7552] ucma_write: process 22 (syz.6.1133) changed security contexts after opening file descriptor, this is not allowed. [ 314.620769][ T7545] EXT4-fs (loop0): mount failed [ 314.681665][ T7553] tipc: Enabling of bearer rejected, already enabled [ 314.734781][ T7557] loop0: detected capacity change from 0 to 256 [ 314.980244][ T28] audit: type=1400 audit(1778497155.052:3198): avc: denied { read } for pid=7564 comm="syz.2.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 315.100579][ T7451] hid_parser_main: 14 callbacks suppressed [ 315.100601][ T7451] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 315.115050][ T7573] UHID_CREATE from different security context by process 616 (syz.2.1142), this is not allowed. [ 315.118184][ T7574] Cannot find set identified by id 0 to match [ 315.135607][ T7451] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 315.800906][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.853375][ T7587] loop1: detected capacity change from 0 to 256 [ 316.276288][ T7593] xt_NFQUEUE: number of total queues is 0 [ 319.248621][ T7609] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1151'. [ 320.942918][ T28] audit: type=1400 audit(1778497161.012:3199): avc: denied { map } for pid=7634 comm="syz.4.1159" path="socket:[20716]" dev="sockfs" ino=20716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 321.218961][ T7642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1161'. [ 322.452169][ T28] audit: type=1400 audit(1778497162.522:3200): avc: denied { create } for pid=7656 comm="syz.2.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 322.544762][ T7662] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 322.551441][ T7662] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 322.559141][ T7662] vhci_hcd vhci_hcd.0: Device attached [ 322.570211][ T7662] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7662 comm=syz.2.1166 [ 322.946740][ T7466] usb 5-1: new low-speed USB device number 7 using vhci_hcd [ 322.960083][ T7663] vhci_hcd: connection closed [ 322.961049][ T3437] vhci_hcd vhci_hcd.2: stop threads [ 323.065324][ T3437] vhci_hcd vhci_hcd.2: release socket [ 323.125695][ T3437] vhci_hcd vhci_hcd.2: disconnect device [ 323.480896][ T7676] loop6: detected capacity change from 0 to 512 [ 323.510273][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 323.534810][ T7676] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.1171: corrupted in-inode xattr: invalid ea_ino [ 323.595673][ T7676] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 323.596021][ T7676] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1171: couldn't read orphan inode 15 (err -117) [ 323.605234][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 323.605263][ C1] EXT4-fs (loop6): initial error at time 1778497163: ext4_iget_extra_inode:5128: inode 15 [ 323.605297][ C1] EXT4-fs (loop6): last error at time 1778497163: ext4_iget_extra_inode:5128: inode 15 [ 323.674692][ T7686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1173'. [ 323.735428][ T7676] loop6: lost filesystem error report for type 5 error -117 [ 323.735910][ T7676] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.834911][ T7676] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.1171: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 323.854151][ T28] audit: type=1400 audit(1778497163.902:3201): avc: denied { write } for pid=7675 comm="syz.6.1171" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 324.105799][ T7353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.211954][ T7692] netlink: 'syz.1.1175': attribute type 1 has an invalid length. [ 324.396878][ T28] audit: type=1400 audit(1778497164.452:3202): avc: denied { read } for pid=7693 comm="syz.6.1176" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 324.445494][ T28] audit: type=1400 audit(1778497164.452:3203): avc: denied { open } for pid=7693 comm="syz.6.1176" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 324.469568][ T28] audit: type=1400 audit(1778497164.512:3204): avc: denied { ioctl } for pid=7693 comm="syz.6.1176" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 324.615384][ T7698] loop2: detected capacity change from 0 to 512 [ 325.426163][ T28] audit: type=1400 audit(1778497165.492:3205): avc: denied { write } for pid=7693 comm="syz.6.1176" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 327.044405][ T7639] Set syz1 is full, maxelem 65536 reached [ 327.258178][ T7727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1185'. [ 327.513632][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 328.179733][ T7736] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1187'. [ 328.194621][ T7466] usb 5-1: enqueue for inactive port 0 [ 328.200239][ T7466] usb 5-1: enqueue for inactive port 0 [ 328.284206][ T7466] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 328.488597][ T7738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1190'. [ 328.504207][ T7738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1190'. [ 328.662652][ T7749] loop1: detected capacity change from 0 to 128 [ 328.738916][ T7749] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 328.862307][ T7749] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 328.934209][ T28] audit: type=1400 audit(1778497168.982:3206): avc: denied { write } for pid=7748 comm="syz.1.1194" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.960307][ T7746] loop2: detected capacity change from 0 to 512 [ 329.003367][ T7743] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 329.153846][ T7759] tipc: Enabling of bearer rejected, already enabled [ 329.239094][ T7746] EXT4-fs error (device loop2): __ext4_fill_super:5596: inode #2: comm syz.2.1193: iget: checksum invalid [ 329.348740][ T7746] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 329.353380][ T7746] EXT4-fs (loop2): get root inode failed [ 329.354209][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 329.354262][ C1] EXT4-fs (loop2): initial error at time 1778497169: __ext4_fill_super:5596: inode 2 [ 329.354397][ C1] EXT4-fs (loop2): last error at time 1778497169: __ext4_fill_super:5596: inode 2 [ 329.423517][ T7762] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1197'. [ 329.569726][ T7746] EXT4-fs (loop2): mount failed [ 329.652452][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 329.745897][ T7769] loop0: detected capacity change from 0 to 256 [ 329.836375][ T28] audit: type=1400 audit(1778497169.912:3207): avc: denied { create } for pid=7780 comm="syz.2.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 329.867555][ T7781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7781 comm=syz.2.1203 [ 329.890037][ T7781] program syz.2.1203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.137670][ T7786] xt_NFQUEUE: number of total queues is 0 [ 330.201768][ T7771] loop1: detected capacity change from 0 to 2048 [ 330.328447][ T7771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.361149][ T28] audit: type=1400 audit(1778497170.432:3208): avc: denied { write } for pid=7770 comm="syz.1.1199" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.469079][ T28] audit: type=1400 audit(1778497170.542:3209): avc: denied { write } for pid=7770 comm="syz.1.1199" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.543180][ T28] audit: type=1400 audit(1778497170.542:3210): avc: denied { create } for pid=7770 comm="syz.1.1199" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 330.596390][ T28] audit: type=1400 audit(1778497170.542:3211): avc: denied { read write } for pid=7770 comm="syz.1.1199" name="file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 330.652794][ T28] audit: type=1400 audit(1778497170.542:3212): avc: denied { open } for pid=7770 comm="syz.1.1199" path="/239/file1/file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 330.708937][ T28] audit: type=1400 audit(1778497170.562:3213): avc: denied { watch } for pid=7770 comm="syz.1.1199" path="/239/file1/file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 330.854624][ T7802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1208'. [ 331.051106][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.184378][ T7806] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1209'. [ 331.246557][ T7809] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1209'. [ 331.609926][ T7808] usb usb9: usbfs: process 7808 (syz.4.1211) did not claim interface 0 before use [ 331.641547][ T7808] vhci_hcd vhci_hcd.4: default hub control req: a100 v0000 i0000 l0 [ 331.998120][ T7818] loop1: detected capacity change from 0 to 128 [ 332.009069][ T7818] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.036956][ T7818] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 332.112170][ T28] audit: type=1400 audit(1778497172.182:3214): avc: denied { write } for pid=7817 comm="syz.1.1210" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 332.551502][ T7830] tipc: Enabling of bearer rejected, already enabled [ 332.641932][ T7828] loop0: detected capacity change from 0 to 512 [ 332.964526][ T7828] EXT4-fs error (device loop0): __ext4_fill_super:5596: inode #2: comm syz.0.1215: iget: checksum invalid [ 332.990250][ T7837] loop6: detected capacity change from 0 to 2048 [ 333.011654][ T7828] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 333.014152][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 333.029666][ C1] EXT4-fs (loop0): initial error at time 1778497173: __ext4_fill_super:5596: inode 2 [ 333.039184][ C1] EXT4-fs (loop0): last error at time 1778497173: __ext4_fill_super:5596: inode 2 [ 333.063686][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 333.067628][ T7828] EXT4-fs (loop0): get root inode failed [ 333.080076][ T7828] EXT4-fs (loop0): mount failed [ 333.146592][ T7842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1221'. [ 333.233603][ T7848] loop0: detected capacity change from 0 to 512 [ 333.243457][ T7848] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 333.271180][ T7848] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1222: bad orphan inode 131083 [ 333.289047][ T7848] loop0: lost filesystem error report for type 5 error -117 [ 333.294096][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 333.307899][ C0] EXT4-fs (loop0): initial error at time 1778497173: ext4_orphan_get:1423 [ 333.316457][ C0] EXT4-fs (loop0): last error at time 1778497173: ext4_orphan_get:1423 [ 333.328605][ T7852] Cannot find add_set index 0 as target [ 333.339698][ T7848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.362105][ T7855] netlink: 'syz.2.1224': attribute type 1 has an invalid length. [ 333.393700][ T28] audit: type=1400 audit(1778497173.462:3215): avc: denied { write } for pid=7846 comm="syz.0.1222" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.446374][ T7848] usb usb9: usbfs: process 7848 (syz.0.1222) did not claim interface 0 before use [ 333.486063][ T7848] vhci_hcd vhci_hcd.4: default hub control req: a100 v0000 i0000 l0 [ 333.637508][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1224'. [ 333.821585][ T7869] capability: warning: `syz.6.1227' uses deprecated v2 capabilities in a way that may be insecure [ 333.926992][ T7855] bond1: (slave geneve2): making interface the new active one [ 333.954233][ T7855] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 333.976679][ T7861] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.999029][ T55] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 334.015633][ T55] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 334.030807][ T55] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 334.043481][ T55] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 334.490488][ T7882] loop1: detected capacity change from 0 to 256 [ 334.615943][ T7884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1232'. [ 334.639525][ T7882] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 334.946614][ T7880] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 334.988396][ T7880] FAT-fs (loop1): Filesystem has been set read-only [ 335.016487][ T7889] loop2: detected capacity change from 0 to 512 [ 335.025489][ T7880] tap0: tun_chr_ioctl cmd 35108 [ 335.114216][ T7889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.156912][ T7889] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.191888][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 335.191901][ T28] audit: type=1400 audit(1778497175.262:3220): avc: denied { write } for pid=7888 comm="syz.2.1234" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.241253][ T7889] EXT4-fs error (device loop2): ext4_get_first_dir_block:3548: inode #12: comm syz.2.1234: directory missing '.' [ 335.309976][ T7889] EXT4-fs (loop2): Remounting filesystem read-only [ 335.328539][ T28] audit: type=1400 audit(1778497175.312:3221): avc: denied { write } for pid=7888 comm="syz.2.1234" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.403733][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.427427][ T28] audit: type=1400 audit(1778497175.312:3222): avc: denied { write } for pid=7888 comm="syz.2.1234" name="file7" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 335.539610][ T28] audit: type=1400 audit(1778497175.312:3223): avc: denied { write } for pid=7888 comm="syz.2.1234" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.654274][ T28] audit: type=1400 audit(1778497175.312:3224): avc: denied { reparent } for pid=7888 comm="syz.2.1234" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.722766][ T7901] gre0 speed is unknown, defaulting to 1000 [ 335.740660][ T28] audit: type=1400 audit(1778497175.312:3225): avc: denied { add_name } for pid=7888 comm="syz.2.1234" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 335.857743][ T7886] loop6: detected capacity change from 0 to 128 [ 336.179094][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1239'. [ 336.205066][ T7908] bond1: entered promiscuous mode [ 336.229242][ T7908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 336.270428][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.289935][ T7908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 336.315951][ T7908] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 336.332104][ T7895] syz.6.1233: attempt to access beyond end of device [ 336.332104][ T7895] loop6: rw=2049, sector=257, nr_sectors = 496 limit=128 [ 336.365879][ T7908] bond1: (slave sit1): Error -95 calling set_mac_address [ 336.442584][ T7914] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 336.449190][ T7914] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 336.456738][ T7914] vhci_hcd vhci_hcd.0: Device attached [ 336.463553][ T7914] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7914 comm=syz.2.1241 [ 336.478827][ T7919] vhci_hcd: connection closed [ 336.479190][ T69] vhci_hcd vhci_hcd.2: stop threads [ 336.484396][ T7916] loop1: detected capacity change from 0 to 512 [ 336.509144][ T69] vhci_hcd vhci_hcd.2: release socket [ 336.515956][ T69] vhci_hcd vhci_hcd.2: disconnect device [ 336.540650][ T7916] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1243: bg 0: block 265: padding at end of block bitmap is not set [ 336.555946][ T7916] loop1: lost filesystem error report for type 5 error -117 [ 336.560348][ T7916] ------------[ cut here ]------------ [ 336.568227][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 336.568470][ C1] EXT4-fs (loop1): initial error at time 1778497176: ext4_validate_block_bitmap:441 [ 336.568658][ C1] EXT4-fs (loop1): last error at time 1778497176: ext4_validate_block_bitmap:441 [ 336.603750][ T7916] EA inode 11 i_nlink=0 [ 336.604386][ T7916] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.1243/7916 [ 336.620025][ T7916] Modules linked in: [ 336.624941][ T7916] CPU: 1 UID: 0 PID: 7916 Comm: syz.1.1243 Not tainted syzkaller #0 PREEMPT(full) [ 336.635277][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 336.646000][ T7916] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 336.653587][ T7916] Code: 04 5f 98 ff 4c 8d 2d 7d 6c 5c 05 49 8d 7e 40 e8 84 1c b6 ff 49 8b 6e 40 4c 89 e7 e8 b8 17 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f d5 d7 03 66 66 66 66 66 66 2e [ 336.675018][ T7916] RSP: 0018:ffffc90001547778 EFLAGS: 00010246 [ 336.681758][ T7916] RAX: ffff888104129c00 RBX: ffff888107240598 RCX: ffffffff81c0d228 [ 336.690211][ T7916] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3e90 [ 336.699127][ T7916] RBP: 000000000000000b R08: 000188810724054b R09: 0000000000000000 [ 336.708176][ T7916] R10: ffffc900015476a8 R11: 0001c900015476a8 R12: ffff888107240548 [ 336.716606][ T7916] R13: ffffffff871d3e90 R14: ffff888107240500 R15: 0000000000000001 [ 336.725188][ T7916] FS: 00007fdda20576c0(0000) GS:ffff8882ae9fb000(0000) knlGS:0000000000000000 [ 336.735577][ T7916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.742848][ T7916] CR2: 00007f703b286000 CR3: 00000001175fc000 CR4: 00000000003506f0 [ 336.751848][ T7916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 336.760927][ T7916] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 336.769907][ T7916] Call Trace: [ 336.773736][ T7916] [ 336.777258][ T7916] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 336.784118][ T7916] ? errseq_check+0x2c/0x50 [ 336.789288][ T7916] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 336.795847][ T7916] ext4_evict_inode+0xb16/0xe30 [ 336.801138][ T7916] ? __pfx_ext4_evict_inode+0x10/0x10 [ 336.807697][ T7916] evict+0x2af/0x510 [ 336.812364][ T7916] iput+0x41a/0x580 [ 336.816838][ T7916] ext4_process_orphan+0x1a9/0x1c0 [ 336.822645][ T7916] ext4_orphan_cleanup+0x69c/0x9f0 [ 336.828537][ T7916] ext4_fill_super+0x3408/0x37c0 [ 336.834117][ T7916] ? set_blocksize+0x14c/0x270 [ 336.839267][ T7916] ? setup_bdev_super+0x30e/0x370 [ 336.845318][ T7916] ? __pfx_ext4_fill_super+0x10/0x10 [ 336.851138][ T7916] get_tree_bdev_flags+0x291/0x300 [ 336.856807][ T7916] ? __pfx_ext4_fill_super+0x10/0x10 [ 336.862777][ T7916] get_tree_bdev+0x1f/0x30 [ 336.867987][ T7916] ext4_get_tree+0x1c/0x30 [ 336.872977][ T7916] vfs_get_tree+0x57/0x1d0 [ 336.878576][ T7916] do_new_mount+0x288/0x8d0 [ 336.883757][ T7916] ? __tsan_read_write4+0x114/0x180 [ 336.889527][ T7916] path_mount+0x4d0/0xbc0 [ 336.894627][ T7916] __se_sys_mount+0x28c/0x2e0 [ 336.900127][ T7916] __x64_sys_mount+0x67/0x80 [ 336.905647][ T7916] x64_sys_call+0x2d61/0x3020 [ 336.910658][ T7916] do_syscall_64+0x12c/0x3b0 [ 336.916428][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.923137][ T7916] RIP: 0033:0x7fdda35fe04a [ 336.928347][ T7916] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.949081][ T7916] RSP: 002b:00007fdda2056e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 336.958013][ T7916] RAX: ffffffffffffffda RBX: 00007fdda2056ee0 RCX: 00007fdda35fe04a [ 336.966807][ T7916] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fdda2056ea0 [ 336.975137][ T7916] RBP: 0000200000000180 R08: 00007fdda2056ee0 R09: 0000000000000000 [ 336.983287][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 336.991837][ T7916] R13: 00007fdda2056ea0 R14: 0000000000000482 R15: 0000200000000b40 [ 337.000116][ T7916] [ 337.003256][ T7916] ---[ end trace 0000000000000000 ]--- [ 337.010071][ T7916] EXT4-fs (loop1): 1 orphan inode deleted [ 337.053524][ T7916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.059139][ T7930] loop6: detected capacity change from 0 to 512 [ 337.075834][ T7931] tipc: Enabling of bearer rejected, already enabled [ 337.096286][ T7930] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 337.114604][ T7930] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1245: bad orphan inode 131083 [ 337.129357][ T7930] loop6: lost filesystem error report for type 5 error -117 [ 337.131586][ T7930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.153076][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.166620][ T28] audit: type=1400 audit(1778497177.242:3226): avc: denied { write } for pid=7929 comm="syz.6.1245" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.195106][ T7930] usb usb9: usbfs: process 7930 (syz.6.1245) did not claim interface 0 before use [ 337.204945][ T7930] vhci_hcd vhci_hcd.4: default hub control req: a100 v0000 i0000 l0 [ 337.433869][ T7939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1247'. [ 337.579464][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'. [ 337.707538][ T7950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1251'. [ 337.748681][ T7952] netlink: 'syz.0.1250': attribute type 3 has an invalid length. [ 338.502508][ T28] audit: type=1400 audit(1778497178.572:3227): avc: denied { append } for pid=7974 comm="syz.2.1260" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 338.536075][ T7975] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1260'. [ 339.556439][ T7353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.807708][ T28] audit: type=1400 audit(1778497179.882:3228): avc: denied { read write } for pid=7980 comm="syz.2.1263" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 339.846170][ T7991] loop2: detected capacity change from 0 to 2048 [ 339.857111][ T28] audit: type=1400 audit(1778497179.902:3229): avc: denied { open } for pid=7980 comm="syz.2.1263" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 339.974585][ T7991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.011424][ T7991] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.049965][ T7998] 9pnet_fd: Insufficient options for proto=fd [ 340.126277][ T8003] veth2: entered allmulticast mode [ 340.199507][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 340.199524][ T28] audit: type=1400 audit(1778497180.272:3254): avc: denied { write } for pid=8010 comm="syz.0.1271" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 340.260122][ T28] audit: type=1400 audit(1778497180.332:3255): avc: denied { write } for pid=8004 comm="syz.6.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 340.300816][ T7991] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.302011][ T28] audit: type=1400 audit(1778497180.362:3256): avc: denied { create } for pid=8013 comm="syz.0.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 340.340821][ T8014] loop0: detected capacity change from 0 to 128 [ 340.354681][ T28] audit: type=1400 audit(1778497180.362:3257): avc: denied { getopt } for pid=8013 comm="syz.0.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 340.389110][ T8014] syz.0.1272: attempt to access beyond end of device [ 340.389110][ T8014] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 340.390699][ T28] audit: type=1400 audit(1778497180.372:3258): avc: denied { tracepoint } for pid=8004 comm="syz.6.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 340.423578][ T28] audit: type=1400 audit(1778497180.402:3259): avc: denied { create } for pid=8004 comm="syz.6.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.435235][ T8014] syz.0.1272: attempt to access beyond end of device [ 340.435235][ T8014] loop0: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 340.457804][ T28] audit: type=1400 audit(1778497180.412:3260): avc: denied { connect } for pid=8004 comm="syz.6.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.477752][ T28] audit: type=1400 audit(1778497180.412:3261): avc: denied { write } for pid=8004 comm="syz.6.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.509623][ T8014] syz.0.1272: attempt to access beyond end of device [ 340.509623][ T8014] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 340.523358][ T8014] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 340.532222][ T8014] syz.0.1272: attempt to access beyond end of device [ 340.532222][ T8014] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 340.545999][ T28] audit: type=1400 audit(1778497180.452:3262): avc: denied { mount } for pid=8013 comm="syz.0.1272" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 340.569526][ T8014] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 340.581811][ T8014] syz.0.1272: attempt to access beyond end of device [ 340.581811][ T8014] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 340.596465][ T8014] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 340.662890][ T28] audit: type=1400 audit(1778497180.732:3263): avc: denied { create } for pid=8020 comm="syz.6.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 340.822278][ T8023] loop6: detected capacity change from 0 to 128 [ 340.864725][ T8023] syz.6.1276: attempt to access beyond end of device [ 340.864725][ T8023] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 340.879535][ T8023] syz.6.1276: attempt to access beyond end of device [ 340.879535][ T8023] loop6: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 340.896852][ T8023] syz.6.1276: attempt to access beyond end of device [ 340.896852][ T8023] loop6: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 340.958283][ T8023] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 340.994837][ T8037] No such timeout policy "syz1" [ 341.035151][ T8023] syz.6.1276: attempt to access beyond end of device [ 341.035151][ T8023] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 341.063650][ T8023] Buffer I/O error on dev loop6, logical block 69, lost async page write [ 341.081470][ T8023] Buffer I/O error on dev loop6, logical block 70, lost async page write [ 341.098257][ T8023] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 341.617573][ T8059] loop2: detected capacity change from 0 to 128 [ 341.642232][ T8059] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.662265][ T8057] loop0: detected capacity change from 0 to 128 [ 341.682029][ T8059] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 341.713778][ T8057] bio_check_eod: 2 callbacks suppressed [ 341.713804][ T8057] syz.0.1289: attempt to access beyond end of device [ 341.713804][ T8057] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 341.845681][ T8057] syz.0.1289: attempt to access beyond end of device [ 341.845681][ T8057] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 341.881593][ T8057] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 341.890369][ T8057] syz.0.1289: attempt to access beyond end of device [ 341.890369][ T8057] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 341.903818][ T8057] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 341.912296][ T8057] syz.0.1289: attempt to access beyond end of device [ 341.912296][ T8057] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 341.927677][ T8057] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 341.936452][ T8057] syz.0.1289: attempt to access beyond end of device [ 341.936452][ T8057] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 342.064703][ T8070] tipc: Enabling of bearer rejected, already enabled [ 342.548731][ T8065] xt_NFQUEUE: number of total queues is 0 [ 342.606705][ T3295] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.822867][ T8048] Set syz1 is full, maxelem 65536 reached [ 343.083977][ T8094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.100830][ T8111] loop2: detected capacity change from 0 to 128 [ 343.116845][ T8094] team0: Port device bond0 added [ 343.124532][ T8111] syz.2.1304: attempt to access beyond end of device [ 343.124532][ T8111] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 343.140230][ T8111] syz.2.1304: attempt to access beyond end of device [ 343.140230][ T8111] loop2: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 343.146928][ T8097] bridge0: port 3(team0) entered blocking state [ 343.155668][ T8111] syz.2.1304: attempt to access beyond end of device [ 343.155668][ T8111] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 343.181725][ T8097] bridge0: port 3(team0) entered disabled state [ 343.188618][ T8097] team0: entered allmulticast mode [ 343.193973][ T8097] team_slave_0: entered allmulticast mode [ 343.199841][ T8097] team_slave_1: entered allmulticast mode [ 343.205821][ T8097] bond0: entered allmulticast mode [ 343.211117][ T8097] bond_slave_0: entered allmulticast mode [ 343.217069][ T8097] bond_slave_1: entered allmulticast mode [ 343.226513][ T8097] team0: entered promiscuous mode [ 343.232167][ T8097] team_slave_0: entered promiscuous mode [ 343.238989][ T8097] team_slave_1: entered promiscuous mode [ 343.244896][ T8097] bond0: entered promiscuous mode [ 343.253141][ T8111] syz.2.1304: attempt to access beyond end of device [ 343.253141][ T8111] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 343.253769][ T8097] bond_slave_0: entered promiscuous mode [ 343.272790][ T8097] bond_slave_1: entered promiscuous mode [ 343.276751][ T8111] syz.2.1304: attempt to access beyond end of device [ 343.276751][ T8111] loop2: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 343.280626][ T8097] bridge0: port 3(team0) entered blocking state [ 343.298237][ T8097] bridge0: port 3(team0) entered forwarding state [ 343.335744][ T8117] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1305'. [ 343.436436][ T8123] FAULT_INJECTION: forcing a failure. [ 343.436436][ T8123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.451729][ T8123] CPU: 1 UID: 0 PID: 8123 Comm: syz.0.1308 Tainted: G W syzkaller #0 PREEMPT(full) [ 343.451840][ T8123] Tainted: [W]=WARN [ 343.451850][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 343.451866][ T8123] Call Trace: [ 343.451875][ T8123] [ 343.451886][ T8123] __dump_stack+0x1d/0x30 [ 343.451979][ T8123] dump_stack_lvl+0x95/0xd0 [ 343.452007][ T8123] dump_stack+0x15/0x1b [ 343.452032][ T8123] should_fail_ex+0x263/0x280 [ 343.452071][ T8123] should_fail+0xb/0x20 [ 343.452159][ T8123] should_fail_usercopy+0x1a/0x20 [ 343.452254][ T8123] _copy_to_user+0x20/0xa0 [ 343.452326][ T8123] simple_read_from_buffer+0xb5/0x130 [ 343.452394][ T8123] proc_fail_nth_read+0x10e/0x150 [ 343.452485][ T8123] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 343.452556][ T8123] vfs_read+0x1ab/0x7f0 [ 343.452640][ T8123] ? __rcu_read_unlock+0x4e/0x70 [ 343.452731][ T8123] ? __fget_files+0x184/0x1c0 [ 343.452764][ T8123] ? mutex_lock+0x57/0x90 [ 343.452787][ T8123] ksys_read+0xdc/0x1a0 [ 343.452878][ T8123] __x64_sys_read+0x40/0x50 [ 343.452920][ T8123] x64_sys_call+0x2886/0x3020 [ 343.452946][ T8123] do_syscall_64+0x12c/0x3b0 [ 343.452976][ T8123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.453040][ T8123] RIP: 0033:0x7f97f11ad60e [ 343.453116][ T8123] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 343.453141][ T8123] RSP: 002b:00007f97efc46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 343.453163][ T8123] RAX: ffffffffffffffda RBX: 00007f97efc476c0 RCX: 00007f97f11ad60e [ 343.453180][ T8123] RDX: 000000000000000f RSI: 00007f97efc470a0 RDI: 0000000000000004 [ 343.453192][ T8123] RBP: 00007f97efc47090 R08: 0000000000000000 R09: 0000000000000000 [ 343.453205][ T8123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.453216][ T8123] R13: 00007f97f1466038 R14: 00007f97f1465fa0 R15: 00007fff9d6d8ec8 [ 343.453279][ T8123] [ 343.776709][ T8133] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1312'. [ 344.955609][ T8143] loop1: detected capacity change from 0 to 128 [ 347.374133][ T8153] syz.4.1314 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 348.560728][ T8162] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1319'. [ 348.771648][ T8166] loop0: detected capacity change from 0 to 128 [ 348.792189][ T8166] bio_check_eod: 1 callbacks suppressed [ 348.792280][ T8166] syz.0.1321: attempt to access beyond end of device [ 348.792280][ T8166] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 348.797292][ T8171] loop6: detected capacity change from 0 to 512 [ 348.805236][ T8166] syz.0.1321: attempt to access beyond end of device [ 348.805236][ T8166] loop0: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 348.842010][ T8166] syz.0.1321: attempt to access beyond end of device [ 348.842010][ T8166] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 348.856717][ T8166] buffer_io_error: 5 callbacks suppressed [ 348.856732][ T8166] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 348.905065][ T8171] EXT4-fs error (device loop6): __ext4_fill_super:5596: inode #2: comm syz.6.1323: iget: checksum invalid [ 348.938422][ T8171] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 348.938661][ T8171] EXT4-fs (loop6): get root inode failed [ 348.947681][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 348.947698][ C1] EXT4-fs (loop6): initial error at time 1778497189: __ext4_fill_super:5596: inode 2 [ 348.947721][ C1] EXT4-fs (loop6): last error at time 1778497189: __ext4_fill_super:5596: inode 2 [ 348.978952][ T8171] EXT4-fs (loop6): mount failed [ 348.986846][ T8164] syz.0.1321: attempt to access beyond end of device [ 348.986846][ T8164] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 349.004215][ T8164] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 349.022555][ T8164] syz.0.1321: attempt to access beyond end of device [ 349.022555][ T8164] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 349.074596][ T8164] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 349.092380][ T8164] syz.0.1321: attempt to access beyond end of device [ 349.092380][ T8164] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 349.106054][ T8164] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 349.125763][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 349.125780][ T28] audit: type=1400 audit(1778497189.202:3321): avc: denied { name_bind } for pid=8167 comm="syz.1.1322" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 349.220908][ T8168] loop1: detected capacity change from 0 to 1024 [ 349.250390][ T8168] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 349.299420][ T8168] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.1322: lblock 2 mapped to illegal pblock 2 (length 1) [ 349.313924][ T8168] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 349.315664][ T8168] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 349.322102][ T28] audit: type=1400 audit(1778497189.392:3322): avc: denied { bind } for pid=8190 comm="syz.0.1329" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 349.324872][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 349.324899][ C1] EXT4-fs (loop1): initial error at time 1778497189: ext4_map_blocks:791: inode 3: block 2 [ 349.370075][ C1] EXT4-fs (loop1): last error at time 1778497189: ext4_map_blocks:791: inode 3: block 2 [ 349.376487][ T28] audit: type=1400 audit(1778497189.422:3323): avc: denied { name_bind } for pid=8190 comm="syz.0.1329" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 349.382112][ T8168] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.1322: lblock 0 mapped to illegal pblock 48 (length 1) [ 349.416772][ T8168] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 349.417125][ T8168] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 349.441013][ T8168] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1322: Failed to acquire dquot type 0 [ 349.453708][ T8168] loop1: lost filesystem error report for type 5 error -117 [ 349.454126][ T8168] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 349.474434][ T28] audit: type=1400 audit(1778497189.422:3324): avc: denied { node_bind } for pid=8190 comm="syz.0.1329" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 349.508955][ T8168] loop1: lost filesystem error report for type 5 error -117 [ 349.509289][ T8168] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.1322: mark_inode_dirty error [ 349.537984][ T8168] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 349.538487][ T8168] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 349.560711][ T8168] EXT4-fs (loop1): 1 orphan inode deleted [ 349.568564][ T8168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.580927][ T5409] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 349.608989][ T5409] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 349.620785][ T28] audit: type=1400 audit(1778497189.692:3325): avc: denied { write } for pid=8167 comm="syz.1.1322" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.627701][ T5409] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:9: Failed to release dquot type 0 [ 349.660563][ T8201] gre0 speed is unknown, defaulting to 1000 [ 349.690685][ T28] audit: type=1400 audit(1778497189.692:3326): avc: denied { create } for pid=8167 comm="syz.1.1322" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 349.732334][ T8204] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1333'. [ 349.754493][ T8204] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1333'. [ 349.770364][ T28] audit: type=1400 audit(1778497189.842:3327): avc: denied { getopt } for pid=8203 comm="syz.6.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 349.791109][ T8204] FAULT_INJECTION: forcing a failure. [ 349.791109][ T8204] name failslab, interval 1, probability 0, space 0, times 0 [ 349.819296][ T8204] CPU: 1 UID: 0 PID: 8204 Comm: syz.6.1333 Tainted: G W syzkaller #0 PREEMPT(full) [ 349.819329][ T8204] Tainted: [W]=WARN [ 349.819341][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 349.819357][ T8204] Call Trace: [ 349.819365][ T8204] [ 349.819374][ T8204] __dump_stack+0x1d/0x30 [ 349.819404][ T8204] dump_stack_lvl+0x95/0xd0 [ 349.819432][ T8204] dump_stack+0x15/0x1b [ 349.819499][ T8204] should_fail_ex+0x263/0x280 [ 349.819537][ T8204] ? rtnl_newlink+0x5c/0x1400 [ 349.819637][ T8204] should_failslab+0x8c/0xb0 [ 349.819679][ T8204] __kmalloc_cache_noprof+0x5f/0x400 [ 349.819743][ T8204] ? __pfx_rtnl_newlink+0x10/0x10 [ 349.819770][ T8204] rtnl_newlink+0x5c/0x1400 [ 349.819865][ T8204] ? perf_cgroup_set_timestamp+0xfe/0x120 [ 349.819910][ T8204] ? ctx_sched_in+0x3e9/0x410 [ 349.819993][ T8204] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 349.820041][ T8204] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 349.820082][ T8204] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 349.820118][ T8204] ? __rcu_read_unlock+0x4e/0x70 [ 349.820229][ T8204] ? avc_has_perm_noaudit+0xab/0x130 [ 349.820267][ T8204] ? cred_has_capability+0x224/0x2a0 [ 349.820316][ T8204] ? selinux_capable+0x31/0x40 [ 349.820430][ T8204] ? security_capable+0x7b/0x90 [ 349.820529][ T8204] ? ns_capable+0x7c/0xb0 [ 349.820560][ T8204] ? __pfx_rtnl_newlink+0x10/0x10 [ 349.820613][ T8204] rtnetlink_rcv_msg+0x64b/0x720 [ 349.820644][ T8204] netlink_rcv_skb+0x123/0x220 [ 349.820669][ T8204] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 349.820711][ T8204] rtnetlink_rcv+0x1c/0x30 [ 349.820752][ T8204] netlink_unicast+0x5a8/0x680 [ 349.820787][ T8204] netlink_sendmsg+0x5c8/0x6f0 [ 349.820828][ T8204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.820900][ T8204] ____sys_sendmsg+0x563/0x5b0 [ 349.820930][ T8204] ___sys_sendmsg+0x195/0x1e0 [ 349.820974][ T8204] __x64_sys_sendmsg+0xd4/0x160 [ 349.821042][ T8204] x64_sys_call+0x194c/0x3020 [ 349.821073][ T8204] do_syscall_64+0x12c/0x3b0 [ 349.821102][ T8204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.821124][ T8204] RIP: 0033:0x7f2e89b6cdd9 [ 349.821206][ T8204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.821282][ T8204] RSP: 002b:00007f2e885bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.821306][ T8204] RAX: ffffffffffffffda RBX: 00007f2e89de5fa0 RCX: 00007f2e89b6cdd9 [ 349.821323][ T8204] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000006 [ 349.821338][ T8204] RBP: 00007f2e885bf090 R08: 0000000000000000 R09: 0000000000000000 [ 349.821355][ T8204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.821370][ T8204] R13: 00007f2e89de6038 R14: 00007f2e89de5fa0 R15: 00007fff45fff948 [ 349.821452][ T8204] [ 350.302383][ T8214] program syz.4.1336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.486136][ T8217] loop0: detected capacity change from 0 to 128 [ 350.523728][ T8217] msdos: Bad value for 'dmask' [ 350.723749][ T8217] loop0: detected capacity change from 0 to 136 [ 351.677672][ T8227] loop0: detected capacity change from 0 to 128 [ 351.701659][ T8227] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 351.730362][ T8227] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 351.759400][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.795366][ T3437] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 351.809779][ T3437] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 351.835574][ T3437] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 0 [ 351.859832][ T3437] loop1: lost filesystem error report for type 5 error -117 [ 351.860924][ T3296] EXT4-fs error (device loop1): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 351.930672][ T3296] loop1: lost filesystem error report for type 5 error -117 [ 351.930793][ T3296] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 351.947849][ T3296] loop1: lost filesystem error report for type 5 error -117 [ 351.947953][ T3296] EXT4-fs error (device loop1): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 351.966935][ T3296] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 352.535930][ T8231] tipc: Enabling of bearer rejected, already enabled [ 352.890679][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.479373][ T8249] program syz.6.1347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.810469][ T8263] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1351'. [ 353.863323][ T8261] netlink: 'syz.0.1348': attribute type 1 has an invalid length. [ 353.938604][ T8268] gre0 speed is unknown, defaulting to 1000 [ 354.065001][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 354.144794][ T8273] loop2: detected capacity change from 0 to 1024 [ 354.160365][ T8273] EXT4-fs: Ignoring removed bh option [ 354.193602][ T8273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 354.227280][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 354.227299][ T28] audit: type=1400 audit(1778497194.302:3345): avc: denied { write } for pid=8272 comm="syz.2.1355" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 354.265179][ T28] audit: type=1400 audit(1778497194.302:3346): avc: denied { read write } for pid=8272 comm="syz.2.1355" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 354.288526][ T28] audit: type=1400 audit(1778497194.302:3347): avc: denied { open } for pid=8272 comm="syz.2.1355" path="/257/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 354.335976][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 354.503973][ T28] audit: type=1400 audit(1778497194.572:3348): avc: denied { mount } for pid=8281 comm="syz.2.1358" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 354.556115][ T8245] Set syz1 is full, maxelem 65536 reached [ 354.561131][ T28] audit: type=1400 audit(1778497194.632:3349): avc: denied { read write } for pid=8284 comm="syz.6.1359" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.592622][ T8285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.622487][ T8285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.637247][ T28] audit: type=1400 audit(1778497194.632:3350): avc: denied { open } for pid=8284 comm="syz.6.1359" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.663136][ T8292] loop2: detected capacity change from 0 to 256 [ 354.672299][ T28] audit: type=1400 audit(1778497194.632:3351): avc: denied { ioctl } for pid=8284 comm="syz.6.1359" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.707570][ T28] audit: type=1400 audit(1778497194.682:3352): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 354.772516][ T8290] loop1: detected capacity change from 0 to 128 [ 354.800533][ T8290] syz.1.1360: attempt to access beyond end of device [ 354.800533][ T8290] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 354.827706][ T8290] syz.1.1360: attempt to access beyond end of device [ 354.827706][ T8290] loop1: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 354.857249][ T8290] syz.1.1360: attempt to access beyond end of device [ 354.857249][ T8290] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 354.892489][ T8290] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 354.904043][ T8290] syz.1.1360: attempt to access beyond end of device [ 354.904043][ T8290] loop1: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 354.924311][ T8290] Buffer I/O error on dev loop1, logical block 70, lost async page write [ 354.933083][ T8290] syz.1.1360: attempt to access beyond end of device [ 354.933083][ T8290] loop1: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 354.946918][ T8290] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 355.001578][ T8300] loop6: detected capacity change from 0 to 1024 [ 355.017136][ T8300] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.032442][ T8300] FAULT_INJECTION: forcing a failure. [ 355.032442][ T8300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.047299][ T8300] CPU: 0 UID: 0 PID: 8300 Comm: syz.6.1364 Tainted: G W syzkaller #0 PREEMPT(full) [ 355.047367][ T8300] Tainted: [W]=WARN [ 355.047377][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.047436][ T8300] Call Trace: [ 355.047446][ T8300] [ 355.047456][ T8300] __dump_stack+0x1d/0x30 [ 355.047508][ T8300] dump_stack_lvl+0x95/0xd0 [ 355.047572][ T8300] dump_stack+0x15/0x1b [ 355.047593][ T8300] should_fail_ex+0x263/0x280 [ 355.047625][ T8300] should_fail+0xb/0x20 [ 355.047652][ T8300] should_fail_usercopy+0x1a/0x20 [ 355.047752][ T8300] _copy_from_user+0x1c/0xb0 [ 355.047786][ T8300] __sys_bpf+0x183/0x7e0 [ 355.047829][ T8300] __x64_sys_bpf+0x41/0x50 [ 355.047852][ T8300] x64_sys_call+0x10cb/0x3020 [ 355.047898][ T8300] do_syscall_64+0x12c/0x3b0 [ 355.047948][ T8300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.048034][ T8300] RIP: 0033:0x7f2e89b6cdd9 [ 355.048052][ T8300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.048073][ T8300] RSP: 002b:00007f2e885bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 355.048095][ T8300] RAX: ffffffffffffffda RBX: 00007f2e89de5fa0 RCX: 00007f2e89b6cdd9 [ 355.048187][ T8300] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 355.048202][ T8300] RBP: 00007f2e885bf090 R08: 0000000000000000 R09: 0000000000000000 [ 355.048215][ T8300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.048287][ T8300] R13: 00007f2e89de6038 R14: 00007f2e89de5fa0 R15: 00007fff45fff948 [ 355.048309][ T8300] [ 355.234966][ T7353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.449914][ T8304] xt_NFQUEUE: number of total queues is 0 [ 355.753866][ T8322] ------------[ cut here ]------------ [ 355.759384][ T8322] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.4.1370/8322 [ 355.769236][ T8322] Modules linked in: [ 355.773212][ T8322] CPU: 0 UID: 0 PID: 8322 Comm: syz.4.1370 Tainted: G W syzkaller #0 PREEMPT(full) [ 355.784165][ T8322] Tainted: [W]=WARN [ 355.787989][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.798088][ T8322] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 355.803785][ T8322] Code: 8b 05 d1 79 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 9e 1a 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 90 1a 1e 00 90 0f 0b 90 e9 af fa ff ff [ 355.823594][ T8322] RSP: 0000:ffffc90013f2fdd8 EFLAGS: 00010093 [ 355.829703][ T8322] RAX: ffffffff813b1672 RBX: ffff8881037e0000 RCX: ffff8881037e0000 [ 355.837778][ T8322] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 355.845785][ T8322] RBP: 0000000000000080 R08: ffff8881037e0b00 R09: 0000000000000000 [ 355.853906][ T8322] R10: ffffc90013f2fdf0 R11: 0001c90013f2fdf0 R12: ffff8881037e0000 [ 355.861917][ T8322] R13: ffff8881037e0828 R14: ffff8881044c8490 R15: 0000000000000080 [ 355.870035][ T8322] FS: 0000000000000000(0000) GS:ffff8882ae8fb000(0000) knlGS:0000000000000000 [ 355.879051][ T8322] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.885668][ T8322] CR2: 0000200001000000 CR3: 000000010f2c8000 CR4: 00000000003506f0 [ 355.893670][ T8322] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.901668][ T8322] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 355.909692][ T8322] Call Trace: [ 355.913004][ T8322] [ 355.915984][ T8322] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 355.921403][ T8322] ? __list_add_valid_or_report+0x38/0xe0 [ 355.927230][ T8322] do_exit+0xc13/0x1530 [ 355.931493][ T8322] ? switch_fpu_return+0xe7/0x1b0 [ 355.936608][ T8322] __x64_sys_exit+0x1f/0x20 [ 355.941221][ T8322] x64_sys_call+0x301d/0x3020 [ 355.946007][ T8322] do_syscall_64+0x12c/0x3b0 [ 355.950695][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.956623][ T8322] RIP: 0033:0x7f3afbfecdd9 [ 355.961087][ T8322] Code: Unable to access opcode bytes at 0x7f3afbfecdaf. [ 355.968203][ T8322] RSP: 002b:00007f3afaa3efd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 355.976665][ T8322] RAX: ffffffffffffffda RBX: 00007f3afc265fa0 RCX: 00007f3afbfecdd9 [ 355.984662][ T8322] RDX: 00007f3afaa3f9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.992659][ T8322] RBP: 00007f3afc082d69 R08: 0000000000000000 R09: 0000000000000000 [ 356.000660][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.008679][ T8322] R13: 00007f3afc266038 R14: 00007f3afc265fa0 R15: 00007ffe15da1308 [ 356.016684][ T8322] [ 356.019722][ T8322] ---[ end trace 0000000000000000 ]--- [ 356.131875][ T28] audit: type=1400 audit(1778497196.182:3353): avc: denied { create } for pid=8325 comm="syz.6.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 356.170044][ T8331] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 356.176686][ T8331] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 356.187529][ T8333] hub 8-0:1.0: USB hub found [ 356.192328][ T8333] hub 8-0:1.0: 8 ports detected [ 356.199755][ T8333] netlink: 'syz.0.1372': attribute type 36 has an invalid length. [ 356.210589][ T8333] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 356.214339][ T28] audit: type=1400 audit(1778497196.232:3354): avc: denied { write } for pid=8329 comm="syz.0.1372" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 356.220454][ T8333] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 356.251006][ T8336] netlink: 'syz.0.1372': attribute type 10 has an invalid length. [ 356.261810][ T8336] ipvlan0: entered allmulticast mode [ 356.267364][ T8336] veth0_vlan: entered allmulticast mode [ 356.274576][ T8336] team0: Device ipvlan0 failed to register rx_handler [ 356.297714][ T8331] vhci_hcd vhci_hcd.0: Device attached [ 356.318160][ T8339] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8339 comm=syz.6.1371 [ 356.439250][ T8340] loop1: detected capacity change from 0 to 512 [ 356.483879][ T8321] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1370'. [ 356.498808][ T8340] EXT4-fs: Ignoring removed nobh option [ 356.523054][ T8340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 356.534128][ T8334] vhci_hcd: connection closed [ 356.537950][ T3437] vhci_hcd vhci_hcd.6: stop threads [ 356.554101][ T7465] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 356.562944][ T8340] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 356.573835][ T3437] vhci_hcd vhci_hcd.6: release socket [ 356.587384][ T3437] vhci_hcd vhci_hcd.6: disconnect device [ 356.727355][ T8345] Cannot find del_set index 4 as target [ 356.813475][ T8348] loop2: detected capacity change from 0 to 128 [ 356.848918][ T8348] syz.2.1376: attempt to access beyond end of device [ 356.848918][ T8348] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 356.864745][ T8348] syz.2.1376: attempt to access beyond end of device [ 356.864745][ T8348] loop2: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 356.880147][ T8348] syz.2.1376: attempt to access beyond end of device [ 356.880147][ T8348] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 356.894035][ T8348] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 356.897546][ T8350] FAULT_INJECTION: forcing a failure. [ 356.897546][ T8350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.950260][ T8347] syz.2.1376: attempt to access beyond end of device [ 356.950260][ T8347] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 356.975508][ T8347] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 356.984668][ T8347] syz.2.1376: attempt to access beyond end of device [ 356.984668][ T8347] loop2: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 357.003271][ T8350] CPU: 0 UID: 0 PID: 8350 Comm: syz.4.1377 Tainted: G W syzkaller #0 PREEMPT(full) [ 357.003316][ T8350] Tainted: [W]=WARN [ 357.003326][ T8350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 357.003343][ T8350] Call Trace: [ 357.003351][ T8350] [ 357.003360][ T8350] __dump_stack+0x1d/0x30 [ 357.003388][ T8350] dump_stack_lvl+0x95/0xd0 [ 357.003472][ T8350] dump_stack+0x15/0x1b [ 357.003498][ T8350] should_fail_ex+0x263/0x280 [ 357.003535][ T8350] should_fail+0xb/0x20 [ 357.003568][ T8350] should_fail_usercopy+0x1a/0x20 [ 357.003638][ T8350] _copy_from_user+0x1c/0xb0 [ 357.003669][ T8350] __sys_bpf+0x183/0x7e0 [ 357.003780][ T8350] __x64_sys_bpf+0x41/0x50 [ 357.003809][ T8350] x64_sys_call+0x10cb/0x3020 [ 357.003887][ T8350] do_syscall_64+0x12c/0x3b0 [ 357.003923][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.003951][ T8350] RIP: 0033:0x7f3afbfecdd9 [ 357.003987][ T8350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.004010][ T8350] RSP: 002b:00007f3afaa3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.004045][ T8350] RAX: ffffffffffffffda RBX: 00007f3afc265fa0 RCX: 00007f3afbfecdd9 [ 357.004063][ T8350] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 357.004080][ T8350] RBP: 00007f3afaa3f090 R08: 0000000000000000 R09: 0000000000000000 [ 357.004096][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.004189][ T8350] R13: 00007f3afc266038 R14: 00007f3afc265fa0 R15: 00007ffe15da1308 [ 357.004274][ T8350] [ 357.064261][ T8347] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 357.194291][ T8347] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 357.834577][ T8376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.868584][ T8376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.914585][ T8376] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.921408][ T8358] loop0: detected capacity change from 0 to 512 [ 357.933485][ T8376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1386'. [ 357.971740][ T8358] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1380: inode has both inline data and extents flags [ 358.002298][ T8358] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 358.004109][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 358.019838][ C1] EXT4-fs (loop0): initial error at time 1778497198: ext4_orphan_get:1397: inode 15 [ 358.029284][ C1] EXT4-fs (loop0): last error at time 1778497198: ext4_orphan_get:1397: inode 15 [ 358.039280][ T8358] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1380: couldn't read orphan inode 15 (err -117) [ 358.129459][ T8358] loop0: lost filesystem error report for type 5 error -117 [ 358.141870][ T8381] loop1: detected capacity change from 0 to 512 [ 358.142833][ T8358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.158222][ T8381] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 358.193062][ T8381] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 358.216733][ T8381] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1387: inode #15: comm syz.1.1387: iget: illegal inode # [ 358.232891][ T8381] loop1: lost filesystem error report for type 5 error -117 [ 358.233086][ T8381] EXT4-fs (loop1): Remounting filesystem read-only [ 358.240445][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 358.240470][ C0] EXT4-fs (loop1): initial error at time 1778497198: ext4_orphan_get:1397 [ 358.240526][ C0] EXT4-fs (loop1): last error at time 1778497198: ext4_orphan_get:1397 [ 358.289016][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.373226][ T8381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.429727][ T8381] IPv6: sit1: Disabled Multicast RS [ 358.441963][ T8381] sit1: entered allmulticast mode [ 358.497899][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.557128][ T8390] FAULT_INJECTION: forcing a failure. [ 358.557128][ T8390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.589582][ T8390] CPU: 1 UID: 0 PID: 8390 Comm: syz.1.1391 Tainted: G W syzkaller #0 PREEMPT(full) [ 358.589613][ T8390] Tainted: [W]=WARN [ 358.589620][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 358.589658][ T8390] Call Trace: [ 358.589667][ T8390] [ 358.589688][ T8390] __dump_stack+0x1d/0x30 [ 358.589717][ T8390] dump_stack_lvl+0x95/0xd0 [ 358.589742][ T8390] dump_stack+0x15/0x1b [ 358.589788][ T8390] should_fail_ex+0x263/0x280 [ 358.589813][ T8390] should_fail+0xb/0x20 [ 358.589835][ T8390] should_fail_usercopy+0x1a/0x20 [ 358.589867][ T8390] _copy_from_user+0x1c/0xb0 [ 358.589969][ T8390] con_set_trans_new+0x56/0x180 [ 358.590028][ T8390] vt_ioctl+0x1002/0x18d0 [ 358.590164][ T8390] ? tty_jobctrl_ioctl+0x29c/0x810 [ 358.590195][ T8390] tty_ioctl+0x7d7/0xb80 [ 358.590260][ T8390] ? __pfx_tty_ioctl+0x10/0x10 [ 358.590297][ T8390] __se_sys_ioctl+0xce/0x140 [ 358.590332][ T8390] __x64_sys_ioctl+0x43/0x50 [ 358.590360][ T8390] x64_sys_call+0x1563/0x3020 [ 358.590443][ T8390] do_syscall_64+0x12c/0x3b0 [ 358.590481][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.590509][ T8390] RIP: 0033:0x7fdda35fcdd9 [ 358.590587][ T8390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.590610][ T8390] RSP: 002b:00007fdda2057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.590634][ T8390] RAX: ffffffffffffffda RBX: 00007fdda3875fa0 RCX: 00007fdda35fcdd9 [ 358.590652][ T8390] RDX: 0000200000000040 RSI: 0000000000004b6a RDI: 0000000000000003 [ 358.590666][ T8390] RBP: 00007fdda2057090 R08: 0000000000000000 R09: 0000000000000000 [ 358.590682][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.590710][ T8390] R13: 00007fdda3876038 R14: 00007fdda3875fa0 R15: 00007ffe805aff28 [ 358.590734][ T8390] [ 358.703014][ T8394] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 358.703014][ T8394] Please contact the netfilter-devel mailing list or update your nftables rules. [ 358.945818][ T8402] loop0: detected capacity change from 0 to 512 [ 358.952741][ T8402] EXT4-fs (loop0): 1 orphan inode deleted [ 358.953394][ T8402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.089440][ T8374] Set syz1 is full, maxelem 65536 reached [ 359.235386][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.287596][ T8407] loop1: detected capacity change from 0 to 1024 [ 359.294569][ T8407] EXT4-fs: Ignoring removed bh option [ 359.309342][ T8411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=8411 comm=syz.0.1398 [ 359.323673][ T8411] netlink: 'syz.0.1398': attribute type 29 has an invalid length. [ 359.385566][ T8412] tipc: Enabling of bearer rejected, already enabled [ 359.818192][ T8407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.843516][ T8407] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 359.886931][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 359.886947][ T28] audit: type=1400 audit(1778497199.962:3369): avc: denied { setopt } for pid=8415 comm="syz.0.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 359.934476][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.952189][ T8418] gre0 speed is unknown, defaulting to 1000 [ 360.195872][ T8431] loop0: detected capacity change from 0 to 256 [ 360.231380][ T8430] loop2: detected capacity change from 0 to 128 [ 360.278976][ T8430] bio_check_eod: 1 callbacks suppressed [ 360.278996][ T8430] syz.2.1406: attempt to access beyond end of device [ 360.278996][ T8430] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 360.324734][ T8430] syz.2.1406: attempt to access beyond end of device [ 360.324734][ T8430] loop2: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 360.355529][ T8430] syz.2.1406: attempt to access beyond end of device [ 360.355529][ T8430] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 360.381339][ T8430] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 360.414530][ T8433] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1407'. [ 360.449375][ T8429] syz.2.1406: attempt to access beyond end of device [ 360.449375][ T8429] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 360.476656][ T8429] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 360.489097][ T28] audit: type=1400 audit(1778497200.562:3370): avc: denied { mount } for pid=8437 comm="syz.1.1408" name="/" dev="configfs" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 360.495706][ T8429] syz.2.1406: attempt to access beyond end of device [ 360.495706][ T8429] loop2: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 360.529486][ T8429] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 360.569626][ T28] audit: type=1400 audit(1778497200.592:3371): avc: denied { search } for pid=8437 comm="syz.1.1408" name="/" dev="configfs" ino=2077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 360.600986][ T8429] syz.2.1406: attempt to access beyond end of device [ 360.600986][ T8429] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 360.642783][ T28] audit: type=1400 audit(1778497200.712:3372): avc: denied { create } for pid=8445 comm="syz.1.1410" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 360.645251][ T8429] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 360.697779][ T28] audit: type=1400 audit(1778497200.742:3373): avc: denied { create } for pid=8439 comm="syz.0.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 360.744330][ T28] audit: type=1400 audit(1778497200.742:3374): avc: denied { write } for pid=8439 comm="syz.0.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 360.799082][ T28] audit: type=1400 audit(1778497200.842:3375): avc: denied { write } for pid=8445 comm="syz.1.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 360.818837][ T28] audit: type=1400 audit(1778497200.852:3376): avc: denied { allowed } for pid=8439 comm="syz.0.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 360.838538][ T28] audit: type=1400 audit(1778497200.852:3377): avc: denied { map } for pid=8439 comm="syz.0.1409" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 360.863292][ T28] audit: type=1400 audit(1778497200.852:3378): avc: denied { read write } for pid=8439 comm="syz.0.1409" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 361.362618][ T8418] Set syz1 is full, maxelem 65536 reached [ 361.399795][ T8460] tipc: Enabled bearer , priority 10 [ 361.624508][ T7465] usb 13-1: enqueue for inactive port 0 [ 361.636384][ T7465] usb 13-1: enqueue for inactive port 0 [ 361.804124][ T7465] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 362.070085][ T8475] loop6: detected capacity change from 0 to 128 [ 362.084427][ T8475] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 362.123052][ T8477] loop2: detected capacity change from 0 to 1024 [ 362.132909][ T8477] EXT4-fs: Ignoring removed bh option [ 362.133187][ T8475] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 362.156089][ T8477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.174860][ T8477] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 362.237718][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.315991][ T8475] tipc: Enabling of bearer rejected, already enabled [ 362.375449][ T7353] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 362.417309][ T7466] tipc: Node number set to 2304704821 [ 362.746208][ T8493] netlink: 'syz.6.1422': attribute type 1 has an invalid length. [ 362.770583][ T8495] netlink: 'syz.2.1421': attribute type 1 has an invalid length. [ 362.982100][ T8499] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1426'. [ 363.017333][ T8501] mmap: syz.0.1427 (8501) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 363.079440][ T8504] loop0: detected capacity change from 0 to 136 [ 363.407209][ T8509] loop2: detected capacity change from 0 to 256 [ 363.547362][ T8513] loop6: detected capacity change from 0 to 4096 [ 363.582673][ T8513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.713298][ T8521] xt_NFQUEUE: number of total queues is 0 [ 364.323655][ T8533] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1438'. [ 364.411736][ T7353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.496794][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1439'. [ 364.634446][ T8538] can0: slcan on ptm0. [ 364.768337][ T8546] gre0 speed is unknown, defaulting to 1000 [ 365.574413][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 365.574431][ T28] audit: type=1400 audit(1778497205.622:3462): avc: denied { ioctl } for pid=8539 comm="syz.6.1441" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x227d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 365.831673][ T8537] netlink: 'syz.2.1440': attribute type 1 has an invalid length. [ 365.924156][ T28] audit: type=1400 audit(1778497205.942:3463): avc: denied { read } for pid=8555 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.073470][ T28] audit: type=1400 audit(1778497205.942:3464): avc: denied { read open } for pid=8555 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.205880][ T28] audit: type=1400 audit(1778497205.942:3465): avc: denied { getattr } for pid=8555 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.244185][ T8536] ================================================================== [ 366.252426][ T8536] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 366.262302][ T8536] [ 366.264649][ T8536] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 0: [ 366.272737][ T8536] tick_do_update_jiffies64+0x113/0x1c0 [ 366.278335][ T8536] tick_nohz_handler+0x8d/0x3d0 [ 366.283251][ T8536] __hrtimer_run_queues+0x276/0x4f0 [ 366.288491][ T8536] hrtimer_interrupt+0x261/0x850 [ 366.293473][ T8536] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 366.299410][ T8536] sysvec_apic_timer_interrupt+0x6f/0x80 [ 366.305090][ T8536] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 366.311103][ T8536] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 366.316787][ T8536] __skb_try_recv_datagram+0x123/0x320 [ 366.322292][ T8536] __unix_dgram_recvmsg+0x25a/0x870 [ 366.327534][ T8536] unix_dgram_recvmsg+0x7e/0x90 [ 366.332418][ T8536] sock_recvmsg_nosec+0xc2/0xf0 [ 366.337317][ T8536] ____sys_recvmsg+0x26f/0x280 [ 366.342122][ T8536] ___sys_recvmsg+0x11f/0x3b0 [ 366.346855][ T8536] do_recvmmsg+0x1ef/0x560 [ 366.351316][ T8536] __x64_sys_recvmmsg+0xe5/0x170 [ 366.356301][ T8536] x64_sys_call+0x80f/0x3020 [ 366.360931][ T8536] do_syscall_64+0x12c/0x3b0 [ 366.365554][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.371479][ T8536] [ 366.373828][ T8536] read to 0xffffffff86c07a00 of 8 bytes by task 8536 on cpu 1: [ 366.381402][ T8536] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 366.387698][ T8536] count_shadow_nodes+0x6a/0x250 [ 366.392670][ T8536] do_shrink_slab+0x63/0x660 [ 366.397299][ T8536] shrink_slab+0x545/0x8f0 [ 366.401764][ T8536] shrink_node+0x6d4/0x20a0 [ 366.406315][ T8536] do_try_to_free_pages+0x408/0xc90 [ 366.411542][ T8536] try_to_free_mem_cgroup_pages+0x201/0x420 [ 366.417460][ T8536] try_charge_memcg+0x373/0xa10 [ 366.422351][ T8536] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 366.427930][ T8536] __alloc_frozen_pages_noprof+0x18a/0x350 [ 366.433772][ T8536] alloc_pages_mpol+0xb3/0x260 [ 366.438583][ T8536] alloc_pages_noprof+0x8f/0x140 [ 366.443561][ T8536] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 366.449569][ T8536] __kvmalloc_node_noprof+0x3d4/0x640 [ 366.454990][ T8536] futex_hash_allocate+0x190/0x9a0 [ 366.460142][ T8536] futex_hash_prctl+0xd8/0xf0 [ 366.464872][ T8536] __se_sys_prctl+0x4f4/0x1400 [ 366.469674][ T8536] __x64_sys_prctl+0x67/0x80 [ 366.474313][ T8536] x64_sys_call+0x2533/0x3020 [ 366.479023][ T8536] do_syscall_64+0x12c/0x3b0 [ 366.483652][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.489584][ T8536] [ 366.491942][ T8536] value changed: 0x00000001000019ad -> 0x00000001000019ae [ 366.499155][ T8536] [ 366.501512][ T8536] Reported by Kernel Concurrency Sanitizer on: [ 366.507697][ T8536] CPU: 1 UID: 0 PID: 8536 Comm: syz.0.1439 Tainted: G W syzkaller #0 PREEMPT(full) [ 366.518576][ T8536] Tainted: [W]=WARN [ 366.522395][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 366.532483][ T8536] ================================================================== [ 366.560779][ T28] audit: type=1400 audit(1778497206.632:3466): avc: denied { create } for pid=8565 comm="syz.6.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 366.610127][ T28] audit: type=1400 audit(1778497206.632:3467): avc: denied { write } for pid=8565 comm="syz.6.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 366.648812][ T28] audit: type=1400 audit(1778497206.632:3468): avc: denied { connect } for pid=8565 comm="syz.6.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 366.685453][ T28] audit: type=1400 audit(1778497206.632:3469): avc: denied { name_connect } for pid=8565 comm="syz.6.1444" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 366.738304][ T28] audit: type=1400 audit(1778497206.662:3470): avc: denied { write } for pid=8549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.745250][ T8569] loop6: detected capacity change from 0 to 164 [ 366.781071][ T28] audit: type=1400 audit(1778497206.662:3471): avc: denied { add_name } for pid=8549 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.924799][ T8536] syz.0.1439 (8536) used greatest stack depth: 8688 bytes left [ 366.974308][ T8538] can0 (unregistered): slcan off ptm0.