last executing test programs: 3m16.743480517s ago: executing program 32 (id=226): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netpci0\x00'}) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10, 0x80800) r2 = syz_io_uring_setup(0x26b3, &(0x7f00000000c0)={0x0, 0x11a7, 0x9208, 0x0, 0x293, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, 0x0, &(0x7f0000001480)=@IORING_OP_RECVMSG={0xa, 0x8, 0x4, r0, 0x0, &(0x7f0000001440)={&(0x7f00000001c0)=@sco, 0x80, &(0x7f0000001380)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/62, 0x3e}, {&(0x7f0000001280)=""/56, 0x38}, {&(0x7f00000012c0)=""/26, 0x1a}, {&(0x7f0000001300)=""/105, 0x69}], 0x5, &(0x7f0000001400)=""/22, 0x16}, 0x0, 0x40, 0x0, {0x3}}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = semget(0x3, 0x0, 0x0) semtimedop(r4, &(0x7f00000014c0)=[{0x3, 0x1ff}, {0x4, 0x9, 0x1800}, {0x0, 0x8}, {0x4, 0x401, 0x1000}, {0x0, 0x0, 0x1000}, {0x1, 0x9, 0x1000}, {0x4, 0x1, 0x800}], 0x7, &(0x7f0000001500)={0x0, 0x989680}) recvmsg$can_j1939(r1, &(0x7f0000001840)={&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001700)=[{&(0x7f00000015c0)=""/186, 0xba}, {&(0x7f0000001680)=""/100, 0x64}], 0x2, &(0x7f0000001740)=""/242, 0xf2}, 0x40002081) statx(r0, &(0x7f0000001880)='./file0\x00', 0x100, 0x2, &(0x7f00000018c0)) close_range(r2, r1, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000019c0)={'ip6_vti0\x00', @random="07e75c3d0b3b"}) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x24, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x8001) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001b80)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001b40)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000001bc0)={0x4, 0x8, 0xfa00, {r6, 0x81}}, 0x10) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000001c00), 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000001c40)={0x21, 0x0, '\x00', [@pad1, @pad1]}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001cc0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001c80), 0x111, 0xa}}, 0x20) semctl$SEM_STAT(r4, 0x2, 0x12, &(0x7f0000001d00)=""/11) syz_socket_connect_nvme_tcp() r7 = socket(0x27, 0xa, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001d40)=0x0) connect$nfc_llcp(r0, &(0x7f0000001d80)={0x27, r8, 0x0, 0x3, 0x1, 0x5, "95ba1483c5973c9b9f8dac65d73fe87ec10a9493cebfe9b5b160909289705295ee698d24d8af18c4e4bcb08e01d34b502b3e8e3f937433fd2377839df04ea2", 0xc}, 0x60) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000001e00), 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000001e80), r7) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x38, r10, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r11, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x40080) 2m37.573679445s ago: executing program 3 (id=837): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000400001000000050007000000000008000900000000101400200000000000000000000000ffbf0000000008000a000000000014001f00000000ffffffe400000000000000000006000200"], 0x6c}, 0x1, 0x620b}, 0x0) 2m37.562749285s ago: executing program 3 (id=838): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 2m37.547933377s ago: executing program 3 (id=839): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="4001000016000100000000000000000000000000000000000000000000000000ac1e00010000000000000000000000000000000000030000000080803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000003d000004d633b10000e00000010002000000000000000000000000000000000000000000000000000080000000000000000000000000000000ffffffffffffffff01000000000000000600000000000000d306000000000000000000000000000000000000000000000200000000000000fcfffffffffffbff000000000000000006000000000000000000000000000002be0000000000000000000000b1"], 0x140}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2m37.490300832s ago: executing program 3 (id=841): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000380), 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x400c14, &(0x7f0000000400)={[{}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x41, 0x7c5, &(0x7f0000000dc0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb212) mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0xfffffffffefffff2, 0x4031, 0xffffffffffffffff, 0x75431000) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000400000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000302000200050008001b000600000005001100"], 0x58}, 0x1, 0x0, 0x0, 0x4000844}, 0x4000904) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 2m37.474353123s ago: executing program 3 (id=843): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) fcntl$setown(r0, 0x8, r1) syz_io_uring_setup(0x10d4, &(0x7f0000000100)={0x0, 0x7f36, 0x0, 0x0, 0x322}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c030000000061138c8800000000bf30000000000000150000000009240b2d03010000000000950000a7000000006916700000000000bf67000000000000b5070000fcff0304670600001f000000370300000ef90060bf050000000000007e650000000000006507f9ff01000000470700004c0000005f75000000000000bf54000000000000070400000400f9fead4301000000000095000000000000000500000000000000950000000000000032ed3c5be9529914953170d2d7ffffff8ecf264e9981db7d04df3244c7bd7e7e7f2f1754558f2278af6d71c19a5e12814cb1d8a5d4601d15871637b65f8903dc8700a0b9bdb7dd399700d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fc9de56c9d8a814261bd81762bab839dfa66810b5b40d893ea8fe0185473d51b546c087431d770000000767c955cfa1f6ab689fde4de5f832c8b664e73b99b6c2e0ab330e1c7feada70600000000000000b7010001000000009af619e3cca4d19e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d9fee0000000000000000c8fb735fd552bdc206004aeb0743eb3dc819b6cf5c8a0700000000000000a13d0045fb3cdaffa673a6bb55d8c85f21dce44aba5387e35350481aedac065b5031e56723888fb126a163f16fb2ad9bc1172bec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f11294b4800a045ea11b3566bf3a649878e582f2af97787f696649a462e7ee4bcf89cbf2f0800000000000000b2c4acb07a10d6732f54beb40000040000000000000000000000000200f674629709e7e78f4ddc211bc304f0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46e4e827f3477523dcfa17690884f8d2001e03a651bb96589a7eab010e861bbd0000000000000000c5904c647802cf86f1b4c3005f33d83f84e98a72fbbecd106425563d80bd0d0d703f37ca153f601ae899a53f6715a0080034b0c94cce69945205480a55c22fe394ac000000000000000000040000000000437d57defb79ea6a58b83eeed729a2f95e6a1fc3857fb51b324be00000000000000090867f7a3b9bc43717188cb8426286fc55fc57cc3c6de4aa67babf350709e282a4f2bf59f46e20465eae865dbfd533b1cb2d540d0490cd5248715c74b6bd0248a9a0b413bbdfb5351defc6e34a961f3593920411e112c9df23a29c072d3460eb37beb5bbc04600c64acad9a04ffe62875177b51d2f0c6d7194c26789d2bec2d0846831455b8fcd03beaeca2c1335d8a49a92f9d2bef5f485c4fff4cf710b7d00000000000000009d47d564a838bdf8901a719431a9b0ef918ec0ec79037cb61df16379e3bf2a8100000007e8512e21080315e62559e8dd67dae85177d899d9e078f80585837f0e943b8820b19c75d243a78d8c2093c59cbc4c55f1578cff737502ea2d8d0b9dc946dcb38692dcc8db84834cc7726429cb20603b5338184f9856eeaec437fc3446b6c5ffe5db28aa802e37d3c4f259d616307d8aa46ca094049c0ddc1caaed5485b4ff030000182620bcba2316f9e6df0c8647f6ff0000000000000000386096e4a4ff86042f0b42027ff933d2dfe2d5baffacc9dc2411302a185ea454af5839be28b7d040c1fe1ce0fd63fa7f32b8ab6cd6a8b8bf1b693e4ffeca635d84c376b03a58677dd9f8c2a6fa126c7dad3f9e939c92d63ab1cf2fbea26a60b951914aba5c0696cc64e66b9b0f2c4444f8c391c0d9b647a3be4885a055ce3879a91fb62ca97e6526286c14c80b6dc981c5ae6ebf0778ea01a3a44e01ab79bcddbb83266a1ce1a1dea83ebb89d07b4d05aa09ad2904040e7784e96cd66b04204d47b1c66d5a84e7c3de1d1062fd8a23d1b402003c177e76dbca599691164ade323ad4a17abe99975cba748bc2379eed5a83dc94947eb18976db6ca6d35bfb65a3d8b5129d5263b66dbae6c2baa9bbec017646569fa99537aa453f3e6b2acebeddb6c32a87455f351efcd8385100f33d6b0c3195e229bd30260941825ba884d7db07e1212033409e62d7154cc68a7ee910e393470cdb781817f85373a647fd1b626035b666f224a66c0e47e15c6b836b324318507501a0f4b2cc9153167fd839a483615cbc2ad1a7d1528f01bf91b950a9bcd7d06491e1a355e476365f653d2d94ba898ab8d64d70bdb364ef3adb5ba1e4d9d5002da76ccec5d5184e912aaf5a945ae062e670fafb8cf0afee51c851546bb38c5ef303000000000000002ecdc2b82059750f019a418e3e8d20b6bf768a7db1f8472713452553149a4634418de7eda7b2e682271c6e62f5dfaabba46560dfa410e1f334a5f60791b275368469ddc42f7712bff1689f2ffbf5268cc0572e23afd4c402b154ae94c1f65d7d4a79272945287c79b4b70183d2cde66c7225106a064a1800d777372b2b43326821d5c1c78fda699c7484f3e5fc8bbce6fb3039569646b0de22c431d90c12d48e314d8a5ef4db14a110da070000002c4f7bd7f36f814ed92197fe3eb0843c2681c609231825b8a27ba301142cec8a6fd85965f83ff4dd40296e5fb5678d93d0daee45c43bdb9bde9c1d1c988b909fdf78cfda5da3dc28792b10fb8f3f22ece745c074f86f471489337a9a8d9ad7f310aa50c983b490f561bc420289b6aa0fc3f43f8a4548aa9c723ce466287760f919afbb94b0410ff06071de3aa1c199f407347af666713096a422fbc70671ac08f9256ab0079c101a724136352af2895899effda7bcd127ba98521eb4b04b2a821935ee3b216190e21fb059f9519c4804283d2ce09977842ff7309ad2c4d8f0420dfc8cdb1b37ad52985a88ca4cdc1e37715362a59f7c9c7df793d69f974399859e622ec3a1bab735a1aa489fe50619fe399eddaf92f67755cb54824685444a58731ee166ae65412709b853a5df7ce44220fc188c00291843d66e69da3744f39f5f6113fbe390b22cdbefb90ca2a51b1ff21f384e7bf076825aadaf02da77eeefb8875d630b7575e661b90eb6cd98674c92f179b2675b1f6c86712846ddae87bb3a3887b56292356270e85888c25a1c8ae958906ef6b71e1b800107da1c5608fe05d2f4265a5300000000000000007c737c911c049ae7dc9d77edecaf9685c53ac264e9f02ffcf0318af80c99ea2020b1e1f47cfdd6097c49b5f4bb92bb9133df719f35d4bf730784f1caa8e4e16f4eeb535c059a700d57e4d6c83c4a35a6ef44f135657d3d41856235253326d937125b6f23af7eb95bac231b84c6935a3a6d24d18f7e379db2fd5e76d5ad0d5b4a6c155e8759eb0e7b39ef433861158bd496ecafb3d1c50294e43d5895df1a2de536f5d85e0a000049277bc09533ceead6812fdfb5ef59b15069ea0df6a3eee0484c848fe4e6e7461ffc3917e4e07d250d9459ebea5fd4e26fc04eb38e70597fcb693cb2f7506f5f50b9f73a25bb83b6c71240e5d725ff567d9745a3ba5462524648a93360fb2b9feb1401e30996e1e7d14bb8db59880cde130af0a6a0e6152a6e3a8a684cabf379d4aa33c896bca694ce0180000000000000041caca10fe3ce74f1b8156d8155a4e11d2f35674dff1aa5e749deffffffffb946192820d223f4f0a1a7a2be83872662477884d65af42bcac801d0c667fba32e16ead8f076eed944d5998bca285c25349c6f26485902316c156eee9dcaa64f8a889abb1a890b23c7de6b2b0a6128545efc3ee8e60ea8eafa617ec3f0bfb1e23c4f75bc2a649a886bf4d5378c58259fddea066f1d70df9633af91752bf41a0d4d0929c34472a6f7110de1420800000000000000ca07ba65ce67dd46909ed693d71a5de47fe26a4eb2f4d514029b11f3f0c3ccb2403db497a55d23c25003ba864cdaf6e732f74e11d1a58e89f60267e60d79f467b181d636c9300420b30760bf861195eeb74275e9c4ed71f0e9fda02bdbf8aaa3e23a6d22dd423541b6acdd386a686bc8b128f724567d4c4908391b979a1c7102f5be7ed9db7a36ecfc3b9e0ab0eedde34700000000bec5fbefb008005888ce01eb816f2873e4c59facc7be45b2ab04b1456da413e3f7cf345d6fed0bff0800f8c3018bd0ea78ed54c8b684c797390bf5cad492bff0d97e553e42aba229446354cb4f5825915eccc911e7deee66873c20ffd06e63c27b8a12d757210a43870a0ef4ba3bad01c492d792c1535aeff946f3415912b5abbff35d1cd17c842175357a4bc758b4a943e06a7569fa1e1e4e017e43e8e47914d1000000000000000000000000000cd6b36d72dbc0d8000000c95d5ccace09e52960dbdf13b62f586b47ade41458b77834a573687780117829310ece7950fabcb63c63e18b207cbe936ee9a9a37879d42c66c2a72dfef46013ada19eb8d7e9f35267d0b72d591d0c2f92e2e667eed068310056ec5682b4c2bd946e657f2d9bce51da84f1e3b7d073265f352481b81703e0ecb59f70daf545215151b2b01b2bba1545de5d785ce281000000000000000000000000000000af9637ac06897446708dda1bd7b91be06c3f66def98618eb55bd5652d2ae6036402d69db587e87d04b6e4b1c86328adfcc7a22d77e8db6b1024f6bf7aec85a7f4241fb6b326acae3d9a4f4a0e8b723c43aae4f909f40d7167d1afde58812163d292666cf967e16c25889683658fdc86c820246d4009b3c4e8db0fe57735fb577b9f8e9d5fd9843615ec7c7affa29c04a7e8ea439d4938710039a55da15142ed876e581b4760b3483367fd96f0531ea7f3c6bb4193a76ea6b805b45a74365c15f41b8b542f21a83cae1aff4a858d551b95a2ba77fc8a1109f11e7b18d6f825587bb986e13ff37f111329feb2a09ebc54f1ee1ccd056ff9ec0ff0ce1c1ec5bfab4119a452eef335c0fe2b6bfcd635ef5979352de3801bdba7c145cdfb3ab07b45f13b8f45772c9f9c8285bbe14605879e4ddd78bfb6aa3444b7b3ef1713c58d3d348ea764370002f393e10ec3cf3ef1ab0aa1cab9596fe467c7288893172cd97691a0f1d68ca0449f05902fb7f46f7d0e0d36a68abb3f075358cdb701eac9c3f7f19ab13a83314309861dfaa256ccb4400ffc2568b900be14d9e06b138daf2b41c38abba3b1b2de2f3a660af382b7bc0c1318c5cbdec02646f3e28d8eef763aac4a7fd39c15950764734b8d641e4d642e44c4e6b83d1c3dda34d7cda18c652a5d8d9b406d4df8554e2a5611023766c53e9b478d374112165480e887c923ff0a33551d8f270481230ef34d9168806d43278c977b77148371bd02ee1bcfd278a579be8cc6dc58f6e1f8ee7118ae792c30d4f76546a630f7859fd315513722a1b871d311dc28f40d15b7c631b81e58a6bf8891875fe21e8ebcf2925c2fb2b32dc8a0b1b5c7f806ba81a31b1eec700225a14ff8dc83b484ab80849558a0ffc1ab62b2a4545dbfee4d93ed5de4ffe4469ed88df341dc69ab8b1da80bc47cd127c9e1378020cf5d362819e42350f293dd305b4801932d9e07fc647628a8a84958319874295b3cab523b2f43704845d5785c6b3025fadd8442ab42ebfc3bc45efcf24396f1c2ce50ba96430f8feaa1f8bcd8635a4ce00209a8ebabfdf6f1b5129c0e2a40ba4d1b5e3d6249ee8fa5d2d77351b6fba38756dea4e35c8573eda42eac89b4c50b85346b5ede0ff4dca6a70b38177eb5cb8b8437bb533f6ea1de29e1f1fda88e3afe92482af05ed713dd00aa6a5f8381b5d421909462ac33dee4095afcc67a926e50d2cbe1507195b73f624349b132e7b6b339f9a41fad97f3b70e5808eb177c9e7cb154554644e960f29c5d56fd83d8530a6afc8924dcf01e4ef07e7d16bcef404af5ee3b7767dfbd45f0eee2b583d0159b45cca60a930f37d995b02701d2991761cab642165ed3e52961b7c612991c11028bd1d45ea3106018692facfa14996d3d26d5642566c2f592f67975ce3840131275ce29ed116b6f6eeae34aeae334250e7ae4e25e98cc63b4104fdc79ac676a3c11fd6e9a67dc134802d41c4b01a47e3ad5b6ecd6f4a05bf55c1756535374b7bc9e010966a1415a1e50b2fcb20f3d972d9d7a9f0baf841be4f514eb35c9edaac4b3ca7bfab8a53945d035019cf3321c9144961780413dbb21b89c01fe020bcbaa7fe6b4697b196cf7ac3aa014c48259f5b22b45b2ae023d6052644fa51fc0671d6c4e012607a2df05b6f444903ab3251bdd8d2c98adf9f77de7edbc9631b0e7283a5ce1130d99ae5697ce3ea41e3ba5394883c9899384208cba558d69afdc574cbf05a45ed56d07a41f75c55603561f0e8d54670a53e4b8162729bc34ab66babf31d2e86af5a72553ec045466678427ca42eb49b58c5e58980b73451029b88118d730cce2a48b5d6b9caa2c8fb7178ff90196bd1091568a70d1b7ac47585f6180767a2534401aaf0cda644a4c978b972e0bf7b156aa5d80aa1c3d70c0bcd25ab61122349dd78bc28c3e169adea7ac95e09b6a160204ac772f810193cecf495a9836e082b60626316c02dba83abb792422079947b0d887b87f4cd6bd7c82b00000000000000008207fc649dab3ec0be72d68e61c19c1943664bf9088981b19ebbd3f212a471c6b01d28c1f5a0e5d9e0b762f7cebc056ae8fdeb4448ecb291b08684de1ff1c209448223e3979469b18ea13d5d88532f5a45ae4a86d21bde29b472d65e77d5412dae907ffaca95182316d15dbf12b7d77dcf2154376ab3900ba7d8f026e8a566372cdae696cdec4baa7efcbfc3d250638ee391aa3ab3cdd0a3fc42b674e1943bd0a3e1d103fe00b8788dc5b8ba1602bbfd7ca2bf58c60790eddb10cfca9938e2cafce2"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x29, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x40000000, 0x1, {0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x3, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x28) r5 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f8}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x20, 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m37.381957461s ago: executing program 33 (id=844): socketpair(0x21, 0x100005, 0x5, &(0x7f00000009c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="1724", 0x2}], 0x1, 0x0, 0x0, 0x8008001}, 0x20048851) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb212) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x7a09280d) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x3, 0x2, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x700, 0x1, 0x8, 0x284}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0x94, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r6, 0x1) getsockopt$bt_hci(r6, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 2m37.228298814s ago: executing program 3 (id=846): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000140)={[{@errors_remount}, {@inode_readahead_blks}, {@lazytime}, {@oldalloc}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$eJzs3c9vI1cdAPDveGPHyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPSFx5ILgxqUckPgRgRokDkYzHqdO1t5NyQ+n8ecjzc5787z+vrfZeS/+JvYLYGzdioj9iChFxNsRMZtfT/Ij3uge6eM+Oni4cnjwcCWJTuetfyRZe3ot+v5O6mb+nOWI+N63In6YPBq3tbu3sVyv17bz+ny7sTXf2t27u95YXqut1Tar1aXFpYXX7r1aPbexvtAo5aUvfvj7/a/9OO3WTH6lfxznqTv04lGc1EREfOcigo3AjXw8pVF3hP9LISKejYgXs/t/Nm5kX00A4DrrdGajM9tfP5IcrwIA10Uhy4ElhUqeC5iJQqFS6ebwnovpQr3Zat950NzZXO3myuaiWHiwXq8t5LnCuSgmaX0xK39cr56o34uIZyLiZ5NTWb2y0qyvjvIbHwAYYzdPrP//nuyu/wDANVcedQcAgEtn/QeA8WP9B4DxY/0HgPHTXf+nRt0NAOASef0PAOPH+g8AY+W7b76ZHp3D/POvV9/Z3dlovnN3tdbaqDR2Viorze2tylqzuZZ9Zk/jSc9Xbza3Fl+JnXfnvr7Vas+3dvfuN5o7m+372ed6368Vs0ftX8LIAIBhnnnhgz8l6Yr8+lR2RN9eDsWR9gy4aIVRdwAYmRuj7gAwMnb7gvF1htf4xYifShHAp9rvsj8HbNF7THnQG4Q6nU7noroFXLjbn5P/h3HVl//3W8AwZuT/YXzJ/8P46nSS027yH6d9IABwtcnxA0N+/v9sfv51/sOBH6yefMT7F9krAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNp6+/9W8r3AZ6JQqFQinoqIuSgmD9brtYWIeDoi/jhZnEzriyPuMwBwVoW/Jvn+X7dnX5451vT8zaNiKSJ+9Iu3fv7ucru9/YeIUvLPyd719vv59eonClw6rxEAAI/XW6ezc98L+Y8OHq70jsvsz9++GRHlbvzDg1IcHsWfiInsXI5iREz/K8nrXUlf7uIs9t+LiM8OGn8SM1kOpLvz6cn4aeynLjV+4Vj8QtbWPaf/Fp85h77AuPkgnX/eGHT/FeJWdh58/5ezGers8vkvfaqVw2wO/Dh+b/67MWT+u3XaGK/89tvd0tSjbe9FfH4iohf7sG/+6cVPhsR/+ZTx//yF518c1tb5ZcTtGBy/P9Z8u7E139rdu7veWF6rrdU2q9WlxaWF1+69Wp3PctTzw1eDv79+5+lhben4p4fELz9h/F8+5fh/9d+3v/+lx8T/6kuD4hfiucfET9fEr5wy/vL0b8rD2tL4q0PG/6Sv/51Txv/wL3uPbBsOAIxOa3dvY7ler20rKFz9Qvpf9gp0Y2DhG5cVqxSDm37yUveePtHU+97/E8YaNmOcR9YNuAqObvqI+M+oOwMAAAAAAAAAAAAAAAx0Ge9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuL7+FwAA//87osfs") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) (fail_nth: 4) 2m37.202525417s ago: executing program 34 (id=846): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000140)={[{@errors_remount}, {@inode_readahead_blks}, {@lazytime}, {@oldalloc}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) (fail_nth: 4) 1m50.806354818s ago: executing program 7 (id=1474): open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x0, 0x207}, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = getpid() syz_pidfd_open(r1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64=r3], 0xc4}, 0x1, 0x0, 0x2400000000000000, 0x10}, 0x0) 1m50.704871967s ago: executing program 7 (id=1477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_UNISCRNMAP(r1, 0x4b52, &(0x7f00000000c0)=""/110) (async) ioctl$GIO_UNISCRNMAP(r1, 0x4b52, &(0x7f00000000c0)=""/110) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000000001010400000000000000000a0000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c000280050001002f000016"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xb, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0x1}, 0x6}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1}, &(0x7f0000000340), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket(0x10, 0x803, 0x0) socket(0x376c050bb31a05ee, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) 1m50.625803803s ago: executing program 7 (id=1480): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x32, 0x4, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@rand_addr=0x64010102, @in=@remote, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 1m50.595820406s ago: executing program 7 (id=1481): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000100)={[{@resgid}, {@errors_remount}, {@usrjquota}, {@sysvgroups}, {@usrquota}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x7fffffdf, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r2, 0x20, 0x0, 0x8000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x7, 0x4) sendto$inet(r4, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmmsg$unix(r4, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) 1m50.464475188s ago: executing program 7 (id=1482): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m50.385267635s ago: executing program 7 (id=1484): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="4001000016000100000000000000000000000000000000000000000000000000ac1e00010000000000000000000000000000000000030000000080803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000003d000004d633000000e0000001000200b100000000000000000000000000000000000000000000000080000000000000000000000000000000ffffffffffffffff01000000000000000600000000000000d306000000000000000000000000000000000000000000000200000000000000fcfffffffffffbff000000000000000006000000000000000000000000000002be0000000000000000000000b1"], 0x140}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1m50.384976785s ago: executing program 35 (id=1484): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="4001000016000100000000000000000000000000000000000000000000000000ac1e00010000000000000000000000000000000000030000000080803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000003d000004d633000000e0000001000200b100000000000000000000000000000000000000000000000080000000000000000000000000000000ffffffffffffffff01000000000000000600000000000000d306000000000000000000000000000000000000000000000200000000000000fcfffffffffffbff000000000000000006000000000000000000000000000002be0000000000000000000000b1"], 0x140}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1m50.09590036s ago: executing program 1 (id=1487): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300030e000000002800000000000004000900a800b0f453bb467d04f14562c5f463273ef4a720564f485af200000003000600000000000200100000000000000000000000000002000100000000000000020d000000000300050000000000fb"], 0x70}, 0x1, 0x7}, 0x0) 1m50.074629642s ago: executing program 1 (id=1488): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000ffffffc3010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000072000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd9, 0xd9, 0xa, [@fwd={0x5}, @restrict={0x1, 0x0, 0x0, 0xb, 0x4}, @union={0x10, 0x8, 0x0, 0x5, 0x1, 0x9, [{0x1, 0x5, 0x3}, {0x10, 0x1, 0x1}, {0x8, 0x1, 0x9}, {0x9, 0x4}, {0x0, 0x4, 0x1}, {0xf, 0x0, 0x9}, {0x10, 0x2, 0x4bc}, {0xd, 0x3, 0x4}]}, @datasec={0xa, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x0, 0x1}], "cd"}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xe, 0x2}, {0xf, 0x1}, {0xa, 0x5}, {0xb, 0x1}, {0x2}, {0x10}]}]}, {0x0, [0x2e, 0x30, 0x2e, 0x30, 0x30, 0x30, 0xab7b348e3ed3fba3, 0x0]}}, &(0x7f0000000740)=""/220, 0xfe, 0xdc, 0x1, 0x7, 0x10000, @value=r3}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x14, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd5bfa6c8d4b92c3e, '\x00', 0x0, @fallback=0x23, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r3}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000300)=r7, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00D\x00\a'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) openat$cgroup_pressure(r7, 0x0, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5, 0xffffffffffffffff, 0x2000000}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x8001, 0x5}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x61}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002500)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xa, 0x2}, {}, {0xfff2, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8}, {{0x3, 0x1}, {0x3}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8858}, 0x4884) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m49.673437877s ago: executing program 1 (id=1496): r0 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000680)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/7, 0x7}, {&(0x7f00000009c0)=""/111, 0x6f}], 0x2, &(0x7f0000000a40)}, 0x2000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0x81, 0x80}, [@FRA_SRC={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x2}}]}, 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7efc7e700000000000000a1", 0x12, 0x0, 0x0, 0x2a) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000280)=""/206, 0xce}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000380)=""/134, 0x86}, {&(0x7f0000000500)=""/136, 0x88}, {&(0x7f0000002d00)=""/117, 0x75}, {&(0x7f0000000880)=""/262, 0x106}, {&(0x7f0000000440)=""/88, 0x58}], 0x9}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xfffffffe}], 0x7, 0x40000100, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa1, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2d, 0x25dbdbfd, {0x0, 0x0, 0x0, r4, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0xa911}, 0x0) 1m49.590469105s ago: executing program 1 (id=1498): socket$kcm(0x23, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0xf9, 0x1223, &(0x7f0000001840)="$eJzs3E9rXFUYB+A3Y9pJU/NHrdV2oQfciItLk4UrRYKkIBlQaiO0gnBrJjrMOFNyh8AUsXXl1s/h2p3gN8jGz+Aumy67EK/03k7a1KlFtDMSn2eR+3LO+eXcwwwDZ7hnDt/5/qvubpHt5sNozM1F42ZEupciRSPGXtuqr9eub220WptXUrq8cXXt7Xcj4vWfP/26GRFnP/lx+admHKx+dnh3/deD8wcXDn+/+mWnSJ0i9QfDlKcbg8Ewv9FbTjudopul9FGvnRft1OkX7b1H+ttp962IGKW8v7O0eHOvXRQp749Stz1Kw0Ea7o1S/kXe6acsy9LSYvBEp54+ZPuHe2VZRpTlqTgdZVmWZ2IxzsbzsRTLcSciXogX46U4Fy/H+XglXo0L1ahp3D4AAAAAAAAAAAAAAAAAAAD8f/zV+f+VWHX+HwAAAAAAAAAAAAAAAAAAAKbg42vXtzZarc0rKS1E9L7b397frq91/+r9P71ox6VYid+iOv1fq+vLH7Q2L6XKanzbu/0gf3t/+7kqvzHOr1U/J/AgP1/1jfNrdT4dzzdj8X5+NzpVfj1W4tzk+dcn5hfizTceyWexEr98HoPoxU4198P8N2spvf9h67H8xWocAAAAnARZOjJx/55lT+qv80f766d/P/DY/no+Ls7Pdu1EFKNb3bzRa+9VRW9cLPyp5dkVMcW5/t0i4m5ZFc3jXY1nNGkjjlpOz3rtt7pz/4WX4IQWzZj6pGfieMusP5mYhodvg1nfCQAAAAAAAAAAAH/HP394cK7+R3cmjpmPCU+WvTeDdQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8wQ4cCwAAAAAI87dOo2MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//3EQwOE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000b, 0x12, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x90000005}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setsig(0x4203, r5, 0xd3, &(0x7f0000000000)={0x11, 0xec41, 0x6}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000440)={r0}, 0x1) r6 = memfd_create(&(0x7f0000000600)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc', 0xe) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r7, r7, 0x0) fchmod(r6, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r9, &(0x7f0000000240), 0xffffff14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x1e, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa10000000007010000f8ffffffbf979209e600000007040000f0ffffffb702000008000000182300000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000000100700020000000c43100000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x35680000, 0x0, 0x0, 0x41000, 0x2, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000240)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x10, 0x9, 0xa414}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0xffffffffffffffff, r0, r0, r0, r0, r9, r0], &(0x7f0000000340)=[{0x3, 0x4, 0x4, 0xe735d95c2ed4fa71}, {0x3, 0x4, 0xe, 0xb}, {0x1, 0x5, 0xc, 0x3}, {0x3, 0x5, 0xa, 0x8}], 0x10, 0x1}, 0x94) epoll_pwait(r4, &(0x7f0000000580)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000940)=ANY=[@ANYBLOB="98080000", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000700008806c0000802400020054306262d41bea1e96616adf8a16724fcfc168434a0521ae6de38af8139da00b240001000000000000000000000000000000000000000000000000000000000000000000200004000a004e2200000002fe8000000000000000000000000000aabd000000"], 0x98}}, 0x20000011) epoll_pwait(r4, &(0x7f00000000c0)=[{}], 0x1, 0x101, 0x0, 0x0) close(r2) write$cgroup_subtree(r0, 0x0, 0x32600) ioctl$XFS_IOC_SCRUB_METADATA(r8, 0xc040583c, &(0x7f0000000480)={0x10, 0x1a0, 0x7, 0x3, 0xc}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 1m48.73240889s ago: executing program 1 (id=1506): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x2b, 0x0, &(0x7f0000000100)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0180000000000000000001000000000000000b"], 0x28}}, 0x40000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x94, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4008010}, 0x14844) getsockopt$sock_int(r2, 0x1, 0xa, 0x0, &(0x7f0000000780)) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000000)=""/91, &(0x7f0000000080)=0x5b) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a0090f62dbd70000000000081148000000083aa00000000394a54e9b50c500d4f1cf3d00746044eadf8e2b4e898905bc7d01921b62e582078794d666e25aabbe034dfb295745261c49bdad2cf39af56c884fdaa3c90a3cf3fcdd7d0485dcf38b6878dab4b2f0bd814ec1b4c0e048a4b64e25c3c2f10c26c99716b93d449db90853aa54e6584c4e97b67c82c8a0d8643dfc9f4f69aa93199648a5419ed21293257e3ee27fb1abe54c12a2cf62f278634cd5ae3ac7027379198559619eba834455444eaa8bcdb81326afb64201c8594a1d02f597b9c20e72962d616f0d190224e6362cbd2a596907c5ba841d6e20c635f3c738d3a8c3c36840311d887e61f843ac3c71638ffcce201852abc5e6e2147c9e981ec49215872a6c364e96e75c3e3f571bfc1cf9aa64f24fbb528c696740d27db4e2b10a8dc03dd882cf3a599137ad02f02c4d11711d55a680a8a29970c1ac0ef186bf5d037f1d89a29bd8cc9f9da836a3655638d471d8b50eaaee414d8a93c64339cf8eaebf41a9dfacf719d34982e7363bc9541552d26ab9a0b6bb296e142f97c41ce234aeab227a230af0138d24f711281df28982270bd5118b2ba10669b17ed0832bf771547ee7471923bdb4709441a00e30b4911d2d2ab0bfcf2c92eb7580b525e2bbe552acd975d32c92e132eb9269247f6a4ec9ee2dd27d03a8c191c7d6a57d98184bf2609d8b3124d4f8a106d02794493f5fb1e34ae4dbed33f39112efbf58e66c3aa0edacf0c4b1cfc437ad7ee107901e9fa3b4e19501a811239c08b6a6fa87b4b44159a5e276ec240365109753f4631fbe1009317576bd98f835268d6d42d9a5beebfe2f0046f85f68f23"], 0x1c}, 0x1, 0x0, 0x0, 0x64048040}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 1m48.542396247s ago: executing program 1 (id=1509): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x85ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1m48.542179126s ago: executing program 36 (id=1509): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x85ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1m15.658459082s ago: executing program 9 (id=1958): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) 1m15.482487667s ago: executing program 6 (id=1963): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) 1m15.386823875s ago: executing program 6 (id=1966): getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000005c0)=""/27, 0x1b}, {&(0x7f00000006c0)=""/81, 0x51}, {0x0}, {&(0x7f0000000980)=""/41, 0x29}], 0x4}, 0xfffffffd}], 0x1, 0x101, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) pipe(&(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000280), &(0x7f0000000340)=r5}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 1m14.400167442s ago: executing program 6 (id=1974): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x4c, 0x1, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x24000004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) r0 = syz_io_uring_setup(0x4a2, &(0x7f0000000400)={0x0, 0x79ae, 0x3180, 0x8000, 0xfd}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x16, 0x0, 0xffffffffffffffff, &(0x7f00000008c0)={0x200000, 0x0, 0x5}, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x18}) io_uring_enter(r0, 0x627, 0x400d143, 0x49, 0x0, 0x0) r3 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) r4 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x8, 0x4, 0x1, 0xc1, 0x1}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10, 0x0, 0x2}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) process_vm_readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1, &(0x7f0000000d00)=[{&(0x7f0000000640)=""/178, 0xb2}], 0x1, 0x0) 1m14.399809632s ago: executing program 9 (id=1975): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000002280)=[{&(0x7f0000000580)="e2", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)=""/209, 0xd1}], 0x1, &(0x7f00000004c0)=""/1, 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x47c3}], 0x2, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x2a, 0x0, &(0x7f0000000000)) 1m14.330271468s ago: executing program 9 (id=1976): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x44) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x5e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x850801, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x2400, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001004000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = fcntl$dupfd(r8, 0x406, r8) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[], 0x32600) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x140d, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x28}}, 0xc4) ptrace$ARCH_SHSTK_LOCK(0x1e, r7, 0x0, 0x5003) ptrace(0x10, r7) syz_emit_ethernet(0x22, &(0x7f0000000340)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x73, 0x0, @empty, @broadcast}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000440)=[{0x6, 0x5, 0x7, 0x7ffbffff}]}) prctl$PR_GET_DUMPABLE(0x3) ptrace$setregset(0x4205, r7, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r7, 0x200, &(0x7f00000001c0)={0x0}) ptrace$setregs(0xd, r7, 0x6, &(0x7f00000002c0)="b72c02ec29c060136d5b59aeb248f794bc75461b59383984d0405e9ae213ccff750c347e2db9f4458a085baf640c055586d0518f8ef89164469c95e88831354c31c17937c828d0e79b97e0151e7288fc273780708229c7043da8babc3a444aeb47f0df4d069546470ca5fd9079b1b0e4ce7bd09e8489f237993518933dcb369ff408c54a4d15e79d38b86726f8bd99b308f79405cc612358c02e9ce1bfc5142a6bf719f67d") socket$kcm(0x29, 0x0, 0x0) 1m12.350341302s ago: executing program 9 (id=1991): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0xf48eb7cfb4731cfd}}, 0x14) sendmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000005c0)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010101}}, 0x80, 0x0}}], 0x2, 0x2400c010) 1m12.298429347s ago: executing program 6 (id=1993): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x171301, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x21ed000000000, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x7f, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x89f2, 0x0) (async) ioctl$TIOCSSOFTCAR(r0, 0x89f2, 0x0) socket$kcm(0xf, 0x3, 0x2) (async) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x81801) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pivot_root(0x0, 0x0) (async) pivot_root(0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x165, 0x1700) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f00000001c0)=@ethtool_perm_addr={0x4b, 0x16, "04000787b600eca6aa0825471829a00700fefffffff8"}}) 1m12.129195161s ago: executing program 9 (id=1996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x102, 0x4, 0x4c8, 0x0, 0x2d0, 0x2d0, 0x3e0, 0x2d0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x9, 0x2}}}, {{@arp={@rand_addr=0x64010101, @local, 0x0, 0xffffff00, 0x7, 0xd, {@mac=@multicast, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x8be, 0xdfe4, 0x80, 0x4, 0x8, 0xc, 'team_slave_0\x00', 'ip6gretap0\x00', {0xff}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:init_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @multicast1, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0xbd1800, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 1m12.104481024s ago: executing program 37 (id=1996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x102, 0x4, 0x4c8, 0x0, 0x2d0, 0x2d0, 0x3e0, 0x2d0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x9, 0x2}}}, {{@arp={@rand_addr=0x64010101, @local, 0x0, 0xffffff00, 0x7, 0xd, {@mac=@multicast, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x8be, 0xdfe4, 0x80, 0x4, 0x8, 0xc, 'team_slave_0\x00', 'ip6gretap0\x00', {0xff}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:init_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @multicast1, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0xbd1800, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 1m11.790416031s ago: executing program 6 (id=1998): rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() rt_sigreturn() r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xffffff7e, 0x2, 0x7f, 0x40, 0x4, 0x400}) 1m10.615037994s ago: executing program 6 (id=2011): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x68) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {}, 0x9}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000500)) (async) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000500)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0xb0, 0xb0, 0x1a8, 0x0, 0xb0, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0xfffff1b2, 0x5, 0x2c6, {0x8}}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'sit0\x00', 'wg2\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) connect$unix(r2, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) 1m10.565258199s ago: executing program 38 (id=2011): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x68) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {}, 0x9}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000500)) (async) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000500)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0xb0, 0xb0, 0x1a8, 0x0, 0xb0, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0xfffff1b2, 0x5, 0x2c6, {0x8}}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'sit0\x00', 'wg2\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) connect$unix(r2, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) 3.732297312s ago: executing program 4 (id=2815): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a00000000000000000000000a000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) 3.662391309s ago: executing program 4 (id=2816): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000002100)=""/212, 0x90}], 0x3}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.587923815s ago: executing program 5 (id=2821): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe0002000300000007000000ff7f00008100000033fba850f1d3557b3963d72df734a11c7f0e3931338ec5e28ae0381d6988580fd64f16cdcd908fd0908d451acd5a828ff6dc3a4e8b3259b371ccca221a5033e139a37746f046e4b8a7da2246fb92647f0aa875aa5fcfc2967b5f323be7abdc90a5bad2d5f15ac07e8b70b09b5368504230e57932403327f5386808a7de73a6cf28e9afb7703e5e28833b80ff73c89613453f7fa8949f8cc0897168cbd4f90ac50a6081b2b765ae1983188120cf98ed84f2e07b7ec4ce118a146e99dbd6c55c5c3f4fbaa3afdafee7c663f564114015ded09e18112541e5f48bef8d8adfc1c0f8a33cebbf7b3d3f7c97516d19117f111db7c6d118018fac721771d2ea6ddf3b7a4a3f7314df9d884f1c8c4eeb46648eda45e6038c7e8923193621de4534e9d96e0633d1f5b0b5ba0c144a04a81d68c5cba62a68925bc87ed610bbc957894747eaaa13fab624ef0bb2d7c23b25d56c8bf4b410d3bb87496433667a001101153031eaa922d507eabc9a00a9fb42b5566ffb9a5c902b8f97091142007f5734cfe72b58fca0b81eac22b588dcb951f30f6b3d677d5f7d14aab011c353aaa6e2f18f"], 0x216) 3.260089294s ago: executing program 2 (id=2831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.202758259s ago: executing program 2 (id=2832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r3, &(0x7f0000002840), 0x0, 0xfcd901ce0f01a928, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000020000000000010000140900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2.831362201s ago: executing program 4 (id=2837): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newchain={0x30, 0x1e, 0x1, 0x20, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x44004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0x0, 0x6, 0x8, 0xfffffffd, 0x0, "8100"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="35c60100ef000000500012800e0001006970366772657461700000003c00028014000600fe88000000000000000000000000010114000700ff8000000000000000000000000000bb060002000700000008000100", @ANYRES64=r3], 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x43, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 2.688975584s ago: executing program 5 (id=2839): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00@\x00'], 0x50) 2.515418829s ago: executing program 5 (id=2840): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@nombcache}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") 2.492975931s ago: executing program 4 (id=2841): socket$inet6(0xa, 0x2, 0x0) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x108) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) pipe(&(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000340)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 2.38822178s ago: executing program 4 (id=2844): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000010c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000002dc0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, '$&)&*-%-\')]', 0x3a, '\xff\xff', 0x3a, './file0', 0x3a, [0x50, 0x50, 0x46, 0x46]}, 0x38) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x12) 2.38420682s ago: executing program 4 (id=2846): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) process_vm_writev(r0, &(0x7f0000001180)=[{&(0x7f0000000000)=""/251, 0xfb}], 0x1, &(0x7f0000002300)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, 0xffffffffffffffff, r3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) 2.320996316s ago: executing program 2 (id=2847): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000002100)=""/212, 0x90}], 0x3}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.142453852s ago: executing program 0 (id=2848): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c", 0x13, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 2.120342934s ago: executing program 0 (id=2849): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4200, 0x0, 0x3f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 1.777160654s ago: executing program 0 (id=2851): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300030e000000002800000000000004000900a800b0f453bb467d04f14562c5f463273ef4a720564f485af200000003000600000000000200100000000000000000000000000016000100000000000000061600000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 1.764036115s ago: executing program 0 (id=2852): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x2) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="ffdf17c4bf9a63f0a7a4ff3918ae31869493cf5a933b7e172503edd589b08696e539e3dc03e31a6246037dd43b879c40f58f4d1141a22155", 0x38}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@rnullb, 0x0, &(0x7f0000000100)={0x7, 0xcb98, 0xbd, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x9, 0x1006}) 1.418451205s ago: executing program 2 (id=2856): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xe7f, 0xe400, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)='F', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000580)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @snprintf]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.418067815s ago: executing program 2 (id=2857): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x40001) (async, rerun: 64) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x2, 0x20200) (rerun: 64) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000000c0)={0x4}) (async) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x385b03, 0x0, 0x4}, 0x18) r3 = openat2(r2, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x400, 0x81, 0xc}, 0x18) (async) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r2, r4, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', r3, 0x4000, r0}, 0x18) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000280)={{0x9, 0x9}, {0xbf, 0x8}, 0x1, 0x1, 0x4}) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x46239000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup=r3, 0x32, 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@ifindex=r6, r3, 0x1f, 0x2058, 0x0, @value=r3, @void, @void, @void, r5}, 0x20) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0xe, 0x9}, &(0x7f0000000600)=0x8) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000640)={0x0, 0x7}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000009c0)={0x0, 0xe}, &(0x7f0000000a00)=0x8) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000c80)={0x0, 0xf6, "2dfb4262025a280545ff84746a827bb44c7eb7a7503a98b1758fa261c9b13aa0a5dbfa47ce02259ffd1274004a114818c93d786390720d718734496636fed8d9ffcaa4618f3a8ee83ebc151b94a31ca749d6c25f916ffffa62e30d7e699347fb5275c7f87b70457ec6aaf04738621fc579cdb689ff15200cc0c8c372ca4dde1f338bae6e4d1218f9f012c79feae617a7bb4917d9cfc3fb6b1cc3ee2d3f6cfc3b89f60a0fda93e7f2c66b800beec200c3b3594b445621caa031e4fc373fa84fe91830899133349d526063ce0e01a9335552334cebc3ae92ae0db7a29a55e39d34723029b20c1d717de5f16f32628be6392de40f9ce058"}, &(0x7f0000000d80)=0xfe) (rerun: 32) sendmmsg$inet_sctp(r3, &(0x7f0000002380)=[{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x9, @loopback, 0x3}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000500)="cb0a7cca6397ee40bd5543f740e69790fd0b4a3b51f28b65cb43afd121f1344e7356348ec0abb01ab43a3b3b229d07dc9e1596a32e302a13047f89c39a32e7fe1a73d5ac8f43941ee4230b", 0x4b}], 0x1, &(0x7f00000006c0)=[@authinfo={0x18, 0x84, 0x6, {0x6}}, @authinfo={0x18, 0x84, 0x6, {0xe}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x1}}, @sndinfo={0x20, 0x84, 0x2, {0x101, 0x200, 0x6, 0xe76c, r7}}, @sndinfo={0x20, 0x84, 0x2, {0xfff, 0xe, 0x10, 0x581, r8}}], 0x88, 0x24000080}, {&(0x7f0000000780)=@in6={0xa, 0x4e24, 0x8, @mcast1, 0xffffffd4}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000007c0)="4adc61ee75bd22acf982675434fb069b256c0654450ae42581a1b83a0b708d1b92cb83bc7fef897e67ed82da2d303605bf2d10c410cddf4b3cceb306ef06ad781382cb1df8a2e2a2a3a3ef2ad4509709db8e0241e2", 0x55}, {&(0x7f0000000840)="59953b00ef88ec262395d02d4b5f8d5c", 0x10}, {&(0x7f0000000880)="efb92e658327a8ca18248252284efb8c167e1931a05d7c26363f580eee5a653510666f2b23d8389ab4661d3aab1891df5189565d1f9883f34a4b30bdfa76b230ccd57e96a00df96f012fd8c3c8a8ff9e18e1a1e2dc5ca8e53a0c5db943daae197f85af928b37b529ded6b52ac27220a6682f4c38708686e3209834f30a23ae70526d12a28e20dfa600ef8986a6790529347d11644b4a7aab324d6c304298b4227bc7dbb823f27f6cb32c4752822b68ccc0869329e68a3394e05cf7195e0244250ee61c5fd9e69c474d2016deca3bbc307a1a14c8c603ca784b16035945167f7e8428e0", 0xe3}], 0x3, &(0x7f0000000a40)=[@authinfo={0x18, 0x84, 0x6, {0x8}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @init={0x18, 0x84, 0x0, {0x8, 0x9, 0x7, 0x1}}, @init={0x18, 0x84, 0x0, {0x0, 0x1, 0x9, 0xfeff}}, @init={0x18, 0x84, 0x0, {0xe000, 0x5, 0x6, 0xb}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @sndinfo={0x20, 0x84, 0x2, {0xffff, 0x20c, 0x1, 0x80, r9}}], 0xb8, 0x24004000}, {&(0x7f0000000b00)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000b40)="b2c3d77fe7e5c8dcc0be27b3342faea9a847a3aac950166c0d6de820308ee532629d65d512f6f30b5636cb3471d9810bddc8c2467a0722be0adfbe54db770efb8e2573420a807a8749373685d84c582c17ff504c7fbe311426530e7de0ae4569b053385b80cc132a6f283e02b5c454ea6c470d5b99c35e4ec8ac09a60ee83363dcb9c15981457c80543fa37f8762377741a6c5ca69ab74ed38fb57083e3d9d6b", 0xa0}, {&(0x7f0000000c00)="2133762cd60b8504e75b2d33b844b5de42583440851734489d6db9e9fcac994caaa23d1d44e20d80de7073037cc3205b5da261", 0x33}], 0x2, &(0x7f0000000dc0)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @init={0x18, 0x84, 0x0, {0x2, 0x216, 0x4, 0xc5}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @init={0x18, 0x84, 0x0, {0x2, 0xd, 0x3, 0x101}}, @sndinfo={0x20, 0x84, 0x2, {0xfff8, 0x200, 0x58f, 0xa, r10}}], 0x88, 0x4000041}, {&(0x7f0000000e80)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000ec0)="0abc0089b58f58b4eea8cb18144bcccbb98c2590706b2796a7f13fc69ec43193b03130120373ff2008ef3dc3918b503a88485721e54e847f82c26eda780959538714db971413db406bd4146ce023dad85dfc166d0e50ae3fcb9360b6c513140e7ce5f0377e250ad3b017375593fbe223c8956293a624083f23a57d3423cf249bb4dfee11cc997a3068536d64b54fc21ca8821231d80139098752a36061a073675f019014c1ee15257eaf36e9311a350339717f8df48f83892d909584e94b8c", 0xbf}, {&(0x7f0000000f80)="971212a51056dc26ef695f4c9409ded560ab", 0x12}, {&(0x7f0000000fc0)="b2182f715b648710a5a347f63df877f7d56efeeee0d57356b5aec56c77b0b3ca550c071ae4b10b9f7fce65d8647d0c36460525c826f36c50560d970f4ae71eed66394d7bd52ddfbb861271d304fe1780d5140e47e64f22487af4ce2af5ff188bda919c53acffdd2f8bda58b7822ab3d52edaeb80", 0x74}], 0x3, 0x0, 0x0, 0x4}, {&(0x7f0000001080)=@in={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000002280)=[{&(0x7f00000010c0)="5d12f165b8ef09c4b3f25c1d231c47b162499dabc5209c2b26d5a017ab3c898adb7c0cfdceee40156e28a0b5d8", 0x2d}, {&(0x7f0000001100)="e711805c9899df08138231d2631c1605bc36a85cf2e92f587c005a40b5c016c6e79808f79302b9c27095ad014f4c4da05ae262087f18b5cb60a92a0b96231d7b11d5800707de20b7a523a73f5e37a0466fde58a01006b0b2218925eb3e625679edb0e09827b001f21b8e4151e4af514446c3339a23d00960990d01d06d99141326725949", 0x84}, {&(0x7f00000011c0)="f85abddc962ba409d4a35f726251ecb0c47ef0757bfc71454671d2cd884f2c8a90ae82069f11aef2d86b0ae4d1f9e324ee50a1c0b417fc8bf92bbe25d92e41119673cbc518ce468391f853e3b46028e5b595bdbb2d566d2f20f3fbd722f9692139d7b7655b3e2c0b8475f3d5eee64d68f44c0b2325962efff7655486665056021cad833c7bf6440b5af0c8345b35f696f57522d3df122fb077bc824abc6b6fce1f8ffb", 0xa3}, {&(0x7f0000001280)="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", 0x1000}], 0x4, &(0x7f00000022c0)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @authinfo={0x18, 0x84, 0x6, {0x8da0}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @init={0x18, 0x84, 0x0, {0xb45, 0x6, 0x4, 0x9}}, @init={0x18, 0x84, 0x0, {0x3, 0x2, 0x5, 0x7}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}], 0xa0, 0x20000001}], 0x5, 0x8000) perf_event_open(&(0x7f00000024c0)={0x1, 0x80, 0x2, 0x2, 0xe, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0xb, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0xe, 0x8}, 0x1000, 0x1955514a, 0x19, 0x7, 0x100000001, 0xfffffff9, 0x3, 0x0, 0x5, 0x0, 0xf}, 0xffffffffffffffff, 0xb, r3, 0x2) (async) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000002540)) (async) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000002580), &(0x7f00000025c0)=@md5={0x1, "20a3d021bac2a53353de8fa10c10e4b3"}, 0x11, 0x3) (async, rerun: 64) openat$random(0xffffffffffffff9c, &(0x7f0000002600), 0x181400, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000002640)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002680)=0x24) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000026c0)=@assoc_value={r11, 0x2}, 0x8) (async) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x20, r12, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffb}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async, rerun: 32) r13 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x2010, r13, 0xb4b08000) (async, rerun: 64) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000002840)={0xffffffb8}) (rerun: 64) 1.410178386s ago: executing program 0 (id=2858): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@enum={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x2e, 0xd5b1c52c00aec414]}}, 0x0, 0x2f}, 0x28) writev(r1, 0x0, 0x0) 1.389730548s ago: executing program 0 (id=2859): r0 = socket(0x10, 0x3, 0x0) unshare(0x20000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f0000000700)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r8) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x4004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0xe, 0x0, &(0x7f00000000c0)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5ee, &(0x7f0000000c40)="$eJzs3V2IXGcdB+D/zOwm2WRrPmzV1tishtpA6M5mswmJeNESP2pMakXxIhTCkp3uhszurNkNdKeCLd6IggjeiCBE7IUV0UBuKqW2Fy3eKCj1g4rGgBVEKFopiKCOnJlzNpPuNFu6mzl2z/PAmX3Pe87M+84OvznnzPkKoLBGkodSxHBEXI6I7Z3R62cY6fxpHrw0kwylaLU+87dSe76pg5dmslmz521LHgYitkTErmOl2Du4st2Fpea5yXq9dj4dry7OzlcXlpr3nJ2dnK5N1+YOHZk4On544sjE+r3XsZ9vve3Pdz1w9Ynn//nvb//28A+T/g6n07rfx3oZiZH0fzIYO7vqB0oRx9e7sZxUOh913NVVVxrIsUO8aa3Wrh8kn987I2JvO//boxKdD++lpx/6x/b49f159xG4eVqZ3pNfbQEbVrm9DjzUDnunXC6PjnbW4W+NreV6Y2Fx/8ONC3NTnXXlHTFYfvhsvTaWbivsiMFSMn6gXb42Pv668YMR7XXgL1eG2uOjZxr1qf5+1QGp4Ygrlz9/ZtO2drlUHk3z/5dKJ//AxpXk/1cvPPVsUn6tkndvgH5K8v/912Y/GfIPhSP/UFzyD8Ul/1Bcq+d/U9/7BPSH5T8U11vP/8s3rU9Af1j+Q3HJPxSX/ENxZfl/8OTJePDkyVYzPf99rjF99tzM/NHxsdHZC2dGzzTOz49ONxrT7TN2Zld/3XqjMX9gPC48Ul2sLSxWF5aap2cbF+YWT7fP6z9d63EpACAHp65uOb5zz3MvlSLisQ8NtYfo2vMnq7CxtVqlyPscZCAfNv2huFyqDYrLNj5QWmX6ljeaUF//vgD9Uc67A0Bu7r7d/j8oqhv9/u8MYNjY/P4PxWUdH/D7PxSP3/+huIZfd/+f7P5ft3Tdu2ssIt4RET+rDG7O7vUFvK1ct6k/HHHlync/V12+D7eCwoYoHG/9X3TjbV/I74sK6I9roc+7J0Bepg5emsmGfrX5zHS/WgJ6eeW+zkFASe6b6dCZMrC8b2BwfY4TWvESO+9MHn/8h4v7ZirJEOn30NqbAt6Mxx6PiPd0Lf/vjTR/pfa+gR3pfLs6s8WtEXFbRLwrIt69xra/+emIkXih1l0n/9A/K/K/nL/r8397RCSL6zsi4r0RsTsi3rfGtn95Ocn/b4a66+QfiuELz+fdAyAvn3gq7x4AeTnlGAMorO89mncPgLw8/aO8ewDk5Wsv5t0DKLbn7ouIsV77/8rt/f2ZwfR6YJvTawEMRcTWiNiWnkN4S3qO4PaufYarOf2piJG48yfddfb/Qf9kx/81Vxz/V14+/q8SEXvW0MYzHx7+aq/6yd1J/p94NDv+7+K+zemUGbclgj545fGIO3rmv7R8wG4pkpxGvP8ttjHyxatP9qp/8YHkdQd/cS3/M5Wk/exYYODman0n4oPRO/+ZpFRdnJ2vLiw172nfx3u6NnfoyMTR8cMTRyaq7UuEVLMLhfRw4u+v7u9V//vxJP/fOiT/kI9k+b/1DfLfvf7/gTW0cewbXznVq374T0n+dz974/yX/7qp9Nn2eHY98kcmFxfPH4jYVDqxsn58DR2FDS7LSJahJP/79vbe/t+VPidZ/h+LiI8k6wsR8Z+I+G9EfDQiPhYRH4+I+2/Q5tfvnr7aq/6PTyb5v3jO8h/ykeR/apXlf/L3X2toY/++n36pV/29e5L8j/7u5RMPDSSD/AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsv4Wl5rnJer12/iYW8n6PAAAAAAAAUBT/CwAA//9jWDE+") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xe, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000004800000095"], &(0x7f0000000280)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.288876497s ago: executing program 2 (id=2860): bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x301200a, 0x0) unshare(0x26020480) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2040600) r0 = syz_io_uring_setup(0x10ca, &(0x7f00000000c0)={0x0, 0xba82, 0x80, 0x2, 0x3c9}, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x1454, &(0x7f00000001c0)={0x0, 0x183e, 0x20, 0x3, 0x30e, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000280)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1, 0x4}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000000040000000000000014000180"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.272618968s ago: executing program 8 (id=2862): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0xb8, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x8c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'team0\x00'}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f9}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x5, 0xa6d}]}}]}}]}, 0xb8}}, 0x24040084) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) listen(r0, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000140)=0x2c) 1.231061212s ago: executing program 5 (id=2863): r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x4}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x2, 0xc0}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.078399796s ago: executing program 5 (id=2864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r3, &(0x7f0000002840), 0x0, 0xfcd901ce0f01a928, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000020000000000010000160900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 1.036331929s ago: executing program 8 (id=2865): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}]}, 0x40}}, 0x44000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1, 0x0, 0x0, 0xf00}}], 0x1, 0x0) 960.968126ms ago: executing program 8 (id=2866): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r0, 0xe7f, 0xe400, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)='F', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000580)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @snprintf]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 150.413387ms ago: executing program 5 (id=2867): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000c80)='map_files\x00') getdents(r1, &(0x7f00000000c0)=""/49, 0x31) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="151700000000000008000a00", @ANYRES32=r4, @ANYBLOB="140012800c0001006d616376746170000400028008000500", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xff, r4, 0x5}, 0xc) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r5, 0x0, 0x0, 0x50000000, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) r6 = socket(0x23, 0x805, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x113, 0x18, 0x0, 0x0) 94.508512ms ago: executing program 8 (id=2868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a58000000090a010400000000000000120a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14001280140001800c000100636f756e7465720008000340000001"], 0x80}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 63.145925ms ago: executing program 8 (id=2869): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 8 (id=2870): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010008506000000000000000000eaff00", @ANYRES32=r4, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 185.331916][T10517] vlan3: entered promiscuous mode [ 185.343904][T10517] geneve0: entered promiscuous mode [ 185.431792][T10531] lo speed is unknown, defaulting to 1000 [ 185.503143][T10535] loop6: detected capacity change from 0 to 1024 [ 185.514704][T10535] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.542304][T10535] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 185.551100][T10535] System zones: 0-1, 3-36 [ 185.563107][T10535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.139558][T10564] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1950'. [ 186.150138][T10564] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1950'. [ 186.159361][T10564] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1950'. [ 186.178093][T10564] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1950'. [ 186.203714][T10564] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1950'. [ 186.213037][T10570] netlink: 'syz.9.1948': attribute type 13 has an invalid length. [ 186.245627][T10564] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1950'. [ 186.280125][T10572] netlink: 'syz.2.1954': attribute type 4 has an invalid length. [ 186.288365][T10572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1954'. [ 186.298046][ T6375] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.338708][T10570] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.346171][T10570] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.379382][T10564] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1950'. [ 186.391458][T10564] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1950'. [ 186.413804][T10564] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1950'. [ 186.460954][T10570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.465465][ T28] audit: type=1400 audit(1771651674.906:852): avc: denied { mounton } for pid=10578 comm="syz.2.1955" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 186.471408][T10570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.554284][ T295] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.574062][ T295] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.598366][ T50] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.619431][ T50] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.970163][T10608] loop2: detected capacity change from 0 to 2048 [ 186.996114][T10608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.039537][T10608] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 187.072765][T10608] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 187.085411][T10608] EXT4-fs (loop2): This should not happen!! Data will be lost [ 187.085411][T10608] [ 187.095231][T10608] EXT4-fs (loop2): Total free blocks count 0 [ 187.101550][T10608] EXT4-fs (loop2): Free/Dirty block details [ 187.107672][T10608] EXT4-fs (loop2): free_blocks=2415919504 [ 187.113684][T10608] EXT4-fs (loop2): dirty_blocks=48 [ 187.119990][T10608] EXT4-fs (loop2): Block reservation details [ 187.127848][T10608] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 187.194840][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 187.550683][T10639] 8021q: adding VLAN 0 to HW filter on device bond9 [ 187.691204][ T28] audit: type=1400 audit(1771651676.056:853): avc: denied { setopt } for pid=10634 comm="syz.8.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 188.152441][T10655] loop9: detected capacity change from 0 to 512 [ 188.340455][T10655] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.449446][T10655] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.388842][ T28] audit: type=1400 audit(1771651677.426:854): avc: denied { shutdown } for pid=10669 comm="syz.4.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.489970][T10670] 8021q: adding VLAN 0 to HW filter on device .` [ 189.505674][T10670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.642865][ T8979] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.697680][T10693] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 189.737844][T10693] loop9: detected capacity change from 0 to 1024 [ 189.750232][T10699] loop8: detected capacity change from 0 to 512 [ 189.760342][T10699] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 189.782352][T10693] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.801260][T10699] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.1988: bad orphan inode 131083 [ 189.817961][T10699] loop8: lost filesystem error report for type 5 error -117 [ 189.819379][T10699] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.846773][T10693] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.1986: missing EA_INODE flag [ 189.868327][T10693] EXT4-fs (loop9): Remounting filesystem read-only [ 189.886484][T10693] vlan4: entered allmulticast mode [ 189.911521][T10699] vlan3: entered promiscuous mode [ 189.917994][T10699] batadv0: entered promiscuous mode [ 189.941998][T10693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=10693 comm=syz.9.1986 [ 189.960000][ T28] audit: type=1326 audit(1771651678.396:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10691 comm="syz.9.1986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f397453c629 code=0x7ffb0000 [ 190.014240][ T28] audit: type=1400 audit(1771651678.406:856): avc: denied { unlink } for pid=8979 comm="syz-executor" name="file1" dev="loop9" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 190.065404][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.139323][T10707] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.275432][T10734] netlink: 'syz.4.1995': attribute type 1 has an invalid length. [ 190.370021][T10740] loop8: detected capacity change from 0 to 2048 [ 190.451270][T10740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.481243][ T28] audit: type=1400 audit(1771651678.916:857): avc: denied { unmount } for pid=6375 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 190.563091][ T295] vlan2: left promiscuous mode [ 190.593959][ T295] geneve0: left promiscuous mode [ 190.594068][T10755] FAULT_INJECTION: forcing a failure. [ 190.594068][T10755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.601103][ T295] bridge0: port 3(vlan2) entered disabled state [ 190.613866][T10755] CPU: 0 UID: 0 PID: 10755 Comm: syz.2.1999 Tainted: G W syzkaller #0 PREEMPT(full) [ 190.613969][T10755] Tainted: [W]=WARN [ 190.613987][T10755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.613999][T10755] Call Trace: [ 190.614007][T10755] [ 190.614015][T10755] __dump_stack+0x1d/0x30 [ 190.614042][T10755] dump_stack_lvl+0x95/0xd0 [ 190.614065][T10755] dump_stack+0x15/0x1b [ 190.614086][T10755] should_fail_ex+0x263/0x280 [ 190.614157][T10755] should_fail+0xb/0x20 [ 190.614175][T10755] should_fail_usercopy+0x1a/0x20 [ 190.614199][T10755] _copy_from_user+0x1c/0xb0 [ 190.614224][T10755] btf_new_fd+0x223/0x7d0 [ 190.614299][T10755] ? ns_capable+0x7c/0xb0 [ 190.614319][T10755] bpf_btf_load+0x112/0x130 [ 190.614343][T10755] __sys_bpf+0x3d8/0x7e0 [ 190.614368][T10755] __x64_sys_bpf+0x41/0x50 [ 190.614510][T10755] x64_sys_call+0x10cb/0x3020 [ 190.614535][T10755] do_syscall_64+0x12c/0x370 [ 190.614574][T10755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.614622][T10755] RIP: 0033:0x7fd3af8ec629 [ 190.614639][T10755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.614658][T10755] RSP: 002b:00007fd3ae33f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.614680][T10755] RAX: ffffffffffffffda RBX: 00007fd3afb65fa0 RCX: 00007fd3af8ec629 [ 190.614694][T10755] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 190.614771][T10755] RBP: 00007fd3ae33f090 R08: 0000000000000000 R09: 0000000000000000 [ 190.614784][T10755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.614850][T10755] R13: 00007fd3afb66038 R14: 00007fd3afb65fa0 R15: 00007ffc4ae33f88 [ 190.614868][T10755] [ 190.825870][ T295] bridge_slave_1: left allmulticast mode [ 190.837470][ T295] bridge_slave_1: left promiscuous mode [ 190.853247][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.880445][ T295] bridge_slave_0: left allmulticast mode [ 190.906355][ T295] bridge_slave_0: left promiscuous mode [ 190.912366][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.060151][ T295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.069720][ T295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.088467][ T295] bond0 (unregistering): Released all slaves [ 191.095994][ T295] bond1 (unregistering): Released all slaves [ 191.106825][ T295] bond2 (unregistering): Released all slaves [ 191.114627][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.209350][ T295] hsr_slave_0: left promiscuous mode [ 191.226855][ T295] hsr_slave_1: left promiscuous mode [ 191.248121][ T295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.262502][ T295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.355437][ T295] team0 (unregistering): Port device team_slave_1 removed [ 191.368629][ T295] team0 (unregistering): Port device team_slave_0 removed [ 191.413032][T10736] lo speed is unknown, defaulting to 1000 [ 191.595006][T10736] chnl_net:caif_netlink_parms(): no params data found [ 191.825107][T10736] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.922564][T10736] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.934705][T10788] __nla_validate_parse: 15 callbacks suppressed [ 191.934729][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2006'. [ 192.011935][T10736] bridge_slave_0: entered allmulticast mode [ 192.063327][T10736] bridge_slave_0: entered promiscuous mode [ 192.140870][T10736] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.222905][T10736] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.267743][T10736] bridge_slave_1: entered allmulticast mode [ 192.274235][T10736] bridge_slave_1: entered promiscuous mode [ 192.291124][ T295] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.357127][T10736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.396402][ T295] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.442581][T10736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.529358][T10842] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2014'. [ 192.542336][ T295] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.559165][T10736] team0: Port device team_slave_0 added [ 192.566190][T10842] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2014'. [ 192.578238][T10736] team0: Port device team_slave_1 added [ 192.662714][ T295] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.686226][T10736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.705707][T10736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.737746][T10855] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2018'. [ 192.738147][T10736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.786947][T10855] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.803466][T10855] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.861553][T10855] .` (unregistering): Released all slaves [ 192.869278][T10736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.876495][T10736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.927559][T10736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.982085][T10818] lo speed is unknown, defaulting to 1000 [ 192.994981][ T295] vlan3: left promiscuous mode [ 193.000433][ T295] geneve0: left promiscuous mode [ 193.005720][ T295] bridge0: port 3(vlan3) entered disabled state [ 193.018174][ T295] bridge_slave_1: left allmulticast mode [ 193.023972][ T295] bridge_slave_1: left promiscuous mode [ 193.030037][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.037995][ T295] bridge_slave_0: left allmulticast mode [ 193.053928][ T295] bridge_slave_0: left promiscuous mode [ 193.067755][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.260828][ T295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.271928][ T295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.282073][ T295] bond0 (unregistering): Released all slaves [ 193.293826][ T295] bond1 (unregistering): Released all slaves [ 193.343371][ T295] bond2 (unregistering): Released all slaves [ 193.360257][ T295] bond3 (unregistering): Released all slaves [ 193.372377][ T295] bond4 (unregistering): Released all slaves [ 193.563346][ T295] bond5 (unregistering): Released all slaves [ 193.584539][ T295] bond6 (unregistering): Released all slaves [ 193.637213][T10885] loop8: detected capacity change from 0 to 512 [ 193.648896][T10885] FAT-fs (loop8): bogus logical sector size 0 [ 193.655095][T10885] FAT-fs (loop8): Can't find a valid FAT filesystem [ 193.670208][T10736] hsr_slave_0: entered promiscuous mode [ 193.676445][T10736] hsr_slave_1: entered promiscuous mode [ 193.715553][T10736] debugfs: 'hsr0' already exists in 'hsr' [ 193.734128][T10736] Cannot create hsr debugfs directory [ 193.772098][T10889] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2023'. [ 193.937500][T10818] chnl_net:caif_netlink_parms(): no params data found [ 193.994608][ T295] hsr_slave_0: left promiscuous mode [ 194.000363][ T295] hsr_slave_1: left promiscuous mode [ 194.002704][T10900] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2025'. [ 194.012194][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.022380][ T295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.048477][ T295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.059454][ T295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.070430][ T295] veth1_macvtap: left promiscuous mode [ 194.076085][ T295] veth0_macvtap: left promiscuous mode [ 194.082479][ T295] veth1_vlan: left promiscuous mode [ 194.088038][ T295] veth0_vlan: left promiscuous mode [ 194.174085][ T295] team0 (unregistering): Port device team_slave_1 removed [ 194.185169][T10905] loop8: detected capacity change from 0 to 2048 [ 194.194824][ T295] team0 (unregistering): Port device team_slave_0 removed [ 194.239715][T10905] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.308213][T10818] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.315359][T10818] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.327149][T10818] bridge_slave_0: entered allmulticast mode [ 194.333997][T10818] bridge_slave_0: entered promiscuous mode [ 194.361594][T10818] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.382887][T10818] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.404501][T10818] bridge_slave_1: entered allmulticast mode [ 194.425520][T10818] bridge_slave_1: entered promiscuous mode [ 194.529758][T10818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.571543][T10818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.637193][T10818] team0: Port device team_slave_0 added [ 194.659699][T10818] team0: Port device team_slave_1 added [ 194.716181][T10818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.757857][T10818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.800174][T10942] netlink: 'syz.2.2033': attribute type 10 has an invalid length. [ 194.807386][T10818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.819830][T10818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.826835][T10818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.877260][T10818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.903018][T10942] bridge0: port 5(netdevsim1) entered blocking state [ 194.917656][T10942] bridge0: port 5(netdevsim1) entered disabled state [ 194.924662][T10942] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 194.957576][T10942] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 194.965914][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.966022][T10942] bridge0: port 5(netdevsim1) entered blocking state [ 194.982079][T10942] bridge0: port 5(netdevsim1) entered forwarding state [ 195.064117][T10818] hsr_slave_0: entered promiscuous mode [ 195.072742][T10818] hsr_slave_1: entered promiscuous mode [ 195.093041][T10946] loop8: detected capacity change from 0 to 1024 [ 195.100237][T10818] debugfs: 'hsr0' already exists in 'hsr' [ 195.106252][T10818] Cannot create hsr debugfs directory [ 195.123408][T10946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.136580][T10946] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 195.147334][T10946] System zones: 0-1, 3-36 [ 195.172218][T10946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.201265][T10947] lo speed is unknown, defaulting to 1000 [ 195.385853][T10736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 195.408601][T10736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 195.467264][T10736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 195.477691][T10736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.586867][T10736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.613326][T10736] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.647958][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.655132][ T6547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.683083][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.690312][ T6547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.722515][T10736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.740173][T10736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.812418][T10818] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 195.845035][T10818] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.873083][T10818] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.881157][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.894813][T10818] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.971735][T10736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.084448][T10818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.091780][ T28] audit: type=1400 audit(1771651684.527:858): avc: denied { ioctl } for pid=11010 comm="syz.8.2038" path="socket:[32983]" dev="sockfs" ino=32983 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 196.118228][T10818] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.158001][ T2684] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.165268][ T2684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.185439][ T28] audit: type=1400 audit(1771651684.617:859): avc: denied { wake_alarm } for pid=11010 comm="syz.8.2038" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 196.260234][ T2684] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.267395][ T2684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.326928][T10736] veth0_vlan: entered promiscuous mode [ 196.390487][T10736] veth1_vlan: entered promiscuous mode [ 196.450198][T10736] veth0_macvtap: entered promiscuous mode [ 196.478605][T10736] veth1_macvtap: entered promiscuous mode [ 196.503894][T10736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.531082][T10818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.550026][T10736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.593558][T11048] loop8: detected capacity change from 0 to 512 [ 196.604046][T11048] EXT4-fs: Ignoring removed oldalloc option [ 196.619908][ T1823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.644324][ T1823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.675244][ T1823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.687692][T11048] EXT4-fs (loop8): 1 truncate cleaned up [ 196.706952][T11048] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.739566][ T1823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.800652][ T28] audit: type=1400 audit(1771651685.237:860): avc: denied { ioctl } for pid=11036 comm="syz.8.2041" path="/dev/uhid" dev="devtmpfs" ino=253 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 196.854721][ T28] audit: type=1400 audit(1771651685.237:861): avc: denied { ioctl } for pid=11036 comm="syz.8.2041" path="socket:[33019]" dev="sockfs" ino=33019 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 196.895727][ T28] audit: type=1400 audit(1771651685.277:862): avc: denied { mount } for pid=10736 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 196.957204][ T28] audit: type=1400 audit(1771651685.287:863): avc: denied { module_load } for pid=11063 comm="syz.2.2043" path="/sys/power/pm_test" dev="sysfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 197.032838][T11088] loop2: detected capacity change from 0 to 256 [ 197.050281][T11088] FAT-fs (loop2): count of clusters too big (178174) [ 197.085832][T11088] FAT-fs (loop2): Can't find a valid FAT filesystem [ 197.101910][T10818] veth0_vlan: entered promiscuous mode [ 197.138261][T10818] veth1_vlan: entered promiscuous mode [ 197.183166][T10818] veth0_macvtap: entered promiscuous mode [ 197.380009][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.436592][T10818] veth1_macvtap: entered promiscuous mode [ 197.479741][T10818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.509255][T11093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2005'. [ 197.528045][T10818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.566652][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.582008][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.662262][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.704945][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.739047][T11146] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2053'. [ 197.756739][T11144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2054'. [ 197.842291][T11158] batadv_slave_1: entered promiscuous mode [ 197.859136][T11154] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2057'. [ 197.887753][T11164] xt_hashlimit: size too large, truncated to 1048576 [ 197.909333][T11163] xt_hashlimit: size too large, truncated to 1048576 [ 197.916302][T11154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2057'. [ 197.957503][T11154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2057'. [ 197.985006][T11175] loop5: detected capacity change from 0 to 1024 [ 198.028356][T11154] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2057'. [ 198.028799][T11175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.039485][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2062'. [ 198.057065][T11154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2057'. [ 198.080818][T11175] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 198.096702][T11154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2057'. [ 198.104146][T11175] System zones: 0-1, 3-36 [ 198.128755][T11175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.324802][T11164] batadv_slave_1: left promiscuous mode [ 198.472834][T11236] xt_NFQUEUE: number of total queues is 0 [ 198.716561][T11259] bridge0: port 5(netdevsim1) entered disabled state [ 198.723362][T11259] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.730563][T11259] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.766132][T10818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.966676][T11298] vlan2: entered allmulticast mode [ 198.975903][T11298] geneve0: entered allmulticast mode [ 199.022265][T11304] netlink: 'syz.0.2084': attribute type 1 has an invalid length. [ 199.124613][T11304] tipc: Failed to remove unknown binding: 66,1,1/0:630574543/630574545 [ 199.133557][T11320] loop2: detected capacity change from 0 to 1024 [ 199.145549][T11304] tipc: Failed to remove unknown binding: 66,1,1/0:630574543/630574545 [ 199.156297][T11320] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.173906][T11320] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 199.212764][T11320] System zones: 0-1, 3-36 [ 199.218302][T11320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.345750][T11335] bond_slave_0: entered promiscuous mode [ 199.351502][T11335] bond_slave_1: entered promiscuous mode [ 199.372640][T11335] macvtap1: entered promiscuous mode [ 199.384912][T11335] bond0: entered promiscuous mode [ 199.395943][T11335] macvtap1: entered allmulticast mode [ 199.409328][T11335] bond0: entered allmulticast mode [ 199.421988][T11335] bond_slave_0: entered allmulticast mode [ 199.443185][T11335] bond_slave_1: entered allmulticast mode [ 199.462593][T11335] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 199.484959][T11335] bond0: left allmulticast mode [ 199.494681][T11335] bond_slave_0: left allmulticast mode [ 199.506822][T11335] bond_slave_1: left allmulticast mode [ 199.528085][T11335] bond0: left promiscuous mode [ 199.537233][T11335] bond_slave_0: left promiscuous mode [ 199.542686][T11335] bond_slave_1: left promiscuous mode [ 199.629134][ T28] audit: type=1400 audit(1771651688.057:864): avc: denied { mounton } for pid=11365 comm="syz.4.2093" path="/426/file0" dev="tmpfs" ino=2274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 199.775619][T11386] netlink: 'syz.5.2096': attribute type 1 has an invalid length. [ 199.833643][T11386] bond1: entered promiscuous mode [ 199.850647][T11386] bond1: entered allmulticast mode [ 199.870493][T11386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.925972][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.171270][T11428] netlink: 'syz.5.2103': attribute type 39 has an invalid length. [ 200.275541][T11406] ipvlan2: entered allmulticast mode [ 200.288972][T11406] dummy0: entered allmulticast mode [ 200.300776][T11417] siw: device registration error -23 [ 201.159683][T11475] lo speed is unknown, defaulting to 1000 [ 201.625826][T11488] loop8: detected capacity change from 0 to 1024 [ 201.655772][T11488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.688914][T11488] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 201.714895][T11488] System zones: 0-1, 3-36 [ 201.753253][T11488] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.767023][T11503] ip6gre1: entered promiscuous mode [ 201.772312][T11503] ip6gre1: entered allmulticast mode [ 201.885462][T11519] loop2: detected capacity change from 0 to 1024 [ 201.914059][T11519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.172449][T11551] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.179720][T11551] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.246550][T11551] bridge0: entered allmulticast mode [ 202.412962][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.562043][T11590] __nla_validate_parse: 11 callbacks suppressed [ 202.562069][T11590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2133'. [ 202.616575][T11590] vlan0: entered promiscuous mode [ 202.637422][T11590] team0: entered promiscuous mode [ 202.667254][T11590] team_slave_0: entered promiscuous mode [ 202.699579][T11590] ±ÿ: entered promiscuous mode [ 202.716636][T11590] erspan0: entered promiscuous mode [ 202.874591][T11617] netlink: 'syz.4.2139': attribute type 4 has an invalid length. [ 203.537807][T11662] loop8: detected capacity change from 0 to 1024 [ 203.567283][T11662] EXT4-fs: Ignoring removed oldalloc option [ 203.616536][T11662] EXT4-fs: Ignoring removed bh option [ 203.638576][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.702875][T11662] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.755708][T11665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2136'. [ 203.898855][T11690] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2148'. [ 203.966414][T11700] loop2: detected capacity change from 0 to 128 [ 203.973404][ T28] audit: type=1400 audit(1771651692.398:865): avc: denied { ioctl } for pid=11661 comm="syz.8.2143" path="/134/file1/file1" dev="loop8" ino=15 ioctlcmd=0x2408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 204.023259][ T28] audit: type=1400 audit(1771651692.398:866): avc: denied { create } for pid=11661 comm="syz.8.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 204.063619][ T28] audit: type=1400 audit(1771651692.448:867): avc: denied { mount } for pid=11698 comm="syz.2.2150" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 204.086007][ T28] audit: type=1400 audit(1771651692.448:868): avc: denied { remount } for pid=11698 comm="syz.2.2150" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 204.128435][ T28] audit: type=1400 audit(1771651692.528:869): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 204.147009][T11714] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2152'. [ 204.167795][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.176305][T11714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2152'. [ 204.186064][T11714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2152'. [ 204.212066][T11719] netlink: 'syz.4.2154': attribute type 1 has an invalid length. [ 204.236338][T11719] bond10: entered promiscuous mode [ 204.241500][T11719] bond10: entered allmulticast mode [ 204.241631][T11720] loop5: detected capacity change from 0 to 128 [ 204.256322][T11719] 8021q: adding VLAN 0 to HW filter on device bond10 [ 204.256525][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2156'. [ 204.278396][T11720] EXT4-fs: Ignoring removed nobh option [ 204.324355][T11714] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2152'. [ 204.331164][T11720] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.336169][T11714] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2152'. [ 204.358126][T11727] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2153'. [ 204.366380][T11720] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 204.460008][ T28] audit: type=1400 audit(1771651692.888:870): avc: denied { map } for pid=11718 comm="syz.5.2155" path="/17/mnt/cgroup.controllers" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 204.841310][T10818] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.915994][T11755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.939872][T11757] FAULT_INJECTION: forcing a failure. [ 204.939872][T11757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.953563][T11757] CPU: 0 UID: 0 PID: 11757 Comm: syz.2.2162 Tainted: G W syzkaller #0 PREEMPT(full) [ 204.953612][T11757] Tainted: [W]=WARN [ 204.953620][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 204.953703][T11757] Call Trace: [ 204.953710][T11757] [ 204.953718][T11757] __dump_stack+0x1d/0x30 [ 204.953744][T11757] dump_stack_lvl+0x95/0xd0 [ 204.953766][T11757] dump_stack+0x15/0x1b [ 204.953814][T11757] should_fail_ex+0x263/0x280 [ 204.953838][T11757] should_fail+0xb/0x20 [ 204.953896][T11757] should_fail_usercopy+0x1a/0x20 [ 204.953923][T11757] _copy_from_user+0x1c/0xb0 [ 204.953954][T11757] ___sys_sendmsg+0xc1/0x1e0 [ 204.953980][T11757] ? path_openat+0x1b01/0x2050 [ 204.954024][T11757] __sys_sendmmsg+0x185/0x320 [ 204.954062][T11757] __x64_sys_sendmmsg+0x57/0x70 [ 204.954092][T11757] x64_sys_call+0x27aa/0x3020 [ 204.954123][T11757] do_syscall_64+0x12c/0x370 [ 204.954236][T11757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.954262][T11757] RIP: 0033:0x7fd3af8ec629 [ 204.954346][T11757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.954371][T11757] RSP: 002b:00007fd3ae33f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 204.954392][T11757] RAX: ffffffffffffffda RBX: 00007fd3afb65fa0 RCX: 00007fd3af8ec629 [ 204.954410][T11757] RDX: 0000000000000001 RSI: 0000200000005200 RDI: 0000000000000003 [ 204.954426][T11757] RBP: 00007fd3ae33f090 R08: 0000000000000000 R09: 0000000000000000 [ 204.954441][T11757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.954456][T11757] R13: 00007fd3afb66038 R14: 00007fd3afb65fa0 R15: 00007ffc4ae33f88 [ 204.954539][T11757] [ 204.988869][ T35] lo speed is unknown, defaulting to 1000 [ 205.215209][T11765] uprobe: syz.8.2164:11765 failed to unregister, leaking uprobe [ 205.307871][T11763] loop8: detected capacity change from 0 to 512 [ 205.378938][T11763] loop8: detected capacity change from 0 to 2048 [ 205.465999][ T35] syz2: Port: 1 Link DOWN [ 205.547381][T11763] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.569996][T11763] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.582290][T11763] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.910702][T11791] FAULT_INJECTION: forcing a failure. [ 205.910702][T11791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.924085][T11791] CPU: 1 UID: 0 PID: 11791 Comm: syz.0.2173 Tainted: G W syzkaller #0 PREEMPT(full) [ 205.924161][T11791] Tainted: [W]=WARN [ 205.924166][T11791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.924174][T11791] Call Trace: [ 205.924179][T11791] [ 205.924185][T11791] __dump_stack+0x1d/0x30 [ 205.924214][T11791] dump_stack_lvl+0x95/0xd0 [ 205.924229][T11791] dump_stack+0x15/0x1b [ 205.924274][T11791] should_fail_ex+0x263/0x280 [ 205.924289][T11791] should_fail+0xb/0x20 [ 205.924301][T11791] should_fail_usercopy+0x1a/0x20 [ 205.924324][T11791] _copy_to_user+0x20/0xa0 [ 205.924352][T11791] finalize_log+0xa1/0x100 [ 205.924445][T11791] btf_new_fd+0x541/0x7d0 [ 205.924458][T11791] ? ns_capable+0x7c/0xb0 [ 205.924471][T11791] bpf_btf_load+0x112/0x130 [ 205.924550][T11791] __sys_bpf+0x3d8/0x7e0 [ 205.924567][T11791] __x64_sys_bpf+0x41/0x50 [ 205.924587][T11791] x64_sys_call+0x10cb/0x3020 [ 205.924605][T11791] do_syscall_64+0x12c/0x370 [ 205.924661][T11791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.924675][T11791] RIP: 0033:0x7faecc89c629 [ 205.924688][T11791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.924708][T11791] RSP: 002b:00007faecb2f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.924723][T11791] RAX: ffffffffffffffda RBX: 00007faeccb15fa0 RCX: 00007faecc89c629 [ 205.924732][T11791] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 205.924741][T11791] RBP: 00007faecb2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 205.924750][T11791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.924759][T11791] R13: 00007faeccb16038 R14: 00007faeccb15fa0 R15: 00007fff9d69d1b8 [ 205.924772][T11791] [ 206.137392][T11797] loop2: detected capacity change from 0 to 1024 [ 206.144111][T11788] delete_channel: no stack [ 206.176641][T11797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.210622][T11805] loop8: detected capacity change from 0 to 1024 [ 206.242808][T11805] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 206.253212][T11805] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 206.263801][T11805] EXT4-fs (loop8): can't mount with commit=, fs mounted w/o journal [ 206.418317][ T28] audit: type=1326 audit(1771651694.858:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.8.2182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd36eaec629 code=0x0 [ 206.650927][ T50] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 206.964091][T11850] lo speed is unknown, defaulting to 1000 [ 207.856219][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.943999][T11876] __nla_validate_parse: 16 callbacks suppressed [ 207.944017][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2197'. [ 208.483526][T11886] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2201'. [ 208.549256][T11895] tmpfs: Bad value for 'mpol' [ 208.656513][ T28] audit: type=1400 audit(1771651697.098:872): avc: denied { read } for pid=11894 comm="syz.2.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 208.804854][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2205'. [ 208.931937][T11921] loop2: detected capacity change from 0 to 512 [ 208.945993][T11921] EXT4-fs: Ignoring removed nobh option [ 208.990477][T11921] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.016178][T11921] EXT4-fs (loop2): 1 truncate cleaned up [ 209.022342][T11921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.055554][ T28] audit: type=1400 audit(1771651697.478:873): avc: denied { setopt } for pid=11922 comm="syz.0.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 209.205308][T11918] loop8: detected capacity change from 0 to 512 [ 209.354764][T11936] loop5: detected capacity change from 0 to 256 [ 209.408345][T11918] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 209.463538][T11936] FAT-fs (loop5): Directory bread(block 64) failed [ 209.487949][T11936] FAT-fs (loop5): Directory bread(block 65) failed [ 209.514758][T11936] FAT-fs (loop5): Directory bread(block 66) failed [ 209.536778][T11918] EXT4-fs (loop8): 1 truncate cleaned up [ 209.546170][T11936] FAT-fs (loop5): Directory bread(block 67) failed [ 209.578832][T11936] FAT-fs (loop5): Directory bread(block 68) failed [ 209.605389][T11936] FAT-fs (loop5): Directory bread(block 69) failed [ 209.616789][T11918] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.637648][T11936] FAT-fs (loop5): Directory bread(block 70) failed [ 209.665874][T11936] FAT-fs (loop5): Directory bread(block 71) failed [ 209.701645][T11936] FAT-fs (loop5): Directory bread(block 72) failed [ 209.727827][T11936] FAT-fs (loop5): Directory bread(block 73) failed [ 210.219739][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2215'. [ 210.379715][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.465764][T11955] FAULT_INJECTION: forcing a failure. [ 210.465764][T11955] name failslab, interval 1, probability 0, space 0, times 0 [ 210.485482][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 210.504289][T11955] CPU: 1 UID: 0 PID: 11955 Comm: syz.2.2217 Tainted: G W syzkaller #0 PREEMPT(full) [ 210.504327][T11955] Tainted: [W]=WARN [ 210.504334][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 210.504345][T11955] Call Trace: [ 210.504352][T11955] [ 210.504396][T11955] __dump_stack+0x1d/0x30 [ 210.504421][T11955] dump_stack_lvl+0x95/0xd0 [ 210.504442][T11955] dump_stack+0x15/0x1b [ 210.504548][T11955] should_fail_ex+0x263/0x280 [ 210.504572][T11955] should_failslab+0x8c/0xb0 [ 210.504590][T11955] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 210.504610][T11955] ? __d_alloc+0x37/0x340 [ 210.504703][T11955] __d_alloc+0x37/0x340 [ 210.504790][T11955] d_alloc_pseudo+0x1e/0x80 [ 210.504815][T11955] alloc_file_pseudo+0x91/0x190 [ 210.504840][T11955] anon_inode_getfd+0xbf/0x190 [ 210.504868][T11955] btf_new_fd+0x68e/0x7d0 [ 210.504953][T11955] ? ns_capable+0x7c/0xb0 [ 210.504971][T11955] bpf_btf_load+0x112/0x130 [ 210.504994][T11955] __sys_bpf+0x3d8/0x7e0 [ 210.505022][T11955] __x64_sys_bpf+0x41/0x50 [ 210.505075][T11955] x64_sys_call+0x10cb/0x3020 [ 210.505099][T11955] do_syscall_64+0x12c/0x370 [ 210.505137][T11955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.505162][T11955] RIP: 0033:0x7fd3af8ec629 [ 210.505281][T11955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.505303][T11955] RSP: 002b:00007fd3ae33f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.505396][T11955] RAX: ffffffffffffffda RBX: 00007fd3afb65fa0 RCX: 00007fd3af8ec629 [ 210.505413][T11955] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 210.505429][T11955] RBP: 00007fd3ae33f090 R08: 0000000000000000 R09: 0000000000000000 [ 210.505522][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.505534][T11955] R13: 00007fd3afb66038 R14: 00007fd3afb65fa0 R15: 00007ffc4ae33f88 [ 210.505552][T11955] [ 210.853326][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.905419][T11958] loop5: detected capacity change from 0 to 128 [ 211.031585][T11971] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2225'. [ 211.146604][T11968] FAULT_INJECTION: forcing a failure. [ 211.146604][T11968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.175314][T11968] CPU: 0 UID: 0 PID: 11968 Comm: syz.5.2224 Tainted: G W syzkaller #0 PREEMPT(full) [ 211.175372][T11968] Tainted: [W]=WARN [ 211.175380][T11968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.175474][T11968] Call Trace: [ 211.175482][T11968] [ 211.175491][T11968] __dump_stack+0x1d/0x30 [ 211.175526][T11968] dump_stack_lvl+0x95/0xd0 [ 211.175552][T11968] dump_stack+0x15/0x1b [ 211.175576][T11968] should_fail_ex+0x263/0x280 [ 211.175678][T11968] should_fail+0xb/0x20 [ 211.175698][T11968] should_fail_usercopy+0x1a/0x20 [ 211.175723][T11968] _copy_to_user+0x20/0xa0 [ 211.175751][T11968] simple_read_from_buffer+0xb5/0x130 [ 211.175788][T11968] proc_fail_nth_read+0x10e/0x150 [ 211.175841][T11968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.175866][T11968] vfs_read+0x1ab/0x7f0 [ 211.175900][T11968] ? __rcu_read_unlock+0x4e/0x70 [ 211.175925][T11968] ? __fget_files+0x184/0x1c0 [ 211.175977][T11968] ? mutex_lock+0x57/0x90 [ 211.176043][T11968] ksys_read+0xdc/0x1a0 [ 211.176096][T11968] __x64_sys_read+0x40/0x50 [ 211.176129][T11968] x64_sys_call+0x2886/0x3020 [ 211.176153][T11968] do_syscall_64+0x12c/0x370 [ 211.176263][T11968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.176285][T11968] RIP: 0033:0x7f9057e2cece [ 211.176305][T11968] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.176346][T11968] RSP: 002b:00007f90568befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.176369][T11968] RAX: ffffffffffffffda RBX: 00007f90568bf6c0 RCX: 00007f9057e2cece [ 211.176382][T11968] RDX: 000000000000000f RSI: 00007f90568bf0a0 RDI: 0000000000000005 [ 211.176395][T11968] RBP: 00007f90568bf090 R08: 0000000000000000 R09: 0000000000000000 [ 211.176452][T11968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.176464][T11968] R13: 00007f90580e6038 R14: 00007f90580e5fa0 R15: 00007fff9a9d6958 [ 211.176527][T11968] [ 211.922374][ T28] audit: type=1400 audit(1771651700.359:874): avc: denied { getopt } for pid=11991 comm="syz.5.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.943684][T12015] IPVS: set_ctl: invalid protocol: 25647 47.112.116.109:30720 [ 212.951742][T12015] IPVS: set_ctl: invalid protocol: 25647 47.112.116.109:30720 [ 213.046464][ T28] audit: type=1400 audit(1771651701.479:875): avc: denied { connect } for pid=12020 comm="syz.0.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 213.127759][T12030] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2243'. [ 213.727831][T12007] loop8: detected capacity change from 0 to 512 [ 213.737410][ T28] audit: type=1400 audit(1771651702.179:876): avc: denied { getopt } for pid=12004 comm="syz.8.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 214.030132][T12040] loop5: detected capacity change from 0 to 164 [ 214.303623][T12040] isofs_fill_super: root inode is not a directory. Corrupted media? [ 214.375234][T12068] bond1: entered promiscuous mode [ 214.475507][T12068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.483721][T12068] team0: Port device bond1 added [ 214.544885][T12072] can: request_module (can-proto-0) failed. [ 214.634359][T12083] loop2: detected capacity change from 0 to 128 [ 214.668402][T12083] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.719030][T12083] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.910959][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2252'. [ 214.954004][T12083] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.450147][T12149] netlink: 196 bytes leftover after parsing attributes in process `syz.8.2265'. [ 215.717946][T12173] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2270'. [ 215.898192][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2273'. [ 216.196320][T12199] vlan3: entered allmulticast mode [ 216.274364][T12199] geneve0: entered allmulticast mode [ 216.330564][T12199] bridge0: port 3(vlan3) entered blocking state [ 216.384759][T12199] bridge0: port 3(vlan3) entered disabled state [ 216.428111][T12199] vlan3: entered promiscuous mode [ 216.464776][T12199] geneve0: entered promiscuous mode [ 216.579877][T12245] 9p: Bad value for 'rfdno' [ 216.707513][T12239] sctp: [Deprecated]: syz.5.2282 (pid 12239) Use of int in max_burst socket option. [ 216.707513][T12239] Use struct sctp_assoc_value instead [ 216.767016][T12246] loop5: detected capacity change from 0 to 2048 [ 216.810034][T12258] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2290'. [ 216.826789][T12246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.855668][T12262] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 216.875732][T12258] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2290'. [ 216.907249][T12258] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2290'. [ 216.990970][T12258] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2290'. [ 217.023486][T12258] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2290'. [ 217.371645][T12288] netlink: 'syz.2.2300': attribute type 1 has an invalid length. [ 217.527110][T12288] bond11: entered promiscuous mode [ 217.532337][T12288] bond11: entered allmulticast mode [ 217.538734][T12288] 8021q: adding VLAN 0 to HW filter on device bond11 [ 217.718616][ T28] audit: type=1400 audit(1771651706.150:877): avc: denied { setattr } for pid=12298 comm="syz.8.2303" name="NETLINK" dev="sockfs" ino=35752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 218.004564][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 218.008547][T12319] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 218.023331][T12319] SELinux: failed to load policy [ 218.252250][ T28] audit: type=1400 audit(1771651706.680:878): avc: denied { connect } for pid=12328 comm="syz.0.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.342580][T12340] __nla_validate_parse: 10 callbacks suppressed [ 218.342596][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2316'. [ 218.549048][T12345] lo speed is unknown, defaulting to 1000 [ 218.974895][T10818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.886642][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2323'. [ 219.980970][ T28] audit: type=1400 audit(1771651708.370:879): avc: denied { accept } for pid=12368 comm="syz.5.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 220.187704][T12381] netlink: 'syz.0.2329': attribute type 1 has an invalid length. [ 220.318971][T12382] loop8: detected capacity change from 0 to 2048 [ 220.338644][T12381] bond2: entered promiscuous mode [ 220.350630][T12381] bond2: entered allmulticast mode [ 220.376368][T12381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.376740][T12382] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.541476][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2334'. [ 220.611690][T12399] loop2: detected capacity change from 0 to 128 [ 220.919834][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2333'. [ 220.977173][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.153430][T12417] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2341'. [ 221.186547][T12417] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2341'. [ 221.224676][T12417] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2341'. [ 221.268850][T12417] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2341'. [ 221.289213][T12417] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2341'. [ 221.354898][T12417] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2341'. [ 221.550302][ T28] audit: type=1400 audit(1771651709.980:880): avc: denied { ioctl } for pid=12441 comm="syz.4.2351" path="socket:[37085]" dev="sockfs" ino=37085 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.673314][T12480] loop2: detected capacity change from 0 to 512 [ 222.719323][T12480] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 222.836705][T12480] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2360: bad orphan inode 131083 [ 222.853595][T12498] loop8: detected capacity change from 0 to 1024 [ 222.889676][T12498] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.993920][T12480] loop2: lost filesystem error report for type 5 error -117 [ 222.994488][T12480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.118125][T12480] vlan6: entered promiscuous mode [ 223.311409][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.526850][T12537] __nla_validate_parse: 12 callbacks suppressed [ 223.526868][T12537] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2378'. [ 224.517051][T12558] FAULT_INJECTION: forcing a failure. [ 224.517051][T12558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.559238][T12558] CPU: 0 UID: 0 PID: 12558 Comm: syz.5.2384 Tainted: G W syzkaller #0 PREEMPT(full) [ 224.559272][T12558] Tainted: [W]=WARN [ 224.559307][T12558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.559322][T12558] Call Trace: [ 224.559330][T12558] [ 224.559340][T12558] __dump_stack+0x1d/0x30 [ 224.559372][T12558] dump_stack_lvl+0x95/0xd0 [ 224.559395][T12558] dump_stack+0x15/0x1b [ 224.559414][T12558] should_fail_ex+0x263/0x280 [ 224.559507][T12558] should_fail+0xb/0x20 [ 224.559526][T12558] should_fail_usercopy+0x1a/0x20 [ 224.559552][T12558] _copy_from_user+0x1c/0xb0 [ 224.559656][T12558] do_sock_getsockopt+0xf1/0x210 [ 224.559681][T12558] __x64_sys_getsockopt+0x11d/0x1a0 [ 224.559711][T12558] x64_sys_call+0x2dcf/0x3020 [ 224.559745][T12558] do_syscall_64+0x12c/0x370 [ 224.559784][T12558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.559809][T12558] RIP: 0033:0x7f9057e6c629 [ 224.559851][T12558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.559987][T12558] RSP: 002b:00007f90568bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 224.560010][T12558] RAX: ffffffffffffffda RBX: 00007f90580e5fa0 RCX: 00007f9057e6c629 [ 224.560027][T12558] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 224.560041][T12558] RBP: 00007f90568bf090 R08: 0000000000000000 R09: 0000000000000000 [ 224.560055][T12558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.560127][T12558] R13: 00007f90580e6038 R14: 00007f90580e5fa0 R15: 00007fff9a9d6958 [ 224.560148][T12558] [ 224.936389][T12560] bond12: option tlb_dynamic_lb: invalid value (2) [ 224.990767][T12560] bond12 (unregistering): Released all slaves [ 224.998013][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.075216][T12571] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2389'. [ 225.297125][ T28] audit: type=1400 audit(1771651713.730:881): avc: denied { ioctl } for pid=12590 comm="syz.0.2394" path="socket:[37267]" dev="sockfs" ino=37267 ioctlcmd=0x4945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 225.452862][T12596] loop2: detected capacity change from 0 to 4096 [ 225.502193][T12602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2398'. [ 225.532195][T12596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.553815][T12605] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 225.569695][T12602] vlan0: entered promiscuous mode [ 225.589950][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.835225][T12620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2404'. [ 225.860047][T12622] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2405'. [ 225.888336][ T28] audit: type=1326 audit(1771651714.321:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12619 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 225.940471][T12630] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2408'. [ 225.944854][ T28] audit: type=1326 audit(1771651714.321:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12619 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 226.044257][T12630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2408'. [ 226.074375][T12630] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2408'. [ 226.095021][T12629] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2409'. [ 226.103589][ T28] audit: type=1326 audit(1771651714.331:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12619 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 226.135632][T12629] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2409'. [ 226.148576][ T28] audit: type=1326 audit(1771651714.331:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12619 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 226.173578][T12635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.202119][T12635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.234462][ T28] audit: type=1326 audit(1771651714.331:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12619 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 226.260819][ T28] audit: type=1326 audit(1771651714.351:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12619 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 226.285217][ T28] audit: type=1326 audit(1771651714.351:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12619 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 226.309229][ T28] audit: type=1326 audit(1771651714.351:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12619 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 226.364126][ T28] audit: type=1326 audit(1771651714.351:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12619 comm="syz.2.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 226.434582][T12653] loop2: detected capacity change from 0 to 512 [ 226.444252][T12653] EXT4-fs (loop2): Invalid log block size: 4294967295 [ 226.616554][T12669] FAULT_INJECTION: forcing a failure. [ 226.616554][T12669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.638619][T12669] CPU: 0 UID: 0 PID: 12669 Comm: syz.2.2420 Tainted: G W syzkaller #0 PREEMPT(full) [ 226.638678][T12669] Tainted: [W]=WARN [ 226.638686][T12669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.638696][T12669] Call Trace: [ 226.638703][T12669] [ 226.638711][T12669] __dump_stack+0x1d/0x30 [ 226.638787][T12669] dump_stack_lvl+0x95/0xd0 [ 226.638821][T12669] dump_stack+0x15/0x1b [ 226.638846][T12669] should_fail_ex+0x263/0x280 [ 226.638872][T12669] should_fail+0xb/0x20 [ 226.638967][T12669] should_fail_usercopy+0x1a/0x20 [ 226.639022][T12669] _copy_to_user+0x20/0xa0 [ 226.639045][T12669] simple_read_from_buffer+0xb5/0x130 [ 226.639098][T12669] proc_fail_nth_read+0x10e/0x150 [ 226.639185][T12669] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.639212][T12669] vfs_read+0x1ab/0x7f0 [ 226.639316][T12669] ? __rcu_read_unlock+0x4e/0x70 [ 226.639338][T12669] ? __fget_files+0x184/0x1c0 [ 226.639358][T12669] ? mutex_lock+0x57/0x90 [ 226.639392][T12669] ksys_read+0xdc/0x1a0 [ 226.639427][T12669] __x64_sys_read+0x40/0x50 [ 226.639467][T12669] x64_sys_call+0x2886/0x3020 [ 226.639496][T12669] do_syscall_64+0x12c/0x370 [ 226.639534][T12669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.639629][T12669] RIP: 0033:0x7fd3af8acece [ 226.639644][T12669] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 226.639661][T12669] RSP: 002b:00007fd3ae33efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.639686][T12669] RAX: ffffffffffffffda RBX: 00007fd3ae33f6c0 RCX: 00007fd3af8acece [ 226.639767][T12669] RDX: 000000000000000f RSI: 00007fd3ae33f0a0 RDI: 0000000000000004 [ 226.639829][T12669] RBP: 00007fd3ae33f090 R08: 0000000000000000 R09: 0000000000000000 [ 226.639842][T12669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.639854][T12669] R13: 00007fd3afb66038 R14: 00007fd3afb65fa0 R15: 00007ffc4ae33f88 [ 226.639871][T12669] [ 227.104467][T12673] loop8: detected capacity change from 0 to 1024 [ 227.284660][T12673] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 227.409338][T12673] ext4 filesystem being mounted at /189/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.520668][T12673] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2421: bg 0: block 112: padding at end of block bitmap is not set [ 227.595742][T12673] netlink: 'syz.8.2421': attribute type 4 has an invalid length. [ 227.630857][T12673] netlink: 'syz.8.2421': attribute type 4 has an invalid length. [ 227.650820][ T3644] lo speed is unknown, defaulting to 1000 [ 227.660745][ T3644] syz2: Port: 1 Link ACTIVE [ 227.979796][T12673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.015657][T12673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.097983][ T3644] lo speed is unknown, defaulting to 1000 [ 228.106608][ T3644] syz2: Port: 1 Link DOWN [ 228.245909][T12719] bond_slave_0: entered promiscuous mode [ 228.251689][T12719] bond_slave_1: entered promiscuous mode [ 228.269564][T12719] macvtap1: entered promiscuous mode [ 228.276321][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 228.284083][T12719] bond0: entered promiscuous mode [ 228.308468][T12719] bridge0: entered promiscuous mode [ 228.337846][T12719] macvtap1: entered allmulticast mode [ 228.353256][T12719] bond0: entered allmulticast mode [ 228.367622][T12719] bond_slave_0: entered allmulticast mode [ 228.375059][T12719] bond_slave_1: entered allmulticast mode [ 228.381457][T12719] bridge0: entered allmulticast mode [ 228.388458][T12719] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 228.402310][T12722] bond0: left allmulticast mode [ 228.408079][T12722] bond_slave_0: left allmulticast mode [ 228.423066][T12722] bond_slave_1: left allmulticast mode [ 228.430221][T12722] bridge0: left allmulticast mode [ 228.436310][T12722] bond0: left promiscuous mode [ 228.442656][T12722] bridge0: left promiscuous mode [ 228.448284][T12722] bond_slave_0: left promiscuous mode [ 228.453704][T12722] bond_slave_1: left promiscuous mode [ 228.461605][ T1823] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.496686][ T1823] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.511975][T12737] loop8: detected capacity change from 0 to 1024 [ 228.519009][ T50] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.541478][T12736] loop2: detected capacity change from 0 to 512 [ 228.543804][ T50] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.560471][T12737] EXT4-fs: Ignoring removed orlov option [ 228.587254][T12739] __nla_validate_parse: 11 callbacks suppressed [ 228.587270][T12739] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2440'. [ 228.613731][T12737] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.660522][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.968823][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2448'. [ 229.018885][T12766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2448'. [ 229.137155][T12770] netlink: 'syz.8.2449': attribute type 1 has an invalid length. [ 229.171011][T12770] bond3: entered promiscuous mode [ 229.189522][T12770] bond3: entered allmulticast mode [ 229.213062][T12770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.271417][T12776] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2452'. [ 229.351034][T12783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2454'. [ 229.362863][T12783] vlan0: entered promiscuous mode [ 229.681996][T12805] lo speed is unknown, defaulting to 1000 [ 229.961449][T12812] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2464'. [ 230.328933][T12819] Driver unsupported XDP return value 0 on prog (id 609) dev N/A, expect packet loss! [ 230.383299][T12823] netlink: 'syz.2.2467': attribute type 27 has an invalid length. [ 233.241849][T12841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2473'. [ 233.297323][T12845] loop5: detected capacity change from 0 to 1024 [ 233.317593][T12845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.332754][T12823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.351258][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2475'. [ 233.356255][T12823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.368404][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.376480][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 233.376492][ T28] audit: type=1400 audit(1772176009.811:929): avc: denied { ioctl } for pid=12846 comm="syz.0.2477" path="socket:[39614]" dev="sockfs" ino=39614 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 233.433608][T12855] /dev/loop0: Can't lookup blockdev [ 233.477011][T12823] vlan3: left allmulticast mode [ 233.491526][ T28] audit: type=1400 audit(1772176009.921:930): avc: denied { setopt } for pid=12846 comm="syz.0.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 233.513327][T12823] bond1: left promiscuous mode [ 233.518158][T12823] bond1: left allmulticast mode [ 233.533909][T12823] bond2: left promiscuous mode [ 233.538737][T12823] bond2: left allmulticast mode [ 233.560690][T12823] bond3: left promiscuous mode [ 233.565952][T12823] bond3: left allmulticast mode [ 233.572046][T12823] bond4: left promiscuous mode [ 233.577230][T12823] bond4: left allmulticast mode [ 233.590188][T12823] bond7: left promiscuous mode [ 233.600711][T12823] bond7: left allmulticast mode [ 233.614333][T12823] bond11: left promiscuous mode [ 233.619308][T12823] bond11: left allmulticast mode [ 233.625525][T12823] macvtap1: left promiscuous mode [ 233.630960][T12823] macvtap1: left allmulticast mode [ 233.648287][T12849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.657528][T12849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.699711][T12849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.736033][T12849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.866147][ T28] audit: type=1400 audit(1772176010.291:931): avc: denied { mount } for pid=12865 comm="syz.8.2480" name="/" dev="rpc_pipefs" ino=40162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 233.958967][ T28] audit: type=1400 audit(1772176010.301:932): avc: denied { remount } for pid=12865 comm="syz.8.2480" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 234.014388][T12868] loop8: detected capacity change from 0 to 1024 [ 234.041980][ T28] audit: type=1400 audit(1772176010.371:933): avc: denied { unmount } for pid=8819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 234.087979][ T1823] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.097369][T10818] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 234.097405][T10818] CPU: 0 UID: 0 PID: 10818 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 234.097443][T10818] Tainted: [W]=WARN [ 234.097451][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 234.097463][T10818] Call Trace: [ 234.097469][T10818] [ 234.097478][T10818] __dump_stack+0x1d/0x30 [ 234.097594][T10818] dump_stack_lvl+0x95/0xd0 [ 234.097669][T10818] dump_stack+0x15/0x1b [ 234.097691][T10818] dump_header+0x80/0x240 [ 234.097713][T10818] oom_kill_process+0x295/0x350 [ 234.097776][T10818] out_of_memory+0x97d/0xb80 [ 234.097798][T10818] try_charge_memcg+0x62e/0xa10 [ 234.097865][T10818] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 234.097895][T10818] __swap_cache_prepare_and_add+0x386/0x530 [ 234.097927][T10818] swap_cache_alloc_folio+0xa2/0x120 [ 234.097976][T10818] swap_cluster_readahead+0x26e/0x3d0 [ 234.098039][T10818] swapin_readahead+0xde/0x840 [ 234.098064][T10818] ? __rcu_read_unlock+0x4e/0x70 [ 234.098085][T10818] ? __perf_event_task_sched_in+0xa65/0xad0 [ 234.098167][T10818] ? __list_add_valid_or_report+0x38/0xe0 [ 234.098228][T10818] ? xfd_validate_state+0x45/0xf0 [ 234.098255][T10818] ? __rcu_read_unlock+0x4e/0x70 [ 234.098274][T10818] ? swap_cache_get_folio+0x26f/0x280 [ 234.098301][T10818] do_swap_page+0x309/0x2210 [ 234.098351][T10818] ? __schedule+0x85a/0xd40 [ 234.098374][T10818] ? __rcu_read_lock+0x36/0x50 [ 234.098395][T10818] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 234.098466][T10818] handle_mm_fault+0xb40/0x3020 [ 234.098555][T10818] ? vma_start_read+0x1c7/0x2c0 [ 234.098582][T10818] do_user_addr_fault+0x62f/0x1050 [ 234.098676][T10818] ? trace_page_fault_user+0x1f/0xe0 [ 234.098706][T10818] exc_page_fault+0x62/0xa0 [ 234.098956][T10818] asm_exc_page_fault+0x26/0x30 [ 234.098976][T10818] RIP: 0033:0x7f9057e27817 [ 234.098993][T10818] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 234.099029][T10818] RSP: 002b:00007fff9a9d6c50 EFLAGS: 00010202 [ 234.099047][T10818] RAX: 0000000000000000 RBX: 000055557e7cd500 RCX: 00007f9057e27817 [ 234.099062][T10818] RDX: 00007fff9a9d6c90 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.099076][T10818] RBP: 00007fff9a9d6cfc R08: 0000000000000000 R09: 0000000000000000 [ 234.099160][T10818] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 234.099173][T10818] R13: 00000000000927c0 R14: 000000000003915f R15: 00007fff9a9d6d50 [ 234.099193][T10818] [ 234.101595][T10818] memory: usage 307200kB, limit 307200kB, failcnt 1010 [ 234.148911][T12868] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.155464][T10818] memory+swap: usage 307912kB, limit 9007199254740988kB, failcnt 0 [ 234.180748][ T1823] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.186884][T10818] kmem: usage 290564kB, limit 9007199254740988kB, failcnt 0 [ 234.222855][ T1823] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.236662][T10818] Memory cgroup stats for [ 234.262599][T12868] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 234.275552][T10818] /syz5: [ 234.275772][T10818] cache 16384 [ 234.275861][T10818] rss 0 [ 234.275868][T10818] shmem 0 [ 234.275874][T10818] mapped_file 0 [ 234.275881][T10818] dirty 0 [ 234.275924][T10818] writeback 0 [ 234.275933][T10818] workingset_refault_anon 449 [ 234.275942][T10818] workingset_refault_file 254 [ 234.275951][T10818] swap 729088 [ 234.276000][T10818] swapcached 26071040 [ 234.276009][T10818] pgpgin 138217 [ 234.276032][T10818] pgpgout 138213 [ 234.276041][T10818] pgfault 68966 [ 234.276048][T10818] pgmajfault 1274 [ 234.276056][T10818] inactive_anon 0 [ 234.276063][T10818] active_anon 0 [ 234.276070][T10818] inactive_file 8192 [ 234.276078][T10818] active_file 8192 [ 234.276086][T10818] unevictable 0 [ 234.276095][T10818] hierarchical_memory_limit 314572800 [ 234.276105][T10818] hierarchical_memsw_limit 9223372036854771712 [ 234.313217][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.333353][T12868] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 234.370714][T10818] total_cache 16384 [ 234.381284][T12868] System zones: [ 234.404319][T10818] total_rss 0 [ 234.408555][T12868] 0-1 [ 234.424574][T10818] total_shmem 0 [ 234.425514][T12868] , 3-36 [ 234.432662][T10818] total_mapped_file 0 [ 234.433938][T12868] [ 234.442985][T10818] total_dirty 0 [ 234.559203][T12868] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.562547][T10818] total_writeback 0 [ 234.577515][T10818] total_workingset_refault_anon 449 [ 234.583221][T10818] total_workingset_refault_file 254 [ 234.588690][T10818] total_swap 729088 [ 234.592847][T10818] total_swapcached 26071040 [ 234.597357][T10818] total_pgpgin 138217 [ 234.604431][T12881] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2485'. [ 234.622485][T10818] total_pgpgout 138213 [ 234.626704][T10818] total_pgfault 68966 [ 234.630698][T10818] total_pgmajfault 1274 [ 234.658523][T12868] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 234.659259][T10818] total_inactive_anon 0 [ 234.688696][T10818] total_active_anon 0 [ 234.693744][T10818] total_inactive_file 8192 [ 234.698292][T10818] total_active_file 8192 [ 234.702728][T10818] total_unevictable 0 [ 234.707044][T10818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2476,pid=12844,uid=0 [ 234.737933][T10818] Memory cgroup out of memory: Killed process 12844 (syz.5.2476) total-vm:94292kB, anon-rss:1228kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 235.041553][T12868] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2481'. [ 235.064753][T10818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.421359][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2500'. [ 235.466997][T12925] lo speed is unknown, defaulting to 1000 [ 235.539808][ T28] audit: type=1400 audit(1772176011.971:934): avc: denied { watch watch_reads } for pid=12931 comm="syz.4.2505" path="/533/file0" dev="tmpfs" ino=2825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 235.582821][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.916977][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2506'. [ 236.121232][T12959] bridge0: port 3(syz_tun) entered blocking state [ 236.127880][T12959] bridge0: port 3(syz_tun) entered disabled state [ 236.135248][T12959] syz_tun: entered allmulticast mode [ 236.141836][T12959] syz_tun: entered promiscuous mode [ 236.147510][T12959] bridge0: port 3(syz_tun) entered blocking state [ 236.153967][T12959] bridge0: port 3(syz_tun) entered listening state [ 236.181254][T12959] lo speed is unknown, defaulting to 1000 [ 236.598348][T12970] loop2: detected capacity change from 0 to 1024 [ 236.623251][T12970] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 236.634117][T12970] System zones: 0-1, 3-36 [ 236.650450][T12970] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2516: bad orphan inode 134217728 [ 236.661416][T12970] loop2: lost filesystem error report for type 5 error -117 [ 236.662174][T12970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.715034][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2518'. [ 236.725173][T12970] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2516'. [ 236.806095][T12987] lo speed is unknown, defaulting to 1000 [ 236.884764][ T28] audit: type=1400 audit(1772176013.321:935): avc: denied { write } for pid=12992 comm="syz.5.2522" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 236.884838][T12993] random: crng reseeded on system resumption [ 236.945067][ T28] audit: type=1400 audit(1772176013.321:936): avc: denied { open } for pid=12992 comm="syz.5.2522" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 236.979878][T12993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12993 comm=syz.5.2522 [ 237.012217][T12993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=12993 comm=syz.5.2522 [ 237.032454][T12993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12993 comm=syz.5.2522 [ 237.096050][T12993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2584 sclass=netlink_tcpdiag_socket pid=12993 comm=syz.5.2522 [ 237.117075][T12996] vlan0: entered allmulticast mode [ 237.122767][T12996] bridge0: port 1(vlan0) entered blocking state [ 237.129188][T12996] bridge0: port 1(vlan0) entered disabled state [ 237.142200][T12993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2560 sclass=netlink_tcpdiag_socket pid=12993 comm=syz.5.2522 [ 237.156616][T12996] vlan0: entered promiscuous mode [ 237.161668][T12996] geneve0: entered promiscuous mode [ 237.175797][T12993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2572 sclass=netlink_tcpdiag_socket pid=12993 comm=syz.5.2522 [ 237.179110][ T28] audit: type=1326 audit(1772176013.612:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.5.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9057e6c629 code=0x7ffc0000 [ 237.199385][T12993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=12993 comm=syz.5.2522 [ 237.285220][ T28] audit: type=1326 audit(1772176013.612:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12992 comm="syz.5.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9057e6c629 code=0x7ffc0000 [ 237.351639][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'. [ 237.390651][T13004] netlink: 'syz.0.2527': attribute type 18 has an invalid length. [ 237.409407][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2527'. [ 237.496737][T13011] syzkaller1: entered promiscuous mode [ 237.519244][T13011] syzkaller1: entered allmulticast mode [ 237.697506][T13009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2525'. [ 237.780004][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.888612][T13040] kernel profiling enabled (shift: 0) [ 237.926730][T13044] netlink: 'syz.5.2541': attribute type 1 has an invalid length. [ 237.947531][T13044] bond3: entered promiscuous mode [ 237.954432][T13046] loop8: detected capacity change from 0 to 1024 [ 237.954968][T13044] bond3: entered allmulticast mode [ 237.966340][T13044] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.977081][T13046] EXT4-fs: Ignoring removed bh option [ 238.048714][T13046] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 238.124955][T13040] pimreg: entered allmulticast mode [ 238.130912][T13040] pimreg: left allmulticast mode [ 238.191048][T13059] 9p: Bad value for 'version' [ 238.202248][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 238.559031][T13074] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2552'. [ 239.001207][T13092] loop5: detected capacity change from 0 to 1024 [ 239.009560][T13092] EXT4-fs: Ignoring removed bh option [ 239.026427][T13092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 239.531153][T10818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 239.543772][T13107] loop2: detected capacity change from 0 to 512 [ 239.635584][T13120] loop5: detected capacity change from 0 to 512 [ 239.651456][T13120] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 239.785081][T13120] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2569: bad orphan inode 131083 [ 239.805731][T13120] loop5: lost filesystem error report for type 5 error -117 [ 239.806503][T13120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.829758][T13120] __nla_validate_parse: 3 callbacks suppressed [ 239.829772][T13120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2569'. [ 239.851321][T13120] vlan3: entered promiscuous mode [ 239.857558][T13129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2568'. [ 239.876462][T13120] batadv0: entered promiscuous mode [ 239.956842][T10818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.054370][T13146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2579'. [ 240.207890][T13142] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2577'. [ 240.320871][T13158] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2583'. [ 240.346259][T13158] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2583'. [ 240.386662][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 240.386679][ T28] audit: type=1400 audit(1772176016.822:942): avc: denied { getopt } for pid=13159 comm="syz.8.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.388990][T13158] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2583'. [ 240.420228][ T28] audit: type=1400 audit(1772176016.852:943): avc: denied { ioctl } for pid=13159 comm="syz.8.2584" path="socket:[40649]" dev="sockfs" ino=40649 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.463074][T13158] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2583'. [ 240.479619][T13163] usb usb1: usbfs: process 13163 (syz.8.2585) did not claim interface 0 before use [ 240.479974][ T28] audit: type=1400 audit(1772176016.892:944): avc: denied { setopt } for pid=13159 comm="syz.8.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.509943][T13158] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2583'. [ 240.509980][T13158] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2583'. [ 240.634493][T13177] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 240.920408][T13195] loop5: detected capacity change from 0 to 2048 [ 240.974045][T13195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.083112][T10818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.182749][T13232] netlink: 'syz.2.2609': attribute type 1 has an invalid length. [ 242.195872][T13226] loop8: detected capacity change from 0 to 512 [ 242.202873][T13226] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 242.224442][T13234] loop5: detected capacity change from 0 to 1024 [ 242.243915][T13232] bond12: entered promiscuous mode [ 242.249178][T13232] bond12: entered allmulticast mode [ 242.254933][T13232] 8021q: adding VLAN 0 to HW filter on device bond12 [ 242.264577][T13226] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2608: bg 0: block 255: padding at end of block bitmap is not set [ 242.287238][T13226] loop8: lost filesystem error report for type 5 error -117 [ 242.288209][T13226] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 242.295590][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 242.295612][ C1] EXT4-fs (loop8): initial error at time 1772176018: ext4_validate_block_bitmap:441 [ 242.295648][ C1] EXT4-fs (loop8): last error at time 1772176018: ext4_validate_block_bitmap:441 [ 242.302782][T13234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.323818][T13226] loop8: lost filesystem error report for type 5 error -117 [ 242.361421][T13226] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2608: invalid indirect mapped block 1 (level 1) [ 242.406119][T13226] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 242.406362][T13226] EXT4-fs (loop8): 1 truncate cleaned up [ 242.442610][T13226] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.465038][T13226] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.598870][T13249] 9p: Bad value for 'rfdno' [ 242.619245][T13249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13249 comm=syz.8.2613 [ 242.994203][T13233] syz.5.2610 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 243.013980][T13233] CPU: 0 UID: 0 PID: 13233 Comm: syz.5.2610 Tainted: G W syzkaller #0 PREEMPT(full) [ 243.014015][T13233] Tainted: [W]=WARN [ 243.014022][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.014037][T13233] Call Trace: [ 243.014046][T13233] [ 243.014056][T13233] __dump_stack+0x1d/0x30 [ 243.014152][T13233] dump_stack_lvl+0x95/0xd0 [ 243.014180][T13233] dump_stack+0x15/0x1b [ 243.014207][T13233] dump_header+0x80/0x240 [ 243.014235][T13233] oom_kill_process+0x295/0x350 [ 243.014311][T13233] out_of_memory+0x97d/0xb80 [ 243.014395][T13233] try_charge_memcg+0x62e/0xa10 [ 243.014437][T13233] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 243.014464][T13233] __swap_cache_prepare_and_add+0x386/0x530 [ 243.014548][T13233] swap_cache_alloc_folio+0xa2/0x120 [ 243.014607][T13233] swap_cluster_readahead+0x26e/0x3d0 [ 243.014636][T13233] swapin_readahead+0xde/0x840 [ 243.014666][T13233] ? _raw_spin_unlock+0x9/0x30 [ 243.014691][T13233] ? swap_put_entries_cluster+0x385/0x3a0 [ 243.014797][T13233] ? swap_put_entries_cluster+0xe1/0x3a0 [ 243.014827][T13233] ? __rcu_read_unlock+0x4e/0x70 [ 243.014851][T13233] ? swap_cache_get_folio+0x26f/0x280 [ 243.014952][T13233] do_swap_page+0x309/0x2210 [ 243.014980][T13233] ? css_rstat_updated+0xbb/0x280 [ 243.015004][T13233] ? __rcu_read_lock+0x36/0x50 [ 243.015022][T13233] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 243.015170][T13233] handle_mm_fault+0xb40/0x3020 [ 243.015285][T13233] ? vma_start_read+0x1c7/0x2c0 [ 243.015316][T13233] do_user_addr_fault+0x62f/0x1050 [ 243.015352][T13233] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 243.015441][T13233] ? trace_page_fault_user+0x1f/0xe0 [ 243.015476][T13233] exc_page_fault+0x62/0xa0 [ 243.015603][T13233] asm_exc_page_fault+0x26/0x30 [ 243.015627][T13233] RIP: 0033:0x7f9057e277c3 [ 243.015647][T13233] Code: 25 00 03 00 00 e8 5d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ee 4e 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 243.015669][T13233] RSP: 002b:00007fff9a9d6a50 EFLAGS: 00010246 [ 243.015730][T13233] RAX: 0000000000000000 RBX: 000055557e7cd500 RCX: 0000000000000000 [ 243.015744][T13233] RDX: 00007fff9a9d6a90 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.015828][T13233] RBP: 00007f90580e7da0 R08: 0000000000000000 R09: 0000000000000000 [ 243.015905][T13233] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003b530 [ 243.015921][T13233] R13: 00007f90580e609c R14: 000000000003b619 R15: 00007f90580e6090 [ 243.015943][T13233] [ 243.018715][T13233] memory: usage 307200kB, limit 307200kB, failcnt 2455 [ 243.280807][T13233] memory+swap: usage 307904kB, limit 9007199254740988kB, failcnt 0 [ 243.289512][T13233] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 243.296982][T13233] Memory cgroup stats for /syz5: [ 243.297254][T13233] cache 4096 [ 243.327446][T13274] loop8: detected capacity change from 0 to 512 [ 243.371934][T13233] rss 0 [ 243.374735][T13233] shmem 0 [ 243.377701][T13233] mapped_file 0 [ 243.400641][ C1] vcan0: j1939_tp_rxtimer: 0xffff888193147c00: rx timeout, send abort [ 243.401613][T13233] dirty 0 [ 243.411266][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888193147c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 243.465862][T13233] writeback 4096 [ 243.469446][T13233] workingset_refault_anon 543 [ 243.474412][T13233] workingset_refault_file 254 [ 243.479129][T13233] swap 720896 [ 243.482667][T13233] swapcached 32980992 [ 243.486706][T13233] pgpgin 157614 [ 243.490174][T13233] pgpgout 157610 [ 243.494647][T13233] pgfault 90367 [ 243.498194][T13233] pgmajfault 1330 [ 243.502025][T13233] inactive_anon 8192 [ 243.505933][T13233] active_anon 0 [ 243.509401][T13233] inactive_file 4096 [ 243.513623][T13233] active_file 4096 [ 243.517519][T13233] unevictable 0 [ 243.520989][T13233] hierarchical_memory_limit 314572800 [ 243.527399][T13233] hierarchical_memsw_limit 9223372036854771712 [ 243.550468][T13233] total_cache 4096 [ 243.597546][T13282] lo speed is unknown, defaulting to 1000 [ 243.634984][T13274] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6). [ 243.645806][T13274] EXT4-fs warning (device loop8): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 243.663601][T13233] total_rss 0 [ 243.667063][T13233] total_shmem 0 [ 243.670630][T13233] total_mapped_file 0 [ 243.711092][T13233] total_dirty 0 [ 243.715640][T13233] total_writeback 4096 [ 243.719915][T13233] total_workingset_refault_anon 543 [ 243.728094][T13274] EXT4-fs (loop8): mount failed [ 243.734330][T13233] total_workingset_refault_file 254 [ 243.771634][T13233] total_swap 720896 [ 243.832095][T13233] total_swapcached 32980992 [ 243.864787][T13233] total_pgpgin 157614 [ 243.896734][T13233] total_pgpgout 157610 [ 243.953123][T13233] total_pgfault 90367 [ 243.967971][T13233] total_pgmajfault 1330 [ 243.974197][T13233] total_inactive_anon 8192 [ 243.979019][T13233] total_active_anon 0 [ 243.983631][T13233] total_inactive_file 4096 [ 243.988089][T13233] total_active_file 4096 [ 243.993370][T13233] total_unevictable 0 [ 243.997423][T13233] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2610,pid=13233,uid=0 [ 244.013260][T13233] Memory cgroup out of memory: Killed process 13233 (syz.5.2610) total-vm:94292kB, anon-rss:1228kB, file-rss:22480kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 244.172381][T10818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.320205][T13292] loop5: detected capacity change from 0 to 512 [ 244.342020][T13292] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 244.431984][T13292] lo speed is unknown, defaulting to 1000 [ 244.700382][ T6547] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 244.711593][ T6547] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 244.751810][ T6547] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 244.760833][ T6547] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 244.927214][T13285] __nla_validate_parse: 20 callbacks suppressed [ 244.927235][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2623'. [ 245.019900][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'. [ 245.148875][T13314] lo speed is unknown, defaulting to 1000 [ 245.209741][T13310] netlink: 'syz.5.2631': attribute type 1 has an invalid length. [ 245.731342][T13310] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 245.759752][T13323] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2636'. [ 245.843975][T13329] geneve2: entered promiscuous mode [ 245.856066][T13329] geneve2: entered allmulticast mode [ 245.871893][T13332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.881517][ T295] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 245.920311][ T295] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 245.930743][ T295] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.128378][ T295] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 246.253959][T13357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=13357 comm=syz.2.2649 [ 246.267032][ T28] audit: type=1326 audit(1772176022.683:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 246.312113][T13363] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2647'. [ 246.333771][ T28] audit: type=1326 audit(1772176022.683:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 246.390831][ T28] audit: type=1326 audit(1772176022.683:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 246.456296][ T28] audit: type=1326 audit(1772176022.683:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 246.504782][T13369] netlink: 'syz.4.2653': attribute type 1 has an invalid length. [ 246.520932][ T28] audit: type=1326 audit(1772176022.683:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 246.553694][T13369] bond11: entered promiscuous mode [ 246.569097][T13369] bond11: entered allmulticast mode [ 246.601597][T13369] 8021q: adding VLAN 0 to HW filter on device bond11 [ 246.608519][ T28] audit: type=1326 audit(1772176022.683:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 246.641731][ T28] audit: type=1326 audit(1772176022.683:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 246.692818][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2648'. [ 246.702466][ T28] audit: type=1326 audit(1772176022.683:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 246.727139][ T28] audit: type=1326 audit(1772176022.683:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 246.754419][ T28] audit: type=1326 audit(1772176022.683:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13356 comm="syz.2.2649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3af8ec629 code=0x7ffc0000 [ 247.078945][T13402] lo speed is unknown, defaulting to 1000 [ 247.537922][T13407] loop5: detected capacity change from 0 to 2048 [ 247.582964][ T3291] loop5: p1 < > p3 [ 247.587747][ T3291] loop5: p3 size 134217728 extends beyond EOD, truncated [ 247.611549][T13407] loop5: p1 < > p3 [ 247.631522][T13407] loop5: p3 size 134217728 extends beyond EOD, truncated [ 247.765861][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 247.804505][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 247.806555][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 247.880968][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 247.881155][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 248.131656][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2674'. [ 248.312704][T13438] binfmt_misc: register: failed to install interpreter file ./file0 [ 248.418684][T13445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2677'. [ 248.439353][T13446] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2676'. [ 248.464951][T13446] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2676'. [ 248.479324][T13448] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2678'. [ 248.643920][T13470] netlink: 'syz.8.2687': attribute type 1 has an invalid length. [ 248.724628][T13470] bond4: entered promiscuous mode [ 248.749612][T13470] bond4: entered allmulticast mode [ 248.755448][T13470] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.821947][T13614] __nla_validate_parse: 1 callbacks suppressed [ 250.821978][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2716'. [ 251.421766][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 251.421788][ T28] audit: type=1400 audit(1772176027.853:992): avc: denied { listen } for pid=13630 comm="syz.4.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 253.231486][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2735'. [ 253.303263][T13680] tmpfs: Bad value for 'mpol' [ 253.335483][T13684] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2738'. [ 253.362904][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2737'. [ 253.478243][T13692] binfmt_misc: register: failed to install interpreter file ./file0 [ 253.563643][T13701] usb usb1: usbfs: process 13701 (syz.2.2745) did not claim interface 0 before use [ 253.587723][T13701] FAULT_INJECTION: forcing a failure. [ 253.587723][T13701] name failslab, interval 1, probability 0, space 0, times 0 [ 253.631504][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2744'. [ 253.632460][T13701] CPU: 0 UID: 0 PID: 13701 Comm: syz.2.2745 Tainted: G W syzkaller #0 PREEMPT(full) [ 253.632498][T13701] Tainted: [W]=WARN [ 253.632574][T13701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.632586][T13701] Call Trace: [ 253.632593][T13701] [ 253.632601][T13701] __dump_stack+0x1d/0x30 [ 253.632672][T13701] dump_stack_lvl+0x95/0xd0 [ 253.632745][T13701] dump_stack+0x15/0x1b [ 253.632766][T13701] should_fail_ex+0x263/0x280 [ 253.632788][T13701] should_failslab+0x8c/0xb0 [ 253.632808][T13701] kmem_cache_alloc_noprof+0x66/0x400 [ 253.632829][T13701] ? __kernfs_new_node+0x70/0x3c0 [ 253.632928][T13701] __kernfs_new_node+0x70/0x3c0 [ 253.632953][T13701] ? vprintk_emit+0x572/0x600 [ 253.632974][T13701] ? dev_vprintk_emit+0x242/0x2a0 [ 253.633032][T13701] kernfs_new_node+0xd0/0x140 [ 253.633061][T13701] kernfs_create_link+0x70/0x130 [ 253.633092][T13701] sysfs_do_create_link_sd+0x6a/0x100 [ 253.633116][T13701] sysfs_create_link+0x51/0x70 [ 253.633195][T13701] driver_sysfs_add+0x54/0x160 [ 253.633225][T13701] device_bind_driver+0x17/0x60 [ 253.633254][T13701] usb_driver_claim_interface+0x1af/0x280 [ 253.633335][T13701] claimintf+0x113/0x190 [ 253.633364][T13701] proc_resetep+0x394/0x430 [ 253.633392][T13701] usbdev_ioctl+0x10f9/0x1750 [ 253.633454][T13701] ? __pfx_usbdev_ioctl+0x10/0x10 [ 253.633553][T13701] __se_sys_ioctl+0xce/0x140 [ 253.633633][T13701] __x64_sys_ioctl+0x43/0x50 [ 253.633733][T13701] x64_sys_call+0x1563/0x3020 [ 253.633758][T13701] do_syscall_64+0x12c/0x370 [ 253.633852][T13701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.633873][T13701] RIP: 0033:0x7fd3af8ec629 [ 253.633925][T13701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.633944][T13701] RSP: 002b:00007fd3ae33f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.634023][T13701] RAX: ffffffffffffffda RBX: 00007fd3afb65fa0 RCX: 00007fd3af8ec629 [ 253.634038][T13701] RDX: 0000200000000180 RSI: 0000000080045503 RDI: 0000000000000003 [ 253.634051][T13701] RBP: 00007fd3ae33f090 R08: 0000000000000000 R09: 0000000000000000 [ 253.634064][T13701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.634156][T13701] R13: 00007fd3afb66038 R14: 00007fd3afb65fa0 R15: 00007ffc4ae33f88 [ 253.634176][T13701] [ 253.672801][ T3368] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 253.899014][ T3368] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.040658][T13727] loop5: detected capacity change from 0 to 512 [ 254.044063][T13724] loop8: detected capacity change from 0 to 512 [ 254.060488][T13727] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 254.068854][T13727] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c00ee018, mo2=0002] [ 254.087974][T13727] EXT4-fs (loop5): orphan cleanup on readonly fs [ 254.109852][T13727] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 254.132625][T13727] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 254.180913][T13724] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.190682][T13727] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 254.229658][T13727] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2749: bg 0: block 40: padding at end of block bitmap is not set [ 254.253838][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2759'. [ 254.300348][T13727] loop5: lost filesystem error report for type 5 error -117 [ 254.300557][T13727] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 254.316935][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 254.316956][ C0] EXT4-fs (loop5): initial error at time 1772176030: ext4_validate_block_bitmap:441 [ 254.316982][ C0] EXT4-fs (loop5): last error at time 1772176030: ext4_validate_block_bitmap:441 [ 254.343246][T13727] loop5: lost filesystem error report for type 5 error -117 [ 254.345602][T13727] EXT4-fs (loop5): 1 truncate cleaned up [ 254.388038][T13727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.466332][T13712] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.2749: bad symlink. [ 254.477455][ T28] audit: type=1400 audit(1772176030.904:993): avc: denied { read } for pid=13711 comm="syz.5.2749" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 254.623065][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.639322][T10818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.809931][ T28] audit: type=1326 audit(1772176031.244:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.5.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9057e6c629 code=0x7ffc0000 [ 254.861755][ T28] audit: type=1326 audit(1772176031.254:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.5.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9057e6c629 code=0x7ffc0000 [ 254.899824][ T28] audit: type=1326 audit(1772176031.254:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.5.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9057e6c629 code=0x7ffc0000 [ 254.925037][ T28] audit: type=1326 audit(1772176031.254:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.5.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9057e6c629 code=0x7ffc0000 [ 254.949148][T13780] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2774'. [ 254.960350][ T28] audit: type=1326 audit(1772176031.254:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.5.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9057e6c629 code=0x7ffc0000 [ 255.051129][ T28] audit: type=1326 audit(1772176031.254:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.5.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9057e6c629 code=0x7ffc0000 [ 255.077347][T13792] loop8: detected capacity change from 0 to 512 [ 255.110418][ T28] audit: type=1326 audit(1772176031.254:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13767 comm="syz.5.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9057e6c629 code=0x7ffc0000 [ 255.169363][T13792] EXT4-fs warning (device loop8): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 255.196933][T13806] loop5: detected capacity change from 0 to 512 [ 255.204147][T13808] netlink: 'syz.0.2785': attribute type 15 has an invalid length. [ 255.212273][T13792] EXT4-fs (loop8): mount failed [ 255.218689][T13808] netlink: 'syz.0.2785': attribute type 1 has an invalid length. [ 255.219790][T13806] EXT4-fs (loop5): filesystem is read-only [ 255.233441][T13806] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 255.320079][T13806] EXT4-fs (loop5): filesystem is read-only [ 255.326133][T13806] EXT4-fs (loop5): orphan cleanup on readonly fs [ 255.333649][T13806] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2784: bg 0: block 64: padding at end of block bitmap is not set [ 255.355059][T13806] loop5: lost filesystem error report for type 5 error -117 [ 255.355273][T13806] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 255.362647][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 255.362677][ C0] EXT4-fs (loop5): initial error at time 1772176031: ext4_validate_block_bitmap:441 [ 255.362703][ C0] EXT4-fs (loop5): last error at time 1772176031: ext4_validate_block_bitmap:441 [ 255.398175][T13806] loop5: lost filesystem error report for type 5 error -117 [ 255.398423][T13806] EXT4-fs (loop5): 1 orphan inode deleted [ 255.412480][T13806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 255.494639][T10818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.542458][T13815] loop5: detected capacity change from 0 to 128 [ 255.560727][T13815] vfat: Unknown parameter 'utf8?0' [ 255.880985][T13828] netlink: 'syz.5.2790': attribute type 1 has an invalid length. [ 255.910197][T13828] bond4: entered promiscuous mode [ 255.915570][T13828] bond4: entered allmulticast mode [ 255.973776][T13828] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.080910][T13835] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 256.265992][T13841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2795'. [ 256.297957][T13850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=13850 comm=syz.4.2797 [ 256.311837][T13849] FAULT_INJECTION: forcing a failure. [ 256.311837][T13849] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 256.397098][T13849] CPU: 1 UID: 0 PID: 13849 Comm: syz.0.2787 Tainted: G W syzkaller #0 PREEMPT(full) [ 256.397137][T13849] Tainted: [W]=WARN [ 256.397146][T13849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 256.397158][T13849] Call Trace: [ 256.397164][T13849] [ 256.397172][T13849] __dump_stack+0x1d/0x30 [ 256.397208][T13849] dump_stack_lvl+0x95/0xd0 [ 256.397236][T13849] dump_stack+0x15/0x1b [ 256.397276][T13849] should_fail_ex+0x263/0x280 [ 256.397298][T13849] should_fail_alloc_page+0xf2/0x100 [ 256.397361][T13849] __alloc_frozen_pages_noprof+0x108/0x360 [ 256.397440][T13849] alloc_pages_mpol+0xb3/0x260 [ 256.397472][T13849] folio_alloc_mpol_noprof+0x39/0x80 [ 256.397538][T13849] swap_cache_alloc_folio+0x8b/0x120 [ 256.397568][T13849] swap_cluster_readahead+0x36b/0x3d0 [ 256.397746][T13849] shmem_swapin_folio+0x951/0x1360 [ 256.397840][T13849] ? __rcu_read_unlock+0x4e/0x70 [ 256.397862][T13849] ? filemap_get_entry+0x392/0x3d0 [ 256.397888][T13849] shmem_get_folio_gfp+0x278/0xd60 [ 256.397917][T13849] ? __rcu_read_unlock+0x33/0x70 [ 256.398006][T13849] shmem_fault+0xf6/0x250 [ 256.398034][T13849] __do_fault+0xbc/0x200 [ 256.398132][T13849] handle_mm_fault+0x11d7/0x3020 [ 256.398171][T13849] do_user_addr_fault+0x3fd/0x1050 [ 256.398266][T13849] exc_page_fault+0x62/0xa0 [ 256.398297][T13849] asm_exc_page_fault+0x26/0x30 [ 256.398352][T13849] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 256.398375][T13849] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 256.398396][T13849] RSP: 0018:ffffc90003a5fd98 EFLAGS: 00050202 [ 256.398416][T13849] RAX: ffff888103baed78 RBX: 0000000000000028 RCX: 0000000000000028 [ 256.398433][T13849] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90003a5fdc8 [ 256.398519][T13849] RBP: 0000000000008933 R08: 000000000000053d R09: 0000000000000000 [ 256.398533][T13849] R10: 0001c90003a5fdc8 R11: 0001c90003a5fdef R12: ffffffff85e12758 [ 256.398548][T13849] R13: ffffffff85e12758 R14: ffffc90003a5fdc8 R15: 0000200000000000 [ 256.398567][T13849] _copy_from_user+0x6f/0xb0 [ 256.398676][T13849] sock_do_ioctl+0xe5/0x230 [ 256.398714][T13849] sock_ioctl+0x41b/0x610 [ 256.398740][T13849] ? mutex_lock+0x57/0x90 [ 256.398764][T13849] ? __pfx_sock_ioctl+0x10/0x10 [ 256.398798][T13849] __se_sys_ioctl+0xce/0x140 [ 256.398905][T13849] __x64_sys_ioctl+0x43/0x50 [ 256.398938][T13849] x64_sys_call+0x1563/0x3020 [ 256.398968][T13849] do_syscall_64+0x12c/0x370 [ 256.399029][T13849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.399050][T13849] RIP: 0033:0x7faecc89c629 [ 256.399065][T13849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.399081][T13849] RSP: 002b:00007faecb2b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.399152][T13849] RAX: ffffffffffffffda RBX: 00007faeccb16180 RCX: 00007faecc89c629 [ 256.399167][T13849] RDX: 0000200000000000 RSI: 0000000000008933 RDI: 0000000000000005 [ 256.399181][T13849] RBP: 00007faecb2b5090 R08: 0000000000000000 R09: 0000000000000000 [ 256.399253][T13849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.399266][T13849] R13: 00007faeccb16218 R14: 00007faeccb16180 R15: 00007fff9d69d1b8 [ 256.399288][T13849] [ 256.941253][T13843] lo speed is unknown, defaulting to 1000 [ 257.150626][T13843] chnl_net:caif_netlink_parms(): no params data found [ 257.259345][T13843] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.289155][T13843] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.322218][T13843] bridge_slave_0: entered allmulticast mode [ 257.358809][T13843] bridge_slave_0: entered promiscuous mode [ 257.383934][T13843] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.402712][T13843] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.418195][T13843] bridge_slave_1: entered allmulticast mode [ 257.425204][T13843] bridge_slave_1: entered promiscuous mode [ 257.444265][T13843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.455143][T13843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.464527][T13884] loop8: detected capacity change from 0 to 2048 [ 257.483952][T13884] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.499536][T13843] team0: Port device team_slave_0 added [ 257.506506][T13843] team0: Port device team_slave_1 added [ 257.538527][T13843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.555164][T13843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.595746][T13843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.614269][T13843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.627289][T13843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.677750][T13843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.709694][T13889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2798'. [ 257.725138][T13843] hsr_slave_0: entered promiscuous mode [ 257.733799][T13843] hsr_slave_1: entered promiscuous mode [ 257.743827][T13843] debugfs: 'hsr0' already exists in 'hsr' [ 257.752058][T13843] Cannot create hsr debugfs directory [ 257.885264][T13892] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2805'. [ 257.930942][T13843] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 257.939573][T13843] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 257.948058][T13843] bridge0: port 5(netdevsim1) entered disabled state [ 258.047825][T13843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 258.057242][T13843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 258.066357][T13843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 258.075871][T13843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 258.092804][T13898] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 258.100417][T13898] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 258.108432][T13898] vhci_hcd vhci_hcd.4: default hub control req: 230f v0004 i0000 l3 [ 258.143165][T13843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.155614][T13843] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.165530][T13541] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.172721][T13541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.185012][T13541] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.192271][T13541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.241259][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.305640][T13843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.434535][T13843] veth0_vlan: entered promiscuous mode [ 258.452741][T13843] veth1_vlan: entered promiscuous mode [ 258.478165][T13843] veth0_macvtap: entered promiscuous mode [ 258.486529][T13843] veth1_macvtap: entered promiscuous mode [ 258.500539][T13843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.514424][T13843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.525960][T13547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.544846][T13547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.555817][T13547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.566239][T13547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.654644][T13939] binfmt_misc: register: failed to install interpreter file ./file0 [ 258.766380][T13954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2822'. [ 258.793077][T13956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2823'. [ 258.907769][T13968] binfmt_misc: register: failed to install interpreter file ./file0 [ 258.953572][T13970] loop2: detected capacity change from 0 to 512 [ 258.970750][T13970] EXT4-fs (loop2): orphan cleanup on readonly fs [ 258.970973][T13970] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 258.979034][T13970] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2829: invalid indirect mapped block 8 (level 2) [ 258.979710][T13970] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 258.979843][T13970] EXT4-fs (loop2): Remounting filesystem read-only [ 258.979984][T13970] EXT4-fs (loop2): 1 truncate cleaned up [ 258.980475][T13970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.015089][T13843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.213746][T13984] loop8: detected capacity change from 0 to 2048 [ 259.260030][T13984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.330981][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2832'. [ 259.469783][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.779148][ T3368] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 259.935251][T14016] netlink: 'syz.0.2842': attribute type 1 has an invalid length. [ 259.943920][T13548] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 260.026771][T14016] bond3: entered promiscuous mode [ 260.035563][T14016] bond3: entered allmulticast mode [ 260.049210][T14016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.138823][ T3368] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 260.517986][T14036] loop8: detected capacity change from 0 to 1024 [ 260.541784][T14036] EXT4-fs: Ignoring removed bh option [ 260.557034][T14036] EXT4-fs: Ignoring removed nobh option [ 260.620770][T14036] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.637115][T14010] loop5: detected capacity change from 0 to 1024 [ 260.678111][T14010] EXT4-fs: inline encryption not supported [ 260.687152][ T8819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.769638][T14048] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2853'. [ 260.959046][T13541] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 260.967562][T13541] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 260.980151][T14010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.088110][T13540] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.098643][T13540] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.113067][T10818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.148939][ T3368] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 261.206059][T13540] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.234863][T13540] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.319091][T14064] lo speed is unknown, defaulting to 1000 [ 261.394150][T13540] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.454493][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2864'. [ 261.537663][T13540] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.609994][T14098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2860'. [ 261.916685][T13540] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.960532][T13540] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 262.020688][T14064] chnl_net:caif_netlink_parms(): no params data found [ 262.160376][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 262.203335][T14105] bond_slave_0: entered promiscuous mode [ 262.209059][T14105] bond_slave_1: entered promiscuous mode [ 262.215732][T14105] macvtap1: entered promiscuous mode [ 262.228681][T14105] bond0: entered promiscuous mode [ 262.234115][T14105] macvtap1: entered allmulticast mode [ 262.240347][T14105] bond0: entered allmulticast mode [ 262.246077][T14105] bond_slave_0: entered allmulticast mode [ 262.252009][T14105] bond_slave_1: entered allmulticast mode [ 262.269890][T14105] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 262.287353][T14105] bond0: left allmulticast mode [ 262.305951][T14114] netlink: 'syz.8.2870': attribute type 1 has an invalid length. [ 262.308877][T14105] bond_slave_0: left allmulticast mode [ 262.327963][T14105] bond_slave_1: left allmulticast mode [ 262.338700][T14072] ================================================================== [ 262.341357][T14105] bond0: left promiscuous mode [ 262.346911][T14072] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 262.346954][T14072] [ 262.346960][T14072] read-write to 0xffffffff86c09a00 of 8 bytes by interrupt on cpu 1: [ 262.372203][T14072] tick_do_update_jiffies64+0x113/0x1c0 [ 262.377800][T14072] tick_nohz_handler+0x8d/0x3d0 [ 262.381231][T14105] bond_slave_0: left promiscuous mode [ 262.382671][T14072] __hrtimer_run_queues+0x218/0x4f0 [ 262.382699][T14072] hrtimer_interrupt+0x269/0x810 [ 262.388130][T14105] bond_slave_1: left promiscuous mode [ 262.393315][T14072] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 262.393346][T14072] sysvec_apic_timer_interrupt+0x32/0x80 [ 262.415359][T14072] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 262.421372][T14072] __sanitizer_cov_trace_pc+0x8/0x70 [ 262.426768][T14072] __netif_receive_skb_list_core+0x25/0x500 [ 262.432707][T14072] netif_receive_skb_list_internal+0x47d/0x5f0 [ 262.439059][T14072] napi_complete_done+0x19c/0x3f0 [ 262.444095][T14072] virtnet_poll+0x1bfb/0x2080 [ 262.448783][T14072] __napi_poll+0x61/0x330 [ 262.453137][T14072] net_rx_action+0x452/0x930 [ 262.457739][T14072] handle_softirqs+0xb9/0x2a0 [ 262.462457][T14072] __irq_exit_rcu+0x39/0xc0 [ 262.466962][T14072] common_interrupt+0x83/0x90 [ 262.471649][T14072] asm_common_interrupt+0x26/0x40 [ 262.476686][T14072] preempt_schedule_irq+0x28/0x50 [ 262.482237][T14072] raw_irqentry_exit_cond_resched+0x4b/0x60 [ 262.488226][T14072] irqentry_exit+0x91/0x520 [ 262.492736][T14072] sysvec_apic_timer_interrupt+0x44/0x80 [ 262.498460][T14072] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 262.504442][T14072] sctp_outq_tail+0x52/0x3c0 [ 262.509121][T14072] sctp_do_sm+0x2532/0x3330 [ 262.513688][T14072] sctp_primitive_SEND+0x74/0x90 [ 262.518638][T14072] sctp_sendmsg_to_asoc+0xdeb/0xf50 [ 262.523856][T14072] sctp_sendmsg+0x13b9/0x1d60 [ 262.528544][T14072] inet_sendmsg+0xc5/0xd0 [ 262.532887][T14072] __sys_sendto+0x3f4/0x4d0 [ 262.537401][T14072] __x64_sys_sendto+0x76/0x90 [ 262.542259][T14072] x64_sys_call+0x2d35/0x3020 [ 262.546957][T14072] do_syscall_64+0x12c/0x370 [ 262.551567][T14072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.557575][T14072] [ 262.559907][T14072] read to 0xffffffff86c09a00 of 8 bytes by task 14072 on cpu 0: [ 262.567535][T14072] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 262.573800][T14072] count_shadow_nodes+0x6a/0x230 [ 262.578777][T14072] do_shrink_slab+0x63/0x6a0 [ 262.583381][T14072] shrink_slab+0x538/0x880 [ 262.587891][T14072] shrink_node+0x6bc/0x2130 [ 262.592392][T14072] do_try_to_free_pages+0x408/0xc80 [ 262.597603][T14072] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 262.603591][T14072] try_charge_memcg+0x37e/0xa10 [ 262.608504][T14072] obj_cgroup_charge_pages+0x23/0xc0 [ 262.613838][T14072] __memcg_kmem_charge_page+0x9e/0x170 [ 262.619307][T14072] __alloc_frozen_pages_noprof+0x18a/0x360 [ 262.625127][T14072] alloc_pages_mpol+0xb3/0x260 [ 262.629994][T14072] alloc_pages_noprof+0x8f/0x130 [ 262.635032][T14072] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 262.640939][T14072] __kvmalloc_node_noprof+0x3d4/0x650 [ 262.646320][T14072] ip_set_alloc+0x24/0x30 [ 262.650655][T14072] hash_netiface_create+0x282/0x740 [ 262.656047][T14072] ip_set_create+0x3cf/0x970 [ 262.660645][T14072] nfnetlink_rcv_msg+0x509/0x5d0 [ 262.665610][T14072] netlink_rcv_skb+0x123/0x220 [ 262.670384][T14072] nfnetlink_rcv+0x167/0x1720 [ 262.675068][T14072] netlink_unicast+0x5c0/0x690 [ 262.679846][T14072] netlink_sendmsg+0x5c8/0x6f0 [ 262.684705][T14072] ____sys_sendmsg+0x5af/0x600 [ 262.689475][T14072] ___sys_sendmsg+0x195/0x1e0 [ 262.694163][T14072] __x64_sys_sendmsg+0xd4/0x160 [ 262.699131][T14072] x64_sys_call+0x194c/0x3020 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 262.703851][T14072] do_syscall_64+0x12c/0x370 [ 262.708514][T14072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.714522][T14072] [ 262.716854][T14072] value changed: 0x00000000fffff111 -> 0x00000000fffff112 [ 262.723961][T14072] [ 262.726284][T14072] Reported by Kernel Concurrency Sanitizer on: [ 262.732613][T14072] CPU: 0 UID: 0 PID: 14072 Comm: syz.0.2859 Tainted: G W syzkaller #0 PREEMPT(full) [ 262.743553][T14072] Tainted: [W]=WARN [ 262.747358][T14072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.757421][T14072] ================================================================== [ 262.806680][T14114] bond6: entered promiscuous mode [ 262.840921][T14114] bond6: entered allmulticast mode [ 262.899040][T14114] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.043010][T10818] bridge0: port 3(syz_tun) entered disabled state [ 263.058874][T10818] syz_tun (unregistering): left allmulticast mode [ 263.065377][T10818] syz_tun (unregistering): left promiscuous mode [ 263.078517][T10818] bridge0: port 3(syz_tun) entered disabled state [ 263.108578][T13540] vlan0: left promiscuous mode [ 263.113382][T13540] geneve0: left promiscuous mode [ 263.118522][T13540] bridge0: port 1(vlan0) entered disabled state [ 263.213270][T13540] erspan0 (unregistering): left promiscuous mode [ 263.225929][T13540] team0: Port device erspan0 removed [ 263.410289][T13540] bond1 (unregistering): Released all slaves [ 263.418269][T13540] bond2 (unregistering): Released all slaves [ 263.426886][T13540] bond3 (unregistering): Released all slaves [ 263.435057][T13540] bond4 (unregistering): Released all slaves [ 263.443896][T13540] bond5 (unregistering): Released all slaves [ 263.454596][T13540] bond6 (unregistering): Released all slaves [ 263.463045][T13540] bond0 (unregistering): Released all slaves [ 263.471745][T13540] bond7 (unregistering): Released all slaves [ 263.480538][T13540] bond8 (unregistering): Released all slaves [ 263.488976][T13540] bond9 (unregistering): Released all slaves [ 263.497207][T13540] bond10 (unregistering): Released all slaves [ 263.505440][T13540] bond11 (unregistering): Released all slaves [ 263.514747][T13540] bond12 (unregistering): Released all slaves [ 265.139140][T13540] tipc: Left network mode [ 265.145062][T13540] hsr_slave_0: left promiscuous mode [ 265.150802][T13540] hsr_slave_1: left promiscuous mode [ 265.159020][T13540] veth1_macvtap: left promiscuous mode [ 265.164510][T13540] veth0_macvtap: left promiscuous mode [ 265.207563][T13540] ±ÿ (unregistering): left promiscuous mode [ 265.214332][T13540] team0 (unregistering): Port device 26±ÿ removed [ 265.223396][T13540] team_slave_0 (unregistering): left promiscuous mode [ 265.230551][T13540] team0 (unregistering): Port device team_slave_0 removed [ 265.543613][T13540] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.591695][T13540] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.640960][T13540] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.701378][T13540] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.787971][T13540] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.798836][T13540] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 265.857729][T13540] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.869333][T13540] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 265.922788][T13540] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.933188][T13540] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 265.980958][T13540] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.992419][T13540] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 266.262641][T13540] bridge_slave_1: left allmulticast mode [ 266.269124][T13540] bridge_slave_1: left promiscuous mode [ 266.274795][T13540] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.282873][T13540] bridge_slave_0: left allmulticast mode [ 266.288985][T13540] bridge_slave_0: left promiscuous mode [ 266.294712][T13540] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.303390][T13540] bridge_slave_1: left allmulticast mode [ 266.309502][T13540] bridge_slave_1: left promiscuous mode [ 266.315209][T13540] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.323197][T13540] ¾x9ÿ: left allmulticast mode [ 266.328006][T13540] ¾x9ÿ: left promiscuous mode [ 266.333057][T13540] bridge0: port 1(1¾x9ÿ) entered disabled state [ 266.341318][T13540] vlan2: left promiscuous mode [ 266.346081][T13540] geneve0: left promiscuous mode [ 266.351417][T13540] bridge0: port 3(vlan2) entered disabled state [ 266.359334][T13540] bridge_slave_1: left allmulticast mode [ 266.365039][T13540] bridge_slave_1: left promiscuous mode [ 266.371429][T13540] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.379323][T13540] bridge_slave_0: left allmulticast mode [ 266.385129][T13540] bridge_slave_0: left promiscuous mode [ 266.391360][T13540] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.501036][T13540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.511449][T13540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.521005][T13540] bond0 (unregistering): Released all slaves [ 266.551529][T13540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.561863][T13540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.571647][T13540] bond0 (unregistering): Released all slaves [ 266.579603][T13540] bond1 (unregistering): Released all slaves [ 266.587894][T13540] bond2 (unregistering): Released all slaves [ 266.595727][T13540] bond3 (unregistering): Released all slaves [ 266.604476][T13540] bond4 (unregistering): Released all slaves [ 266.730764][T13540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.740272][T13540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.749647][T13540] bond0 (unregistering): Released all slaves [ 266.756938][T13540] bond1 (unregistering): Released all slaves [ 266.765507][T13540] bond2 (unregistering): Released all slaves [ 266.773650][T13540] bond3 (unregistering): Released all slaves [ 266.782450][T13540] bond4 (unregistering): Released all slaves [ 266.791560][T13540] bond5 (unregistering): Released all slaves [ 266.799928][T13540] bond6 (unregistering): Released all slaves [ 266.840200][T13540] bond0 (unregistering): Released all slaves [ 266.891128][T13540] tipc: Left network mode [ 266.897180][T13540] IPVS: stopping backup sync thread 12605 ... [ 266.907887][T13540] hsr_slave_0: left promiscuous mode [ 266.913895][T13540] hsr_slave_1: left promiscuous mode [ 266.921264][T13540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.929533][T13540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.937726][T13540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.945456][T13540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.956302][T13540] hsr_slave_0: left promiscuous mode [ 266.965052][T13540] hsr_slave_1: left promiscuous mode [ 266.971052][T13540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.979314][T13540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.986875][T13540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.994705][T13540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.004320][T13540] hsr_slave_0: left promiscuous mode [ 267.010164][T13540] hsr_slave_1: left promiscuous mode [ 267.015649][T13540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.023663][T13540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.035944][T13540] veth1_macvtap: left promiscuous mode [ 267.041528][T13540] veth0_macvtap: left promiscuous mode [ 267.047223][T13540] veth1_vlan: left promiscuous mode [ 267.053021][T13540] veth0_vlan: left promiscuous mode [ 267.058949][T13540] veth1_macvtap: left promiscuous mode [ 267.064556][T13540] veth0_macvtap: left promiscuous mode [ 267.070329][T13540] veth1_vlan: left promiscuous mode [ 267.075600][T13540] veth0_vlan: left promiscuous mode [ 267.167292][T13540] team0 (unregistering): Port device team_slave_1 removed [ 267.177264][T13540] team0 (unregistering): Port device team_slave_0 removed [ 267.232083][T13540] team0 (unregistering): Port device team_slave_1 removed [ 267.242052][T13540] team0 (unregistering): Port device team_slave_0 removed [ 267.296358][T13540] team0 (unregistering): Port device team_slave_1 removed [ 267.305711][T13540] team0 (unregistering): Port device team_slave_0 removed