last executing test programs: 35.385941198s ago: executing program 1 (id=1425): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x8040) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044000}, 0x4c004) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) fadvise64(r0, 0x0, 0x40000000000, 0x5) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x18}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000500)) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r6, &(0x7f0000003000)=[{{&(0x7f0000001a80)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002f00)=[{&(0x7f0000001ac0)="9a71636414fed041e3e5ca8286c1628bbb7adcd2fa4eda109c953442fb57c3d4d9d47ef714c788d1dfeacc75c873e2ce230b720290ee2bbbcd3a2deb63a28c07d3341a48ef333f8fea907ec5af1e68d53d950c1d2de5b2c42908743b0e8a205aef4147505c7cdbba641419f720aa3830ca2ec7f2226b4b97def3aa6c5ed7a07579dddb85d4c38032abd6bbdb31fe126f8c5a5b5a936921a64aee9089f09eada3b119b29f923bb0d79ec2f8817b96bb3d359b7d55777ff0b037c3fb076583457835a48972b548fc708a1e6d966a463013f89a03", 0xd3}, {&(0x7f0000001bc0)="62d519a1beba3afb04d8c7da9bef076edeeb1c042d8d23a919af2db65a36fe7b36751351c9996b44b74d72c2a9cb3e", 0x2f}, {&(0x7f0000001c00)="2efaa81780e655c7a6cb2807bce23dc8a519ae98ca751931e384058708ad330afc35f75dc646e76da1ade8b84b3d480e798a06e4e04b90b479401fc78098c5413644358f495d19f8930f1b993e7ff46591c69ca138eb94be1c88a8511127e0751bd45cb6092252100c441ef74446079880d1a99b594f2ac86d3bc85c51da81adc638e739ef00edca5fb580c1fa8a38134e70b28cc934cb6a816c6f4b65571dbb228d7cc5182ea2006cdd81eb109a2b68b684f68893eefa1a26", 0xb9}, {&(0x7f0000001cc0)="17a932c0087e734730a779477617b2dae6374a050cd67cd8013734afaad0b9be80662e1bbf58acd9d747fe5099fb93bf5dc64067c09357cf6a3cb8c2b2ae01560362958a24e9307aa92929246b093d1d77ee2ea7001cfe32d5c9fef5ea0377b9f69469e96f866c9b2ecd", 0x6a}, {&(0x7f0000001d40)="2eb449b53b3d66f4cc8bf26464be817441a83e826a8b513b4ed3744e775c0cc92295ac868c679df1a2dccec4f131b369f7732f980ec1d74b5c4923639b765039f95ba3a0ec377c0a4f17580eccf72be58a3b33bfcd18e6824d47710f3b1d4ed4df3e594a7d954fe8f4244bdc7c07c1fe7afd70f53a1923a4cd3661aa320908ff8e899c31181b47c396c88b5039899242b42ddd68ec548f7ccf7b1633cb1ec549ee88ced5634010b4b2ead21fd01cf225519c869d6769f6dbc8b1add613a7c009052a4d27a20d79094fe19d7785ebb0694b9b26fb0e9ede29b914d365257aed5d2f0379d5f413cc4e1ff195fdeea25fc8f57b", 0xf2}, {&(0x7f0000001e40)="5eb8c56eb2697806ddf68feec154e85869838a2d40a69633a5940f8d1dbcb79427596b2259ae9b7e13eb38ce78a7bab9e09ea205e73fb905c5cfce73eed35f034695979ab95db41ab8d77f92fe2f12d6d766f1f9f414997ccd5ad43e806450d3f634b201addd9ef63a98d9cd43877107db9170", 0x73}, {&(0x7f0000001ec0)="bca0f0978ef3a6bef10fbecc931d836ea8f5749bd01a143cf0e99faae9416e6f4c3ff02591a8df", 0x27}, {&(0x7f0000001f00)="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", 0x1000}], 0x8, &(0x7f0000002f80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010102, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3fc0000}}], 0x80}}], 0x1, 0x0) 35.313967272s ago: executing program 1 (id=1426): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 35.221294976s ago: executing program 1 (id=1427): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mlockall(0x7) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b99c5dc7e7f807065d4b6c575b6bf892f", 0x12}], 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 32.775943605s ago: executing program 0 (id=1442): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f00000007c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) shutdown(r1, 0x1) unshare(0x22020600) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 32.411391664s ago: executing program 0 (id=1445): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) 32.410676814s ago: executing program 1 (id=1446): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200088e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable}, {@errors_remount}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000780)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x88, 0x0, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffffd, @loopback, 0x1010}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x206}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x43479812}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8}]}]}]}, 0x88}}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_emit_ethernet(0x65, &(0x7f0000000300)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@generic={0x8864, "ec2d8fae067b0c3b40b261d9da89055068eae40c31e7a14c10c12c5579d42ce648d319efb324e7a7902f77e0b5a04e4583cd748cfdf2ae5f88a24313d40a25b8244b15e3b9590c0f5dffbd5a54f66b545800e1"}}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES16], 0x3, 0x7be, &(0x7f00000005c0)="$eJzs3U1oHPfZAPBn9EqxooAJeUtqjOOM7RRs6iq7q0SpyCHdrEbyJNKu2F0Vm1KSEMvFWPkgJrTxoYkvST8pPfWY5hpy6a3QQ6GHtqdCc+ilh0Igp5JCA6WlFFRmdtdeyfpyLNlJ+vuJ6D8788x/npmdzLOz1swEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBJY7ZSqSYHI2L5bLq1xmy7tbjN9EF/v17XbLPciKT4L8bH41Bv1KEvXJ98f/HreBzpvToS4yODCfc+/v+jI4P5t0nokzq2y7gk4o0ioUvPra6uvLIPidxGP/jVTc/yr7Xi93zWzDutfLE+n6V5p5XOTE9XHj4z10nn8oWsc67TzRbTRjurd1vt9GTjVFqdmZlKs8lzreXm/Gx9IRuMfOwrtUplOn1qcimrtzut5sNPTXYaZ/KFhbw5X8bUKt+OIuaxYkd8Ou+m3ay+mKYXLq6uTO2UahFUXTfmwLod58hD93746gcfX1wpdsitOkn6+1+tWq3VqtOPzjz6WKUyWqvU1o+obBDXImIkoojYl52Wz5A9OnLDrRsp6v/HScRC5NGM5TgbaaQxUv6+/jMW4zEb7WjFYvH6T2Mbpt9Q/7/08N/+sN1yh+v/oMofuj75cJT1/2jv1dEYL5rxuHLPuvpfHJQ35rF/P833etkMj7scr8WVuBTPxWqsxkq8chvz+UQ/I3vb33xk0Yw8OtGKPBajXo5J+2PSmInpmI5KPBNnYi46kcZc5LEQWXTiXHR+ONp/vxvRjizq0Y1WtCONk9GIU5FGNWZiJqYijSwm41y0YjmaMR+zUS97uRAXy+0+tSGv+7/7bPLGHz98uxi+FlTdZkWS4sNcEfT3bYL6xfzB2FX9v7u/busj1P/Pm/H++7zb+L04bMOeWCvP/0fvdBoAAADAPkrKb9+TiBiLB8qhuXwh+8adTgsAAADYQ+XfNR8pmrFi6IFIivP/yiaR79/23AAAAIC9kZTX2CURMREP9oYGl0tt9iUAAAAA8BlU/vv/0aKZiHi9HOH8HwAAAD5nvjd0j/0YvsfuB3f179HbWTqQ/F8/eunsQ8kL9WKo/kJ/XL/5+rUeu3OHk4P9TspmevTKPUlEjDayI8ng7pf/OdBrPyp7OHz9BoQb87h2r992eyy5unUCsX0C5av4URzrxRw732vPD6b0ljIxly9kk43WwuPVpP/lSPfVFy9+J6JY+vebiweTuHBxdWXy+ZdWz5e5XC16ufpC//bwyU3kstbfAvHA5ms8Vl6I0V/uRG+5leH17z8SYWT7ZSbDy3wzjvdijk/02on16z9eLLM6+Xg16vWDI93sbPfVtaG172dRvcU1fzNO9GJOnDzRazbJorYuixdvzKI2nMXutsWus3j72Otn//HbVpJN7ZTF1C1mAXCnXCjv+nO9Ct1dVqF/r/UU9X9D3R3c1fymjnIXrn/KGMw/VOtGY2+q+5txshdzsvd5YvTwJnWlsskR/eWLL/+uf0R/5N2f/fybR3//i62r21qyfRbvxqleYL+J+35zQxZFF9Vyy/54Q1V9p5jjnS2ramehlsRYjPSmDCavfGvlxVptarrySKXyaC3Gyo8K/UbtAWATOz5jZxdP4Xlk87PqGFS8+679ScFkPB8vxWqcj9Pl1QYR8eDmvU4M/RnC6R3OWieGnvByeodzy+uxtY2xB04ksUXs1NAW++JPy+af+/eeAMB+O75DHd5N/T+9w3n3+lp+qvfg3MHZcWxdyzfz1f3eIADwPyBrf5RMdN9K2u186ZnqzEy13j2Tpe1W4+m0nc/OZ2ne7Gbtxpl6cz5Ll9qtbqsx+OJ4NuukneWlpVa7m8612ulSq5OfLZ/8nvYf/d7JFuvNbt7oLC1k9U6WNlrNbr3RTWfzTiNdWn5yIe+cydrlzJ2lrJHP5Y16N281005rud3IJtO0k2VDgfls1uzmc3kx2EyX2vlivX01IhaWF7N0Nus02vlSt9XrcLCsvDnXai+W3U7euPp/vd3bGwA+DS6/duXSc6urK6+sH1hLNo7ZfODPu4i5HLF2p1cTABgyXKUBAAAAAAAAAAAAAIBPpxsv1yvG7nhJ3/DAWNxE8IaBA/FJ5vr8Dnz5vd7bshcd3ko/d697T+/q7yx3fvvc9MCzTzxxaauYJ18/dOYvWcTO/Wz+f8rle27Ye+OtgxF3/fInvTFfu11r+n701iJGb2r2tWSbmDt2SAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf03AAD//2tvTu0=") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r1 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='status\x00') pread64(r2, &(0x7f0000000140)=""/25, 0x19, 0x4) 32.339684947s ago: executing program 0 (id=1447): get_mempolicy(0x0, &(0x7f0000000100), 0x80000000, &(0x7f000038d000/0x4000)=nil, 0x6) timer_create(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000002c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',map=normal,nocompress,showassoc,map=acorn,map=normal,block=0x000008,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) (fail_nth: 1) 31.915251168s ago: executing program 1 (id=1450): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYBLOB="0000800000000000180034800500"], 0x38}, 0x1, 0x300}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRESOCT=r1, @ANYBLOB="000000000000080064000000001c00028005001d000500000005000100049e2a474c985ee4ff71c04ef5bd024cadfa6d1a1f59e2871ac2b930bd437a03981f9bb5585bad418d6be98f76b09b892042900342daa97d03c41a1f488705fe156a7b79f97e77cf29538d30e56d7cc96f53c7a19878d479382f4fede300d34fd6276355bec6ff9f98b951000c502edab2bbf3030d7714c737ff2cf43b2056335161db81256abdc32e8a14b49878c674f3a37327ee89eb96"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x140000c5) 30.579263283s ago: executing program 0 (id=1451): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/104, 0x68) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x11, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00", @ANYRES32=0x0], 0x40}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x4620, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) readlink(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x8, @empty, 0x30}}, 0x3, 0x8621}, &(0x7f00000006c0)=0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000840)={[{@overriderock}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8}, {@hide}, {@nocompress}, {@utf8}]}, 0xff, 0x579, &(0x7f0000002100)="$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") openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x6) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0) 30.323461396s ago: executing program 0 (id=1453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0xb}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14}}, 0x64}}, 0x0) 30.323047515s ago: executing program 1 (id=1454): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x3, 0x3, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1, 0xffffffffffffffff}, 0x102261, 0x10000, 0x8, 0x6, 0x20005, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x3, {{0x2, 0x1}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8008001}, 0x20048851) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shmget(0x1, 0x4000, 0x800, &(0x7f00000e7000/0x4000)=nil) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 30.322586976s ago: executing program 32 (id=1454): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x3, 0x3, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1, 0xffffffffffffffff}, 0x102261, 0x10000, 0x8, 0x6, 0x20005, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x3, {{0x2, 0x1}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8008001}, 0x20048851) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shmget(0x1, 0x4000, 0x800, &(0x7f00000e7000/0x4000)=nil) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 29.965815313s ago: executing program 0 (id=1459): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff81}]}, 0x78}}, 0x41) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = accept(r1, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000140)="15", 0x1, 0x90, 0x0, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000325000/0x3000)=nil, 0x3000) 29.965302343s ago: executing program 33 (id=1459): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff81}]}, 0x78}}, 0x41) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = accept(r1, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000140)="15", 0x1, 0x90, 0x0, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000325000/0x3000)=nil, 0x3000) 21.112276046s ago: executing program 6 (id=1460): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200088e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable}, {@errors_remount}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000780)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x88, 0x0, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffffd, @loopback, 0x1010}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x206}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x43479812}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8}]}]}]}, 0x88}}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_emit_ethernet(0x65, &(0x7f0000000300)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@generic={0x8864, "ec2d8fae067b0c3b40b261d9da89055068eae40c31e7a14c10c12c5579d42ce648d319efb324e7a7902f77e0b5a04e4583cd748cfdf2ae5f88a24313d40a25b8244b15e3b9590c0f5dffbd5a54f66b545800e1"}}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES16], 0x3, 0x7be, &(0x7f00000005c0)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r1 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='status\x00') pread64(r2, &(0x7f0000000140)=""/25, 0x19, 0x4) 20.652609809s ago: executing program 6 (id=1507): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) syz_clone(0xa6a08100, 0x0, 0xe8fa47399aacfb5c, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x1a, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000087000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x23}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) 19.00029027s ago: executing program 5 (id=1525): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003500)=@newchain={0x1c, 0x1e, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x3, 0x8, 0x0, {0x6, 0x1, 0xfff, 0x748c, 0x1, 0xf}, {0x4c, 0x1, 0x0, 0xfffb, 0x2, 0x4}, 0x9, 0xbf, 0xc}}]}]}}]}, 0x74}}, 0x44004) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xb}, {0xffe0, 0xa}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfe, 0x4e, 0xfc, 0x2, 0x1, 0xfffffffa, 0x2b}}, {0x4}}]}]}, 0x48}}, 0x0) 18.929049624s ago: executing program 6 (id=1526): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000003}}, './file0\x00'}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x400000000000008) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) r3 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r3, &(0x7f0000004c40), 0x0, 0x0, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a0000800000000", 0x13) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000380)={{0x32, @loopback, 0x4e21, 0x1, 'rr\x00', 0x21, 0xf, 0x4d}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x4e23, 0x3, 0x200, 0x0, 0x5}}, 0x44) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000008480000911175000000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@delalloc}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0x8000c61) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1d, r4}) 18.901794214s ago: executing program 34 (id=1526): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000003}}, './file0\x00'}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x400000000000008) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) r3 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r3, &(0x7f0000004c40), 0x0, 0x0, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a0000800000000", 0x13) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000380)={{0x32, @loopback, 0x4e21, 0x1, 'rr\x00', 0x21, 0xf, 0x4d}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x4e23, 0x3, 0x200, 0x0, 0x5}}, 0x44) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000008480000911175000000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@delalloc}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0x1, 0x8000c61) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1d, r4}) 18.858584887s ago: executing program 5 (id=1528): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002005c0001000058"], 0xac}}, 0x4000) r1 = socket(0x26, 0x3, 0x8) r2 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000100), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x28}, 0x8080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000018c0)=@delchain={0x13c0, 0x65, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {0x5, 0xe}, {0xfff1, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1370, 0x2, [@TCA_CGROUP_POLICE={0x88c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x8, 0x100, 0x6, 0x0, 0x9, 0xf80, 0x800, 0x4, 0x7, 0x3, 0x9, 0x8001, 0x5, 0xce7, 0x7, 0x355, 0x10000, 0x5, 0x7, 0x8, 0xffff1621, 0x1, 0x5, 0xe6, 0x6, 0x9, 0x7, 0x8, 0x9, 0x7, 0x6, 0x4, 0x0, 0x9, 0x7, 0x81, 0xf7, 0x0, 0x9, 0x511, 0x4, 0x9, 0x6, 0x34a, 0xff, 0x7, 0x0, 0x8, 0xf, 0x2, 0x1, 0x1, 0x9, 0x41, 0x401, 0xf, 0x3, 0x4, 0x7f, 0x9, 0x7, 0x4, 0x0, 0x12eb, 0x0, 0x2, 0x5, 0x80000000, 0xffffff80, 0x6, 0x9, 0x6, 0x8, 0x2, 0x5, 0x9, 0x7, 0x4, 0x8, 0x3f4f, 0x9, 0x7, 0x7, 0x47d4c690, 0xffffffff, 0x8, 0x7d5, 0x6, 0x1, 0x1, 0x80000001, 0x1, 0x4, 0xe6, 0x7fff, 0x3, 0x0, 0x2, 0x6, 0x8, 0x400, 0x4, 0x5, 0x101, 0xb5, 0x3, 0x8, 0xffff0001, 0x0, 0x7, 0x5, 0xdc00, 0x9, 0x401, 0x6, 0x6, 0x5, 0x1, 0x0, 0xb, 0x7, 0x7, 0x1ff, 0x10, 0x7fffffff, 0x7, 0x6, 0x7, 0x6, 0x100000, 0x8001, 0xfffffffa, 0x0, 0x4, 0x3, 0x2, 0xa, 0x7fff, 0xff, 0x7, 0x9, 0xfffffffe, 0x1, 0x366ce443, 0x1, 0x300000, 0x100, 0x8990, 0xfd8, 0x80000000, 0x3, 0x2, 0x0, 0xb, 0x1, 0x7f, 0x1, 0x54c, 0x6ed988dc, 0x8ae, 0x1fc0, 0x7, 0x7ff, 0x5, 0xe7, 0x6, 0x5, 0x9, 0xff, 0x8, 0x2, 0x81, 0x2, 0x9, 0x80000000, 0x1, 0xc, 0x0, 0x6, 0x5, 0xa, 0x0, 0x2, 0x213, 0x9, 0x2, 0x7ff, 0x944, 0x9, 0x5, 0x3ff, 0x2, 0xb, 0x0, 0xf, 0x6, 0x1, 0x8, 0x8, 0x2b, 0x10, 0x800, 0x8, 0x28400, 0x3, 0x0, 0x1, 0x3, 0x9, 0x3, 0x7ff, 0x55, 0x77, 0x7, 0x3b6f, 0x8, 0x5, 0x5, 0x43d, 0x7, 0x6, 0x1ff, 0x9, 0x3, 0xc8c14e70, 0x0, 0x800, 0x4def, 0x1, 0x1, 0x10000, 0x7f, 0xfffff170, 0x81, 0x3de3, 0x7d0, 0x5, 0x5, 0x6, 0x5, 0x200, 0x4, 0x0, 0x80, 0x8, 0x9, 0x6, 0x5, 0x9, 0x0, 0x200, 0x365, 0x7, 0x39e, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x9, 0xb3, 0x0, 0x5, 0x0, 0x7, 0x4, 0x4, 0x5, 0x9, 0x9, 0x0, 0x8001, 0x87, 0x8, 0x0, 0x10, 0xf67c, 0x2, 0x3, 0x80000000, 0xf, 0xfffffffb, 0x16, 0x1, 0x54af, 0x400, 0x137, 0xa, 0x5c32, 0x4, 0x50a1, 0x10001, 0x5, 0x8, 0xb8, 0x2, 0x7, 0x8000, 0x9, 0x18, 0x2, 0x8001, 0xd481, 0x8f, 0xcb, 0x400, 0x9, 0x3, 0x4c8d, 0x3, 0xffffffff, 0xffffffff, 0x2, 0x95f, 0x6, 0xffffffff, 0x1, 0xffff, 0x9, 0xb7a45517, 0x8, 0x6, 0x8, 0x101, 0x5, 0x9c48, 0x10000, 0x9f, 0x7, 0x1, 0x6, 0x1, 0xfffffffa, 0x5, 0x9, 0x1, 0x5, 0x4, 0x1, 0x3, 0x0, 0x2, 0xd91a, 0x4, 0x101, 0x0, 0x9, 0x39, 0x7, 0x100, 0x91f9, 0xfffffffa, 0xc6, 0x8, 0x1000, 0x1000, 0xa, 0x6, 0x4, 0x2, 0x7fff, 0x1, 0x8, 0x1000, 0x4, 0x8, 0x1ff, 0x8, 0x3, 0x228, 0x8, 0x10001, 0x3, 0xa, 0x7fff, 0x5, 0x9, 0x9, 0x5, 0x8, 0x2, 0x5, 0x10, 0xfc, 0x5, 0x5, 0x7fffffff, 0x3, 0x2, 0x10, 0x2, 0x200, 0x5, 0x7, 0x2, 0x1, 0x1, 0x2, 0xa, 0x101, 0x4, 0x40, 0xa01, 0x80000001, 0x8, 0x8, 0x81, 0x4, 0x4, 0x9, 0x7, 0x5, 0x40000000, 0x3, 0xd57, 0x0, 0x1ed, 0x100, 0xffff4783, 0x1, 0x7f5c, 0x6, 0x5, 0x0, 0x2, 0x45, 0x5, 0x0, 0x9, 0x0, 0x2, 0xfffffffd, 0x463, 0x7, 0x4, 0x5, 0x9, 0x0, 0xd, 0x9, 0x4, 0x101, 0x80000000, 0x4, 0x36, 0x4, 0xe, 0x4, 0x1, 0x8, 0x43d1, 0xca, 0x7, 0xfffffff9, 0x4, 0xe, 0x27bd5cf9, 0x8, 0x5, 0xfd, 0x30000000, 0x6, 0x9, 0x2, 0x80000001, 0x717aafa7, 0x0, 0x2, 0x8001, 0x8000, 0x1266, 0x3, 0x9, 0x4, 0x7, 0x8, 0x1000, 0x0, 0x6, 0x7, 0xfffffe00, 0xfffffff5, 0x10000, 0x100, 0x9, 0xfffffffc, 0x9, 0x4, 0x5, 0x2, 0xa, 0x2, 0x1, 0xd74c, 0x1, 0xfffffffc, 0x9, 0x46aa, 0x8, 0xfff, 0x8000, 0x4, 0x80000000, 0x28000, 0x8, 0x0, 0xdf71, 0x3, 0xffffffff, 0xfffffffe, 0x3, 0x8, 0x401, 0x80000001]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x90}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x7fffffff, 0x401, 0x5b, {0x8, 0x0, 0x2, 0x0, 0x0, 0x8000}, {0x7a, 0x1, 0x5, 0x8001, 0xfff, 0x4}, 0x548, 0x2, 0x7}}]}, @TCA_CGROUP_EMATCHES={0x23c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6994}}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xd4, 0x2, 0x0, 0x0, {{0xd13, 0x0, 0x1000}, "35cfc128abf71a2aa745c175a2d2fc9b265b9caa83767cf1dad601de0c6967eb28661e981f5ba9f19a960979194543e5b81f7b407ee4a483ed8dd7d30aed17aa19f3eae7a7ae0aa049e5d44771cf3609d7e1222ef4b1b1e170dd55695025b10d5dc72e34b108725ce71b7394b0e0ebf9cd4a6faf158c6d116694024c4a54346bf7d5dca045e660cd26c896f698261b338bb8b3974b8d34382e259a0282665e34c62b91b8246914ae91074dd8966150c95a1decb090156cb962293a3c91524eaf2ef7bc6b84"}}]}, @TCA_EMATCH_TREE_LIST={0x12c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x88, 0x80, 0x0, 0x0, {{0x9, 0x4, 0x3ff}, [@TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="ae33fdbc633889", @TCF_META_TYPE_VAR="dc3fd501b1968f20", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x6, 0x2}, {0x4, 0x4, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x8, 0x2}, {0x8, 0xf, 0x1}}}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x1, 0x1}, {0x4, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x1b, 0x1}, {0x9, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x80, 0x0, 0x2}, {0x5, 0xaf, 0x2}}}]}}, @TCF_EM_IPT={0x38, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x5c}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x59}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x6}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfff7, 0x8, 0x7000}, {0x3, 0x6}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x3}, {{0x2, 0x0, 0x1}, {0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc7, 0x1, 0x2}, {0x6, 0xa1, 0x5, 0x6, 0x6, 0x0, 0x3}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x80, 0x1, 0xd}, {0x0, 0x6, 0x3ff, 0x3, 0x4, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x6}, {{0x2, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2f75}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0x32}, {0x101, 0x2e, 0x521, 0x2, 0x8, 0x1, 0x1}}}]}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}]}, @TCA_CGROUP_POLICE={0x898, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1143}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0xdd29, 0x8, 0x2, 0x9, 0x6, 0xcf52, 0x8000, 0xec6, 0x6, 0x7f, 0x9e0, 0x4, 0x4, 0x7, 0x9, 0x100, 0x644, 0x2, 0x1, 0x4, 0x8, 0x3, 0x1, 0x75865265, 0x800, 0x401, 0x4, 0x800, 0x1, 0xd10, 0x5, 0x5, 0x7, 0x735f, 0xc60, 0x101, 0x100, 0x5, 0x0, 0xcf3, 0x0, 0x10000, 0x281, 0x1000, 0x100, 0x5, 0x515b, 0x40, 0x2, 0xffffffff, 0x4, 0x5, 0xfff, 0xffff0000, 0x1, 0xfffffffb, 0xfe, 0xfffffff8, 0xdf8f9cc, 0xd3b5, 0x8, 0x7, 0x3, 0x7, 0x8, 0xfd, 0x8, 0x3, 0xff000000, 0x10000, 0x6, 0x8, 0xe5b9, 0x7, 0xfffffffd, 0xe42b, 0x8001, 0x7ff, 0x4, 0x93, 0xa, 0x1, 0x8001, 0x4, 0xc, 0xff, 0xd, 0x9, 0x346, 0x2, 0x1, 0x1, 0x0, 0x4, 0x101, 0x0, 0xfffffff9, 0x101, 0x9, 0x3, 0x2, 0x8f9, 0x8, 0xf401, 0x8, 0x1, 0xffff7ea4, 0x8, 0x1ff, 0x2, 0x6, 0x19a00000, 0x6, 0x4, 0x8, 0x3, 0x0, 0xffff9043, 0x2, 0x80, 0x7c0, 0xffffffff, 0x5, 0x2, 0x7, 0x3, 0xf816, 0x192, 0xb, 0x401, 0x3, 0x0, 0x1, 0x6, 0x6, 0x5527, 0x2, 0x9, 0x1, 0x2, 0x3, 0x3, 0x10, 0x5, 0x7, 0x4, 0x1, 0x3, 0x4, 0x3, 0x100, 0x8, 0xdcf, 0x7fff, 0x2, 0x80, 0x400, 0x400, 0x101, 0xfffff473, 0xdd4, 0x0, 0xd, 0x4, 0x7, 0x0, 0x4, 0x1, 0x10, 0x9, 0x3, 0x2, 0x5, 0x3, 0x9, 0x4, 0x9, 0x8, 0x800, 0x7181, 0x10, 0x8, 0x4, 0x5, 0x4, 0x1, 0x9, 0x8, 0x5f5dbc9c, 0xfffffda1, 0x2, 0xb, 0xe, 0x0, 0x8516, 0x8, 0x80, 0x9, 0x3, 0x7, 0xffffffff, 0x4000, 0x0, 0x0, 0x4, 0x5, 0x3, 0x4, 0x0, 0x10, 0x9, 0xa7, 0x9, 0x557d041f, 0x3, 0xffffffff, 0x360ef38a, 0x4, 0x7, 0x5, 0x6, 0x7ff, 0x905, 0x7a4, 0x5, 0x37, 0xcfb6, 0x3, 0xd, 0x400, 0x280, 0x3, 0x5, 0x2, 0x8, 0xff, 0x36eb83cb, 0x10000, 0x62658858, 0xf, 0x80000001, 0x2, 0x6, 0x3, 0x101, 0x80, 0x3, 0x3, 0x7f, 0x9, 0x8, 0xff, 0x5, 0x1ff, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfa7, 0x6, 0x80000001, 0x2, 0x80, 0x1ff, 0x1, 0xe7a, 0x8000, 0x7, 0x2, 0x3, 0x200, 0x400, 0xffffff29, 0x9a, 0x7f, 0x9, 0x40, 0x7, 0x6, 0xe0, 0x718, 0x4767, 0xfffffffb, 0x3, 0x8001, 0x5929, 0xffffffff, 0x7, 0xffff, 0x5, 0x7fffffff, 0xe63, 0x80, 0x0, 0x0, 0xcc1, 0x2, 0x8, 0x0, 0xffffffff, 0xfffffbff, 0x2, 0x3, 0x6e, 0x7, 0x800, 0x5900000, 0x3, 0x10001, 0x0, 0x2, 0x0, 0x1, 0x6, 0x7, 0x61, 0x4, 0x9, 0x3, 0x3, 0x3, 0x61, 0x597, 0x9, 0x8, 0x2, 0x8, 0x7, 0x8, 0x0, 0x3d03, 0x2, 0x3, 0x0, 0x7f0, 0xa, 0x62, 0x101, 0x2, 0x1d1b, 0xa, 0x114, 0x1, 0x7, 0x9, 0x2200, 0x0, 0x4, 0x25, 0x1, 0xfd6, 0x5, 0xfffffff9, 0x4, 0x7fffffff, 0x39e8e06c, 0x9, 0xf, 0x800000, 0x6, 0x8000, 0x7772ce6e, 0x8000, 0x45cf, 0x2, 0x18000000, 0x0, 0x3, 0x5, 0x2731, 0x6, 0x5, 0x2, 0x1, 0x6, 0x9, 0x10001, 0x7, 0x6d362c36, 0x2, 0x7, 0x6, 0xfffffff9, 0x566, 0x5, 0xcdea, 0x8e, 0x3, 0x3, 0x7, 0x10000, 0x0, 0x1, 0x8000, 0x0, 0x2, 0x41, 0x0, 0x1, 0xc11b, 0xd, 0x6, 0x0, 0x100, 0x1, 0x6, 0x1000, 0x5, 0x3, 0x4, 0x100, 0x80000000, 0x6, 0x4, 0x1, 0x1, 0x8, 0xab, 0x2, 0x2, 0xfffffffa, 0x4, 0xfffffff8, 0x6, 0x80, 0x1, 0x800, 0x98, 0xfffffffc, 0x9, 0x3, 0x1, 0x6, 0x6, 0x8, 0x6, 0xffff8000, 0x400, 0x80, 0x2, 0xffffffff, 0x8, 0xb, 0x2, 0xc, 0x6, 0xfff, 0xc, 0x0, 0x1, 0x100, 0x7, 0x7, 0x9, 0x6, 0x4000000, 0x9, 0x0, 0x40000000, 0x3, 0xf80, 0x0, 0x2, 0x2, 0xf, 0x2, 0x200, 0xb, 0x7, 0xc, 0x10, 0x9, 0x80000000, 0x2, 0x7, 0xb4ec, 0x401, 0xffffffff, 0x5, 0x6, 0x64a7, 0x1d1, 0x4, 0x49, 0x7, 0x6, 0x0, 0xffff, 0x1ff, 0xbf, 0x7, 0xb, 0x9e, 0x6207, 0x2, 0x800, 0x9, 0x5, 0x9, 0xf57, 0x62, 0x1, 0x5, 0xc737, 0x8, 0x0, 0x1, 0xffffffff, 0x1ff, 0x2, 0x140000, 0x80000001, 0x2, 0x14]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x285, 0x0, 0x9, 0x63, 0x4, {0x3, 0xdc80acac6e18528f, 0xd, 0x5, 0xff, 0xfffff12e}, {0x8e, 0x0, 0x9, 0x9, 0xa, 0xffffff81}, 0x2, 0x80, 0x9e1b}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0xef, 0x401, 0x5, {0x1, 0x1, 0x1, 0xffff, 0x4, 0x40000}, {0x10, 0x0, 0x3, 0xc, 0xa5, 0x10000}, 0x100, 0x7fffffff, 0x30}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0x80, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x40100}, @TCA_RATE={0x6}]}, 0x13c0}, 0x1, 0x0, 0x0, 0x4000810}, 0x2000c00c) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000280)={[], [{@euid_lt}]}, 0x1, 0x632, &(0x7f0000001280)="$eJzs3c9rHNcdAPDvzEqyZauVXUqpTUsFPdhQvJZcU7c92e6hPhhqqA8h5GBhSY7w+geWDLZjsAw5JJBACLmG4Ev+gZBr0DXkFgKJbzkHnBCc5JAEb5jZWWuz2rU3kla78Xw+MDNvfmjf++7s2/dmZkcTQGlNZaM0Yl9EnEsiJlvWTURj5VSx3cOvb5/PhiTq9f9/lURSLGtu/6iY7s5GSeNvPj4Z8bvK+nyXbt66OFurN9yJOLx86erhpZu3Di1emr0wf2H+8syRfx49Nv2vmQ+3Js7dxfTU6f/96fWXX/zHwie1Q0kcj7OjL81FWxxbZarx7kYWYuvykYg4liU6vC+wnSrF53E0Iv4Qk1HJ5xomY/G1gRYO6Kt6pdE+1cfqQOkk0UwMuCDANmv2A5rH9v04Dh5mD05k4xsd4h8pjt535sdGux4mLUdG2dKIPVuQ/0pE/Hh7/9vZEF3OQ4xsQT5d878bEX/stP+TPP49eaRZ/GmkLX+XpaeLcxtZ+f6ziTIkLenePn93NpHbz/2S+Fv3Qxb/8WKaLT/Z5fWfdopnqm2+bPUPgMFYPVE05FlHJNbav6xn2Oz/RHv/p/5+fm2ove3aiO7tX7oFr/50ef9vpFP732zvd+ZteNrWD0ti5dsznV9ytH3B56+eerNb/lMt/b9syPJv9gV7sOmu4YO7Efvb4n8lf+uTx/s/6dD/zfp753rM47+ffnmq27pNxr9p9XsRBzoe/6z1SrNU2/XJJJrXJ4/OHF5YrM1PN8Yd8/jgoxfe7Zb/oOPP9v+uLvE/af9ny672mMd7Z+5daqR2rFs38dT40y/GkrN5aiwfr1WvseR0sUljcmN2efnakSeXpblNPp1pxH/wr53rf5f484OP8eZXZg+uPnfxYbd1m9z/j+o9bthNFv/cBvf/Gz3m8d3z1//cbd36+NfOSYxvNCgAAAAAAAAoqTS/Bpuk1cfpNK0WF95+H7vS2pWl5b8tXLl+eS7iYP57yNG0eaV7sjGfZPMzxe9hm/NH2ub/HhF7I+Ktyng+Xz1/pTY36OABAAAAAAAAAAAAAAAAAABgSOwu7v9/VDwP7JtKmlargy4VsG36+YA5YLip/1Beef3fnuetAUNG+w/l1bH++1KAUlDVobzUfygv9R/KS/2H8lL/oby61/91a+72uywAAAAAwJbZ+5fV+yMRsfLv8XzIjBXrRgdaMqDf1HEor8qgCwAMzOML/G7/h9Lpqf//ffHPAftfHGAAkpb0SjORdw7qT678q0nfywYAAAAAAAAAAAAANBzYt3o/cf8/lJLb/qC8Nnb/f2XjfwoMjU7/+t/jQKAcHONDyfVwEmBntxXu/wcAAAAAAAAAAACAbTORD0laLX4GPBFpWq1G/CYi9sRosrBYm5+OiN9GxGeV0R3Z/MygCw0AAAAAAAAAAAAAAAAAAADPmKWbty7O1mrz11oTP6xb8mwnmk88HZbytCYi6XsWabQtGY+IYYi9P4mRliVJxEq257filZPNf35iGN6fIjHgLyYAAAAAAAAAAAAAAAAAACihlnuPO9v/zjaXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC239rz//uXGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCv008BAAD//xS+O5U=") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0xfffffd23) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff97, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x87, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9c95df9e6286500d}, 0x0, 0x2, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) getpid() prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000040)=0x101) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10612, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x5}, 0x200, 0x1fb, 0x0, 0x5, 0x80008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000880)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@dax_never}, {@lazytime}, {@errors_continue}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 18.700177014s ago: executing program 5 (id=1529): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') lseek(r0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xa, 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x3a00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}}) r4 = fsmount(r2, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, 0x0, 0x0) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @remote}, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') unlinkat(r4, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f00000001c0)=r6}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f00004b4000/0x4000)=nil, 0x4000, 0x8, 0x10, r4, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x8008551d, &(0x7f0000000600)={0xdea7, 0x1, [{0x6}]}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getpeername(r1, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0/../file0/file0\x00', r4}, 0x18) 18.644394207s ago: executing program 5 (id=1530): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200088e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable}, {@errors_remount}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000780)="$eJzs279vG1UcAPDv2UlKf5FQlR/9AQQKoghImrSUDixFIDGAhARDGUOSVqVuA02QaFVBQKiMqBITC2LnL2CCBQETEivsqFKEsrQwGZ19lziO7capE6fx5yOd+57vue/79d2z392LA+hZw+lDErEnIv6MiMFqdWWD4eo/txevTf67eG0yiXL57X+SSrtbi9cm86b563bnlb6IwhdJHGrQ7+yVqxcmSqXpy1l9dO7iB6OzV66+cP7ixLnpc9OXxk+dOnF87KWT4y92JM80r1sHP5k5fOD1d2+8OXnmxnu/fp/k+dfl0SHDrXY+XS53uLvu2ltTTvq6GAhtKVaHafRXxv9gFGP54A3Ga593NThgQ5XL5fJDzXfPl4FtLIluRwB0R/5Fn17/5tsmTT22hIXT1QugNO/b2Vbd0xeFrE1/3fVtJw1HxJn5/75Nt9iY+xAAACv8mM5/nm80/ytE7X2h+7M1lKGIeCAi9kXEyYjYHxEPRlTaPhwRj7TZf/0iyer5T+HmuhJbo4XTH8bL2drWyvlfPvuLoWJW21vJvz85e740fSx7T45G/460Ptaij59e/eOrZvtq53/plvafzwWzOG727Vj5mqmJuYm7ybnWwmcRB/sa5Z8srQQkEXEgIg6us4/zxTjcbN+d82+hA+tM5e8inqke//moyz+XtF6fHL0vStPHRvOzYrXffr/+VrP+7yr/DkiP/66G5/9S/kNJ7XrtbDv/+zfPpo/X//qy6TXNes//geSd5REaER9PzM1dHosYSN6oBl37/Hhdu/Hl9mn+R480Hv/7YvmdOBRROYkfjYjHIuLxLPYnIuLJiDjS4l345ZWn3l9//hsrzX+qreO/XBiI+mcaF4oXfv5hRadD7eSfHv8TldLR7Jm1fP6tJa52z2YAAAC4VxUiYk8khZGlcqEwMlL9G/79satQmpmde+7szEeXpqq/ERiK/kJ+p2uw5n7oWHZZn9fH6+rHs/vGXxd3VuojkzOlqW4nDz1ud5Pxn/q72O3ogA23eh3NyIde4fea0LuMf+hdxj/0rgbjf2c34gA2X6Pv/0+7EAew+erGv5v/0ENc/0PvWs/495kB20PLsTyweXEAm2p2Z9z5R/L3dmHH1ghjuxWisCXCUNigQrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj/wAAAP//bW3m1Q==") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x88, 0x0, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffffd, @loopback, 0x1010}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x206}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x43479812}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb8}]}]}]}, 0x88}}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_emit_ethernet(0x65, &(0x7f0000000300)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@generic={0x8864, "ec2d8fae067b0c3b40b261d9da89055068eae40c31e7a14c10c12c5579d42ce648d319efb324e7a7902f77e0b5a04e4583cd748cfdf2ae5f88a24313d40a25b8244b15e3b9590c0f5dffbd5a54f66b545800e1"}}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES16], 0x3, 0x7be, &(0x7f00000005c0)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r1 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='status\x00') pread64(r2, &(0x7f0000000140)=""/25, 0x19, 0x4) 18.226886678s ago: executing program 5 (id=1533): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00e70008000200d4d73603"], 0x44}}, 0x2000800) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0xb7, 0x0, 0x0, 0xfffffffa, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r4, 0x1d, 0x1, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0e1000010420ed0000000000", @ANYRES32=r0, @ANYBLOB, @ANYRES64=r5], 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r7, 0x5437, 0x200000000000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000015c0), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x44, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x20020090) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000004000000000000000000000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 17.956579731s ago: executing program 5 (id=1538): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r3, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r3, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r7 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r6}) io_uring_enter(r7, 0x40044fd, 0x40000003, 0x28, 0x0, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x4000) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) unshare(0x42040000) 17.903874423s ago: executing program 35 (id=1538): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r3, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r3, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r7 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r6}) io_uring_enter(r7, 0x40044fd, 0x40000003, 0x28, 0x0, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x4000) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) unshare(0x42040000) 1.746845285s ago: executing program 7 (id=1667): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_open_dev$loop(0x0, 0x2, 0x2001) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) 1.539791985s ago: executing program 7 (id=1670): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = fcntl$dupfd(r0, 0x406, r2) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000001b40)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x2, @remote, 0x8}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000080)="d6", 0x1}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e23, 0x3, @local, 0x3}, 0x1c, &(0x7f0000001d80)=[{&(0x7f0000001cc0)='l', 0x1}], 0x1}}], 0x2, 0x4004851) setsockopt(r5, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xfffd, 0x0) setsockopt(r4, 0x84, 0x82, &(0x7f0000000040)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x6}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x63f6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) recvmsg(r0, &(0x7f0000001900)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f0000001880)=""/26, 0x1a}], 0x4}, 0x40010140) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000480)={r4, &(0x7f00000001c0)='&\x00', 0x4c4040, &(0x7f00000003c0)={@_ha_fsid={[0x5, 0x7]}, {0x53b, 0xb0, 0x1, 0xe759}}, 0x35, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x9}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r11, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000001dc0)={0x12c4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x9}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @from_mac=@broadcast}}, @NL80211_ATTR_FRAME={0x11f0, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_a, @broadcast, @initial, {0x3}}, @a_msdu=[{@device_b, @device_b, 0x1000, "8ee1753dc1c9615018b78d83eb1334f97bd48ced6074dc64ea8a427e52b593ee75b87c1717e4e914dd6dbe8c1c257fbfded19ff216ea0e8f59ea83c9e8e7eebd719d2325228d5a84c5b97f3efb21286faf0e475d33608286cd272b2315d3e4e5de260da6c95a1137e740ab238e0e9ab806c1a35ed8eaad66323adc3439e41a03f92127eec8aa24fe977b1f66c974ba9cd0f157cfa8130e36312c3a60e79fea954d24303acc93ee9f4d62aeeeff68a4d970b4fc622a9cf7375fe35af1c65e5abb2ff124d1eab3919f2dda12b279f2b5e1f74d65ea4b6bfb480fad890a35f779ccd5af8f2a2855546fdb02ddbaa8676e6c696acfeca1e44eca26b87d5bfa178d7feedff3d78a91863dbd6345097f88590bd714932138492eb94f35813a8965ce8e17d8ab15953b20c48d8db6fe8255cc534c2a8bc46ea2b91c067366824c09cd8efce03be0afaadd9e4a1cf77e0f621c2bfbef9163b6a408cda4a57dd71003e7914aac84f56b53300ef43fa28993825838d33c6b87433405cd1c0b81d7780f04808be0b8c9ee6593eb2b24cf40472e6ba4e4fd328584d46a82ac5040df063328ffc86ce898692b8e7d4c737af3f8db8d058c8c8ea57422c4b78f4b2ab1a8278bff2efbeb9de3a978ac3a60fb783dbf1e8228c1b419721de2671deb8151e35fb51078f6da4f519ecac809b658393c4da0aba00b2eb8251be427065687309c6c2b9516bec0969cdd956b31a0531cf859e1c4816cd9ebb69c336375e852c1da505bce682786902c9df726f127f02878a7189e9ea70adac10fc5bd2059f5aa3e5779d1df465c43da4314593ac1f44bca4f85dec20a1cbbef223245c4091ab318a7b7aa0c702d522c17f52084312869ea45fd6266d79ae46947b81b9937bdf43f2670cef04f53836b2d49e33bdb989efcf8cfe3512bd2ceb4fdf5ecd6aeeeb82735ebdd4107225513df592f3c2c8e3c002ea2d80e10c91cf9ecb25ba478978fc7ddc16c2c993258ff865aabf83b6fb9c042df92c1d25ac388910faae71795355d57c317a350b07cc4961c7ae33c514ac69dfc8502cfc5836260d5fcf4431640d927e2eecfd145fa4b14ba328ab444879841459b4a1321eb339314f54e8c921a7a521511b6a53dc49f473c613e889acbb38f32521cce12d1fc27e507d37b322620f274ee4e2ed2332f157ea0c0fe149e12acc3e23bae33fe27290e3b12b81cef6258ce74bdb5e1a64d7660efa909139a3b72b38ebea091669b5bd14455066cb1cfb9d3143a11ec2f1f890b45a84f35404a0b7abdf87b13c22525494f56a15de5a7ca86ccc48d0c8179919c3f09ce2cfd1a4360e7cdd36ad9f91badfdd5ba039f3fe7c0ec84920534702afaa79a46022a121f1594a89820768c055376b77a13e8c9c5c36b72799b49291b7c3bcfb657dc63c9fba714d6d535502e18c9cb231c577eef9cc5f1ea682eaff0dd21706e370f1c672d6f7b5e76ba1d10cc4a7db566ecae2441749635b00495ab3f4f554a04cfda98d43dd36abfafe182af594cbfda7e2a69a0aa48f71d6470c7efeebd2cb56f74c19d14fa7ce7f84e143d85f6472eb10b3d42daa1fc44cfdbbd9440db66d41548441d4fe097a1974381dad5d8fbcbedeb97411cb64530bd039381c36c462ee459e75871bc45ebae3ee4472c9f9efa7397c3dc590454beee053a7f83104bed28342ca849d6e049fca4abd76048248145a5d1ee6d57fa2597f0ee3c312ffd23eee43c4a26c41f766f7c284594de583a415182ee06e3fc1c8ca4d5e88e5250180fe098a81496454850461e0853e9bd6f7f114fa63daf372be914a95e55f55a601c8621c7aad5bb07621a624b819a07fdffecddd35a08aeb6754078bbc586ed6f262f8eb60246f1f83895a5552666eb7f62279daf788e83e68345fefc92969d0aa01b27eea27a0d7a7fc445c4e332d46c8e9657af6de64077320c0946c8393bcec6f250d88cedc2e77763f0b2e3cc6d804e675d56d3f51d5b40df7fe2195e73c67f7c1de95deac8162de5e89b543e9e6d4ed7cdd6a6a08e781bc4bd85072ab33d0c205ba618083753e6171376913b2d3a4f8102a166ffb7879672049a806a5bbebcb85960ac0de961c1f2c23392379baff2a7b7518537b04e95f9876deee41398844ccc40e682f7be42b2ed253f30b035bfda67656da2a2c7c1e1e25e112116bb89c3723673111a102504c2a6330ff9f99f04460e4c3ddbef778c1509e6c89c320f1e02727cf22925437a94ef733f99d638ebf2fa297ce23a225412e024ddbec7e22b2345c44e64b836b25ec7c8b6b2f5888fb8ece08de33c296fa16734526ae389f5c4c62bcb5cfa9542d953c47ea0287deb33c56fc19ec77d23a240082dd13d5be63c9b293db4cd3dc38ed92fd838f1f1e81dc73254072c87f4d4d75981f30ee10f74e2d0238787c72f01427c4f58644849623548144d072ea3ab5351f7104282949f5181fea14fca174dda737c3649aa53f97516f13da664557385a0d8668009daff290dcb235e8c7a41b40d8dde8630482825443b41e5c47c3271368a1dd969ec83b13b4deb9f6b6cb943a636a25c605bb1df8e6e36b1011440f3d53132e8dedc4f6dd26bb34b6c9fd1aae73f03dd84920c0956790fb6c919632341c357a9b7d19407916ec53281415c65c9e24c3ed931d161f4fb7a4dcde010b3bc2216cf7ca95763c29b9445568bbb23013c4f69d066c91ecfda82d23a0efe9ed9b2edc6570ca2360b60bad75d2278c9a6f3ad3364f896b42aac2438133bbf216fcde2d80c18d7bf423fcf86f1cdb9b80a2dee82a438bfe1c8109bba93d076ca7bb81e1f579921ee230bfcc56a1f568f20bf785eaae0ea73479f59e12f49fa6638e642b5c5c73d5660de086b8b4cf0c8c33f45b557d6b0a6ca9c433e224a0049dec1cbeaa68bef402d7c8e27fcd8f3c4ad64c46d5a6c8de9b1f3d481116f073aae02f45f14babb5eec77cff8a3c348d22b71e0258f962dd4a582b94844f30dc08efad7882950d3f38b4d385169b73fa253f1f817831f3601a934358614649f6d87e09dd5014b6845720e0ca0528f8743c2b61cb6d4c2b7a3a09d8b0bd16c94a2ec9e6e5f88d2d94611f9ffc64dcffd71dd728825b24a06cbb3ed9bdc2b6f029da765bb8f5f883d5a038e655bea710288d822c26b68c405b74d257cf8f69334ed0a7410777868ffeaad250a30fd6c243a481ce09b0a8a5e91b0c2d279e80d5f5fbdf2fcd344e67c13b1fb6c97a4be23293f70d8349ee38f6fab670b906060244a49b74d27c4ccb980c951230b6e248c7c983725143409c137557b83bdcba82b44bcbda64702fabe0fe752439f995f4a7ab6e44b9eb20d2fd1502a1e334d1748e8ab91f1eaff8fc03b9fc8e146c386a81a4d6d8108d05276172fcc32fcce9b28752d71ca620406d0714f94d3a0f2cda746a3293dfe31b32bf6b3a8bf0db592835d74f59efa922330890f53e9f7aba3167ce1ef7bf3f295db2fbf20afc8dfb1f23e35351b3ff747519839781f1c1e87d5cc7ff3a395c130e931557ddb333bfb25bfabeff23f14bf27c753e16ad284b2b636295adde1dd4187cec430f8453efb0bfdec36e238a7adc16af16a992f9b61d606536a2661ccdb9ba6c0d53380d264df93f72149e44c75a2d1af7aeefd5d19192e773739f26084ae8190640bb7dce4ef0835b6567dad56f7e5435140eedd22384c04341c5127ed6d05ae413472e893c68261f99a1166f06490b05995a9803edf0c28f14649c0b0368ad8e3070490c3cf86db18582893c093a394bdf32fd4c15fd6d9f1de25cf92f081652416e510fa075648988851b8ec12176d82a163d1fd65afce551a2e91c0f7d50cc99c2eebb863a477b977a543c588677cf77218801e5345302d4d9f5e2d48facc6efe3380bdf55cad1dc9a4e029755b3f621e2dc3c23ee876c7a5c601cc63c865deed3c3f1954a2d598ba66b4b78898c7c4f645143c6de970755c9582ae7874578d47c49f9efe7e6b0ff985ea0a359e3426301ef1d5edb8b5ba8db2a9522deff72b73e490920624a288aeb15b5f6f5ca79b950824001f3724155261070ce7a7a715ca28fb3d81f53e01086138a4011e011bd8d9300cbd05f3392d38f4f55f10f7bce9f50aa48829c375180b167a30ffdbfcee75281d4068be012c8c3155f8e81f187bbfd800061b948039e01f8da1d8d4a8c3af445a74be3a94373b5fe8bd63428bb6ee7a1ae61141c03f1abe51fc979eed0f5fb493d3b112f9c148f8b9ddb833aff440b4a89481b6fa9051a52f9f988f9f0ff10128039886ea1bfa580c1f2904ff70d3c0461fb3dd14c238ea3256731b4ed598df55953592508bacfb8fe647b9778dd6f7067aa21e8cb553dcd446b1ec77a9654c746a7e710ea4bab5d33c8b1c10596c19179598a7a7f9a272d11980d162fef79646c8307e80698cf3e22e348c9fe0d4042ffe0c6e074dfa0ec876d9124045668ad243d45f6463d53cd34ac1f4359bab3e109fb5273d1e7aad97c70f8ae5b9460f23d20061fd677990c5fcc164e7b3ca5a1725751f157edae2293a3b395f0658e1104d0a50b0d161ce8d935019081aab430bddd6b8d4a69e2bc4786ebcd835362d5a260e02880a00caf4dbd47aa5f1a023841aafc96a2254088b5d717627dfc902137f6e7295205fe396b104bca58420eb097e4c310f3cd4e76b238daca56241d026f5ee09f84253f9e107623cb87dc05143fa0dee0af6cf7284f7633f2b900df44a4cabd06c2b148025cf1220ebab2a2341d1179b3bb385e42b2f7ced3a3d1c2f58ff0b5f4d6efb6ed6997e5ebe9e3d11ebe99ec938e61d447b7bf5f883e5f41072196f81ca9dd0a8873dce665905e4048850afe358ea4de071727fe825538d802bc8546fb4efc7ccdb87be3afeca49d91547748810aec2d8ff21a35cf9f0d8cb794f4a8b717786e6c9d0e2500488029563058b0c59110a05cfac946cf2e14ab70110d00fe50d9b938bd4702aa6ce40dbb684ea831b93207afbf3b7d0691b1abd63ecd8b1f6f654aa01737c8af1e6b7c9082f13eeac7640ed856e85ad7f55c97b60c7b9e1684a9bbda5ce66196294dd5bb63737ae481301a4f679a5504c18315325f40c06af52ee88503c2a12346c44b689cc03a661bed14420be5eb230dcac5226da5702b7360c910355347b5d0dfd634e0bdd202186582dc449b5cd33567e92a7217cee55e5e1ad2ac3356d8559dcfb8a1537fb371d79a4ef382a450fbf51596f07c2be88139f211cfd8e8f41916da416c370fc68566299e55b582039f66190a246c6f4f29da1a50633ae433dcdf408c985bd51d86b864f5da2e322966a12d5d93764f06f2e4ddd4f91a0c9079d1f5a57b6380e2e60bb335b9a5f56e4eddd63adb6e6e7eb9423e576bd579e84347532e3d90bed30d0d97de43caddc914ac8c816137fc3c00d44cd81d5888ec72b98d458367f8e8806766036138a3e4e99c23882c43abfb849def580caf34b42ed3bb56dd4be7628045b79e6c2b252f2fd6e5835f73f98c6c1a267f5247a043650c8b6d1730b663e8c1d77b59101dade9fdd24593d14d563757f3a3427866e4af4a8c28cb40f86e5245866a48d0260fd934e274736e6a4274b9d9f73025915f039e2922a87a3fe720df7cb5099eac8cc5ec0c5a32223bd6a63c5383364ba17bf76074c7a4010ffdb0fe11d20fc2c312832dd6721390787eea9140d8c2b093d287b6f9b25891bbddabc0fbf4fce79c61d951e4b23ac25edfdf52c96ba19d55d202dc6f3ab223ff695ae6d23061a1a518e5dffef812e647d65b7b7a34ec78db1"}, {@broadcast, @device_b, 0xcd, "a21fd9d4ca12137a15417b7012e399e52946659b239a0235a63d310c8e7478bc6c485652d8c3dae9379b5c665cab9fa24686b46d7caf5ced634ca438a9c6778748e5eb0f06af27d67ad1f959ffcc297d8b5474b1da49c2451baa646ebcfa945b90eb5de8641976b3d977d2867c47cdb698bbbfd9d3ada8a2cfa037cd4249d7f34adc4762f98fbd5dd2b489f29d8c096c82895a347f9efb20841548d5cac10fd180424543c2908a81e832ed6e3d09ae6df62f65e5bcbd0ce05569b28a052d687c59343ea4684e0346b67118fc79"}, {@broadcast, @broadcast, 0xa3, "d17add2bbcdd5dbb578a39350f93a88e445f8e12f1133a0f5381be68397116319437537456b55d571e8365c9743f7f3de8eb06144631e9231c7868ba6332928e0722a862a41adf4918906d3a4f1d3774c65656f69d94fc221ee9f2222fa35333eb76be3a9741d62091dc8e8e78ae33b78447fa94999a3fddee0171dd8a070ba6f853d430fc5f099924f1d3245ffd19dc7b283a7fd6d059f9fd31f47c58964fa4a6c759"}, {@device_b, @device_a, 0x25, "b9bfc132b4a2740fe4c4354d946b552192343c9a7ece32e3a209046185e2d8d6eadaba535e"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x63, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x1}, @device_a, @device_b, @initial, {0x8, 0x6}}, 0xfffffffffffffffe, @random=0x7, 0x4, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0xb, 0x1}]}, @void, @val={0x4, 0x6, {0xd0, 0x7f, 0xeb3, 0x23af}}, @val={0x6, 0x2}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x0, 0x4, 0x0, {0xcf4, 0x8, 0x0, 0xea, 0x0, 0x1, 0x1}, 0x300, 0x8, 0x9}}, @void, @void, @val={0x76, 0x6, {0x98, 0x7f, 0x5, 0x9}}}}]}, 0x12c4}, 0x1, 0x0, 0x0, 0x15}, 0x800) fcntl$lock(r10, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r10, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r12, &(0x7f00000000c0)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) syz_io_uring_setup(0x267, &(0x7f0000000080)={0x0, 0x5df7, 0xe, 0x0, 0xec, 0x0, r10}, &(0x7f0000000240), &(0x7f0000000180)) 1.418970321s ago: executing program 2 (id=1674): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000180)=@v2={0x2000000, [{0x7f, 0x7fffffff}, {0x2, 0x65c}]}, 0x14, 0x3) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x220, 0x110, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000000), {[{{@arp={@multicast2, @rand_addr=0x64010100, 0x0, 0xffffffff, 0x5, 0x2, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x8, 0x8, 0x3, 0x8, 0xa, 0x4, 'syzkaller0\x00', 'dvmrp0\x00', {0xff}, {}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @local, @dev={0xac, 0x14, 0x14, 0x2c}, 0x1, 0xffffffff}}}, {{@arp={@private=0xa010102, @broadcast, 0xffffffff, 0xff000000, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@random="6c84c14de8ed", {[0x0, 0xff, 0xff, 0xff]}}, 0xa8, 0x6, 0x4, 0x2, 0x9, 0x401, 'wg1\x00', 'pim6reg0\x00', {0xff}, {}, 0x0, 0x1}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @broadcast, @multicast2, 0x4, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xffff00, 0xff000000, 0xc, 0x0, {}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, {[0x0, 0xff, 0xff, 0xff, 0x0, 0x2f30adca870bfac1]}}, 0x4, 0x15ce, 0x5, 0x7, 0x5, 0x40, 'batadv_slave_0\x00', 'bond0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @private=0xa010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x6}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000780)={0x75eb, 0x108, 0x80000000, 0x6, r3}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) 1.393142562s ago: executing program 2 (id=1675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x94, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x38fe}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc00}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sysvipc/msg\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000840)={'security\x00', 0x0, [0x9, 0xff, 0x6000000, 0x4, 0xfffffffa]}, &(0x7f00000008c0)=0x54) r3 = open$dir(&(0x7f0000000900)='./file0\x00', 0xa8000, 0x1) r4 = open_tree(r3, &(0x7f0000000940)='./file0\x00', 0x8000) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0), r4) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xa8, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x44) close_range(0xffffffffffffffff, r4, 0x2) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000012c0), &(0x7f0000001300)=@v1={0x2, "0191b18474d0c1d7f36cf9f23e37d7"}, 0x10, 0x1) 1.287379317s ago: executing program 2 (id=1677): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000000000, &(0x7f0000006680)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1000, 0x800, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x10) getrandom(0x0, 0x0, 0x0) 1.286866227s ago: executing program 4 (id=1678): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f00000003c0)={[{@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@grpquota}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x586, &(0x7f0000000a40)="$eJzs3c9rFFccAPDvbBJ/t0YQaXsoAQ+1WDcm6Q8LBe2xtFKhvduQrEGycSW7EZMK6qFeeilSKKVC6R/Qe4/Sf6D/Qi9CK0iR0B68bJnNrFmT3WSzWUx0Ph8YfW9mNt958+b78mZnwwaQWyPpP4WI1yPiuyTicMu2wcg2jqzst/z4xlS6JFGvf/FPEkm2rrl/kv1/MKu8FhG/fxNxsrA+bnVxaXayXC7NZ/XR2tzV0eri0qnLc5MzpZnSlfGJiTPvTYx/+MH7fWvr2xf++/Hz+5+c+fb48g+/PjxyN4lzcSjb1tqObbjVWhmJkeycDMW5NTuO9SHYbpLs9AHQk4Esz4ciHQMOx0CW9cDL72ZE1IGcSuQ/5FRzHtC8t+/TffAL49HHKzdA69s/uPLeSOxr3BsdWE6euTNK73eH+xA/jfHb3/fupkts8j7EzWerA30ID+TYrdsRcXpwcP34l2TjX+9ON9483tjaGHn7/QM76X46/3mn3fyn8HT+E23mPwfb5G4vNs//wsM+hOkonf991Hb++3ToGh7Iaq805nxDyaXL5dLpiHg1Ik7E0N60vtHznDPLD+qdtrXO/9Iljd+cC2bH8XBw77OvmZ6sTW6nza0e3Y54Y3X+m8S68X9fY667tv/T83GhyxjHSvfe7LRt8/a3utl9w7pU/yXirbb9v/pEK9n4+eRo43oYbV4V6/1759gfneJvrf39l/b/gY3bP5y0Pq+tbj3Gz/uelDpt6/X635N82SjvWVn1pD5Zq82PRexJPmtdH9fT9eOrr23Wr2f7p+0/cXzj8a/d9b8/Ir7qsv13jt7puOtu6P/pLfX/1gsPPv36p07xu+v/dxulE9mabsa/bg9wO+cOAAAAAAAAdptCRByKpFB8Wi4UisWVz3ccjQOFcqVaO3mpsnBlOhp/KzscQ4Xmk+7DLZ+HGMs+D9usj6+pT0TEkYj4fmB/o16cqpSnd7rxAAAAAAAAAAAAAAAAAAAAsEsc7PD3/6m/fMMUvPx85Tfk16b5349vegJ2Jb//Ib/kP+SX/If8kv+QX/If8kv+Q37Jf8gv+Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAB9deH8+XSpLz++MZXWp68tLsxWrp2aLlVni3MLU8WpyvzV4kylMlMuFacqc5v9vHKlcnVsPBauj9ZK1dpodXHp4lxl4Urt4uW5yZnSxdLQc2kVAAAAAAAAAAAAAAAAAAAAvFiqi0uzk+VyaX5LhT+jl1etFgrbiv68C2djVxxGz4Vks/N8NuuOnkIM7nwDFbZWGMj6e8Odd2hAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA2/g8AAP//AAkuVg==") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000000)=ANY=[], 0x700, 0x0) rename(&(0x7f00000009c0)='./file1\x00', 0x0) 1.266756228s ago: executing program 3 (id=1679): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000080), 0x1, 0x789, &(0x7f0000000fc0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0xffffffff}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x1, 0x2000402) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@resgid}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x807, 0x4, 0x6, 0x3}) lseek(r4, 0x3ff, 0x4) lseek(r3, 0x3ff, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x5923cddca5692611, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) 1.247452829s ago: executing program 4 (id=1680): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_open_dev$loop(0x0, 0x2, 0x2001) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) 1.159158753s ago: executing program 4 (id=1681): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') lseek(r0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xa, 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x3a00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}}) r4 = fsmount(r2, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, 0x0, 0x0) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @remote}, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') unlinkat(r4, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f00000001c0)=r6}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f00004b4000/0x4000)=nil, 0x4000, 0x8, 0x10, r4, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x8008551d, &(0x7f0000000600)={0xdea7, 0x1, [{0x6}]}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="911016000000000095605000000000000ca585753981716860fee855e1594ddbcb1899b3dbf82afb4dcaea9713559f766269be81633c"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getpeername(r1, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0/../file0/file0\x00', r4}, 0x18) 1.151237404s ago: executing program 4 (id=1682): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000380)='reno\x00', 0x5) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x2a7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) io_setup(0x3, &(0x7f0000008240)) 1.058203588s ago: executing program 4 (id=1683): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000180)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nogrpid}]}, 0x1, 0x4bd, &(0x7f0000000800)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61, 0x2e]}}, &(0x7f0000001300)=""/181, 0x29, 0xb5, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 995.440701ms ago: executing program 4 (id=1685): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 799.957551ms ago: executing program 8 (id=1686): socket(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x84}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0xbc, 0x22, 0x800, 0x70bd2a, 0x25dfdbfe, {0x11}, [@typed={0x4, 0x4d}, @typed={0xa1, 0xcf, 0x0, 0x0, @binary="fc80e82bb9919aec6faa3f979903e08bca45aa37055472e0812e35203170b1fe071a3dd7cb54e64d63e07b79a64e440731c54a013d4d4551a85b706043e6fa30ac4731da219132d467785f3a2640ac5aad703edc8052f690f99b6876650a823598576d627c7a023e0dbc12d44e2e11bfe0fda7f73c191bfd5a8adcaedda2263a5239dfb616b80a2543267d107af36874271bfd313a2981cba45f40e31e"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x408a0}, 0xb1ea4e805bc4722e) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) bpf$LINK_DETACH(0x22, &(0x7f0000000840)=r0, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) sendmsg$inet6(r4, &(0x7f0000003100)={&(0x7f0000000180)={0xa, 0x4e21, 0x1, @loopback, 0x2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000300)="8000e859667fbc13", 0x8}], 0x1}, 0x8050) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="c8d62000", @ANYRES16, @ANYBLOB="796100000000fedbdf257e0000000c0099000700000017000000"], 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 712.335805ms ago: executing program 8 (id=1687): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4d, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0x8400, 0x1}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbe15, 0x10, 0x3, 0x310}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x6, 0x0, 0x0, 0x3, 0x2, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r4}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000001c0)=0x0) wait4(r5, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x320e0221c2245a4, '\x00', 0x0, 0x2}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x651e}, 0x0) 680.751777ms ago: executing program 7 (id=1688): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}}, 0x0) connect$netlink(r0, &(0x7f00000001c0), 0xc) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) io_setup(0x3, &(0x7f0000008240)) syz_clone3(&(0x7f0000000280)={0x204100000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)=0x0, {0x3}, &(0x7f0000000200)=""/118, 0x76, &(0x7f0000000340)=""/138, &(0x7f0000000180)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x0, 0x1012) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* rwr'], 0xa) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r5, 0x0, 0x0, 0x8000, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x100, 0x0, @loopback={0xff00000000000000}}}, 0x24) 662.838878ms ago: executing program 3 (id=1689): writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000500)="8a59aecf7b28e6e31f3c4fa56523dcfb9fd974763e6429bb6867e6dce94f312dd6d2aa3874b9f3c84323c547743897a15b62590e75dee9b9658b9d83d8be74af0117b771dcac1b349c4fd6", 0x4b}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, 0x0, 0xfdef) 528.575024ms ago: executing program 3 (id=1690): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f00000003c0)={[{@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@grpquota}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x586, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000000)=ANY=[], 0x700, 0x0) rename(&(0x7f00000009c0)='./file1\x00', 0x0) 528.129555ms ago: executing program 8 (id=1691): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_open_dev$loop(0x0, 0x2, 0x2001) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}], 0x5) 527.536094ms ago: executing program 7 (id=1692): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') lseek(r0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xa, 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x3a00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}}) r4 = fsmount(r2, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, 0x0, 0x0) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @remote}, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') unlinkat(r4, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f00000001c0)=r6}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f00004b4000/0x4000)=nil, 0x4000, 0x8, 0x10, r4, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x8008551d, &(0x7f0000000600)={0xdea7, 0x1, [{0x6}]}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="911016000000000095605000000000000ca585753981716860fee855e1594ddbcb1899b3dbf82afb4dcaea9713559f766269be81633c49e090a5bef9c8fc58"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getpeername(r1, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0/../file0/file0\x00', r4}, 0x18) 462.772407ms ago: executing program 3 (id=1693): socket$nl_generic(0x10, 0x3, 0x10) setresgid(0xee00, 0xee01, 0x0) setreuid(0xffffffffffffffff, 0xee01) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 417.42891ms ago: executing program 8 (id=1694): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x2a7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) io_setup(0x3, &(0x7f0000008240)) 417.02375ms ago: executing program 2 (id=1695): r0 = syz_io_uring_setup(0x68ee, &(0x7f0000000100)={0x0, 0x1638, 0x8000, 0x0, 0x1f}, &(0x7f0000000180), &(0x7f00000001c0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@ipv6_delroute={0x24, 0x19, 0xc604d14dce89b4d3, 0x70bd2b, 0x25dfdbff, {0xa, 0x14, 0x0, 0x0, 0x15a597d3fd86676a, 0x1, 0xfe, 0x4, 0x2e00}, [@RTA_EXPIRES={0x8, 0x1f, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x818}, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000040)={'mangle\x00', 0x0, [0xe, 0x6, 0x4, 0x7, 0x5]}, &(0x7f00000000c0)=0x54) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000001180)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0xc, 0x0, 0xc0000004, 0x3, 0x20000032, 0x7fff, 0x7, 0x5, 0xe, 0x5f, 0xfffffffc, 0x2, 0x200002, 0x80000000, 0x3, 0x4001ff, 0xfffffff9, 0xa}}) 416.77535ms ago: executing program 3 (id=1696): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000180)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nogrpid}]}, 0x1, 0x4bd, &(0x7f0000000800)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61, 0x2e]}}, &(0x7f0000001300)=""/181, 0x29, 0xb5, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 416.43129ms ago: executing program 7 (id=1697): socket$kcm(0x2, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000180)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nogrpid}]}, 0x1, 0x4bd, &(0x7f0000000800)="$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") chdir(&(0x7f0000000140)='./file0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 307.679195ms ago: executing program 2 (id=1698): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x16, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x802, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xd, 0x1}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x3c}, 0x28) getrandom(0x0, 0x0, 0x2) 306.778695ms ago: executing program 3 (id=1699): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = fcntl$dupfd(r0, 0x406, r2) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000001b40)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x2, @remote, 0x8}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000080)="d6", 0x1}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e23, 0x3, @local, 0x3}, 0x1c, &(0x7f0000001d80)=[{&(0x7f0000001cc0)='l', 0x1}], 0x1}}], 0x2, 0x4004851) setsockopt(r5, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xfffd, 0x0) setsockopt(r4, 0x84, 0x82, &(0x7f0000000040)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x6}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x63f6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) recvmsg(r0, &(0x7f0000001900)={&(0x7f0000000580)=@xdp, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f0000001880)=""/26, 0x1a}], 0x4}, 0x40010140) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000480)={r4, &(0x7f00000001c0)='&\x00', 0x4c4040, &(0x7f00000003c0)={@_ha_fsid={[0x5, 0x7]}, {0x53b, 0xb0, 0x1, 0xe759}}, 0x35, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x9}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r11, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000001dc0)={0x12c4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x9}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @from_mac=@broadcast}}, @NL80211_ATTR_FRAME={0x11f0, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_a, @broadcast, @initial, {0x3}}, @a_msdu=[{@device_b, @device_b, 0x1000, "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"}, {@broadcast, @device_b, 0xcd, "a21fd9d4ca12137a15417b7012e399e52946659b239a0235a63d310c8e7478bc6c485652d8c3dae9379b5c665cab9fa24686b46d7caf5ced634ca438a9c6778748e5eb0f06af27d67ad1f959ffcc297d8b5474b1da49c2451baa646ebcfa945b90eb5de8641976b3d977d2867c47cdb698bbbfd9d3ada8a2cfa037cd4249d7f34adc4762f98fbd5dd2b489f29d8c096c82895a347f9efb20841548d5cac10fd180424543c2908a81e832ed6e3d09ae6df62f65e5bcbd0ce05569b28a052d687c59343ea4684e0346b67118fc79"}, {@broadcast, @broadcast, 0xa3, "d17add2bbcdd5dbb578a39350f93a88e445f8e12f1133a0f5381be68397116319437537456b55d571e8365c9743f7f3de8eb06144631e9231c7868ba6332928e0722a862a41adf4918906d3a4f1d3774c65656f69d94fc221ee9f2222fa35333eb76be3a9741d62091dc8e8e78ae33b78447fa94999a3fddee0171dd8a070ba6f853d430fc5f099924f1d3245ffd19dc7b283a7fd6d059f9fd31f47c58964fa4a6c759"}, {@device_b, @device_a, 0x25, "b9bfc132b4a2740fe4c4354d946b552192343c9a7ece32e3a209046185e2d8d6eadaba535e"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x63, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x1}, @device_a, @device_b, @initial, {0x8, 0x6}}, 0xfffffffffffffffe, @random=0x7, 0x4, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x1, [{0xb, 0x1}]}, @void, @val={0x4, 0x6, {0xd0, 0x7f, 0xeb3, 0x23af}}, @val={0x6, 0x2}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x0, 0x4, 0x0, {0xcf4, 0x8, 0x0, 0xea, 0x0, 0x1, 0x1}, 0x300, 0x8, 0x9}}, @void, @void, @val={0x76, 0x6, {0x98, 0x7f, 0x5, 0x9}}}}]}, 0x12c4}, 0x1, 0x0, 0x0, 0x15}, 0x800) fcntl$lock(r10, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r10, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r12, &(0x7f00000000c0)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14) syz_io_uring_setup(0x267, &(0x7f0000000080)={0x0, 0x5df7, 0xe, 0x0, 0xec, 0x0, r10}, &(0x7f0000000240), &(0x7f0000000180)) 219.718819ms ago: executing program 8 (id=1700): writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000500)="8a59aecf7b28e6e31f3c4fa56523dcfb9fd974763e6429bb6867e6dce94f312dd6d2aa3874b9f3c84323c547743897a15b62590e75dee9b9658b9d83d8be74af0117b771dcac1b349c4fd6", 0x4b}], 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[], 0xfdef) 138.783853ms ago: executing program 2 (id=1701): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000080), 0x1, 0x789, &(0x7f0000000fc0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0xffffffff}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x1, 0x2000402) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@resgid}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x807, 0x4, 0x6, 0x3}) lseek(r4, 0x3ff, 0x4) lseek(r3, 0x3ff, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x5923cddca5692611, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) 138.090593ms ago: executing program 7 (id=1702): r0 = getpid() timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1ce7, &(0x7f0000000040)={0x0, 0xe9f9, 0x4480, 0xfffff, 0x18d}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f00000001c0)={0x88, 0x72, 0x20000}, 0x20) 0s ago: executing program 8 (id=1703): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x7ffffc, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setresuid(0x0, 0x0, 0xee00) r4 = syz_open_procfs(0x0, 0x0) poll(&(0x7f00000003c0)=[{r0, 0x400}, {r0, 0x94}, {r4, 0x504}, {r0}, {r3, 0x410}, {r3, 0x2}], 0x6, 0x5) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) r6 = socket(0x10, 0x2, 0x0) syz_io_uring_setup(0x100293f, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000500)="8a59aecf7b28e6e31f3c4fa56523dcfb9fd974763e6429bb6867e6dce94f312dd6d2aa3874b9f3c84323c547743897a15b62590e75dee9b9658b9d83d8be74af0117b771dcac1b349c4fd6", 0x4b}], 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): et permissive=1 [ 195.258044][ T28] audit: type=1400 audit(1774087035.427:1783): avc: denied { create } for pid=7452 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_iscsi_socket permissive=1 [ 195.389517][ T28] audit: type=1400 audit(1774087035.557:1784): avc: denied { connect } for pid=7452 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 195.412574][ T28] audit: type=1400 audit(1774087035.587:1785): avc: denied { write } for pid=7452 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 195.440721][ T7456] loop0: detected capacity change from 0 to 1024 [ 195.443354][ T28] audit: type=1400 audit(1774087035.587:1786): avc: denied { sendto } for pid=7452 comm="syz.3.1162" scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 195.510698][ T28] audit: type=1400 audit(1774087035.637:1787): avc: denied { read } for pid=7452 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 195.553769][ T7456] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 195.585879][ T7463] syzkaller1: entered promiscuous mode [ 195.600897][ T7463] syzkaller1: entered allmulticast mode [ 195.604950][ T7456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.684633][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.830488][ T3371] tipc: Node number set to 2886997007 [ 196.900432][ T7494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1170'. [ 197.062613][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1174'. [ 197.093157][ T7502] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 197.525064][ T7516] syzkaller1: entered promiscuous mode [ 197.660533][ T7516] syzkaller1: entered allmulticast mode [ 197.899742][ T7526] loop0: detected capacity change from 0 to 512 [ 197.957104][ T7526] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.991659][ T7526] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.103010][ T7527] loop2: detected capacity change from 0 to 1024 [ 198.132407][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.181269][ T7527] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 198.261644][ T7527] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 198.285809][ T7527] EXT4-fs (loop2): orphan cleanup on readonly fs [ 198.317724][ T7527] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1181: Failed to acquire dquot type 0 [ 198.330554][ T7527] loop2: lost filesystem error report for type 5 error -117 [ 198.334262][ T7527] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1181: Failed to acquire dquot type 0 [ 198.339922][ T7543] 9p: Bad value for 'rfdno' [ 198.344518][ T7527] loop2: lost filesystem error report for type 5 error -117 [ 198.353834][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 198.354067][ C0] EXT4-fs (loop2): initial error at time 1774087038: ext4_acquire_dquot:7001 [ 198.354444][ C0] EXT4-fs (loop2): last error at time 1774087038: ext4_acquire_dquot:7001 [ 198.430875][ T7527] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.1181: Freeing blocks not in datazone - block = 0, count = 4096 [ 198.447454][ T7527] loop2: lost filesystem error report for type 5 error -117 [ 198.451580][ T7527] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1181: Failed to acquire dquot type 0 [ 198.484693][ T7527] loop2: lost filesystem error report for type 5 error -117 [ 198.485844][ T7527] EXT4-fs (loop2): 1 orphan inode deleted [ 198.525319][ T7527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.626923][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1189'. [ 199.071611][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.345095][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 199.345129][ T28] audit: type=1400 audit(1774087039.518:1809): avc: denied { write } for pid=7574 comm="syz.3.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 199.381582][ T7575] netlink: 'syz.3.1196': attribute type 4 has an invalid length. [ 199.507282][ T7578] loop1: detected capacity change from 0 to 128 [ 199.591427][ T28] audit: type=1400 audit(1774087039.748:1810): avc: denied { read } for pid=7572 comm="syz.1.1195" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 199.735612][ T28] audit: type=1400 audit(1774087039.758:1811): avc: denied { open } for pid=7572 comm="syz.1.1195" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 199.876265][ T28] audit: type=1400 audit(1774087039.758:1812): avc: denied { watch } for pid=7572 comm="syz.1.1195" path="/278/file0/file0" dev="loop1" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 200.079499][ T7584] loop2: detected capacity change from 0 to 1024 [ 200.096288][ T7584] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 200.128751][ T7584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.334207][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.352184][ T28] audit: type=1326 audit(1774087040.478:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21438dc799 code=0x7ffc0000 [ 200.398852][ T28] audit: type=1326 audit(1774087040.478:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f21438dc799 code=0x7ffc0000 [ 200.474263][ T28] audit: type=1326 audit(1774087040.478:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.3.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21438dc799 code=0x7ffc0000 [ 200.578543][ T7599] loop2: detected capacity change from 0 to 512 [ 200.635037][ T7599] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #11: comm syz.2.1201: iget: bad extended attribute block 3153 [ 200.701772][ T7617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1205'. [ 200.815557][ T7599] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 200.816173][ T7599] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1201: couldn't read orphan inode 11 (err -117) [ 200.825453][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 200.825476][ C1] EXT4-fs (loop2): initial error at time 1774087040: ext4_orphan_get:1391: inode 11 [ 200.825510][ C1] EXT4-fs (loop2): last error at time 1774087040: ext4_orphan_get:1391: inode 11 [ 201.259292][ T7599] loop2: lost filesystem error report for type 5 error -117 [ 201.260065][ T7599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.281300][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.288715][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.317157][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.529097][ T28] audit: type=1400 audit(1774087041.698:1816): avc: denied { create } for pid=7625 comm="syz.3.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.563420][ T7629] loop1: detected capacity change from 0 to 1024 [ 201.604190][ T7629] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 201.604514][ T28] audit: type=1400 audit(1774087041.758:1817): avc: denied { create } for pid=7630 comm="syz.3.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 201.634504][ T7631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.643996][ T7631] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1212'. [ 201.654508][ T7631] hsr_slave_0: left promiscuous mode [ 201.668624][ T7631] hsr_slave_1: left promiscuous mode [ 201.674865][ T7629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.687410][ T28] audit: type=1400 audit(1774087041.768:1818): avc: denied { getopt } for pid=7630 comm="syz.3.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 201.776437][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.806486][ T7639] loop1: detected capacity change from 0 to 1024 [ 201.873417][ T7639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.920048][ T7639] EXT4-fs error (device loop1): ext4_empty_dir:3107: inode #11: block 623: comm syz.1.1213: Attempting to read directory block (623) that is past i_size (638464) [ 201.958192][ T7639] EXT4-fs (loop1): Remounting filesystem read-only [ 202.020664][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.173041][ T7675] loop0: detected capacity change from 0 to 1024 [ 202.204838][ T7675] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 202.235329][ T7675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.268206][ T7683] FAULT_INJECTION: forcing a failure. [ 202.268206][ T7683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.290225][ T7683] CPU: 0 UID: 0 PID: 7683 Comm: syz.3.1225 Tainted: G W syzkaller #0 PREEMPT(full) [ 202.290284][ T7683] Tainted: [W]=WARN [ 202.290293][ T7683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.290309][ T7683] Call Trace: [ 202.290317][ T7683] [ 202.290327][ T7683] __dump_stack+0x1d/0x30 [ 202.290404][ T7683] dump_stack_lvl+0x95/0xd0 [ 202.290431][ T7683] dump_stack+0x15/0x1b [ 202.290452][ T7683] should_fail_ex+0x263/0x280 [ 202.290481][ T7683] should_fail+0xb/0x20 [ 202.290513][ T7683] should_fail_usercopy+0x1a/0x20 [ 202.290555][ T7683] _copy_from_user+0x1c/0xb0 [ 202.290586][ T7683] sctp_setsockopt+0x164/0xea0 [ 202.290676][ T7683] sock_common_setsockopt+0x69/0x80 [ 202.290701][ T7683] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 202.290727][ T7683] __sys_setsockopt+0x184/0x200 [ 202.290835][ T7683] __x64_sys_setsockopt+0x64/0x80 [ 202.290868][ T7683] x64_sys_call+0x2327/0x3020 [ 202.290971][ T7683] do_syscall_64+0x12c/0x370 [ 202.291002][ T7683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.291062][ T7683] RIP: 0033:0x7f21438dc799 [ 202.291082][ T7683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.291106][ T7683] RSP: 002b:00007f2142316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.291131][ T7683] RAX: ffffffffffffffda RBX: 00007f2143b56090 RCX: 00007f21438dc799 [ 202.291147][ T7683] RDX: 0000000000000023 RSI: 0000000000000084 RDI: 0000000000000006 [ 202.291196][ T7683] RBP: 00007f2142316090 R08: 0000000000000008 R09: 0000000000000000 [ 202.291208][ T7683] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 202.291252][ T7683] R13: 00007f2143b56128 R14: 00007f2143b56090 R15: 00007ffc078158d8 [ 202.291276][ T7683] [ 202.522436][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.112967][ T7689] loop0: detected capacity change from 0 to 1024 [ 203.153477][ T7693] loop2: detected capacity change from 0 to 512 [ 203.176130][ T7689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.255966][ T7693] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 203.280773][ T7689] EXT4-fs error (device loop0): ext4_empty_dir:3107: inode #11: block 623: comm syz.0.1226: Attempting to read directory block (623) that is past i_size (638464) [ 203.302323][ T7693] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1227: corrupted in-inode xattr: invalid ea_ino [ 203.367636][ T7693] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 203.367796][ T7689] EXT4-fs (loop0): Remounting filesystem read-only [ 203.376993][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 203.377016][ C1] EXT4-fs (loop2): initial error at time 1774087043: ext4_iget_extra_inode:5025: inode 15 [ 203.377045][ C1] EXT4-fs (loop2): last error at time 1774087043: ext4_iget_extra_inode:5025: inode 15 [ 203.411015][ T7693] EXT4-fs (loop2): Remounting filesystem read-only [ 203.418003][ T7693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.442866][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.586669][ T7714] loop0: detected capacity change from 0 to 512 [ 203.605130][ T7714] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #11: comm syz.0.1233: iget: bad extended attribute block 3153 [ 203.630277][ T7714] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.630650][ T7714] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1233: couldn't read orphan inode 11 (err -117) [ 203.643986][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 203.644011][ C0] EXT4-fs (loop0): initial error at time 1774087043: ext4_orphan_get:1391: inode 11 [ 203.644073][ C0] EXT4-fs (loop0): last error at time 1774087043: ext4_orphan_get:1391: inode 11 [ 203.682057][ T7714] loop0: lost filesystem error report for type 5 error -117 [ 203.683652][ T7714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.740031][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.828851][ T7724] loop0: detected capacity change from 0 to 1024 [ 203.854092][ T7724] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 203.890487][ T7724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.940929][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.000069][ T7730] loop0: detected capacity change from 0 to 2048 [ 204.037037][ T7730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.068787][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.079552][ T7730] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.178489][ T7738] loop2: detected capacity change from 0 to 512 [ 204.185831][ T7738] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 204.210894][ T7738] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1240: bad orphan inode 131083 [ 204.221342][ T7738] loop2: lost filesystem error report for type 5 error -117 [ 204.225212][ T7738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.327277][ T7741] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1240'. [ 204.355329][ T7742] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1237'. [ 204.418352][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 204.418368][ T28] audit: type=1400 audit(1774087044.538:1836): avc: denied { setopt } for pid=7728 comm="syz.0.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 204.484742][ T7744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1241'. [ 204.526911][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.561154][ T28] audit: type=1400 audit(1774087044.588:1837): avc: denied { audit_write } for pid=7728 comm="syz.0.1237" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 204.757689][ T7750] loop2: detected capacity change from 0 to 1024 [ 204.781303][ T28] audit: type=1326 audit(1774087044.818:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.1.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774256c799 code=0x7ffc0000 [ 205.000025][ T7589] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 205.019944][ T7750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.059357][ T28] audit: type=1326 audit(1774087044.818:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.1.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774256c799 code=0x7ffc0000 [ 205.093614][ T7589] EXT4-fs (loop0): Remounting filesystem read-only [ 205.101571][ T7750] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 623: comm syz.2.1242: Attempting to read directory block (623) that is past i_size (638464) [ 205.141047][ T7754] netlink: 'syz.3.1243': attribute type 4 has an invalid length. [ 205.159858][ T7750] EXT4-fs (loop2): Remounting filesystem read-only [ 205.166541][ T28] audit: type=1326 audit(1774087044.818:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.1.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f774256c799 code=0x7ffc0000 [ 205.219953][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.248571][ T28] audit: type=1326 audit(1774087044.838:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.1.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774256c799 code=0x7ffc0000 [ 205.295707][ T7760] FAULT_INJECTION: forcing a failure. [ 205.295707][ T7760] name failslab, interval 1, probability 0, space 0, times 0 [ 205.356306][ T7760] CPU: 1 UID: 0 PID: 7760 Comm: syz.2.1244 Tainted: G W syzkaller #0 PREEMPT(full) [ 205.356351][ T7760] Tainted: [W]=WARN [ 205.356360][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.356411][ T7760] Call Trace: [ 205.356419][ T7760] [ 205.356428][ T7760] __dump_stack+0x1d/0x30 [ 205.356456][ T7760] dump_stack_lvl+0x95/0xd0 [ 205.356491][ T7760] dump_stack+0x15/0x1b [ 205.356573][ T7760] should_fail_ex+0x263/0x280 [ 205.356601][ T7760] should_failslab+0x8c/0xb0 [ 205.356624][ T7760] kmem_cache_alloc_noprof+0x66/0x400 [ 205.356653][ T7760] ? skb_clone+0x151/0x1f0 [ 205.356707][ T7760] skb_clone+0x151/0x1f0 [ 205.356747][ T7760] __netlink_deliver_tap+0x2c9/0x500 [ 205.356789][ T7760] netlink_unicast+0x66b/0x690 [ 205.356825][ T7760] netlink_sendmsg+0x5c8/0x6f0 [ 205.356925][ T7760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.356963][ T7760] ____sys_sendmsg+0x563/0x5b0 [ 205.357057][ T7760] ___sys_sendmsg+0x195/0x1e0 [ 205.357172][ T7760] __x64_sys_sendmsg+0xd4/0x160 [ 205.357209][ T7760] x64_sys_call+0x194c/0x3020 [ 205.357286][ T7760] do_syscall_64+0x12c/0x370 [ 205.357316][ T7760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.357351][ T7760] RIP: 0033:0x7fe517f0c799 [ 205.357371][ T7760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.357428][ T7760] RSP: 002b:00007fe51695f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.357449][ T7760] RAX: ffffffffffffffda RBX: 00007fe518185fa0 RCX: 00007fe517f0c799 [ 205.357468][ T7760] RDX: 00000000240080d0 RSI: 00002000000029c0 RDI: 000000000000004f [ 205.357485][ T7760] RBP: 00007fe51695f090 R08: 0000000000000000 R09: 0000000000000000 [ 205.357502][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.357517][ T7760] R13: 00007fe518186038 R14: 00007fe518185fa0 R15: 00007ffe010c3518 [ 205.357542][ T7760] [ 205.555735][ T28] audit: type=1326 audit(1774087044.838:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.1.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774256c799 code=0x7ffc0000 [ 205.596719][ T28] audit: type=1326 audit(1774087044.838:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.1.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f774256c799 code=0x7ffc0000 [ 205.620405][ T28] audit: type=1326 audit(1774087044.848:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.1.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774256c799 code=0x7ffc0000 [ 205.663716][ T28] audit: type=1326 audit(1774087044.848:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.1.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f774256c799 code=0x7ffc0000 [ 205.691806][ T7764] loop2: detected capacity change from 0 to 1024 [ 205.717753][ T7764] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 205.925648][ T7764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.954202][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.272720][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.905074][ T7788] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 206.952129][ T7788] loop2: detected capacity change from 0 to 512 [ 207.236028][ T7788] EXT4-fs (loop2): 1 truncate cleaned up [ 207.287497][ T7788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.521505][ T7798] geneve2: left promiscuous mode [ 207.548155][ T7798] bond1: left promiscuous mode [ 207.567969][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1258'. [ 207.598907][ T7798] veth3: left promiscuous mode [ 207.625688][ T7798] veth3: left allmulticast mode [ 207.671637][ T7798] veth5: left promiscuous mode [ 207.730460][ T6435] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.768471][ T6435] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.805861][ T6435] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.847900][ T6435] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.920933][ T7816] netlink: 'syz.0.1263': attribute type 4 has an invalid length. [ 207.937671][ T7819] tipc: Started in network mode [ 207.949052][ T7819] tipc: Node identity , cluster identity 4711 [ 207.969618][ T7819] tipc: Failed to obtain node identity [ 207.989887][ T7819] tipc: Enabling of bearer rejected, failed to enable media [ 208.053552][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.169753][ T7839] loop2: detected capacity change from 0 to 256 [ 208.198209][ T7839] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0177777777777777777777701777777777777777777777ÿÿÿÿÿÿÿÿ0xffffffffffffffffÿ' [ 208.311593][ T7839] syzkaller1: entered allmulticast mode [ 208.681472][ T7873] tmpfs: Unknown parameter 'sizZ' [ 210.198591][ T7911] netlink: 'syz.4.1297': attribute type 4 has an invalid length. [ 210.311024][ T7916] loop1: detected capacity change from 0 to 512 [ 210.338143][ T7916] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 210.414158][ T7916] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1298: corrupted in-inode xattr: invalid ea_ino [ 210.559102][ T7916] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 210.559376][ T7916] EXT4-fs (loop1): Remounting filesystem read-only [ 210.576080][ T7916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.338830][ T7941] tun0: tun_chr_ioctl cmd 1074025677 [ 211.367937][ T7941] tun0: linktype set to 27 [ 211.373728][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.384916][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 211.384930][ T28] audit: type=1400 audit(1774087051.559:1865): avc: denied { create } for pid=7948 comm="syz.4.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 211.975128][ T7970] loop2: detected capacity change from 0 to 512 [ 212.098127][ T7970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.137047][ T7970] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.180290][ T28] audit: type=1400 audit(1774087052.349:1866): avc: denied { append } for pid=7968 comm="syz.2.1315" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.222201][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.239021][ T7977] loop1: detected capacity change from 0 to 512 [ 212.263938][ T7977] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #11: comm syz.1.1318: iget: bad extended attribute block 3153 [ 212.289607][ T7977] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.294711][ T7977] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1318: couldn't read orphan inode 11 (err -117) [ 212.303908][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 212.303930][ C0] EXT4-fs (loop1): initial error at time 1774087052: ext4_orphan_get:1391: inode 11 [ 212.303966][ C0] EXT4-fs (loop1): last error at time 1774087052: ext4_orphan_get:1391: inode 11 [ 212.340853][ T7977] loop1: lost filesystem error report for type 5 error -117 [ 212.369956][ T7977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.420962][ T7983] loop2: detected capacity change from 0 to 512 [ 212.434977][ T7983] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 212.466118][ T7983] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1319: corrupted in-inode xattr: invalid ea_ino [ 212.480389][ T7983] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 212.490981][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 212.506695][ C1] EXT4-fs (loop2): initial error at time 1774087052: ext4_iget_extra_inode:5025: inode 15 [ 212.516645][ C1] EXT4-fs (loop2): last error at time 1774087052: ext4_iget_extra_inode:5025: inode 15 [ 212.531371][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.541269][ T7983] EXT4-fs (loop2): Remounting filesystem read-only [ 212.548109][ T7983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.655072][ T7990] loop1: detected capacity change from 0 to 512 [ 213.058460][ T28] audit: type=1400 audit(1774087053.219:1867): avc: denied { connect } for pid=8008 comm="syz.4.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.082110][ T28] audit: type=1400 audit(1774087053.229:1868): avc: denied { read } for pid=8008 comm="syz.4.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.117156][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.177645][ T8015] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 213.193178][ T8018] loop2: detected capacity change from 0 to 764 [ 213.201730][ T8015] loop0: detected capacity change from 0 to 512 [ 213.267655][ T8018] rock: directory entry would overflow storage [ 213.274370][ T8018] rock: sig=0x4654, size=5, remaining=4 [ 213.298133][ T8015] EXT4-fs (loop0): 1 truncate cleaned up [ 213.299138][ T28] audit: type=1400 audit(1774087053.459:1869): avc: denied { mount } for pid=8017 comm="syz.2.1329" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 213.312905][ T8015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.364764][ T8022] SELinux: failed to load policy [ 213.370455][ T28] audit: type=1400 audit(1774087053.459:1870): avc: denied { read } for pid=8017 comm="syz.2.1329" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 213.400668][ T28] audit: type=1400 audit(1774087053.529:1871): avc: denied { load_policy } for pid=8017 comm="syz.2.1329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 213.578444][ T28] audit: type=1400 audit(1774087053.739:1872): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 213.609358][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.631093][ T8025] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 213.642234][ T8025] loop2: detected capacity change from 0 to 512 [ 213.732591][ T28] audit: type=1400 audit(1774087053.899:1873): avc: denied { map } for pid=8028 comm="syz.3.1333" path="socket:[18901]" dev="sockfs" ino=18901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 213.789109][ T8025] EXT4-fs (loop2): 1 truncate cleaned up [ 213.817554][ T8025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.848837][ T8037] loop0: detected capacity change from 0 to 512 [ 213.860930][ T8037] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #11: comm syz.0.1331: iget: bad extended attribute block 3153 [ 213.909744][ T8037] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 213.913110][ T8037] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1331: couldn't read orphan inode 11 (err -117) [ 213.922479][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 213.922501][ C0] EXT4-fs (loop0): initial error at time 1774087054: ext4_orphan_get:1391: inode 11 [ 213.922536][ C0] EXT4-fs (loop0): last error at time 1774087054: ext4_orphan_get:1391: inode 11 [ 214.053883][ T8037] loop0: lost filesystem error report for type 5 error -117 [ 214.054728][ T8037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.140709][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.347380][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.382695][ T28] audit: type=1400 audit(1774087054.550:1874): avc: denied { attach_queue } for pid=8062 comm="syz.0.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 214.482481][ T8067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1342'. [ 214.766302][ T8071] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 214.877189][ T8073] loop2: detected capacity change from 0 to 512 [ 215.022908][ T8073] EXT4-fs (loop2): 1 truncate cleaned up [ 215.059919][ T8073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.264238][ T8088] tmpfs: Unknown parameter 'sizZ' [ 215.541122][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1354'. [ 215.584716][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.884932][ T8116] loop2: detected capacity change from 0 to 1024 [ 215.911303][ T8116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.139437][ T8116] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 623: comm syz.2.1353: Attempting to read directory block (623) that is past i_size (638464) [ 216.167671][ T8116] EXT4-fs (loop2): Remounting filesystem read-only [ 216.174732][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1360'. [ 216.346068][ T8129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1361'. [ 216.568290][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.689461][ T8131] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 216.722439][ T8131] loop1: detected capacity change from 0 to 512 [ 216.747557][ T8131] EXT4-fs (loop1): 1 truncate cleaned up [ 216.787351][ T8131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.015272][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1369'. [ 217.044683][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 217.044701][ T28] audit: type=1400 audit(1774087057.210:1879): avc: denied { ioctl } for pid=8146 comm="syz.2.1367" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 217.045609][ T8147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.084848][ T8147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.124447][ T8147] SELinux: policydb magic number 0x112 does not match expected magic number 0xf97cff8c [ 217.134740][ T8147] SELinux: failed to load policy [ 217.171839][ T8160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1371'. [ 217.212764][ T8164] tmpfs: Unknown parameter 'sizZ' [ 217.370154][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.423566][ T8171] loop0: detected capacity change from 0 to 512 [ 217.432095][ T28] audit: type=1400 audit(1774087057.600:1880): avc: denied { audit_read } for pid=8172 comm="syz.1.1376" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 217.603746][ T8171] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 217.789547][ T8171] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.1378: corrupted in-inode xattr: invalid ea_ino [ 217.901284][ T8171] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 217.904950][ T8171] EXT4-fs (loop0): Remounting filesystem read-only [ 217.914144][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 217.914167][ C0] EXT4-fs (loop0): initial error at time 1774087058: ext4_iget_extra_inode:5025: inode 15 [ 217.914207][ C0] EXT4-fs (loop0): last error at time 1774087058: ext4_iget_extra_inode:5025: inode 15 [ 218.079448][ T8186] loop2: detected capacity change from 0 to 128 [ 218.087661][ T8171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.218381][ T8186] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 218.262057][ T8186] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 218.593195][ T8193] loop2: detected capacity change from 0 to 1024 [ 218.604507][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.614991][ T8193] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 218.680083][ T8193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.775523][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.787020][ T8204] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 218.825534][ T8204] loop0: detected capacity change from 0 to 512 [ 218.858908][ T8204] EXT4-fs (loop0): 1 truncate cleaned up [ 218.867488][ T8204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.085424][ T8219] loop2: detected capacity change from 0 to 128 [ 219.104897][ T8223] bond3: option arp_interval: invalid value (18446744073709490066) [ 219.135501][ T8223] bond3: option arp_interval: allowed values 0 - 2147483647 [ 219.155705][ T8219] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 219.181888][ T8223] bond3 (unregistering): Released all slaves [ 219.199680][ T8219] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 219.422347][ T8227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1380'. [ 219.585012][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.815004][ T8229] loop1: detected capacity change from 0 to 1024 [ 219.840678][ T8231] loop0: detected capacity change from 0 to 512 [ 219.851187][ T8233] loop2: detected capacity change from 0 to 128 [ 219.881604][ T8229] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 219.906400][ T8231] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 219.916156][ T8233] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 219.942633][ T8231] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.1396: corrupted in-inode xattr: invalid ea_ino [ 219.956384][ T8231] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.967538][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 219.983177][ C0] EXT4-fs (loop0): initial error at time 1774087060: ext4_iget_extra_inode:5025: inode 15 [ 219.993111][ C0] EXT4-fs (loop0): last error at time 1774087060: ext4_iget_extra_inode:5025: inode 15 [ 220.013467][ T8231] EXT4-fs (loop0): Remounting filesystem read-only [ 220.021156][ T8233] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 220.026042][ T8231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.052031][ T8229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.087310][ T8238] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1399'. [ 220.102006][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 220.111093][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1398'. [ 220.124878][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 220.134084][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1398'. [ 220.141202][ T415] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.154486][ T415] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.165790][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.176118][ T8238] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1399'. [ 220.194853][ T415] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.210222][ T415] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.384389][ T8260] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 220.454849][ T8264] syzkaller1: entered promiscuous mode [ 220.477616][ T8264] syzkaller1: entered allmulticast mode [ 220.643020][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.698590][ T8272] tmpfs: Unknown parameter 'sizZ' [ 220.713068][ T8251] FAULT_INJECTION: forcing a failure. [ 220.713068][ T8251] name failslab, interval 1, probability 0, space 0, times 0 [ 220.746051][ T28] audit: type=1400 audit(1774087060.910:1881): avc: denied { setopt } for pid=8270 comm="syz.2.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 220.765908][ T8251] CPU: 0 UID: 0 PID: 8251 Comm: syz.1.1403 Tainted: G W syzkaller #0 PREEMPT(full) [ 220.765947][ T8251] Tainted: [W]=WARN [ 220.765954][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.766046][ T8251] Call Trace: [ 220.766054][ T8251] [ 220.766062][ T8251] __dump_stack+0x1d/0x30 [ 220.766093][ T8251] dump_stack_lvl+0x95/0xd0 [ 220.766177][ T8251] dump_stack+0x15/0x1b [ 220.766262][ T8251] should_fail_ex+0x263/0x280 [ 220.766295][ T8251] should_failslab+0x8c/0xb0 [ 220.766317][ T8251] __kmalloc_noprof+0xb8/0x4e0 [ 220.766345][ T8251] ? iovec_from_user+0x84/0x200 [ 220.766398][ T8251] iovec_from_user+0x84/0x200 [ 220.766440][ T8251] __import_iovec+0xf3/0x530 [ 220.766537][ T8251] ? import_iovec+0x46/0x80 [ 220.766581][ T8251] import_iovec+0x60/0x80 [ 220.766614][ T8251] ___sys_sendmsg+0x160/0x1e0 [ 220.766713][ T8251] __sys_sendmmsg+0x185/0x320 [ 220.766824][ T8251] __x64_sys_sendmmsg+0x57/0x70 [ 220.766873][ T8251] x64_sys_call+0x27aa/0x3020 [ 220.766906][ T8251] do_syscall_64+0x12c/0x370 [ 220.766939][ T8251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.767042][ T8251] RIP: 0033:0x7f774256c799 [ 220.767062][ T8251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.767083][ T8251] RSP: 002b:00007f7740fc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 220.767108][ T8251] RAX: ffffffffffffffda RBX: 00007f77427e5fa0 RCX: 00007f774256c799 [ 220.767125][ T8251] RDX: 0000000000000002 RSI: 00002000000060c0 RDI: 0000000000000005 [ 220.767139][ T8251] RBP: 00007f7740fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 220.767211][ T8251] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.767227][ T8251] R13: 00007f77427e6038 R14: 00007f77427e5fa0 R15: 00007ffeb81ba788 [ 220.767252][ T8251] [ 221.112962][ T8281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1414'. [ 221.146566][ T8281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1414'. [ 221.202017][ T8289] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1417'. [ 221.518391][ T8305] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 221.843005][ T8310] loop0: detected capacity change from 0 to 256 [ 221.909467][ T8310] vfat: Unknown parameter '@' [ 221.984528][ T28] audit: type=1326 audit(1774087062.150:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4879fc799 code=0x7ffc0000 [ 222.038400][ T28] audit: type=1326 audit(1774087062.150:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd4879fc799 code=0x7ffc0000 [ 222.097898][ T28] audit: type=1326 audit(1774087062.150:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4879fc799 code=0x7ffc0000 [ 222.147462][ T28] audit: type=1326 audit(1774087062.160:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4879fc799 code=0x7ffc0000 [ 222.197377][ T28] audit: type=1326 audit(1774087062.160:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4879fc799 code=0x7ffc0000 [ 222.273756][ T28] audit: type=1326 audit(1774087062.170:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd4879fc799 code=0x7ffc0000 [ 222.340686][ T28] audit: type=1326 audit(1774087062.170:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4879fc799 code=0x7ffc0000 [ 222.502656][ T28] audit: type=1326 audit(1774087062.170:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd4879fc799 code=0x7ffc0000 [ 222.526398][ T28] audit: type=1326 audit(1774087062.170:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4879fc799 code=0x7ffc0000 [ 222.839391][ T28] audit: type=1400 audit(1774087063.011:1891): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 224.043806][ T8354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1440'. [ 224.086006][ T8354] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8354 comm=syz.3.1440 [ 224.111904][ T8356] loop2: detected capacity change from 0 to 1024 [ 224.134405][ T8356] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 224.160166][ T8356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.214508][ T8366] loop0: detected capacity change from 0 to 1024 [ 224.232185][ T8366] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.280244][ T8366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.292757][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.542042][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.580557][ T8375] loop1: detected capacity change from 0 to 512 [ 224.599886][ T8375] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 224.687397][ T8375] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1446: corrupted in-inode xattr: invalid ea_ino [ 224.762708][ T8375] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 224.764233][ T8375] EXT4-fs (loop1): Remounting filesystem read-only [ 224.773426][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 224.773467][ C0] EXT4-fs (loop1): initial error at time 1774087064: ext4_iget_extra_inode:5025: inode 15 [ 224.773510][ C0] EXT4-fs (loop1): last error at time 1774087064: ext4_iget_extra_inode:5025: inode 15 [ 224.806620][ T8375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.087261][ T28] audit: type=1400 audit(1774087065.161:1892): avc: denied { mounton } for pid=8374 comm="syz.1.1446" path="/325/bus" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.304845][ T8390] loop2: detected capacity change from 0 to 128 [ 226.359377][ T5112] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.427743][ T28] audit: type=1400 audit(1774087066.591:1893): avc: denied { read } for pid=8392 comm="syz.0.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 226.460029][ T8393] loop0: detected capacity change from 0 to 164 [ 226.490331][ T8393] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 226.616224][ T3312] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 226.625543][ T3312] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 226.686878][ T8399] mmap: syz.2.1452 (8399) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 226.922245][ T8418] loop2: detected capacity change from 0 to 512 [ 226.942371][ T8400] chnl_net:caif_netlink_parms(): no params data found [ 226.981134][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.988748][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.995959][ T8400] bridge_slave_0: entered allmulticast mode [ 227.002672][ T8400] bridge_slave_0: entered promiscuous mode [ 227.013355][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.026134][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.036183][ T8400] bridge_slave_1: entered allmulticast mode [ 227.043025][ T8400] bridge_slave_1: entered promiscuous mode [ 227.065267][ T8400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.076109][ T8400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.104680][ T8400] team0: Port device team_slave_0 added [ 227.112385][ T8400] team0: Port device team_slave_1 added [ 227.134340][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.141453][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.167659][ T8400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.178988][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.186008][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.249446][ T8400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.305549][ T8400] hsr_slave_0: entered promiscuous mode [ 227.311938][ T8400] hsr_slave_1: entered promiscuous mode [ 227.318592][ T8400] debugfs: 'hsr0' already exists in 'hsr' [ 227.324339][ T8400] Cannot create hsr debugfs directory [ 227.398494][ T6421] bridge_slave_1: left allmulticast mode [ 227.404235][ T6421] bridge_slave_1: left promiscuous mode [ 227.411967][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 227.411992][ T28] audit: type=1400 audit(1774087067.581:1942): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 227.478314][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.486978][ T6421] bridge_slave_0: left allmulticast mode [ 227.492703][ T6421] bridge_slave_0: left promiscuous mode [ 227.623827][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.970230][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.980896][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.991072][ T6421] bond0 (unregistering): Released all slaves [ 228.000049][ T6421] bond1 (unregistering): Released all slaves [ 228.010976][ T6421] bond2 (unregistering): Released all slaves [ 228.021583][ T6421] bond3 (unregistering): Released all slaves [ 228.057512][ T8448] loop2: detected capacity change from 0 to 1764 [ 228.424595][ T6421] hsr_slave_0: left promiscuous mode [ 228.479218][ T6421] hsr_slave_1: left promiscuous mode [ 228.503952][ T8455] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 228.524607][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.580577][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.633806][ T28] audit: type=1400 audit(1774087068.791:1943): avc: denied { read open } for pid=8459 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.823628][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.009570][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 229.037055][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 229.943152][ T8474] netlink: 'syz.2.1466': attribute type 21 has an invalid length. [ 230.010252][ T8474] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1466'. [ 230.048540][ T8476] xt_hashlimit: size too large, truncated to 1048576 [ 230.080273][ T8474] netlink: 'syz.2.1466': attribute type 4 has an invalid length. [ 230.108810][ T8474] netlink: 'syz.2.1466': attribute type 5 has an invalid length. [ 230.139099][ T8474] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1466'. [ 230.317202][ T8400] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.346843][ T8400] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.371982][ T8427] chnl_net:caif_netlink_parms(): no params data found [ 230.401897][ T8400] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.440289][ T6421] IPVS: stop unused estimator thread 0... [ 230.447452][ T8400] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.457762][ T28] audit: type=1400 audit(1774087070.631:1944): avc: denied { setopt } for pid=8499 comm="syz.2.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 230.484070][ T28] audit: type=1400 audit(1774087070.631:1945): avc: denied { connect } for pid=8499 comm="syz.2.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 230.543040][ T8427] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.550336][ T8427] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.557568][ T8427] bridge_slave_0: entered allmulticast mode [ 230.564003][ T8427] bridge_slave_0: entered promiscuous mode [ 230.577734][ T6421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.588467][ T6421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.600043][ T8427] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.607267][ T8427] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.614403][ T8427] bridge_slave_1: entered allmulticast mode [ 230.621123][ T8427] bridge_slave_1: entered promiscuous mode [ 230.642045][ T8427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.655707][ T8427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.668370][ T6421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.678949][ T6421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.711368][ T8427] team0: Port device team_slave_0 added [ 230.718395][ T8427] team0: Port device team_slave_1 added [ 230.741451][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.748574][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.784144][ T8427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.795679][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.802782][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.829090][ T8427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.843334][ T6421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.853921][ T6421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.883382][ T8427] hsr_slave_0: entered promiscuous mode [ 230.889562][ T8427] hsr_slave_1: entered promiscuous mode [ 230.910640][ T6421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.921490][ T6421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.934654][ T8400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.963297][ T8400] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.001044][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.008232][ T6428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.068937][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.076062][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.096406][ T6421] bridge_slave_1: left allmulticast mode [ 231.103095][ T6421] bridge_slave_1: left promiscuous mode [ 231.117534][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.125598][ T6421] bridge_slave_0: left allmulticast mode [ 231.132089][ T6421] bridge_slave_0: left promiscuous mode [ 231.179750][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.378892][ T8556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1474'. [ 231.533489][ T6421] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 231.681594][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.693661][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.708428][ T6421] bond0 (unregistering): Released all slaves [ 231.718901][ T6421] bond1 (unregistering): Released all slaves [ 231.732659][ T6421] bond2 (unregistering): Released all slaves [ 231.746951][ T6421] bond3 (unregistering): Released all slaves [ 231.760018][ T6421] bond4 (unregistering): Released all slaves [ 231.773444][ T6421] bond5 (unregistering): Released all slaves [ 231.936768][ T8559] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 231.990069][ T6421] tipc: Disabling bearer [ 232.010355][ T6421] tipc: Left network mode [ 232.014881][ T8400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.086017][ T6421] hsr_slave_0: left promiscuous mode [ 232.140470][ T8570] loop2: detected capacity change from 0 to 1024 [ 232.162859][ T6421] hsr_slave_1: left promiscuous mode [ 232.170162][ T8570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.177664][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.205095][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.213344][ T8570] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 623: comm syz.2.1476: Attempting to read directory block (623) that is past i_size (638464) [ 232.230046][ T8570] EXT4-fs (loop2): Remounting filesystem read-only [ 232.230084][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.244635][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.257532][ T6421] veth1_macvtap: left promiscuous mode [ 232.263080][ T6421] veth0_macvtap: left promiscuous mode [ 232.268767][ T6421] veth1_vlan: left promiscuous mode [ 232.274014][ T6421] veth0_vlan: left promiscuous mode [ 232.346544][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 232.356493][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 232.392655][ T8427] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 232.401901][ T8427] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 232.411362][ T8427] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 232.420949][ T8427] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 232.444013][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.542715][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.574877][ T8427] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.595101][ T8599] futex_wake_op: syz.3.1480 tries to shift op by 32; fix this program [ 232.599215][ T8400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.622960][ T4633] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.630122][ T4633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.672887][ T8617] FAULT_INJECTION: forcing a failure. [ 232.672887][ T8617] name failslab, interval 1, probability 0, space 0, times 0 [ 232.686663][ T8617] CPU: 1 UID: 0 PID: 8617 Comm: syz.2.1483 Tainted: G W syzkaller #0 PREEMPT(full) [ 232.686713][ T8617] Tainted: [W]=WARN [ 232.686722][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 232.686738][ T8617] Call Trace: [ 232.686743][ T8617] [ 232.686750][ T8617] __dump_stack+0x1d/0x30 [ 232.686776][ T8617] dump_stack_lvl+0x95/0xd0 [ 232.686801][ T8617] dump_stack+0x15/0x1b [ 232.686824][ T8617] should_fail_ex+0x263/0x280 [ 232.686932][ T8617] should_failslab+0x8c/0xb0 [ 232.686951][ T8617] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 232.686994][ T8617] ? __alloc_skb+0x2d6/0x690 [ 232.687054][ T8617] __alloc_skb+0x2d6/0x690 [ 232.687078][ T8617] ? __alloc_skb+0x200/0x690 [ 232.687102][ T8617] netlink_alloc_large_skb+0xbf/0xf0 [ 232.687210][ T8617] netlink_sendmsg+0x40c/0x6f0 [ 232.687258][ T8617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.687296][ T8617] ____sys_sendmsg+0x563/0x5b0 [ 232.687373][ T8617] ___sys_sendmsg+0x195/0x1e0 [ 232.687408][ T8617] ? path_openat+0x1b01/0x2050 [ 232.687456][ T8617] __sys_sendmmsg+0x185/0x320 [ 232.687515][ T8617] __x64_sys_sendmmsg+0x57/0x70 [ 232.687552][ T8617] x64_sys_call+0x27aa/0x3020 [ 232.687583][ T8617] do_syscall_64+0x12c/0x370 [ 232.687712][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.687814][ T8617] RIP: 0033:0x7fe517f0c799 [ 232.687832][ T8617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.687851][ T8617] RSP: 002b:00007fe51695f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 232.687872][ T8617] RAX: ffffffffffffffda RBX: 00007fe518185fa0 RCX: 00007fe517f0c799 [ 232.687884][ T8617] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 232.687897][ T8617] RBP: 00007fe51695f090 R08: 0000000000000000 R09: 0000000000000000 [ 232.687961][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.687975][ T8617] R13: 00007fe518186038 R14: 00007fe518185fa0 R15: 00007ffe010c3518 [ 232.687996][ T8617] [ 233.490279][ T8615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1480'. [ 233.499399][ T8615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1480'. [ 233.576188][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.583371][ T6428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.710931][ T8427] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.722377][ T8427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.968073][ T8643] loop2: detected capacity change from 0 to 1024 [ 234.201356][ T8643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.287317][ T8400] veth0_vlan: entered promiscuous mode [ 234.338414][ T8643] EXT4-fs error (device loop2): ext4_empty_dir:3107: inode #11: block 623: comm syz.2.1487: Attempting to read directory block (623) that is past i_size (638464) [ 234.368895][ T8400] veth1_vlan: entered promiscuous mode [ 234.461114][ T8400] veth0_macvtap: entered promiscuous mode [ 234.473042][ T8643] EXT4-fs (loop2): Remounting filesystem read-only [ 234.512194][ T8400] veth1_macvtap: entered promiscuous mode [ 234.586135][ T8427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.610351][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.612638][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.657638][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.701905][ T6421] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.720361][ T6421] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.738099][ T8681] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 234.758016][ T6421] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.783887][ T8687] loop2: detected capacity change from 0 to 2048 [ 234.813029][ T6421] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.850015][ T28] audit: type=1400 audit(1774087075.022:1946): avc: denied { mounton } for pid=8400 comm="syz-executor" path="/root/syzkaller.K1MP1k/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 234.900340][ T8687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.985864][ T28] audit: type=1400 audit(1774087075.022:1947): avc: denied { mount } for pid=8400 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 235.036827][ T8687] team0: Device vxcan3 is of different type [ 235.067167][ T28] audit: type=1400 audit(1774087075.022:1948): avc: denied { mounton } for pid=8400 comm="syz-executor" path="/root/syzkaller.K1MP1k/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 235.090115][ T8714] loop5: detected capacity change from 0 to 128 [ 235.100709][ T28] audit: type=1400 audit(1774087075.022:1949): avc: denied { mounton } for pid=8400 comm="syz-executor" path="/root/syzkaller.K1MP1k/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 235.143792][ T28] audit: type=1400 audit(1774087075.052:1950): avc: denied { mounton } for pid=8400 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 235.192782][ T28] audit: type=1400 audit(1774087075.052:1951): avc: denied { mount } for pid=8400 comm="syz-executor" name="/" dev="gadgetfs" ino=3673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 235.225830][ T28] audit: type=1400 audit(1774087075.202:1952): avc: denied { ioctl } for pid=8686 comm="syz.2.1491" path="/258/file0/bus" dev="loop2" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 235.287313][ T8725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8725 comm=syz.5.1495 [ 235.295770][ T28] audit: type=1400 audit(1774087075.452:1953): avc: denied { write } for pid=8724 comm="syz.5.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.342976][ T8427] veth0_vlan: entered promiscuous mode [ 235.357487][ T8427] veth1_vlan: entered promiscuous mode [ 235.363254][ T28] audit: type=1400 audit(1774087075.522:1954): avc: denied { setopt } for pid=8724 comm="syz.5.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.400062][ T8427] veth0_macvtap: entered promiscuous mode [ 235.418998][ T8427] veth1_macvtap: entered promiscuous mode [ 235.431124][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.449347][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.494122][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.505113][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.519265][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.561614][ T8736] loop2: detected capacity change from 0 to 128 [ 235.576923][ T8736] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 235.589568][ T8736] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 235.607050][ T8729] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.614342][ T8729] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.660336][ T8729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.670313][ T8729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.687231][ T28] audit: type=1400 audit(1774087075.862:1955): avc: denied { cpu } for pid=8737 comm="syz.4.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 235.724823][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.733836][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.744513][ T59] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.755292][ T59] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.766788][ T59] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.776144][ T59] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.813386][ T8747] futex_wake_op: syz.4.1501 tries to shift op by -1; fix this program [ 235.889216][ T8756] loop6: detected capacity change from 0 to 512 [ 235.906020][ T8757] tmpfs: Unknown parameter 'sizZ' [ 235.996915][ T8756] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 236.079358][ T8756] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.1460: corrupted in-inode xattr: invalid ea_ino [ 236.095955][ T8756] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 236.096165][ T8756] EXT4-fs (loop6): Remounting filesystem read-only [ 236.111882][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 236.111905][ C1] EXT4-fs (loop6): initial error at time 1774087076: ext4_iget_extra_inode:5025: inode 15 [ 236.111931][ C1] EXT4-fs (loop6): last error at time 1774087076: ext4_iget_extra_inode:5025: inode 15 [ 236.146103][ T8770] FAULT_INJECTION: forcing a failure. [ 236.146103][ T8770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.160973][ T8756] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.171868][ T8769] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 236.174541][ T8770] CPU: 0 UID: 0 PID: 8770 Comm: syz.2.1505 Tainted: G W syzkaller #0 PREEMPT(full) [ 236.174740][ T8770] Tainted: [W]=WARN [ 236.174747][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.174759][ T8770] Call Trace: [ 236.174796][ T8770] [ 236.174817][ T8770] __dump_stack+0x1d/0x30 [ 236.174902][ T8770] dump_stack_lvl+0x95/0xd0 [ 236.174982][ T8770] dump_stack+0x15/0x1b [ 236.175119][ T8770] should_fail_ex+0x263/0x280 [ 236.175212][ T8770] should_fail+0xb/0x20 [ 236.175349][ T8770] should_fail_usercopy+0x1a/0x20 [ 236.175482][ T8770] _copy_from_iter+0xcf/0xea0 [ 236.175660][ T8770] ? __alloc_skb+0x4f6/0x690 [ 236.175737][ T8770] ? __alloc_skb+0x200/0x690 [ 236.175826][ T8770] netlink_sendmsg+0x4ae/0x6f0 [ 236.175985][ T8770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.176078][ T8770] sock_write_iter+0x2e8/0x320 [ 236.176146][ T8770] do_iter_readv_writev+0x4fd/0x5a0 [ 236.176258][ T8770] vfs_writev+0x2e1/0x900 [ 236.176357][ T8770] do_writev+0xe9/0x210 [ 236.176424][ T8770] __x64_sys_writev+0x45/0x50 [ 236.176506][ T8770] x64_sys_call+0x1c0c/0x3020 [ 236.176581][ T8770] do_syscall_64+0x12c/0x370 [ 236.176653][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.176735][ T8770] RIP: 0033:0x7fe517f0c799 [ 236.176781][ T8770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.176872][ T8770] RSP: 002b:00007fe51695f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 236.176924][ T8770] RAX: ffffffffffffffda RBX: 00007fe518185fa0 RCX: 00007fe517f0c799 [ 236.176968][ T8770] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 236.177005][ T8770] RBP: 00007fe51695f090 R08: 0000000000000000 R09: 0000000000000000 [ 236.177042][ T8770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.177078][ T8770] R13: 00007fe518186038 R14: 00007fe518185fa0 R15: 00007ffe010c3518 [ 236.177128][ T8770] [ 236.517556][ T8785] loop2: detected capacity change from 0 to 512 [ 236.540683][ T8785] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #11: comm syz.2.1511: iget: bad extended attribute block 3153 [ 236.564118][ T8785] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 236.566659][ T8785] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1511: couldn't read orphan inode 11 (err -117) [ 236.585578][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 236.594060][ C0] EXT4-fs (loop2): initial error at time 1774087076: ext4_orphan_get:1391: inode 11 [ 236.603525][ C0] EXT4-fs (loop2): last error at time 1774087076: ext4_orphan_get:1391: inode 11 [ 236.635767][ T8794] FAULT_INJECTION: forcing a failure. [ 236.635767][ T8794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.659196][ T8785] loop2: lost filesystem error report for type 5 error -117 [ 236.659656][ T8785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.686124][ T8794] CPU: 1 UID: 0 PID: 8794 Comm: syz.3.1514 Tainted: G W syzkaller #0 PREEMPT(full) [ 236.686152][ T8794] Tainted: [W]=WARN [ 236.686158][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.686169][ T8794] Call Trace: [ 236.686174][ T8794] [ 236.686179][ T8794] __dump_stack+0x1d/0x30 [ 236.686202][ T8794] dump_stack_lvl+0x95/0xd0 [ 236.686243][ T8794] dump_stack+0x15/0x1b [ 236.686267][ T8794] should_fail_ex+0x263/0x280 [ 236.686297][ T8794] should_fail+0xb/0x20 [ 236.686365][ T8794] should_fail_usercopy+0x1a/0x20 [ 236.686390][ T8794] strncpy_from_user+0x27/0x250 [ 236.686406][ T8794] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 236.686433][ T8794] do_getname+0x59/0x1c0 [ 236.686517][ T8794] getname_flags+0x1d/0x30 [ 236.686541][ T8794] do_sys_openat2+0x60/0x130 [ 236.686572][ T8794] __x64_sys_creat+0x65/0x90 [ 236.686644][ T8794] x64_sys_call+0x2ea0/0x3020 [ 236.686711][ T8794] do_syscall_64+0x12c/0x370 [ 236.686737][ T8794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.686761][ T8794] RIP: 0033:0x7f21438dc799 [ 236.686812][ T8794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.686829][ T8794] RSP: 002b:00007f2142337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 236.686899][ T8794] RAX: ffffffffffffffda RBX: 00007f2143b55fa0 RCX: 00007f21438dc799 [ 236.686910][ T8794] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000200000000080 [ 236.686921][ T8794] RBP: 00007f2142337090 R08: 0000000000000000 R09: 0000000000000000 [ 236.686933][ T8794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.686943][ T8794] R13: 00007f2143b56038 R14: 00007f2143b55fa0 R15: 00007ffc078158d8 [ 236.686963][ T8794] [ 236.877938][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.062034][ T8809] loop2: detected capacity change from 0 to 128 [ 237.094434][ T8809] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1515'. [ 237.916828][ T8427] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.950020][ T6421] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.165665][ T8841] loop5: detected capacity change from 0 to 1024 [ 238.175573][ T8841] ext4: Unknown parameter 'euid<00000000000000000000' [ 238.204216][ T8841] loop5: detected capacity change from 0 to 512 [ 238.211105][ T8841] EXT4-fs: dax option not supported [ 238.348200][ T8857] loop5: detected capacity change from 0 to 512 [ 238.357606][ T8857] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 238.385646][ T8840] chnl_net:caif_netlink_parms(): no params data found [ 238.395602][ T8857] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1530: corrupted in-inode xattr: invalid ea_ino [ 238.412584][ T8857] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 238.412794][ T8857] EXT4-fs (loop5): Remounting filesystem read-only [ 238.421945][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 238.421967][ C0] EXT4-fs (loop5): initial error at time 1774087078: ext4_iget_extra_inode:5025: inode 15 [ 238.422004][ C0] EXT4-fs (loop5): last error at time 1774087078: ext4_iget_extra_inode:5025: inode 15 [ 238.460566][ T8857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.490010][ T8864] tmpfs: Unknown parameter 'sizZ' [ 238.496606][ T8840] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.503698][ T8840] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.510930][ T8840] bridge_slave_0: entered allmulticast mode [ 238.517513][ T8840] bridge_slave_0: entered promiscuous mode [ 238.524498][ T8840] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.531733][ T8840] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.538950][ T8840] bridge_slave_1: entered allmulticast mode [ 238.545952][ T8840] bridge_slave_1: entered promiscuous mode [ 238.562895][ T8840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.573379][ T8840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.599519][ T8840] team0: Port device team_slave_0 added [ 238.606279][ T8840] team0: Port device team_slave_1 added [ 238.622161][ T8840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.629130][ T8840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.655132][ T8840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.666392][ T8840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.673419][ T8840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.699502][ T8840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.726122][ T6421] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.783110][ T8840] hsr_slave_0: entered promiscuous mode [ 238.794265][ T8840] hsr_slave_1: entered promiscuous mode [ 238.816296][ T8868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.835816][ T8840] debugfs: 'hsr0' already exists in 'hsr' [ 238.841571][ T8840] Cannot create hsr debugfs directory [ 238.866958][ T6421] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.924275][ T6421] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.147715][ T8840] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 239.368517][ T8884] netlink: 'syz.2.1540': attribute type 29 has an invalid length. [ 239.398954][ T8840] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 239.451087][ T8889] netlink: 'syz.2.1540': attribute type 29 has an invalid length. [ 239.502567][ T8893] netlink: 'syz.2.1540': attribute type 4 has an invalid length. [ 239.548789][ T8840] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 239.558620][ T8884] netlink: 'syz.2.1540': attribute type 4 has an invalid length. [ 239.633441][ T8840] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 239.724006][ T8903] loop2: detected capacity change from 0 to 128 [ 239.965730][ T8893] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1540'. [ 240.032763][ T8889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.042823][ T8889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.898612][ T4633] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.978529][ T4633] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.989025][ T8916] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1546'. [ 241.000465][ T8910] netlink: 'syz.2.1540': attribute type 29 has an invalid length. [ 241.011135][ T6421] bridge_slave_1: left allmulticast mode [ 241.017097][ T6421] bridge_slave_1: left promiscuous mode [ 241.022871][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.031123][ T6421] bridge_slave_0: left allmulticast mode [ 241.037075][ T6421] bridge_slave_0: left promiscuous mode [ 241.042709][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.137530][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.147851][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.158228][ T6421] bond0 (unregistering): Released all slaves [ 241.186098][ T4633] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.195464][ T4633] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.235934][ T4633] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.275920][ T4633] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.305184][ T4633] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.324419][ T4633] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.338120][ T8925] loop2: detected capacity change from 0 to 512 [ 241.367417][ T8925] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #11: comm syz.2.1548: iget: bad extended attribute block 3153 [ 241.396637][ T6421] hsr_slave_0: left promiscuous mode [ 241.408757][ T6421] hsr_slave_1: left promiscuous mode [ 241.416332][ T8925] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 241.416494][ T8925] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1548: couldn't read orphan inode 11 (err -117) [ 241.425666][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 241.425680][ C0] EXT4-fs (loop2): initial error at time 1774087081: ext4_orphan_get:1391: inode 11 [ 241.425704][ C0] EXT4-fs (loop2): last error at time 1774087081: ext4_orphan_get:1391: inode 11 [ 241.465447][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.477770][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.492146][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.501357][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.520445][ T6421] veth1_macvtap: left promiscuous mode [ 241.536197][ T6421] veth0_macvtap: left promiscuous mode [ 241.541820][ T8925] loop2: lost filesystem error report for type 5 error -117 [ 241.542389][ T8925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.566859][ T6421] veth1_vlan: left promiscuous mode [ 241.579284][ T6421] veth0_vlan: left promiscuous mode [ 241.712769][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 241.726887][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 241.836487][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.864552][ T8840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.957324][ T8840] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.994102][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.001188][ T6433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.052036][ T8885] chnl_net:caif_netlink_parms(): no params data found [ 242.078633][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.085723][ T6433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.155542][ T8840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.211609][ T8973] FAULT_INJECTION: forcing a failure. [ 242.211609][ T8973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.260359][ T8973] CPU: 1 UID: 0 PID: 8973 Comm: syz.2.1550 Tainted: G W syzkaller #0 PREEMPT(full) [ 242.260395][ T8973] Tainted: [W]=WARN [ 242.260403][ T8973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.260418][ T8973] Call Trace: [ 242.260425][ T8973] [ 242.260432][ T8973] __dump_stack+0x1d/0x30 [ 242.260491][ T8973] dump_stack_lvl+0x95/0xd0 [ 242.260592][ T8973] dump_stack+0x15/0x1b [ 242.260676][ T8973] should_fail_ex+0x263/0x280 [ 242.260705][ T8973] should_fail+0xb/0x20 [ 242.260725][ T8973] should_fail_usercopy+0x1a/0x20 [ 242.260766][ T8973] _copy_from_user+0x1c/0xb0 [ 242.260798][ T8973] user_termios_to_kernel_termios+0x22/0x30 [ 242.260820][ T8973] set_termios+0xd5/0x4f0 [ 242.260885][ T8973] tty_mode_ioctl+0x37f/0x5b0 [ 242.260911][ T8973] ? do_vfs_ioctl+0x84f/0xe70 [ 242.260930][ T8973] ? ldsem_down_read+0xf9/0x4e0 [ 242.261014][ T8973] ? selinux_file_ioctl+0x5f7/0xcb0 [ 242.261038][ T8973] ppp_asynctty_ioctl+0x13f/0x2d0 [ 242.261063][ T8973] ? tty_ioctl+0x82d/0xb80 [ 242.261157][ T8973] ? __pfx_ppp_asynctty_ioctl+0x10/0x10 [ 242.261239][ T8973] tty_ioctl+0x83e/0xb80 [ 242.261369][ T8973] ? __pfx_tty_ioctl+0x10/0x10 [ 242.261396][ T8973] __se_sys_ioctl+0xce/0x140 [ 242.261492][ T8973] __x64_sys_ioctl+0x43/0x50 [ 242.261532][ T8973] x64_sys_call+0x1563/0x3020 [ 242.261564][ T8973] do_syscall_64+0x12c/0x370 [ 242.261593][ T8973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.261750][ T8973] RIP: 0033:0x7fe517f0c799 [ 242.261768][ T8973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.261788][ T8973] RSP: 002b:00007fe51695f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 242.261810][ T8973] RAX: ffffffffffffffda RBX: 00007fe518185fa0 RCX: 00007fe517f0c799 [ 242.261825][ T8973] RDX: 0000200000000a00 RSI: 00000000402c542b RDI: 0000000000000003 [ 242.261859][ T8973] RBP: 00007fe51695f090 R08: 0000000000000000 R09: 0000000000000000 [ 242.261872][ T8973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.261885][ T8973] R13: 00007fe518186038 R14: 00007fe518185fa0 R15: 00007ffe010c3518 [ 242.261906][ T8973] [ 242.495099][ T8983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8983 comm=syz.3.1555 [ 242.517427][ T8885] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.527979][ T8885] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.535206][ T8885] bridge_slave_0: entered allmulticast mode [ 242.541614][ T8885] bridge_slave_0: entered promiscuous mode [ 242.556759][ T8885] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.563838][ T8885] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.573875][ T8885] bridge_slave_1: entered allmulticast mode [ 242.581774][ T8885] bridge_slave_1: entered promiscuous mode [ 242.618811][ T8885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.629730][ T8885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.651037][ T8885] team0: Port device team_slave_0 added [ 242.663290][ T8885] team0: Port device team_slave_1 added [ 242.786850][ T9013] tmpfs: Unknown parameter 'sizZ' [ 242.812696][ T9014] tipc: Enabled bearer , priority 28 [ 242.848626][ T8885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.869615][ T8885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.939068][ T8885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.975796][ T8885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.007286][ T8885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.082895][ T8885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.121140][ T8840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.211816][ T8885] hsr_slave_0: entered promiscuous mode [ 243.232125][ T8885] hsr_slave_1: entered promiscuous mode [ 243.552525][ T8840] veth0_vlan: entered promiscuous mode [ 243.593087][ T8840] veth1_vlan: entered promiscuous mode [ 243.644073][ T8885] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 243.659611][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 243.659629][ T28] audit: type=1400 audit(1774087083.833:1966): avc: denied { write } for pid=9060 comm="syz.4.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 243.697429][ T8885] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 243.714893][ T8885] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 243.732650][ T8885] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 243.749669][ T8840] veth0_macvtap: entered promiscuous mode [ 243.775595][ T8840] veth1_macvtap: entered promiscuous mode [ 243.791604][ T8840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.803321][ T8840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.814088][ T6433] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.849608][ T8885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.861726][ T8885] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.883318][ T8885] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.893772][ T8885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.917461][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.924620][ T6421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.976661][ T6421] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.983801][ T6421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.021549][ T6433] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.040504][ T6433] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.055220][ T9077] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1565'. [ 244.103587][ T6433] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.125105][ T28] audit: type=1400 audit(1774087084.293:1967): avc: denied { getopt } for pid=9075 comm="syz.3.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 244.179364][ T9083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1567'. [ 244.191940][ T8885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.217715][ T9083] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1567'. [ 244.325052][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1527'. [ 244.369726][ T9088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.384106][ T9091] loop2: detected capacity change from 0 to 512 [ 244.425019][ T9091] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #11: comm syz.2.1569: iget: bad extended attribute block 3153 [ 244.464270][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'. [ 244.478170][ T9091] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 244.478357][ T9091] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1569: couldn't read orphan inode 11 (err -117) [ 244.487623][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 244.487643][ C1] EXT4-fs (loop2): initial error at time 1774087084: ext4_orphan_get:1391: inode 11 [ 244.487687][ C1] EXT4-fs (loop2): last error at time 1774087084: ext4_orphan_get:1391: inode 11 [ 244.529066][ T9091] loop2: lost filesystem error report for type 5 error -117 [ 244.535274][ T9091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.555597][ T9111] 8021q: adding VLAN 0 to HW filter on device bond3 [ 244.621491][ T9101] loop7: detected capacity change from 0 to 512 [ 244.628610][ T9101] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 244.692535][ T9101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.776798][ T8840] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.813548][ T8885] veth0_vlan: entered promiscuous mode [ 244.824971][ T8885] veth1_vlan: entered promiscuous mode [ 244.856371][ T8885] veth0_macvtap: entered promiscuous mode [ 244.863818][ T8885] veth1_macvtap: entered promiscuous mode [ 244.871582][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.898533][ T8885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.910479][ T8885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.918700][ T9134] FAULT_INJECTION: forcing a failure. [ 244.918700][ T9134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.937347][ T9134] CPU: 0 UID: 0 PID: 9134 Comm: syz.3.1580 Tainted: G W syzkaller #0 PREEMPT(full) [ 244.937421][ T9134] Tainted: [W]=WARN [ 244.937430][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 244.937454][ T9134] Call Trace: [ 244.937459][ T9134] [ 244.937470][ T9134] __dump_stack+0x1d/0x30 [ 244.937498][ T9134] dump_stack_lvl+0x95/0xd0 [ 244.937552][ T9134] dump_stack+0x15/0x1b [ 244.937573][ T9134] should_fail_ex+0x263/0x280 [ 244.937605][ T9134] should_fail+0xb/0x20 [ 244.937704][ T9134] should_fail_usercopy+0x1a/0x20 [ 244.937853][ T9134] _copy_from_user+0x1c/0xb0 [ 244.937986][ T9134] __se_sys_mount+0x10d/0x2e0 [ 244.938016][ T9134] ? fput+0x8f/0xc0 [ 244.938049][ T9134] ? ksys_write+0x194/0x1a0 [ 244.938134][ T9134] __x64_sys_mount+0x67/0x80 [ 244.938161][ T9134] x64_sys_call+0x2d61/0x3020 [ 244.938189][ T9134] do_syscall_64+0x12c/0x370 [ 244.938214][ T9134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.938303][ T9134] RIP: 0033:0x7f21438dc799 [ 244.938323][ T9134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.938348][ T9134] RSP: 002b:00007f2142337028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 244.938376][ T9134] RAX: ffffffffffffffda RBX: 00007f2143b55fa0 RCX: 00007f21438dc799 [ 244.938394][ T9134] RDX: 0000200000000480 RSI: 0000200000000200 RDI: 0000000000000000 [ 244.938436][ T9134] RBP: 00007f2142337090 R08: 0000200000000100 R09: 0000000000000000 [ 244.938454][ T9134] R10: 0000000000600000 R11: 0000000000000246 R12: 0000000000000001 [ 244.938470][ T9134] R13: 00007f2143b56038 R14: 00007f2143b55fa0 R15: 00007ffc078158d8 [ 244.938495][ T9134] [ 244.938863][ T28] audit: type=1400 audit(1774087085.113:1968): avc: denied { mounton } for pid=9133 comm="syz.3.1580" path="/327/file0" dev="tmpfs" ino=1764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 244.991514][ T415] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.235681][ T9144] loop2: detected capacity change from 0 to 7 [ 245.310284][ T9143] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 245.337604][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1579'. [ 245.373253][ T9143] SELinux: failed to load policy [ 245.430587][ T9132] lo speed is unknown, defaulting to 1000 [ 245.436396][ T9132] lo speed is unknown, defaulting to 1000 [ 245.442850][ T9132] lo speed is unknown, defaulting to 1000 [ 245.449386][ T9132] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 245.457469][ T9132] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 245.488747][ T9132] lo speed is unknown, defaulting to 1000 [ 245.495451][ T9132] lo speed is unknown, defaulting to 1000 [ 245.501753][ T9132] lo speed is unknown, defaulting to 1000 [ 245.507987][ T9132] lo speed is unknown, defaulting to 1000 [ 245.514498][ T9132] lo speed is unknown, defaulting to 1000 [ 245.521049][ T9132] lo speed is unknown, defaulting to 1000 [ 245.565363][ T28] audit: type=1400 audit(1774087085.343:1969): avc: denied { name_bind } for pid=9137 comm="syz.7.1576" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 245.610876][ T415] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.619825][ T415] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.664787][ T6421] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.785371][ T9176] bond4: entered allmulticast mode [ 245.826343][ T9187] loop7: detected capacity change from 0 to 1024 [ 245.842837][ T9176] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.020097][ T9206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9206 comm=syz.3.1591 [ 246.032955][ T28] audit: type=1400 audit(1774087086.193:1970): avc: denied { mount } for pid=9204 comm="syz.8.1592" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 246.084311][ T9187] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.099733][ T9187] EXT4-fs error (device loop7): ext4_empty_dir:3107: inode #11: block 623: comm syz.7.1588: Attempting to read directory block (623) that is past i_size (638464) [ 246.118273][ T9187] EXT4-fs (loop7): Remounting filesystem read-only [ 246.610710][ T8840] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.684955][ T28] audit: type=1400 audit(1774087086.843:1971): avc: denied { ioctl } for pid=9233 comm="syz.2.1599" path="socket:[25795]" dev="sockfs" ino=25795 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.718526][ T9237] syz_tun: entered promiscuous mode [ 246.799863][ T9242] loop7: detected capacity change from 0 to 512 [ 247.684703][ T9242] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.704606][ T9242] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 247.718467][ T28] audit: type=1400 audit(1774087087.893:1972): avc: denied { create } for pid=9241 comm="syz.7.1595" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 247.752042][ T9242] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.1595: corrupted inode contents [ 247.784305][ T9242] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #2: comm syz.7.1595: mark_inode_dirty error [ 247.826328][ T9242] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #2: comm syz.7.1595: corrupted inode contents [ 247.884596][ T9242] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.1595: mark_inode_dirty error [ 247.965964][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1602'. [ 247.980272][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1602'. [ 248.079232][ T9242] EXT4-fs warning (device loop7): ext4_es_cache_extent:1082: inode #2: comm syz.7.1595: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 248.079232][ T9242] [ 248.294211][ T28] audit: type=1400 audit(1774087088.414:1973): avc: denied { read } for pid=9241 comm="syz.7.1595" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 248.568485][ T9262] FAULT_INJECTION: forcing a failure. [ 248.568485][ T9262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.603286][ T9262] CPU: 1 UID: 0 PID: 9262 Comm: syz.3.1603 Tainted: G W syzkaller #0 PREEMPT(full) [ 248.603315][ T9262] Tainted: [W]=WARN [ 248.603321][ T9262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.603332][ T9262] Call Trace: [ 248.603360][ T9262] [ 248.603366][ T9262] __dump_stack+0x1d/0x30 [ 248.603396][ T9262] dump_stack_lvl+0x95/0xd0 [ 248.603474][ T9262] dump_stack+0x15/0x1b [ 248.603493][ T9262] should_fail_ex+0x263/0x280 [ 248.603569][ T9262] should_fail+0xb/0x20 [ 248.603589][ T9262] should_fail_usercopy+0x1a/0x20 [ 248.603679][ T9262] _copy_from_iter+0xcf/0xea0 [ 248.603706][ T9262] ? __alloc_skb+0x4f6/0x690 [ 248.603765][ T9262] ? __alloc_skb+0x200/0x690 [ 248.603790][ T9262] netlink_sendmsg+0x4ae/0x6f0 [ 248.603853][ T9262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.603881][ T9262] ____sys_sendmsg+0x563/0x5b0 [ 248.603921][ T9262] ___sys_sendmsg+0x195/0x1e0 [ 248.604022][ T9262] __x64_sys_sendmsg+0xd4/0x160 [ 248.604190][ T9262] x64_sys_call+0x194c/0x3020 [ 248.604214][ T9262] do_syscall_64+0x12c/0x370 [ 248.604290][ T9262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.604315][ T9262] RIP: 0033:0x7f21438dc799 [ 248.604330][ T9262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.604348][ T9262] RSP: 002b:00007f2142337028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.604438][ T9262] RAX: ffffffffffffffda RBX: 00007f2143b55fa0 RCX: 00007f21438dc799 [ 248.604517][ T9262] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 248.604533][ T9262] RBP: 00007f2142337090 R08: 0000000000000000 R09: 0000000000000000 [ 248.604547][ T9262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.604562][ T9262] R13: 00007f2143b56038 R14: 00007f2143b55fa0 R15: 00007ffc078158d8 [ 248.604586][ T9262] [ 248.901877][ T9265] loop2: detected capacity change from 0 to 1024 [ 248.927900][ T9265] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 249.021889][ T8840] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.042532][ T9265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.266299][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1608'. [ 249.297139][ T28] audit: type=1326 audit(1774087089.474:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21438dc799 code=0x7ffc0000 [ 249.351228][ T28] audit: type=1326 audit(1774087089.474:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f21438dc799 code=0x7ffc0000 [ 249.397397][ T28] audit: type=1326 audit(1774087089.474:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21438dc799 code=0x7ffc0000 [ 249.444935][ T28] audit: type=1326 audit(1774087089.474:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21438dc799 code=0x7ffc0000 [ 249.492535][ T28] audit: type=1326 audit(1774087089.474:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21438dc799 code=0x7ffc0000 [ 249.542161][ T28] audit: type=1326 audit(1774087089.474:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f21438dc799 code=0x7ffc0000 [ 249.590008][ T28] audit: type=1326 audit(1774087089.474:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21438dc799 code=0x7ffc0000 [ 249.641513][ T28] audit: type=1326 audit(1774087089.474:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f21438dc799 code=0x7ffc0000 [ 249.689357][ T28] audit: type=1326 audit(1774087089.474:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21438dc799 code=0x7ffc0000 [ 249.738105][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.774047][ T28] audit: type=1326 audit(1774087089.474:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9276 comm="syz.3.1608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f21438dc799 code=0x7ffc0000 [ 249.858911][ T9286] loop2: detected capacity change from 0 to 512 [ 249.874122][ T9286] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 249.953668][ T9286] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1607: corrupted in-inode xattr: invalid ea_ino [ 249.974537][ T9286] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 249.974697][ T9286] EXT4-fs (loop2): Remounting filesystem read-only [ 249.993944][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 249.999293][ T9305] loop7: detected capacity change from 0 to 512 [ 250.000405][ C0] EXT4-fs (loop2): initial error at time 1774087090: ext4_iget_extra_inode:5025: inode 15 [ 250.000429][ C0] EXT4-fs (loop2): last error at time 1774087090: ext4_iget_extra_inode:5025: inode 15 [ 250.025093][ T9306] vxcan3: entered allmulticast mode [ 250.034224][ T9286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.086516][ T9306] team0: Port device vxcan3 added [ 250.124432][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.577218][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1621'. [ 251.607158][ T9350] tmpfs: Unknown parameter 'sizZ' [ 251.909862][ T9365] loop7: detected capacity change from 0 to 128 [ 251.947247][ T9365] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 252.030684][ T9365] FAT-fs (loop7): Invalid FSINFO signature: 0x00000024, 0x80417272 (sector = 1) [ 252.174360][ T9375] loop7: detected capacity change from 0 to 512 [ 252.201575][ T9375] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 252.264566][ T9375] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.1626: corrupted in-inode xattr: invalid ea_ino [ 252.318687][ T9375] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 252.318850][ T9375] EXT4-fs (loop7): Remounting filesystem read-only [ 252.327997][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 252.328010][ C0] EXT4-fs (loop7): initial error at time 1774087092: ext4_iget_extra_inode:5025: inode 15 [ 252.328049][ C0] EXT4-fs (loop7): last error at time 1774087092: ext4_iget_extra_inode:5025: inode 15 [ 252.442575][ T9375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.527337][ T8840] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.641753][ T9404] netlink: 'syz.2.1631': attribute type 12 has an invalid length. [ 252.661875][ T9404] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1631'. [ 252.750239][ T9421] loop7: detected capacity change from 0 to 1024 [ 252.860376][ T9421] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.905024][ T9421] EXT4-fs error (device loop7): ext4_empty_dir:3107: inode #11: block 623: comm syz.7.1635: Attempting to read directory block (623) that is past i_size (638464) [ 252.940165][ T9436] loop8: detected capacity change from 0 to 1024 [ 252.958704][ T9421] EXT4-fs (loop7): Remounting filesystem read-only [ 252.968086][ T9436] EXT4-fs: Ignoring removed bh option [ 252.973646][ T9436] EXT4-fs: inline encryption not supported [ 252.983437][ T9436] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 253.013818][ T9436] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 253.054034][ T8840] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.067622][ T9436] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 2: comm syz.8.1637: lblock 2 mapped to illegal pblock 2 (length 1) [ 253.155659][ T9436] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 253.156526][ T9436] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 48: comm syz.8.1637: lblock 0 mapped to illegal pblock 48 (length 1) [ 253.165676][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 253.165699][ C0] EXT4-fs (loop8): initial error at time 1774087093: ext4_map_blocks:776: inode 3: block 2 [ 253.165742][ C0] EXT4-fs (loop8): last error at time 1774087093: ext4_map_blocks:776: inode 3: block 2 [ 253.244607][ T9436] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 253.244710][ T9436] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.1637: Failed to acquire dquot type 0 [ 253.267665][ T9462] loop2: detected capacity change from 0 to 512 [ 253.274421][ T9462] EXT4-fs: Ignoring removed oldalloc option [ 253.280665][ T9462] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 253.295037][ T9462] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1643: bad orphan inode 131083 [ 253.305477][ T9462] loop2: lost filesystem error report for type 5 error -117 [ 253.306074][ T9462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.328615][ T9436] loop8: lost filesystem error report for type 5 error -117 [ 253.337392][ T9436] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 253.347112][ T9436] loop8: lost filesystem error report for type 5 error -117 [ 253.381321][ T9436] EXT4-fs error (device loop8): ext4_evict_inode:255: inode #11: comm syz.8.1637: mark_inode_dirty error [ 253.388966][ T9465] loop7: detected capacity change from 0 to 512 [ 253.402180][ T9436] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 253.406645][ T9436] EXT4-fs warning (device loop8): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 253.426354][ T9436] EXT4-fs (loop8): 1 orphan inode deleted [ 253.432511][ T9436] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.445456][ T4633] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 253.457551][ T9465] journal_path: Non-blockdev passed as './bus' [ 253.494763][ T4633] EXT4-fs error (device loop8): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 0 [ 253.503798][ T9465] EXT4-fs: error: could not find journal device path [ 253.682003][ T9490] FAULT_INJECTION: forcing a failure. [ 253.682003][ T9490] name failslab, interval 1, probability 0, space 0, times 0 [ 253.732967][ T9490] CPU: 0 UID: 0 PID: 9490 Comm: syz.3.1648 Tainted: G W syzkaller #0 PREEMPT(full) [ 253.733122][ T9490] Tainted: [W]=WARN [ 253.733131][ T9490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.733147][ T9490] Call Trace: [ 253.733164][ T9490] [ 253.733174][ T9490] __dump_stack+0x1d/0x30 [ 253.733208][ T9490] dump_stack_lvl+0x95/0xd0 [ 253.733255][ T9490] dump_stack+0x15/0x1b [ 253.733284][ T9490] should_fail_ex+0x263/0x280 [ 253.733356][ T9490] should_failslab+0x8c/0xb0 [ 253.733426][ T9490] kmem_cache_alloc_noprof+0x66/0x400 [ 253.733448][ T9490] ? alloc_empty_file+0x76/0x200 [ 253.733485][ T9490] alloc_empty_file+0x76/0x200 [ 253.733585][ T9490] path_openat+0x65/0x2050 [ 253.733628][ T9490] ? _parse_integer_limit+0x170/0x190 [ 253.733708][ T9490] ? _parse_integer+0x27/0x40 [ 253.733735][ T9490] ? kstrtoull+0x111/0x140 [ 253.733775][ T9490] ? kstrtouint+0x76/0xc0 [ 253.733839][ T9490] do_file_open+0x16c/0x290 [ 253.733957][ T9490] do_sys_openat2+0x94/0x130 [ 253.734021][ T9490] __x64_sys_openat+0xf2/0x120 [ 253.734047][ T9490] x64_sys_call+0x1e39/0x3020 [ 253.734141][ T9490] do_syscall_64+0x12c/0x370 [ 253.734247][ T9490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.734341][ T9490] RIP: 0033:0x7f21438dc799 [ 253.734358][ T9490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.734375][ T9490] RSP: 002b:00007f2142337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.734430][ T9490] RAX: ffffffffffffffda RBX: 00007f2143b55fa0 RCX: 00007f21438dc799 [ 253.734566][ T9490] RDX: 00000000000800c4 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 253.734586][ T9490] RBP: 00007f2142337090 R08: 0000000000000000 R09: 0000000000000000 [ 253.734599][ T9490] R10: 0000000000000142 R11: 0000000000000246 R12: 0000000000000001 [ 253.734665][ T9490] R13: 00007f2143b56038 R14: 00007f2143b55fa0 R15: 00007ffc078158d8 [ 253.734691][ T9490] [ 253.970159][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.006536][ T8885] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.047263][ T8885] EXT4-fs error (device loop8): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 254.063023][ T8885] loop8: lost filesystem error report for type 5 error -117 [ 254.063129][ T8885] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 254.083988][ T8885] loop8: lost filesystem error report for type 5 error -117 [ 254.084062][ T8885] EXT4-fs error (device loop8): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 254.116197][ T8885] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 254.148773][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1654'. [ 254.168197][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'. [ 254.182609][ T9511] netlink: 'syz.3.1654': attribute type 15 has an invalid length. [ 254.193503][ T9511] netlink: 'syz.3.1654': attribute type 18 has an invalid length. [ 254.219564][ T9513] loop8: detected capacity change from 0 to 512 [ 254.243262][ T9513] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #11: comm syz.8.1650: iget: bad extended attribute block 3153 [ 254.256230][ T9516] syzkaller1: entered promiscuous mode [ 254.261837][ T9513] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 254.263430][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 254.279043][ C1] EXT4-fs (loop8): initial error at time 1774087094: ext4_orphan_get:1391: inode 11 [ 254.288503][ C1] EXT4-fs (loop8): last error at time 1774087094: ext4_orphan_get:1391: inode 11 [ 254.292881][ T9516] syzkaller1: entered allmulticast mode [ 254.298529][ T9513] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1650: couldn't read orphan inode 11 (err -117) [ 254.315486][ T9513] loop8: lost filesystem error report for type 5 error -117 [ 254.321566][ T9513] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.482844][ T8885] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.539371][ T9529] tmpfs: Unknown parameter 'sizZ' [ 254.634766][ T9531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1657'. [ 254.756687][ T9532] loop7: detected capacity change from 0 to 1024 [ 254.876041][ T9532] EXT4-fs (loop7): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 254.996088][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 254.996112][ T28] audit: type=1400 audit(1774087095.154:2091): avc: denied { name_bind } for pid=9534 comm="syz.8.1662" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 255.077843][ T9540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9540 comm=syz.2.1663 [ 255.089740][ T28] audit: type=1400 audit(1774087095.204:2092): avc: denied { node_bind } for pid=9534 comm="syz.8.1662" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 255.135288][ T9532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.239571][ T9546] loop8: detected capacity change from 0 to 512 [ 255.253945][ T9546] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #11: comm syz.8.1665: iget: bad extended attribute block 3153 [ 255.273818][ T8840] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.283816][ T28] audit: type=1400 audit(1774087095.464:2093): avc: denied { wake_alarm } for pid=9547 comm="syz.2.1666" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 255.305262][ T9546] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 255.313376][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 255.329097][ C0] EXT4-fs (loop8): initial error at time 1774087095: ext4_orphan_get:1391: inode 11 [ 255.338547][ C0] EXT4-fs (loop8): last error at time 1774087095: ext4_orphan_get:1391: inode 11 [ 255.350946][ T9546] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1665: couldn't read orphan inode 11 (err -117) [ 255.364325][ T9546] loop8: lost filesystem error report for type 5 error -117 [ 255.375730][ T9553] bond1 (unregistering): Released all slaves [ 255.376306][ T9546] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.484413][ T28] audit: type=1400 audit(1774087095.654:2094): avc: denied { connect } for pid=9566 comm="syz.3.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.514214][ T8885] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.538300][ T28] audit: type=1400 audit(1774087095.714:2095): avc: denied { map } for pid=9574 comm="syz.2.1674" path="socket:[26730]" dev="sockfs" ino=26730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 255.571037][ T9577] loop8: detected capacity change from 0 to 512 [ 255.597437][ T9583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=9583 comm=syz.2.1675 [ 255.610391][ T28] audit: type=1400 audit(1774087095.714:2096): avc: denied { read } for pid=9574 comm="syz.2.1674" path="socket:[26730]" dev="sockfs" ino=26730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 255.664431][ T9577] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.679978][ T9577] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.702110][ T9577] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.1672: corrupted inode contents [ 255.722296][ T9577] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #2: comm syz.8.1672: mark_inode_dirty error [ 255.743738][ T9577] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.1672: corrupted inode contents [ 255.759046][ T9577] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.1672: mark_inode_dirty error [ 255.792569][ T9577] EXT4-fs warning (device loop8): ext4_es_cache_extent:1082: inode #2: comm syz.8.1672: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 255.792569][ T9577] [ 255.956619][ T8885] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.060685][ T9612] loop8: detected capacity change from 0 to 512 [ 256.084238][ T9612] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #11: comm syz.8.1684: iget: bad extended attribute block 3153 [ 256.101560][ T9612] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 256.101905][ T9612] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1684: couldn't read orphan inode 11 (err -117) [ 256.111125][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 256.111159][ C1] EXT4-fs (loop8): initial error at time 1774087096: ext4_orphan_get:1391: inode 11 [ 256.111197][ C1] EXT4-fs (loop8): last error at time 1774087096: ext4_orphan_get:1391: inode 11 [ 256.148242][ T9612] loop8: lost filesystem error report for type 5 error -117 [ 256.149141][ T9612] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.182355][ T8885] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.656183][ T9650] loop7: detected capacity change from 0 to 512 [ 256.692264][ T9650] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #11: comm syz.7.1697: iget: bad extended attribute block 3153 [ 256.723227][ T9650] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 256.723587][ T9650] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.1697: couldn't read orphan inode 11 (err -117) [ 256.744812][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 256.744840][ C0] EXT4-fs (loop7): initial error at time 1774087096: ext4_orphan_get:1391: inode 11 [ 256.744877][ C0] EXT4-fs (loop7): last error at time 1774087096: ext4_orphan_get:1391: inode 11 [ 256.779345][ T9661] syzkaller1: entered promiscuous mode [ 256.785275][ T9650] loop7: lost filesystem error report for type 5 error -117 [ 256.791554][ T9661] syzkaller1: entered allmulticast mode [ 256.794934][ T9650] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.836617][ T9663] loop2: detected capacity change from 0 to 2048 [ 256.846944][ T8840] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.867501][ T9663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.938024][ T6878] ================================================================== [ 256.946197][ T6878] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 256.953190][ T6878] [ 256.955547][ T6878] write to 0xffff888103edef74 of 4 bytes by task 6882 on cpu 0: [ 256.963208][ T6878] shmem_mknod+0x143/0x170 [ 256.967673][ T6878] shmem_create+0x34/0x50 [ 256.972038][ T6878] path_openat+0xd75/0x2050 [ 256.976609][ T6878] do_file_open+0x16c/0x290 [ 256.981159][ T6878] do_sys_openat2+0x94/0x130 [ 256.985778][ T6878] __x64_sys_openat+0xf2/0x120 [ 256.990569][ T6878] x64_sys_call+0x1e39/0x3020 [ 256.995277][ T6878] do_syscall_64+0x12c/0x370 [ 256.999886][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.005802][ T6878] [ 257.008155][ T6878] read to 0xffff888103edef74 of 4 bytes by task 6878 on cpu 1: [ 257.015723][ T6878] fill_mg_cmtime+0x5b/0x270 [ 257.020340][ T6878] generic_fillattr+0x24a/0x340 [ 257.025209][ T6878] shmem_getattr+0x181/0x200 [ 257.029829][ T6878] vfs_getattr_nosec+0x146/0x1e0 [ 257.034791][ T6878] vfs_getattr+0x48/0x60 [ 257.039059][ T6878] vfs_statx_path+0x28/0x140 [ 257.043675][ T6878] vfs_statx+0xc4/0x170 [ 257.047857][ T6878] vfs_fstatat+0x118/0x170 [ 257.052295][ T6878] __se_sys_newfstatat+0x55/0x3e0 [ 257.057355][ T6878] __x64_sys_newfstatat+0x55/0x70 [ 257.062399][ T6878] x64_sys_call+0x2c64/0x3020 [ 257.067103][ T6878] do_syscall_64+0x12c/0x370 [ 257.071713][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.077626][ T6878] [ 257.079963][ T6878] value changed: 0x075e9253 -> 0x0763a315 [ 257.085687][ T6878] [ 257.088020][ T6878] Reported by Kernel Concurrency Sanitizer on: [ 257.094210][ T6878] CPU: 1 UID: 0 PID: 6878 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 257.104644][ T6878] Tainted: [W]=WARN [ 257.108461][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.118617][ T6878] ================================================================== [ 257.142844][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.