last executing test programs: 44.326960846s ago: executing program 2 (id=3): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xf27b}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x12) (fail_nth: 5) 44.094199287s ago: executing program 2 (id=7): r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@private, @dev, 0x0}, &(0x7f00000001c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r3, 0x29, 0x1, 0x0, &(0x7f0000000440)) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000001500)={0x2f, 0x203, '\x00', [@ra={0x5, 0x2, 0x4}, @generic={0x8, 0x1000, "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"}, @pad1, @hao={0xc9, 0x10, @remote}]}, 0x1028) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x1000}], 0x0) 42.991850599s ago: executing program 3 (id=4): r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7, 0x2c2082) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x80000008, 0x18101, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x440, 0x801, 0x800003, 0x5, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000104000000001300000000000000f2c0150aab9535263049e2f4c8143cc9d3e0b0acddd69a2c0b6a", @ANYRES32=0x0, @ANYBLOB="00000000051c0000280012800e00010069703665727370616e00000014000280060002007bf200000600030001000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x12) r2 = gettid() sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)={0x128, 0x3, 0x9, 0x101, 0x70bd2d, 0x25dfdbff, {0x1, 0x0, 0x3}, [@generic="319f5fb43133c8a95a39fc9a50352237a170a8257a3e8109416b943d621b2d9ca19d2aced3af9fa8c5fb04faabb61c1bd32892515bd2c03eba22fbc511d55192a355e490372b3459211f99c62af339339f92dbab25430fcc54c7f8863d517306f80d82a4eea4cd98023b20b2338c6f4784b64372044b669e21ebe63e", @generic="d55881f4691546f0f14dd8db3d8136cc7e72eb93936c10affbdd511dc988d48374d55cd443a6b6ca2f6c66de0d405e5643825f4fb93784ca44549d77290a0dc73c3f760cbc095907df0571bda5523875bc0d00b9dac71f325232b48c3b9cd7164ed612f99fae7072ffe19c3d707ef7ef34c08a809801d9b88060132e23ad2e3d3057af3e2a86abb9097669e6c6a5b032", @typed={0x8, 0x1c, 0x0, 0x0, @pid=r2}]}, 0x128}, 0x1, 0x0, 0x0, 0x4004004}, 0x45) 42.873785914s ago: executing program 2 (id=9): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) fallocate(r0, 0x0, 0x0, 0x2000402) syz_io_uring_setup(0x16b, &(0x7f0000000100)={0x0, 0x40, 0x200, 0x1, 0x327, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'geneve0\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "e9f6ad52ede286c48884a50c2d1f5cb2cba9d7888feae069eac5224d02ab3354", "59b4c15972e547eeb455aea6a840df5bcb75b24c5d98f6a2beefe4c173b2fc2f", "c95474f4b5fb7bec24be6c1b0a82f716004bd0c58f4e8431bdd8c05df27f1902", "958b7a10f69ee2e7bcff582ef2ae5653fe536dc97d7d641958d872288a00", "dd80f662b9ea7c62dd262d1b26106abb86615ca4a8ee54f388bcd177b9e9600f", "99e73fcf4ce4806664bf13ce", 0x0, 0xfffff01e, 0x3, 0x3f, 0x4}}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x41, 0x2, 0x2}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) setfsuid(0xee00) setresuid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x8, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), 0x0, 0x0, 0x0, 0x3, r6}, 0x38) recvmmsg(r5, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) 42.755722569s ago: executing program 3 (id=10): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="6d56628ffcb56aeeb14f0edc82a1150d93bc0ed36783342de69c90568798e566e85456a67ee0c53815e6038a91048ca3229bf54050b0", 0x36}], 0x1}, 0x20000001) r1 = socket$kcm(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2b, 0x0, &(0x7f00000000c0)) 42.742188151s ago: executing program 3 (id=11): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r5 = syz_io_uring_setup(0x4653, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f00000006c0)={0x0, 0x1, 0x0, 0x0, 0x0}, 0x20) write$cgroup_type(r4, &(0x7f00000009c0), 0xd4ba0ff) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f00000002c0)=""/230, 0xe6}], 0x2) r6 = syz_clone(0x4400080, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x20, 0xff, r9}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'dvmrp0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettfilter={0x4c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0x4}, {0x7, 0x6}, {0xfff2, 0x6}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0xd74e}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) ptrace(0x10, r6) ptrace$peekuser(0x3, r6, 0x380) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 42.339246313s ago: executing program 2 (id=14): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r5 = syz_io_uring_setup(0x4653, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f00000006c0)={0x0, 0x1, 0x0, 0x0, 0x0}, 0x20) write$cgroup_type(r4, &(0x7f00000009c0), 0xd4ba0ff) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f00000002c0)=""/230, 0xe6}], 0x2) r6 = syz_clone(0x4400080, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x20, 0xff, r9}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'dvmrp0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettfilter={0x4c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0x4}, {0x7, 0x6}, {0xfff2, 0x6}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0xd74e}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) ptrace(0x10, r6) ptrace$peekuser(0x3, r6, 0x380) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r10, 0x0, 0x0) 41.719367233s ago: executing program 3 (id=18): set_mempolicy(0x2002, &(0x7f0000000000)=0x1, 0x9) stat(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180)) r0 = syz_open_dev$usbfs(&(0x7f0000000380), 0xd8, 0x902) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) write$char_usb(r1, &(0x7f0000000000)='-0', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = dup(r0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0xfff9, 0x0, 0x3ff, 0x0}) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 41.143833288s ago: executing program 0 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000140003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2004001, &(0x7f0000001680)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose}], [{@obj_role={'obj_role', 0x3d, '}{)*[&)*\x1b'}}, {@dont_measure}]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206010800000000000000000000008005000400000000000900020073797a31000043c5ce122ce285fb880e7a00000500010007000000050005000a000000140007800800114000000000050015000700000011000300686173683a6e65742c6e657400000000b58aee7ab36cfa6f1eb8a9bdf8fbaf05aa6d30a06271cc6a6fc8ff960ad946cabaee3f2b082f0e4f61f91b7ef6a9f668ce4f6f4f518aab0817509f0b6ef2d3348b83eaf0c9463e0e508c48245a12b935767d6f77131131a84e5d8a6ce412ce19b326c2761fc686a9"], 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x0) r3 = socket(0x3a, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/245, 0xf5}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/233, 0xe9}, {&(0x7f0000001940)=""/157, 0x9d}, {&(0x7f0000001700)=""/194, 0xc2}], 0x6}}], 0x1, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPTPEER(r4, 0x5441, 0x81) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 41.130574239s ago: executing program 2 (id=23): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r1, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 41.04481595s ago: executing program 0 (id=24): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000012c0)=""/4102, 0x1006) 41.04393814s ago: executing program 0 (id=25): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) r1 = semget$private(0x0, 0x3, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000025c0)={{0x2, 0xffffffffffffffff, 0x0, 0xee00, 0x0, 0x0, 0x3}, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000440)) 40.929419465s ago: executing program 0 (id=28): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r5 = syz_io_uring_setup(0x4653, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f00000006c0)={0x0, 0x1, 0x0, 0x0, 0x0}, 0x20) write$cgroup_type(r4, &(0x7f00000009c0), 0xd4ba0ff) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f00000002c0)=""/230, 0xe6}], 0x2) r6 = syz_clone(0x4400080, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x20, 0xff, r9}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'dvmrp0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettfilter={0x4c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0x4}, {0x7, 0x6}, {0xfff2, 0x6}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0xd74e}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) ptrace(0x10, r6) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3c}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r10, 0x0, 0x0) 40.906067818s ago: executing program 2 (id=29): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010000305000900"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001006772650014000280060010004e250000060011004e2000ce"], 0x40}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000003c0)=0x4) fallocate(r3, 0x0, 0xa20, 0x8000c65) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_trie\x00') pread64(r4, &(0x7f00000024c0)=""/4122, 0x101a, 0x9c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f0000000640)="b44c806748f06309624431ed337301000000", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) unshare(0x2040400) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r6, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) write$binfmt_elf64(r3, 0x0, 0x478) readahead(r1, 0x8, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="a405eeaa", @ANYRES16=r10, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000007c000880a60000801400040002004e237f0000010000000000000000080009800400008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392230000080060005000800000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff04000080"], 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_xfrm(r3, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)=@updpolicy={0x150, 0x19, 0x20, 0x70bd2d, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x4e23, 0x7b96, 0x4e23, 0x3, 0xa, 0xa0, 0xa0, 0x59, r7, r8}, {0x2, 0x9e9, 0x8, 0x9, 0x1, 0x8, 0x0, 0x200}, {0xdf, 0x9, 0x8000, 0xf6bc}, 0xffff, 0x6e6bb3, 0x2, 0x0, 0x3}, [@algo_aead={0x97, 0x12, {{'essiv(aegis256-generic,hmac(sha256-avx2))\x00'}, 0x258, 0x40, "d249884c6e774a8d80bb2a822f17870cab11492a0694ac49b340457c47d5eb82e304923d37ac018267cd0eb6eb9740d74f4ceafd0ec4dd68d31d31f9984d0940c2a389cda1194bd34dc263"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4400c}, 0x80) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f00000000c0)={@remote, @loopback, @empty}, &(0x7f0000000100)=0xc) fgetxattr(r0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x000'], &(0x7f00000002c0)=""/134, 0x86) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0xfffffffffffffe93, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 40.880175472s ago: executing program 32 (id=29): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010000305000900"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000020001280080001006772650014000280060010004e250000060011004e2000ce"], 0x40}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000003c0)=0x4) fallocate(r3, 0x0, 0xa20, 0x8000c65) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_trie\x00') pread64(r4, &(0x7f00000024c0)=""/4122, 0x101a, 0x9c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f0000000640)="b44c806748f06309624431ed337301000000", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) unshare(0x2040400) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r6, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) write$binfmt_elf64(r3, 0x0, 0x478) readahead(r1, 0x8, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="a405eeaa", @ANYRES16=r10, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000007c000880a60000801400040002004e237f0000010000000000000000080009800400008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392230000080060005000800000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff04000080"], 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_xfrm(r3, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)=@updpolicy={0x150, 0x19, 0x20, 0x70bd2d, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x4e23, 0x7b96, 0x4e23, 0x3, 0xa, 0xa0, 0xa0, 0x59, r7, r8}, {0x2, 0x9e9, 0x8, 0x9, 0x1, 0x8, 0x0, 0x200}, {0xdf, 0x9, 0x8000, 0xf6bc}, 0xffff, 0x6e6bb3, 0x2, 0x0, 0x3}, [@algo_aead={0x97, 0x12, {{'essiv(aegis256-generic,hmac(sha256-avx2))\x00'}, 0x258, 0x40, "d249884c6e774a8d80bb2a822f17870cab11492a0694ac49b340457c47d5eb82e304923d37ac018267cd0eb6eb9740d74f4ceafd0ec4dd68d31d31f9984d0940c2a389cda1194bd34dc263"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4400c}, 0x80) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f00000000c0)={@remote, @loopback, @empty}, &(0x7f0000000100)=0xc) fgetxattr(r0, &(0x7f0000000800)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x000'], &(0x7f00000002c0)=""/134, 0x86) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0xfffffffffffffe93, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x9, 0xfffffff7}, {0xde7, 0x8002}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 40.823659819s ago: executing program 3 (id=31): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8931, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8854) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049005300c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed3103bc77d35b296674f1fe35663c0d236fd88d7ba0000001f010580ef", @ANYRESHEX=r1], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x10) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') (async) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e000000000000", 0xd8}], 0x1}, 0x0) 40.808502971s ago: executing program 33 (id=31): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8931, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8854) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049005300c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed3103bc77d35b296674f1fe35663c0d236fd88d7ba0000001f010580ef", @ANYRESHEX=r1], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x10) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') (async) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e000000000000", 0xd8}], 0x1}, 0x0) 39.947175002s ago: executing program 0 (id=37): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000040000000000000003000000850000002c000000850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0xc, 0x81, 0x1, 0x9, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2fccd2d57dad443500"/20, @ANYRES32=0x0, @ANYBLOB="0020000000000000d2fe12800a00010069706f6962000000340002800600010000000000060001000101000006000200010000000600010008000000060001000700000006000100b8010000"], 0x64}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x8, &(0x7f0000004600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0xffffffffffffffe1, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018100000000000002401010024000000090000000400000002000093010000000700000001000000ffffff7f01000000020001000500000000615f5f2e5f5f5f00"], &(0x7f0000000f40)=""/4089, 0x45, 0xff9, 0x9}, 0x28) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x3f2, 0x400, 0x70bd28, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}}, 0x40040) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) syz_open_procfs(0x0, &(0x7f0000000300)='net/netlink\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x40000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000003030101000000000041830665ee642ad2221e4ca04f17410d00000000000200"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010068bd7000fcdbdf2503"], 0x1c}}, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x1) 39.411697132s ago: executing program 0 (id=42): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) r4 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000c80)={0x1, 0x0, [0x0]}) 39.411496472s ago: executing program 34 (id=42): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) r4 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000c80)={0x1, 0x0, [0x0]}) 28.530461646s ago: executing program 1 (id=154): syz_emit_ethernet(0x76, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts]}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) 28.455442746s ago: executing program 1 (id=155): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002640)={0x0, 0xfffffffffffffeb5, &(0x7f0000002600)={&(0x7f0000002580)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, {0x100, 0x0, 0x1}}]}, 0x24}}, 0x0) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) socket(0xa, 0x80000, 0x3690) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0xf75f, 0x2}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r7, &(0x7f00000001c0), 0x0}, 0x20) sendto$packet(r1, &(0x7f0000000040)="8f165b96d0abc9e65af5255ddf2551e5940ed391b97bf5bebbf48508fd13ce9e", 0x20, 0x4, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) 28.408641572s ago: executing program 1 (id=158): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/profiling', 0x2, 0x184) copy_file_range(r0, &(0x7f0000000000)=0x800, r0, 0x0, 0x40000007, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x538, &(0x7f0000003480)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) tgkill(0x0, 0x0, 0x3a) 28.311727575s ago: executing program 1 (id=159): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x80, &(0x7f0000000680)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167, @ANYRES64], 0xbe, 0x148, &(0x7f0000000400)="$eJzs2zFrE2EYB/AnJtGoS2ZxOHBxCuonUCSCeKAoGXRSiC6JBJrl2ikfpV+wUDJle0t7JWlDMrQ0udL7/Zb7w5+D9x3uHt6D+/3y/2g4mf6bfJtHp9GI1vvIYtGIbjyKZpRmAQA8JIuU4jSllJ7M4ulxpJSqXhEAsGvmPwDUj/kPAPVj/gNA/fz4+evLhzzvf8+yTsTJrBgUg/Ja9p8+5/032YXu6q55UQyay/5t2WfX+3Y8u+zfbewfx+tXZX/effyar/XPY7j77QMAAEAt9LKljef7Xm9bX6Yr3wfWzu+teNHa2zYAgBuYHh6N/ozHfw8EQbhNaEfEPVjGXYeq30zArq0e+qpXAgAAAAAAAAAAAAAAbLOP34mq3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsOwsAAP//XyVQaw==") sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa000000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 27.974290539s ago: executing program 1 (id=164): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f0000000480)=ANY=[@ANYBLOB='shortname=mixed,utf8=1,sys_immutable,shontname=win95,rodir,dos1xfloppy,shortname=lower,shortname=lower,utf8=1,check=strict,utf8=0,utf8=0,gid=', @ANYRESHEX=0x0, @ANYBLOB=',flush,discard,time_offset=0x000000000000002c,check=relaxed,posixacl,euid>', @ANYRESDEC=0x0, @ANYBLOB="2c66756e633d46494c455f434b2c736d61636b66736861743d273a29232c736d61636b66736465663d636865636b3d72656c617865642c7356fd01a29c8aa6b2c26d61636b6673726f6f743d504c000000", @ANYRESDEC=0x0, @ANYBLOB=',obj_type=utf8=0,obj_user=]&],\x00'], 0x26, 0x2d3, &(0x7f0000000900)="$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") 27.819748638s ago: executing program 1 (id=166): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff00000000000000000000000000000008000a00", @ANYRES32], 0x54}}, 0x0) 27.814588559s ago: executing program 35 (id=166): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff00000000000000000000000000000008000a00", @ANYRES32], 0x54}}, 0x0) 18.790333964s ago: executing program 5 (id=294): perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioperm(0x0, 0xd, 0x4000000000000020) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) iopl(0x3) ioperm(0x0, 0x5, 0x92) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff3]}, 0x8, 0x80000) timer_create(0x5, &(0x7f0000000200)={0x0, 0x2e, 0x1, @thr={&(0x7f0000000080)="15f73b6a75470be008e35542d112eb1b6194084444cb0b18d154e3533fd2123851ca74fb21c3753dea054d009003b5ed64cf1309a279fb8d764250a17345d7b6e339930d1031b9fae4f691586dc99d37701e8dd9dd364d602add07e5e5137092a36e3135f3d5b87a2e75021dd10ff257537fb3494a3c3646f160b39fadfd88966f363269e9c21c8554fb00d533df21ce7dc1033bb23fc8b04f959571c27dae524ade2bab91ea1e7ff1a330a8ca4e813ae351d9d31601555670b818a41fb463eda98708d32f", &(0x7f00000001c0)="6b3e9bca6245dafb9aa27c94406738cfdce9c4b9580c4407516fac1a83d12fd3db"}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x2005}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 18.729253712s ago: executing program 5 (id=296): r0 = gettid() timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x20040600) r1 = fsopen(&(0x7f0000000300)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0xffffff8c, 0x0, 0x0) 18.704158275s ago: executing program 5 (id=297): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000009a260000002100000d0c0001", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 18.605729488s ago: executing program 5 (id=299): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$eJzs3U1sG2UaAOB3xvH2L9t0pV1pd9VDtYtUpKpO0h8onNorolKlHpC4lMhxoyhOHMUONFEO6b1C9IAA9VJucOAI4sABcUHiwpULiDNSRSOQmh7AyH9pm9jBKXWdxs8jjT3ffON5v2/G73hmNCMHMLCO1V7SiP9ExKUkYuShuqFoVh5rzLe+tpK/v7aST6JavfxzEklE3FtbybfmT5rvhyJiNSL+HRFfZSNOpFvjlpeWZyaKxcJCszxamZ0fLS8tn5yenZgqTBXmTr/40tlzZ86Onxrv3Pjszvp644ebb9/49pXbNz/+5Ohq/t2JJM7HcLPu4X48SY11ko3zm6af6UWwPkr63QAeS6aZ57VU+leMRKaZ9e1UR55q04Aeq+6LqO5Esrqj2YHdLNlZ/gN7Rus4oHb+2xoeOUDI9Pb4486FxglILe56c2jUDDWuTcT++rnJwV+SR85MauebR3rbNAbA6vWIGBsa2vr9T5rfv8c39iQaSE99eaGxobZu/3Rj/xNt9j/DrWunf1Fr/7e+Zf/3IH6mw/7vUpcxfnv9xw86xr8e8d+28ZON+Emb+GlEvNFl/FuvfX6uU131w4jj0T5+S7L99eHRq9PFwljjtW2ML44ffXm7/h/sEL9xzXZ//Wem3fqf77L/n3396f9Wt4n//P+33/7t1v+BiHiny/j/uPfRq53q7lxP7taOAna6/WvTbncZ/4Xzx77vUHWgy0UAAAAAAAAAAABtpPV72ZI0tzGeprlc4xnef8bBtFgqV05cLS3OTTbueTsS2bR1p9VIo5zUyuPN+3Fb5VObyqdb9xFnDtTLuXypONnnvgMAAAAAAAAAAAAAAAAAAMBucWjT8/+/ZurP/2/+u2pgr+r8l9/AXif/YXA9mv9JxL6+NQV4yvz+w8Cqyn8YXPIfBpf8h8El/2FwyX8YXPIfBpf8BwAAAAAAAAAAAAAAAAAAAAAAAACAnrh08WJtqN5fW8nXypNDS4szpTdPThbKM7nZxXwuX1qYz02VSlPFQi5fmv2z5RVLpfmxmFu8NloplCuj5aXlK7OlxbnKlenZianClUL2qfQKAAAAAAAAAAAAAAAAAAAAni3D9SFJcxGR1sfTNJeL+HtEHIlscnW6WBiLiMMR8V0mu69WHu93owEAAAAAAAAAAAAAAAAAAGCPKS8tz0wUi4WFARkZ2jLlm84zR8Tqk21GbYk7/lS2ua12yzp81kYObz9PJvrewt040ucdEwAAAAAAAAAAAAAAAAAADKAHD/12+4nfe9sgAAAAAAAAAAAAAAAAAAAAGEjpT0lE1IbjI88Nb679W7Keqb9HxFu3Lr93baJSWRivTb+7Mb3yfnP6qX60H+hWK09beQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8UF5anpkoFgsLPRzpdx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHscfAQAA//+aXtbd") chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) (async) mount$9p_unix(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f00000002c0)={'trans=unix,', {[{@access_client}, {@nodevmap}, {@version_u}, {@aname}, {@uname={'uname', 0x3d, ':\\}'}}]}}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) (async) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2a04a9, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x36, 0x38]}}]}) 18.472944375s ago: executing program 5 (id=300): futex(0xfffffffffffffffd, 0x1, 0x2, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB], 0x10) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = getpgrp(0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc891}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\xdaL!\xe1\xdc\x1f\v\x04\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0xe8) getdents(r9, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r10 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_nlink(r10, &(0x7f00000018c0), 0x0, 0x0, 0x1) fremovexattr(r10, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') 17.722916812s ago: executing program 5 (id=310): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000c80900110000060015000200000014001680100008800c0003800500010001"], 0x38}}, 0x4000000) ioctl$EXT4_IOC_MIGRATE(r1, 0xff08) 17.722712832s ago: executing program 36 (id=310): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000c80900110000060015000200000014001680100008800c0003800500010001"], 0x38}}, 0x4000000) ioctl$EXT4_IOC_MIGRATE(r1, 0xff08) 2.361672566s ago: executing program 6 (id=538): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)={0x24, r1, 0x29, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x406f}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1114004101045249815dd4000200000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x6, &(0x7f0000000080)=[{0x9, 0x1, 0x6}, {0x6, 0x5, 0x2, 0x7}, {0x6, 0x8, 0x1, 0x3}, {0x3, 0x0, 0xf, 0xa}, {0xc72, 0xf, 0x1, 0x4}, {0x9, 0x0, 0x7, 0x5}]}) sendmmsg$inet6(r5, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000380)="9a", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0xbfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000440)="1f", 0x1}], 0x1}}], 0x2, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000940)=0x707987cd) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1f071f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_config_ext={0x1, 0x9}, 0xa022, 0x4005, 0xb, 0x3, 0xfff, 0x8, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000000)={0x2004, 0xc, 0x8009, 0x0, 0x9}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r9, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/128, 0x80}, 0x10001}], 0x1, 0x0, 0x0) recvmsg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x6, 0x6}, 0x90) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000780)={[{@lazytime}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.639400219s ago: executing program 8 (id=544): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x0, 0x0, 0x3d, 0x0, "2dfedf4fe729e6da2c283c04b074205e1eefc56dbc4e3bbeef85e81f0118fc0f64326f290de80584bce41936f14cb7a820ac8e630e660da57c076a7cb4155c7f0efdcea917bd84db674f344208d682a5"}, 0xd8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x4, 0x1, 0x20, 0x81, 0x0, 0x3, 0x48400, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={&(0x7f0000000140), 0x6}, 0x4, 0x800, 0x5, 0x3, 0x7fffffff, 0x800, 0x8001, 0x0, 0x8, 0x0, 0x3}, 0x0, 0x8, r1, 0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000003900070101000000fbdbdf25037c000004008c801200218006437e0088470000257e2b241cf758d8261e5d"], 0x24}}, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x6, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf"], 0x0}, 0x94) r4 = accept$inet(r0, &(0x7f0000000300)={0x2, 0x0, @loopback}, &(0x7f0000000340)=0x10) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x120005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x7f, 0x71}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}, @IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004060}, 0x4000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) sendmmsg(r7, &(0x7f0000006500)=[{{&(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, 0x0}}], 0x1, 0x60000800) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x7}, &(0x7f00000004c0)=0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31"], 0xe8}}, 0x0) 1.604478884s ago: executing program 6 (id=545): unshare(0x6a040000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket(0x1e, 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x32f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) gettid() timer_create(0x2, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.537063792s ago: executing program 4 (id=546): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x101}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x7fff800000000}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x1, 0x0, 0x0) 1.47273501s ago: executing program 7 (id=547): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_delneigh={0x9c, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5c}]}, @NDA_FDB_EXT_ATTRS={0x1c, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xc2}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x6}]}, @NDA_DST_MAC={0xa}, @NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_SRC_VNI={0x8, 0xb, 0x1}, @NDA_VLAN={0x6, 0x5, 0xf5ed}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) get_mempolicy(&(0x7f0000000080), &(0x7f0000000180), 0x3, &(0x7f00009fb000/0x4000)=nil, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x610}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0xba01}, 0x810) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 1.227668222s ago: executing program 8 (id=548): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20055) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000400", @ANYRES16=r3, @ANYBLOB="00032cbd7000060000001f0000000c00060000000000000000000c0006000300000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c840}, 0x8004) sendfile(r0, r0, 0x0, 0x24002de8) r4 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000002c0)=0x9, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x1000, 0x1, 0x9, 0xff, 0x3}}}}]}, 0x4c}}, 0x24044092) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x35, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) getsockname$qrtr(r4, &(0x7f00000001c0), &(0x7f0000000200)=0xc) 1.217518983s ago: executing program 8 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x4, 0x0, 0x8, 0x3, 0xb, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0x5002, &(0x7f0000000200)={0x0, 0x6c89, 0x40, 0x1, 0x25}, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00000000140000", @ANYRES32, @ANYBLOB="951a693a007c0fcd009f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x68, &(0x7f0000000200)}, 0x10) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f00000001c0)) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f00000003c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) mount(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1014410, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getscheduler(r4) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={0x0}) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x1}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000ffff2b3d7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500280012800e00010069703665727370616e00000014000280060003003000000008001500244d0e00"], 0x48}, 0x1, 0x0, 0x0, 0x240040d0}, 0x1090) 1.01137491s ago: executing program 7 (id=551): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400)=0x4114, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 1.01117888s ago: executing program 8 (id=552): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="01000000061000001800d88008000100677470000c00820008000100", @ANYRES32=r0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x440b0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0\x00') (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) (rerun: 64) flock(r1, 0x5) (async, rerun: 64) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x6, 0x19, 0x27, &(0x7f0000000240)}) (rerun: 64) 930.120511ms ago: executing program 7 (id=553): syz_io_uring_setup(0x7e38, 0x0, 0x0, &(0x7f0000003f80)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) (fail_nth: 6) 863.744069ms ago: executing program 8 (id=554): exit(0xffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x8000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb3}, 0x50) 863.498069ms ago: executing program 9 (id=555): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)={0x24, r1, 0x29, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x406f}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1114004101045249815dd4000200000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x6, &(0x7f0000000080)=[{0x9, 0x1, 0x6}, {0x6, 0x5, 0x2, 0x7}, {0x6, 0x8, 0x1, 0x3}, {0x3, 0x0, 0xf, 0xa}, {0xc72, 0xf, 0x1, 0x4}, {0x3ff, 0x6, 0x2, 0x209}]}) sendmmsg$inet6(r5, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000380)="9a", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0xbfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000440)="1f", 0x1}], 0x1}}], 0x2, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000940)=0x707987cd) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1f071f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_config_ext={0x1, 0x9}, 0xa022, 0x4005, 0xb, 0x3, 0xfff, 0x8, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000000)={0x2004, 0xc, 0x8009, 0x0, 0x9}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r9, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/128, 0x80}, 0x10001}], 0x1, 0x0, 0x0) recvmsg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x6, 0x6}, 0x90) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000780)={[{@lazytime}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$eJzs3c1vVFUbAPDn3k6/3/edQt6ouJBGYyBRWlrAEGMC3bgiBD92riotBBkooTVaJLFNcGNi3LgwceVC/C+UxK0Lty7cuDIkxBgWYlDG3Jk7ZTrt9Hs6pf39kmnvmTNzzrlNnzlnzpxzJ4A9azD7kUYciIhrSUSxLq8QeeZg9XH3/7h5PrslUS6/9XsSNz9O5urLSvLf/fmT/ylG8lMasb9jab3Tszcuj5dKk9fz9PDMlWvD07M3jly6Mn5x8uLk1dFXRk+eOH7i5MjRTZ1fXvXf2Y8zt977oPjp2Xe++ephMvLtL2eTOB2P8gdk59X43O5N1Zz9zQajXPVgUUYacXKTZe8UfxZr/ycV3dk/RFJoZ4tYjzQiTkVEZ0Q8HcXoiMfBWoxP3mhr44CWKidR6aMGy8Dek0TTrEs9+YvEUj0tbROwHWrjgNp7++XeBy+VtnJIAmyTe2PVubpq7HdGRC3+C9W5weipzA303U/q53kqc32bm5mryur48Yezt7JbNJmHA1pjbr42y93Y/yeV2ByI6nuAvvvpovgfy0cBaf45wZuNBa9x8nywIS3+YfvMzUfEM3n/3xVrjv80j91a/L+7wfrFPwAAAAAAAGydO2MR8fJy6//ShfU/Xcus/+mPiNNbUP/qn/+ld/ODZAuqA+rcG4t4bdn1vwtrfAc68tR/K+sBOpMLl0qTRyPifxFxODq7s/RIQ7n1K4SPfLb/y2b116//y25Z/bW1gHlJdwsNa4kmxmfGN3veQMS9+YhnK+t/D+b3LF7/k/X/yTL9fxbf19ZYx/4Xb59rlrd6/AOtUv464tCy/f/j4Xay8vU5hivjgeHaqGCp5z76/Ltm9Yt/aJ+s/+9bOf67k/rr9Uyvr/yuiDg2Wyg3y9/o+L8rebujVn7mw/GZmesjEV3JmaX3j66vzbBb1eKhFi9Z/B9+YeX5v4Xxf10c9kbE3BrrfOpR/6/N8vT/0D5Z/E+s3P8XF/f/6z8YvT3wfbP6z62p/z9e6dMP5/eY/4N6S6/HsdYAbUtzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAJl0bEfyJJhxaO03RoKKI/Iv4ffWlpanrmpQtT71+dyPIq3/+f1r7pt1hNJ7Xv/x+oS482pI9FxL6I+KKjt5IeOj9Vmmj3yQMAAAAAAAAAAAAAAAAAAMAO0V/Z81/ubtz/n/mto92tA1qukP8W77D3FDb8zHL3ljYE2HYbj3/gSTa/rvjvbGlbgO3XPP4fPCxXNNz9+vMtbxOwPYz/Ye/aYPz7uAB2Af0/7FVrnNPraXU7gHbQ/wMAAAAAwK6y7+Cdn5OImHu1t3LLdOV5vW1tGdBqabsbALSNNbywdxWm2t0CoF1s6AeShaO/Gjf7VzRf/Z+0pkEAAAAAAAAAAAAAwBKHDjTf/29vAOxuK+//t7YfdrMV9v8vF/wuFwC7SPOv/tD3w27nPT6wWm9v/z8AAAAAAAAAAAAA7AA9Ny6Pl0qT16dnn7yDUzujGes7mBvfXDnl7p1wFosPHrWm5M6I2BknuAUHWbCVSpPlcsTqD65dgqONbW7vyxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDYvwEAAP//9HcgKQ==") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 828.825213ms ago: executing program 7 (id=556): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408, 0x10000000}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 694.812001ms ago: executing program 6 (id=557): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r5, @ANYBLOB="01000000009a260000002100000d0c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 623.7574ms ago: executing program 7 (id=558): bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_io_uring_setup(0xa89, &(0x7f00000002c0)={0x0, 0x3593, 0x800, 0x1103, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r1, 0x6efc, 0x3900, 0xb, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) get_mempolicy(0x0, 0xfffffffffffffffc, 0x401, &(0x7f0000ffd000/0x2000)=nil, 0x4) 600.399263ms ago: executing program 7 (id=559): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000200)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}], [{@subj_user={'subj_user', 0x3d, 'nodioread_nolock'}}, {@context={'context', 0x3d, 'system_u'}}, {@dont_measure}, {@smackfsroot={'smackfsroot', 0x3d, ']('}}, {@hash}, {@permit_directio}]}, 0x0, 0x471, &(0x7f0000000bc0)="$eJzs289rHFUcAPDvTH60tT8Sa/3RWjVahKCYNGnVHrwoCh4qCnqox5hsS+i2kSaKLcWmIvUiSEHP4lHwL/AmgqgnwatePEmhaC+tniIzO9NuttnUmE0mZj8fmOx7M2933jdvfrx5bzeArjWU/UkidkTELxEx0MguLjDUeLlx7fzkX9fOTyaxsPD6H0le7vq185Nl0fJ924vMcBqRfpgUO1ls9uy5kxP1eu1MkR+dO/X26OzZc0+9e2riRO1E7fT4kSOHD409+8z40x2JM4vr+r73Z/bvffnNy69MHrv81g9fZfXdUWxvjqNThrLA/1zItW57vNM7q9jOpnTSW2FFWJGeiMiaqy8//weiJ2413kC89EGllQPWVHZv2tJ+8/wCsIklUXUNgGqUN/rs+bdc1qnrsSFcfb7xAJTFfaNYGlt6Iy3K9LU833bSUEQcm//782yJNRqHAABo9vHkZ0f7m/odt/ofadyXv/6W/02KOZTBiLg7InZHxD0RsSci7o3Iy94fEQ+ssj6393/SK6v8yGVl/b/nirmtxf2/svcXgz1Fbmcef19yfLpeOxgRuyJiOPq2ZPmxZfbxzYs/f9JuW3P/L1uy/Zd9waIeV3pbBuimJuYm8k5pB1y9GLGvd6n4k5szAVnb742IfSv76F1lYvqJL/e3K3Tn+JfRgXmmhS+y8Oaz+OejJf5S0jw/OX3b/OTo1qjXDo6WR8Xtfvzp0mvt9r+q+Dvgaq3x2tT+rUUGk+b52tmV7+PSrx+1fab5j8d/2p+8kc8z9xfr3puYmzszFtGfHM3zi9aP33pvmS/LZ8f/8IGlz//dxXuy+B+MiOwgfigiHo6IR4q6PxoRj0XEgWXi//6F9tvK+COtqP0vRkwtef27efy3tP/KEz0nv/u63f7/XfsfzlPDxZr8+ncHS1Unu1y0VnA1/zsAAAD4v0jz78An6cjNdJqOjDS+w78n7krrM7NzTx6feef0VOO78oPRl5YjXQPFeGh9ul4bS+aLT2yMj44XY8XleOmhYtz4055teX5kcqY+VXHs0O22tzn/M7/3VF07YI1tW3LteP+6VwSoQOs8ero4e+HVcDGAzcrvtaF73eH8T9erHsD6c/+H7rXU+X+hJW8uADYn93/oXs5/6FLpt1XXAKiQ+z90pdX8rn8NE1s3RjWqSWzURskTEWUi3RD1kVijRNVXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74JwAA///SqekQ") r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000a2347d47be9e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000bc0)={[{@errors_remount}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@stripe={'stripe', 0x3d, 0xb}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@dax_inode}]}, 0x1, 0x42f, &(0x7f0000000d80)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) open(&(0x7f0000000080)='./file1\x00', 0x0, 0x86) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, 0x0, &(0x7f0000000600)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lseek(r5, 0x7ff, 0x1) getdents64(r5, 0x0, 0x10) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "f9ac2854678531ca", "a7f2ba09bccd44a41450b98a7fec467a5c43000f00", "00008000", "c5f6bcb38f4ab046"}, 0x3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syzkaller1\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x2a1, 0x3}}) 552.808689ms ago: executing program 6 (id=560): r0 = socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xeb, 0x6, 0x9, 0x0, 0x6, 0x10220, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x20}, 0x90020, 0x1, 0xfffffffe, 0x1c, 0x24, 0x408, 0x1, 0x0, 0x483, 0x0, 0x20008}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r2 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000000240), 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r5}, 0x10) 503.814756ms ago: executing program 4 (id=561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 503.629756ms ago: executing program 4 (id=562): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624d, 0xa, 0x55, 0x7f}, 0x9c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000500)={0x4, 0xfffffffb, 0x80000003, 0x60, 0x23, &(0x7f0000000a00)="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"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) alarm(0x38) r3 = socket(0x28, 0x5, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) fremovexattr(r4, &(0x7f0000000040)=@random={'btrfs.', '&{-)$\x00'}) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, 0x0, &(0x7f0000002b00)) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @host, 0x180}, 0x10) 500.955726ms ago: executing program 9 (id=563): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 438.572134ms ago: executing program 4 (id=564): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400)=0x4114, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 428.960005ms ago: executing program 9 (id=565): ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000000)=""/7) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00000000000000000000000000000000ffff"], 0x54}}, 0x20000080) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038002e001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0x1) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f0000000400)={0x1, 0x2, 0x1000, 0x28, &(0x7f00000000c0)="875f9363467ee2e9690d0d32f4cc2e9f4d4ac6eab193317d92f7394d58378c75f5fe96a89224c586", 0xa4, 0x0, &(0x7f0000000540)="8173a2cec40c848ab12d657edb249068ebc0e5cd95a24d28d557b04d59c0457aeaf667c09433f907836cd89d1c92bd28496f49292dd85ad23b8d16023f847e73c37d5435ab19c27798c1aefca44946223b68a5617f53f8d22844d8c16bd9c931b34845e24ca97c48567f3aa14fdc0f4c8cd5d8c80743174277d51e81176e7dad4ab1d9c511e77d4c91b9f6ba59424902a2a53a9a4368811b059fc8e4bd361a9c7bbe6377"}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="03000000c31006002000128008000100736974001400028008000300ac"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) socket$key(0xf, 0x3, 0x2) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3081, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x24c501, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r9, {0xffffffff963fd888}}, './file0\x00'}) r10 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x3b2f000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b3344959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) writev(r7, &(0x7f00000001c0)=[{&(0x7f00000036c0)="7d29dbe640bf91", 0x7}, {&(0x7f0000000240)="aa6a7fbfbf49dfac9272525c43", 0xd}], 0x2) 384.914401ms ago: executing program 4 (id=566): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x20300, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000200)) syz_io_uring_setup(0x7e38, 0x0, 0x0, &(0x7f0000003f80)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r4) r5 = socket$kcm(0x21, 0x2, 0x2) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5, 0xfffffffe, 0x0, 0xfff}) r6 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x4) ioctl$SG_IO(r6, 0x2285, &(0x7f00000008c0)={0x53, 0xffffffffffffffff, 0x6, 0x50, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001000)="4199ac73a859", 0x0, 0xfdfbfffe, 0x33, 0x3, 0x0}) sendmsg$inet(r5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_tos_u8={{0x11, 0x110}}], 0x18}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 287.775444ms ago: executing program 9 (id=567): r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x490}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14, r0, 0x1, 0x70b92b, 0x0, {0x35}}, 0x14}}, 0x4004) 287.521734ms ago: executing program 4 (id=568): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) (async) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100)={[], 0xfffffffffffffffe}, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) (async) close(r2) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2db}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xe6}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20040004) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffe]}, 0x8) read(r8, &(0x7f0000000740)=""/384, 0x200008ca) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000200)={r3, 0x0, 0x0}, 0x20) (async) open(&(0x7f0000000080)='./file1\x00', 0x8040, 0x2) 279.414914ms ago: executing program 9 (id=569): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000240)={0x11, 0xf5, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) r4 = fsmount(r0, 0x0, 0x5) fchdir(r4) open(0x0, 0x0, 0x2) creat(&(0x7f00000003c0)='./file0\x00', 0xd931d3864d39dcca) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe000000008500000028000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) 188.387176ms ago: executing program 6 (id=570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x66, 0x54d, &(0x7f0000000200)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$loop(0x0, 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000500)={@multicast2, @remote}, &(0x7f0000000540)=0xc) write$binfmt_misc(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x2, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x6071, 0x0, 0xe7}}}}}}, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x7800, 0x1, 0x6, 0x8, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x66, 0x0, 0x6, 0x29, 0x0, @private=0xa010101, @remote, {[@lsrr={0x83, 0x7, 0x74, [@local]}, @cipso={0x86, 0x17, 0x2, [{0x2, 0x2}, {0x5, 0xf, "2207bc5794cf450086023cef10"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0x5}, {0xc, 0xa}, {0xd, 0x10}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4002}, 0x4004011) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 127.714614ms ago: executing program 9 (id=571): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x810000000000000) 9.541419ms ago: executing program 8 (id=572): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 6 (id=573): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)={0x24, r1, 0x29, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x406f}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1114004101045249815dd4000200000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x6, &(0x7f0000000080)=[{0x9, 0x1, 0x6}, {0x6, 0x5, 0x2, 0x7}, {0x6, 0x8, 0x1, 0x3}, {0x3, 0x0, 0xf, 0xa}, {0xc72, 0xf, 0x1, 0x4}, {0x3ff, 0x6, 0x2, 0x209}]}) sendmmsg$inet6(r5, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000380)="9a", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0xbfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000440)="1f", 0x1}], 0x1}}], 0x2, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000940)=0x707987cd) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1f071f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_config_ext={0x1, 0x9}, 0xa022, 0x4005, 0xb, 0x3, 0xfff, 0x8, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000000)={0x2004, 0xc, 0x8009, 0x0, 0x9}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r9, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/128, 0x80}, 0x10001}], 0x1, 0x0, 0x0) recvmsg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x6, 0x6}, 0x90) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000780)={[{@lazytime}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) kernel console output (not intermixed with test programs): =root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.356976][ T29] audit: type=1400 audit(1769187193.018:173): avc: denied { setopt } for pid=3766 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.376822][ T29] audit: type=1400 audit(1769187193.047:174): avc: denied { shutdown } for pid=3766 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.397386][ T29] audit: type=1400 audit(1769187193.047:175): avc: denied { read } for pid=3766 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.418574][ T29] audit: type=1400 audit(1769187193.105:176): avc: denied { setopt } for pid=3766 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.466248][ T1814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.476610][ T1814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.487481][ T1814] bond0 (unregistering): Released all slaves [ 46.549430][ T1814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.559963][ T1814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.570733][ T1814] bond0 (unregistering): Released all slaves [ 46.617319][ T3605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.639244][ T1814] hsr_slave_0: left promiscuous mode [ 46.645035][ T1814] hsr_slave_1: left promiscuous mode [ 46.653422][ T1814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.660905][ T1814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.669016][ T1814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.676521][ T1814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.687807][ T1814] hsr_slave_0: left promiscuous mode [ 46.702107][ T1814] hsr_slave_1: left promiscuous mode [ 46.719982][ T1814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.727500][ T1814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.737093][ T1814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.744702][ T1814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.770658][ T1814] veth1_macvtap: left promiscuous mode [ 46.776421][ T1814] veth0_macvtap: left promiscuous mode [ 46.782659][ T1814] veth1_vlan: left promiscuous mode [ 46.787971][ T1814] veth0_vlan: left promiscuous mode [ 46.794545][ T1814] veth1_macvtap: left promiscuous mode [ 46.800180][ T1814] veth0_macvtap: left promiscuous mode [ 46.806117][ T1814] veth1_vlan: left promiscuous mode [ 46.811421][ T1814] veth0_vlan: left promiscuous mode [ 46.829151][ T3786] loop1: detected capacity change from 0 to 4096 [ 46.845790][ T3786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.859038][ T3786] FAULT_INJECTION: forcing a failure. [ 46.859038][ T3786] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.872169][ T3786] CPU: 1 UID: 0 PID: 3786 Comm: syz.1.49 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.872203][ T3786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.872296][ T3786] Call Trace: [ 46.872304][ T3786] [ 46.872356][ T3786] __dump_stack+0x1d/0x30 [ 46.872381][ T3786] dump_stack_lvl+0x95/0xd0 [ 46.872402][ T3786] dump_stack+0x15/0x1b [ 46.872426][ T3786] should_fail_ex+0x263/0x280 [ 46.872457][ T3786] should_fail+0xb/0x20 [ 46.872541][ T3786] should_fail_usercopy+0x1a/0x20 [ 46.872612][ T3786] strncpy_from_user+0x27/0x250 [ 46.872657][ T3786] getname_flags+0xad/0x3b0 [ 46.872681][ T3786] path_listxattrat+0x7e/0x2b0 [ 46.872711][ T3786] __x64_sys_listxattr+0x4a/0x60 [ 46.872792][ T3786] x64_sys_call+0x2a62/0x3000 [ 46.872898][ T3786] do_syscall_64+0xc0/0x2a0 [ 46.872936][ T3786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.872962][ T3786] RIP: 0033:0x7fceec21acb9 [ 46.872979][ T3786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.873056][ T3786] RSP: 002b:00007fceeac77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 46.873082][ T3786] RAX: ffffffffffffffda RBX: 00007fceec495fa0 RCX: 00007fceec21acb9 [ 46.873097][ T3786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 46.873109][ T3786] RBP: 00007fceeac77090 R08: 0000000000000000 R09: 0000000000000000 [ 46.873121][ T3786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.873133][ T3786] R13: 00007fceec496038 R14: 00007fceec495fa0 R15: 00007ffdf03493b8 [ 46.873154][ T3786] [ 47.050533][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.086950][ T3790] loop1: detected capacity change from 0 to 764 [ 47.110622][ T1814] team0 (unregistering): Port device team_slave_1 removed [ 47.122297][ T1814] team0 (unregistering): Port device team_slave_0 removed [ 47.189224][ T1814] team0 (unregistering): Port device team_slave_1 removed [ 47.199315][ T1814] team0 (unregistering): Port device team_slave_0 removed [ 47.237133][ T3792] loop1: detected capacity change from 0 to 1024 [ 47.276811][ T3605] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.316873][ T3792] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.324289][ T3792] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.357715][ T3794] loop1: detected capacity change from 0 to 2048 [ 47.370973][ T3792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.383489][ T3792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.393362][ T3794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.410194][ T3794] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 47.447694][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.466668][ T2284] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.468168][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.473812][ T2284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.481626][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.510284][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.524676][ T923] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.531881][ T923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.544439][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.544796][ T3798] __nla_validate_parse: 2 callbacks suppressed [ 47.544837][ T3798] netlink: 4124 bytes leftover after parsing attributes in process `syz.1.52'. [ 47.581418][ T3600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.592385][ T3798] syz.1.52 uses obsolete (PF_INET,SOCK_PACKET) [ 47.621008][ T3689] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 47.640149][ T3605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.652695][ T3689] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 47.671294][ T3600] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.679014][ T3689] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 47.690887][ T2119] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.698036][ T2119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.709508][ T3689] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 47.721503][ T2119] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.728721][ T2119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.750826][ T3600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.761444][ T3600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.868934][ T3600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.895825][ T3605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.906977][ T3689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.929956][ T3689] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.940951][ T3827] loop4: detected capacity change from 0 to 8192 [ 47.954348][ T2119] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.961499][ T2119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.972282][ T2119] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.979378][ T2119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.031309][ T3689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.138592][ T3689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.345262][ T3605] veth0_vlan: entered promiscuous mode [ 48.440238][ T3605] veth1_vlan: entered promiscuous mode [ 48.454977][ T3600] veth0_vlan: entered promiscuous mode [ 48.465463][ T3600] veth1_vlan: entered promiscuous mode [ 48.494999][ T3605] veth0_macvtap: entered promiscuous mode [ 48.512067][ T3605] veth1_macvtap: entered promiscuous mode [ 48.532404][ T3600] veth0_macvtap: entered promiscuous mode [ 48.548445][ T3600] veth1_macvtap: entered promiscuous mode [ 48.566681][ T3600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.576647][ T3605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.592165][ T3689] veth0_vlan: entered promiscuous mode [ 48.605132][ T3600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.620048][ T3605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.630913][ T3689] veth1_vlan: entered promiscuous mode [ 48.641472][ T1641] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.669391][ T1641] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.716626][ T3689] veth0_macvtap: entered promiscuous mode [ 48.737210][ T1641] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.769921][ T1641] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.780998][ T3689] veth1_macvtap: entered promiscuous mode [ 48.807411][ T1641] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.830983][ T3689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.845919][ T2119] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.858412][ T3689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.867110][ T2119] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.877848][ T2119] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.895832][ T2119] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.947699][ T2119] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.971475][ T2119] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.024305][ T2119] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.104753][ T3920] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 49.122100][ T3925] loop6: detected capacity change from 0 to 2048 [ 49.135856][ T3920] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 49.149259][ T3921] loop7: detected capacity change from 0 to 8192 [ 49.186329][ T3310] loop6: p2 p3 p7 [ 49.234113][ T3925] loop6: p2 p3 p7 [ 49.369918][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 49.380568][ T3316] udevd[3316]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 49.391655][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 49.420376][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 49.431810][ T3316] udevd[3316]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 49.446024][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 49.794001][ T3969] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 49.961221][ T3972] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.052121][ T3989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.64'. [ 50.063440][ T3994] loop1: detected capacity change from 0 to 512 [ 50.115036][ T3994] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.130370][ T3994] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.66: bad orphan inode 13 [ 50.146571][ T3994] ext4_test_bit(bit=12, block=18) = 1 [ 50.152098][ T3994] is_bad_inode(inode)=0 [ 50.156345][ T3994] NEXT_ORPHAN(inode)=2130706432 [ 50.161281][ T3994] max_ino=32 [ 50.164545][ T3994] i_nlink=1 [ 50.185865][ T3994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.243347][ T4007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.68'. [ 50.256964][ T3994] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 50.296769][ T4007] ip6gre0: entered promiscuous mode [ 50.313385][ T3994] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 50.326827][ T4015] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.66: bg 0: block 248: padding at end of block bitmap is not set [ 50.338721][ T4007] team0: Device ip6gre0 is of different type [ 50.381667][ T4017] loop7: detected capacity change from 0 to 1024 [ 50.397399][ T4017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.458975][ T4015] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.66: Failed to acquire dquot type 1 [ 50.472942][ T4017] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.70: missing EA_INODE flag [ 50.520987][ T4017] EXT4-fs (loop7): Remounting filesystem read-only [ 50.527580][ T4017] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.558047][ T4028] netlink: 28 bytes leftover after parsing attributes in process `syz.6.71'. [ 50.567116][ T4028] netlink: 28 bytes leftover after parsing attributes in process `syz.6.71'. [ 50.935422][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.028045][ T4052] mmap: syz.4.76 (4052) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.052038][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 51.052056][ T29] audit: type=1400 audit(1769187197.649:280): avc: denied { write } for pid=4047 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.079395][ T29] audit: type=1400 audit(1769187197.649:281): avc: denied { read } for pid=4047 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.099635][ T29] audit: type=1400 audit(1769187197.678:282): avc: denied { ioctl } for pid=4047 comm="syz.1.75" path="socket:[7035]" dev="sockfs" ino=7035 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.133959][ T29] audit: type=1400 audit(1769187197.678:283): avc: denied { read write } for pid=4047 comm="syz.1.75" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 51.158115][ T29] audit: type=1400 audit(1769187197.678:284): avc: denied { open } for pid=4047 comm="syz.1.75" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 51.212183][ T4060] loop1: detected capacity change from 0 to 1764 [ 51.251917][ T3689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.283162][ T29] audit: type=1400 audit(1769187197.874:285): avc: denied { cpu } for pid=4066 comm="syz.7.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 51.305606][ T29] audit: type=1400 audit(1769187197.894:286): avc: denied { read write } for pid=4066 comm="syz.7.80" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.329161][ T29] audit: type=1400 audit(1769187197.894:287): avc: denied { open } for pid=4066 comm="syz.7.80" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.359847][ T29] audit: type=1400 audit(1769187197.923:288): avc: denied { create } for pid=4064 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.398750][ T4071] netlink: 24 bytes leftover after parsing attributes in process `syz.6.81'. [ 51.407889][ T29] audit: type=1400 audit(1769187197.992:289): avc: denied { write } for pid=4069 comm="syz.6.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.468223][ T4071] bond0: (slave geneve0): Error: Device can not be enslaved while up [ 51.494391][ T4078] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.512105][ T4081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.521546][ T4078] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.83: bad orphan inode 13 [ 51.525267][ T4081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.539239][ T4078] ext4_test_bit(bit=12, block=18) = 1 [ 51.544669][ T4078] is_bad_inode(inode)=0 [ 51.549004][ T4078] NEXT_ORPHAN(inode)=2130706432 [ 51.553902][ T4078] max_ino=32 [ 51.557097][ T4078] i_nlink=1 [ 51.560831][ T4078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.574920][ T4078] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 51.595898][ T4078] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 51.620966][ T4078] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.83: bg 0: block 248: padding at end of block bitmap is not set [ 51.635701][ T4078] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.83: Failed to acquire dquot type 1 [ 51.821106][ T4089] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.845148][ T4089] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 51.853338][ T4089] EXT4-fs (loop5): orphan cleanup on readonly fs [ 51.861745][ T4089] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.86: corrupted inode contents [ 51.873857][ T4089] EXT4-fs (loop5): Remounting filesystem read-only [ 51.880525][ T4089] EXT4-fs (loop5): 1 truncate cleaned up [ 51.887007][ T2284] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.897789][ T2284] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.908446][ T2284] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 51.920025][ T4089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.943469][ T3600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.969218][ T4093] 9p: Unknown Cache mode or invalid value non9'rsion}9p2000.u [ 52.175734][ T4109] netlink: 'syz.6.94': attribute type 9 has an invalid length. [ 52.183541][ T4109] netlink: 16166 bytes leftover after parsing attributes in process `syz.6.94'. [ 52.203417][ T4109] netlink: 'syz.6.94': attribute type 9 has an invalid length. [ 52.211428][ T4109] netlink: 16166 bytes leftover after parsing attributes in process `syz.6.94'. [ 52.296602][ T4117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4117 comm=syz.7.96 [ 52.311273][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.7.96'. [ 52.356583][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.590381][ T4138] set_capacity_and_notify: 2 callbacks suppressed [ 52.590402][ T4138] loop1: detected capacity change from 0 to 128 [ 52.667455][ T4141] loop5: detected capacity change from 0 to 512 [ 52.690383][ T4141] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.105: bad orphan inode 15 [ 52.747725][ T4141] ext4_test_bit(bit=14, block=5) = 0 [ 52.773170][ T4141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.787071][ T4155] netlink: 20 bytes leftover after parsing attributes in process `syz.7.109'. [ 52.836505][ T3600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.850299][ T4157] tipc: Started in network mode [ 52.855336][ T4157] tipc: Node identity 5e1c73ed4b4e, cluster identity 4711 [ 52.863066][ T4157] tipc: Enabled bearer , priority 0 [ 52.870679][ T4157] syzkaller0: entered promiscuous mode [ 52.876408][ T4157] syzkaller0: entered allmulticast mode [ 52.886997][ T4161] loop6: detected capacity change from 0 to 512 [ 52.894561][ T4157] tipc: Resetting bearer [ 52.902958][ T4161] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.915529][ T4157] tipc: Resetting bearer [ 52.929476][ T4157] tipc: Disabling bearer [ 52.931147][ T4161] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.112: invalid block [ 52.949703][ T4161] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.112: invalid indirect mapped block 4294967295 (level 1) [ 52.978544][ T4166] netlink: 12 bytes leftover after parsing attributes in process `syz.5.111'. [ 53.003727][ T4161] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.112: invalid indirect mapped block 4294967295 (level 1) [ 53.018562][ T4161] EXT4-fs (loop6): 2 truncates cleaned up [ 53.026792][ T4161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.029020][ T4163] loop5: detected capacity change from 0 to 512 [ 53.097255][ T4163] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.106093][ T4163] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.126985][ T4170] pim6reg1: entered promiscuous mode [ 53.132407][ T4170] pim6reg1: entered allmulticast mode [ 53.150266][ T4163] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.111: Allocating blocks 41-42 which overlap fs metadata [ 53.167550][ T4163] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.111: Allocating blocks 41-42 which overlap fs metadata [ 53.181705][ T4163] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.111: Failed to acquire dquot type 1 [ 53.194842][ T4163] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 53.210824][ T4163] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.111: corrupted inode contents [ 53.224217][ T4163] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.111: mark_inode_dirty error [ 53.236209][ T4163] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.111: corrupted inode contents [ 53.248420][ T4163] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.111: mark_inode_dirty error [ 53.260067][ T4163] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.111: corrupted inode contents [ 53.273044][ T4163] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 53.280416][ T3605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.290910][ T4180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.118'. [ 53.299984][ T4180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.118'. [ 53.324390][ T4163] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.111: corrupted inode contents [ 53.348904][ T4163] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.111: mark_inode_dirty error [ 53.371102][ T4163] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 53.388945][ T4163] EXT4-fs (loop5): 1 truncate cleaned up [ 53.403292][ T4163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.418023][ T4163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.429229][ T4182] loop7: detected capacity change from 0 to 1024 [ 53.470031][ T4182] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 53.481012][ T4182] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 53.491315][ T4182] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.512069][ T4182] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.119: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 53.570087][ T4182] EXT4-fs (loop7): no journal found [ 53.575488][ T4182] EXT4-fs (loop7): can't get journal size [ 53.595992][ T4182] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.674073][ T4208] loop1: detected capacity change from 0 to 512 [ 53.694066][ T3689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.709296][ T4208] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 53.904096][ T4218] loop5: detected capacity change from 0 to 128 [ 54.024672][ T4226] loop1: detected capacity change from 0 to 1024 [ 54.057390][ T4226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.097179][ T4226] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.131451][ T4226] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.133: lblock 3 mapped to illegal pblock 3 (length 3) [ 54.194955][ T4226] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 54.207399][ T4226] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.207399][ T4226] [ 54.228432][ T4235] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.133: bg 0: block 112: padding at end of block bitmap is not set [ 54.287165][ T4225] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.133: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.327615][ T4225] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.133: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.367528][ T4225] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.133: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.391410][ T4225] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.133: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.425625][ T4225] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.133: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.458891][ T4225] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.133: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.483000][ T4225] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.133: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.517294][ T4225] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.133: lblock 0 mapped to illegal pblock 0 (length 1) [ 54.598545][ T2284] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 54.611297][ T2284] EXT4-fs (loop1): This should not happen!! Data will be lost [ 54.611297][ T2284] [ 54.663736][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.778976][ T4249] loop5: detected capacity change from 0 to 512 [ 54.785844][ T4249] EXT4-fs: Ignoring removed bh option [ 54.791300][ T4249] EXT4-fs: test_dummy_encryption option not supported [ 54.849107][ T4254] loop7: detected capacity change from 0 to 128 [ 54.914423][ T4255] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 54.925512][ T4255] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 54.949735][ T4266] netlink: 28 bytes leftover after parsing attributes in process `syz.5.144'. [ 54.958931][ T4266] netlink: 28 bytes leftover after parsing attributes in process `syz.5.144'. [ 54.976894][ T4255] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 55.016992][ T4255] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.138: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 55.043467][ T4255] EXT4-fs (loop4): no journal found [ 55.048801][ T4255] EXT4-fs (loop4): can't get journal size [ 55.058504][ T4255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.237760][ T4281] FAULT_INJECTION: forcing a failure. [ 55.237760][ T4281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.251043][ T4281] CPU: 1 UID: 0 PID: 4281 Comm: syz.7.150 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.251072][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.251161][ T4281] Call Trace: [ 55.251168][ T4281] [ 55.251178][ T4281] __dump_stack+0x1d/0x30 [ 55.251210][ T4281] dump_stack_lvl+0x95/0xd0 [ 55.251308][ T4281] dump_stack+0x15/0x1b [ 55.251388][ T4281] should_fail_ex+0x263/0x280 [ 55.251412][ T4281] should_fail+0xb/0x20 [ 55.251431][ T4281] should_fail_usercopy+0x1a/0x20 [ 55.251460][ T4281] _copy_from_user+0x1c/0xb0 [ 55.251599][ T4281] do_sock_getsockopt+0xf1/0x210 [ 55.251711][ T4281] __x64_sys_getsockopt+0x11d/0x1a0 [ 55.251859][ T4281] x64_sys_call+0x2dc7/0x3000 [ 55.251944][ T4281] do_syscall_64+0xc0/0x2a0 [ 55.251966][ T4281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.252040][ T4281] RIP: 0033:0x7f983a08acb9 [ 55.252061][ T4281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.252083][ T4281] RSP: 002b:00007f9838ae7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 55.252107][ T4281] RAX: ffffffffffffffda RBX: 00007f983a305fa0 RCX: 00007f983a08acb9 [ 55.252155][ T4281] RDX: 0000000000000002 RSI: 0000000000000006 RDI: 0000000000000004 [ 55.252171][ T4281] RBP: 00007f9838ae7090 R08: 0000200000000180 R09: 0000000000000000 [ 55.252188][ T4281] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 55.252205][ T4281] R13: 00007f983a306038 R14: 00007f983a305fa0 R15: 00007fff41847868 [ 55.252230][ T4281] [ 55.431084][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.530880][ T4287] EXT4-fs: Ignoring removed oldalloc option [ 55.552202][ T4287] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 55.573363][ T4287] EXT4-fs (loop6): 1 truncate cleaned up [ 55.579728][ T4287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.611225][ T4297] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.623238][ T3605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.655571][ T4297] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.692303][ T4305] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 55.738177][ T4305] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 55.809466][ T4305] EXT4-fs error (device loop6): ext4_get_journal_inode:5849: inode #32: comm syz.6.157: iget: special inode unallocated [ 55.843386][ T4305] EXT4-fs (loop6): Remounting filesystem read-only [ 55.859842][ T4305] EXT4-fs (loop6): no journal found [ 55.865213][ T4305] EXT4-fs (loop6): can't get journal size [ 55.893578][ T4305] EXT4-fs (loop6): filesystem is read-only [ 55.899886][ T4305] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 55.997891][ T3605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.139234][ T4326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.165'. [ 56.148304][ T4326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.165'. [ 56.157138][ T4326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.165'. [ 56.166432][ T4326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.165'. [ 56.295074][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 56.295091][ T29] audit: type=1400 audit(1769187202.801:484): avc: denied { mounton } for pid=4331 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.370443][ T29] audit: type=1400 audit(1769187202.880:485): avc: denied { setattr } for pid=4295 comm="syz.7.156" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.408328][ T3689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.454394][ T29] audit: type=1400 audit(1769187202.959:486): avc: denied { read } for pid=3051 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 56.513130][ T1641] bridge_slave_1: left allmulticast mode [ 56.518895][ T1641] bridge_slave_1: left promiscuous mode [ 56.525257][ T1641] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.578370][ T1641] bridge_slave_0: left allmulticast mode [ 56.584336][ T1641] bridge_slave_0: left promiscuous mode [ 56.590056][ T1641] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.605422][ T4361] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.619673][ T4361] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.173: bad orphan inode 13 [ 56.631228][ T4361] ext4_test_bit(bit=12, block=18) = 1 [ 56.636744][ T4361] is_bad_inode(inode)=0 [ 56.640972][ T4361] NEXT_ORPHAN(inode)=2130706432 [ 56.645848][ T4361] max_ino=32 [ 56.649072][ T4361] i_nlink=1 [ 56.652705][ T4361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.666415][ T4361] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 56.682745][ T29] audit: type=1400 audit(1769187203.146:487): avc: denied { create } for pid=4355 comm="syz.7.172" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.703381][ T29] audit: type=1400 audit(1769187203.146:488): avc: denied { write } for pid=4355 comm="syz.7.172" name="file0" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.725679][ T29] audit: type=1400 audit(1769187203.146:489): avc: denied { open } for pid=4355 comm="syz.7.172" path="/24/file0" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.748231][ T29] audit: type=1400 audit(1769187203.146:490): avc: denied { ioctl } for pid=4355 comm="syz.7.172" path="/24/file0" dev="tmpfs" ino=144 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.782736][ T29] audit: type=1400 audit(1769187203.274:491): avc: denied { unlink } for pid=3689 comm="syz-executor" name="file0" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.798700][ T4361] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 56.814036][ T1641] erspan0 (unregistering): left promiscuous mode [ 56.820739][ T1641] gretap0 (unregistering): left promiscuous mode [ 56.844631][ T4374] vfat: Deprecated parameter 'posix' [ 56.850005][ T4374] FAT-fs: "posix" option is obsolete, not supported now [ 56.851116][ T29] audit: type=1400 audit(1769187203.334:492): avc: denied { bind } for pid=4372 comm="syz.7.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.906874][ T1641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.942571][ T1641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.954998][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.967926][ T1641] bond0 (unregistering): Released all slaves [ 57.018453][ T1641] tipc: Left network mode [ 57.034412][ T1641] hsr_slave_0: left promiscuous mode [ 57.037717][ T29] audit: type=1400 audit(1769187203.541:493): avc: denied { bind } for pid=4384 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.059734][ T1641] hsr_slave_1: left promiscuous mode [ 57.068911][ T4390] Cannot find del_set index 0 as target [ 57.078670][ T1641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.086291][ T1641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.127343][ T1641] team0 (unregistering): Port device team_slave_1 removed [ 57.139174][ T1641] team0 (unregistering): Port device team_slave_0 removed [ 57.187875][ T4403] EXT4-fs: Ignoring removed oldalloc option [ 57.193959][ T4403] EXT4-fs: inline encryption not supported [ 57.199869][ T4403] EXT4-fs: test_dummy_encryption option not supported [ 57.248861][ T4385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 57.274921][ T4408] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 57.295351][ T4408] EXT4-fs (loop6): invalid journal inode [ 57.301267][ T4408] EXT4-fs (loop6): can't get journal size [ 57.312010][ T4408] EXT4-fs (loop6): 1 truncate cleaned up [ 57.328046][ T4408] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.364735][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 57.416901][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.424127][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.431941][ T4331] bridge_slave_0: entered allmulticast mode [ 57.438513][ T4331] bridge_slave_0: entered promiscuous mode [ 57.445846][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.453044][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.460284][ T4331] bridge_slave_1: entered allmulticast mode [ 57.469252][ T4331] bridge_slave_1: entered promiscuous mode [ 57.506471][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.526224][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.554814][ T4331] team0: Port device team_slave_0 added [ 57.561691][ T4331] team0: Port device team_slave_1 added [ 57.617048][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.624194][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.650312][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.673704][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.680777][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.706912][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.738992][ T4331] hsr_slave_0: entered promiscuous mode [ 57.745312][ T4331] hsr_slave_1: entered promiscuous mode [ 57.822032][ T4453] set_capacity_and_notify: 10 callbacks suppressed [ 57.822052][ T4453] loop5: detected capacity change from 0 to 1024 [ 57.859399][ T4453] EXT4-fs: Ignoring removed oldalloc option [ 57.867897][ T4453] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 57.900046][ T4453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.916407][ T4331] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 57.931720][ T4331] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 57.941613][ T4331] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 57.954021][ T4331] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 58.008539][ T4452] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.093335][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.106265][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.127515][ T1641] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.134722][ T1641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.145949][ T1641] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.153072][ T1641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.172876][ T3605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.204609][ T4331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.246483][ T4484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.314188][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.455732][ T4513] netlink: 28 bytes leftover after parsing attributes in process `syz.6.193'. [ 58.582909][ T4331] veth0_vlan: entered promiscuous mode [ 58.594239][ T4331] veth1_vlan: entered promiscuous mode [ 58.612444][ T4331] veth0_macvtap: entered promiscuous mode [ 58.625050][ T4331] veth1_macvtap: entered promiscuous mode [ 58.637218][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.650835][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.670535][ T2070] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.683665][ T2070] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.706159][ T2070] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.727140][ T2070] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.775340][ T4545] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 58.846939][ T4554] FAULT_INJECTION: forcing a failure. [ 58.846939][ T4554] name failslab, interval 1, probability 0, space 0, times 0 [ 58.859832][ T4554] CPU: 0 UID: 0 PID: 4554 Comm: syz.4.199 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.859862][ T4554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.859877][ T4554] Call Trace: [ 58.859884][ T4554] [ 58.859893][ T4554] __dump_stack+0x1d/0x30 [ 58.859986][ T4554] dump_stack_lvl+0x95/0xd0 [ 58.860011][ T4554] dump_stack+0x15/0x1b [ 58.860030][ T4554] should_fail_ex+0x263/0x280 [ 58.860054][ T4554] should_failslab+0x8c/0xb0 [ 58.860083][ T4554] __kmalloc_cache_noprof+0x64/0x4a0 [ 58.860107][ T4554] ? pagemap_read+0x19f/0x610 [ 58.860154][ T4554] pagemap_read+0x19f/0x610 [ 58.860188][ T4554] ? __pfx_pagemap_read+0x10/0x10 [ 58.860283][ T4554] vfs_read+0x1ab/0x7f0 [ 58.860318][ T4554] ? __rcu_read_unlock+0x4e/0x70 [ 58.860338][ T4554] ? __fget_files+0x184/0x1c0 [ 58.860453][ T4554] ? mutex_unlock+0x4e/0x90 [ 58.860490][ T4554] __x64_sys_pread64+0xfd/0x150 [ 58.860510][ T4554] x64_sys_call+0x281b/0x3000 [ 58.860556][ T4554] do_syscall_64+0xc0/0x2a0 [ 58.860696][ T4554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.860725][ T4554] RIP: 0033:0x7f040874acb9 [ 58.860743][ T4554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.860766][ T4554] RSP: 002b:00007f04071a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 58.860791][ T4554] RAX: ffffffffffffffda RBX: 00007f04089c5fa0 RCX: 00007f040874acb9 [ 58.860891][ T4554] RDX: 0000000000019020 RSI: 0000200000000200 RDI: 0000000000000003 [ 58.860903][ T4554] RBP: 00007f04071a7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.860915][ T4554] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.860992][ T4554] R13: 00007f04089c6038 R14: 00007f04089c5fa0 R15: 00007ffd090b7a98 [ 58.861018][ T4554] [ 59.086145][ T4560] netlink: 28 bytes leftover after parsing attributes in process `syz.5.203'. [ 59.138026][ T4565] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 59.144748][ T4565] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 59.153068][ T4565] vhci_hcd vhci_hcd.0: Device attached [ 59.171230][ T4565] vhci_hcd vhci_hcd.0: port 0 already used [ 59.179369][ T4566] vhci_hcd: connection closed [ 59.179567][ T415] vhci_hcd vhci_hcd.5: stop threads [ 59.189699][ T415] vhci_hcd vhci_hcd.5: release socket [ 59.195401][ T415] vhci_hcd vhci_hcd.5: disconnect device [ 59.220694][ T4574] netlink: 16 bytes leftover after parsing attributes in process `syz.8.207'. [ 59.408207][ T4582] netlink: 24 bytes leftover after parsing attributes in process `syz.6.209'. [ 59.495718][ T4594] loop4: detected capacity change from 0 to 2048 [ 59.510974][ T4594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.629033][ T4610] FAULT_INJECTION: forcing a failure. [ 59.629033][ T4610] name failslab, interval 1, probability 0, space 0, times 0 [ 59.641763][ T4610] CPU: 0 UID: 0 PID: 4610 Comm: syz.6.215 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.641793][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.641819][ T4610] Call Trace: [ 59.641828][ T4610] [ 59.641837][ T4610] __dump_stack+0x1d/0x30 [ 59.641869][ T4610] dump_stack_lvl+0x95/0xd0 [ 59.641897][ T4610] dump_stack+0x15/0x1b [ 59.641932][ T4610] should_fail_ex+0x263/0x280 [ 59.641956][ T4610] should_failslab+0x8c/0xb0 [ 59.641982][ T4610] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 59.642012][ T4610] ? __alloc_skb+0x2f0/0x4b0 [ 59.642113][ T4610] __alloc_skb+0x2f0/0x4b0 [ 59.642172][ T4610] ? __alloc_skb+0x219/0x4b0 [ 59.642206][ T4610] alloc_skb_with_frags+0x7d/0x470 [ 59.642255][ T4610] ? obj_cgroup_charge_account+0x122/0x1a0 [ 59.642344][ T4610] ? should_fail_ex+0x30/0x280 [ 59.642366][ T4610] ? __rcu_read_unlock+0x4e/0x70 [ 59.642392][ T4610] sock_alloc_send_pskb+0x44d/0x500 [ 59.642440][ T4610] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 59.642482][ T4610] unix_stream_sendmsg+0x40a/0xbb0 [ 59.642604][ T4610] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 59.642646][ T4610] __sock_sendmsg+0x145/0x170 [ 59.642667][ T4610] ____sys_sendmsg+0x31e/0x4a0 [ 59.642732][ T4610] ___sys_sendmsg+0x195/0x1e0 [ 59.642807][ T4610] __x64_sys_sendmsg+0xd4/0x160 [ 59.642848][ T4610] x64_sys_call+0x17ba/0x3000 [ 59.642878][ T4610] do_syscall_64+0xc0/0x2a0 [ 59.642910][ T4610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.642936][ T4610] RIP: 0033:0x7fda9b96acb9 [ 59.642956][ T4610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.642977][ T4610] RSP: 002b:00007fda9a3a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.643033][ T4610] RAX: ffffffffffffffda RBX: 00007fda9bbe6090 RCX: 00007fda9b96acb9 [ 59.643051][ T4610] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 59.643068][ T4610] RBP: 00007fda9a3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 59.643084][ T4610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.643096][ T4610] R13: 00007fda9bbe6128 R14: 00007fda9bbe6090 R15: 00007ffe15b0bd18 [ 59.643114][ T4610] [ 59.645748][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.886676][ T4612] loop5: detected capacity change from 0 to 8192 [ 59.916743][ T4615] FAT-fs (loop9): unable to read boot sector [ 60.008564][ T4618] loop7: detected capacity change from 0 to 512 [ 60.020978][ T4618] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.052542][ T4618] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.100126][ T4618] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.369596][ T3689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.487885][ T4682] loop4: detected capacity change from 0 to 512 [ 61.511677][ T4682] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.230: bad orphan inode 15 [ 61.524565][ T4682] ext4_test_bit(bit=14, block=5) = 0 [ 61.547148][ T4682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.643854][ T4694] Cannot find set identified by id 0 to match [ 61.677440][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 61.677459][ T29] audit: type=1400 audit(1769187208.117:575): avc: denied { write } for pid=4701 comm="syz.7.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.680951][ T4702] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.737400][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.757702][ T29] audit: type=1400 audit(1769187208.196:576): avc: denied { watch watch_reads } for pid=4706 comm="syz.6.235" path="/proc/90" dev="proc" ino=10261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 61.862576][ T4724] netlink: 12 bytes leftover after parsing attributes in process `syz.7.238'. [ 61.902444][ T29] audit: type=1400 audit(1769187208.315:577): avc: denied { create } for pid=4720 comm="syz.6.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.922132][ T29] audit: type=1400 audit(1769187208.315:578): avc: denied { ioctl } for pid=4720 comm="syz.6.237" path="socket:[10223]" dev="sockfs" ino=10223 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.947410][ T29] audit: type=1400 audit(1769187208.325:579): avc: denied { create } for pid=4720 comm="syz.6.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 62.149935][ T29] audit: type=1400 audit(1769187208.572:580): avc: denied { setopt } for pid=4741 comm="syz.7.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.320258][ T4767] loop4: detected capacity change from 0 to 512 [ 62.368120][ T4767] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.247: error while reading EA inode 32 err=-116 [ 62.431982][ T4785] netlink: 12 bytes leftover after parsing attributes in process `syz.8.250'. [ 62.450021][ T4767] EXT4-fs (loop4): Remounting filesystem read-only [ 62.456610][ T4767] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 62.487610][ T4767] EXT4-fs (loop4): 1 orphan inode deleted [ 62.497718][ T4767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.526033][ T4794] loop8: detected capacity change from 0 to 764 [ 62.532625][ T29] audit: type=1326 audit(1769187208.958:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.8.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e7c8acb9 code=0x7ffc0000 [ 62.555961][ T29] audit: type=1326 audit(1769187208.958:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.8.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f51e7c8acb9 code=0x7ffc0000 [ 62.579417][ T29] audit: type=1326 audit(1769187208.958:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.8.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e7c8acb9 code=0x7ffc0000 [ 62.602839][ T29] audit: type=1326 audit(1769187208.958:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4792 comm="syz.8.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51e7c8acb9 code=0x7ffc0000 [ 62.629343][ T4794] rock: directory entry would overflow storage [ 62.635655][ T4794] rock: sig=0x5245, size=8, remaining=5 [ 62.635748][ T4767] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.760679][ T4809] netlink: 24 bytes leftover after parsing attributes in process `syz.8.253'. [ 63.161814][ T4848] netlink: 'syz.7.255': attribute type 1 has an invalid length. [ 63.169581][ T4848] netlink: 224 bytes leftover after parsing attributes in process `syz.7.255'. [ 63.249129][ T4857] loop7: detected capacity change from 0 to 512 [ 63.256791][ T4857] ext4: Unknown parameter 'noacl' [ 63.658323][ T4876] loop7: detected capacity change from 0 to 8192 [ 63.690765][ T4876] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 63.698453][ T4876] FAT-fs (loop7): Filesystem has been set read-only [ 63.707930][ T4881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.261'. [ 63.821567][ T4883] netlink: 'syz.4.263': attribute type 1 has an invalid length. [ 63.919860][ T36] kernel read not supported for file /vcs (pid: 36 comm: kworker/1:1) [ 64.023466][ T4901] loop8: detected capacity change from 0 to 764 [ 64.035346][ T4901] rock: directory entry would overflow storage [ 64.041589][ T4901] rock: sig=0x5245, size=8, remaining=5 [ 64.264148][ T4911] netlink: 16 bytes leftover after parsing attributes in process `syz.7.273'. [ 64.274997][ T4911] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 64.726222][ T4936] loop8: detected capacity change from 0 to 1024 [ 64.733675][ T4936] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 64.744721][ T4936] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 64.757511][ T4936] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 64.768405][ T4936] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #3: comm syz.8.282: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 64.792229][ T4936] EXT4-fs (loop8): no journal found [ 64.797663][ T4936] EXT4-fs (loop8): can't get journal size [ 64.809611][ T4936] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.858106][ T4331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.886168][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.7.289'. [ 64.894546][ T4954] FAULT_INJECTION: forcing a failure. [ 64.894546][ T4954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.908138][ T4954] CPU: 1 UID: 0 PID: 4954 Comm: syz.4.286 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.908172][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.908188][ T4954] Call Trace: [ 64.908197][ T4954] [ 64.908206][ T4954] __dump_stack+0x1d/0x30 [ 64.908305][ T4954] dump_stack_lvl+0x95/0xd0 [ 64.908331][ T4954] dump_stack+0x15/0x1b [ 64.908351][ T4954] should_fail_ex+0x263/0x280 [ 64.908375][ T4954] should_fail+0xb/0x20 [ 64.908447][ T4954] should_fail_usercopy+0x1a/0x20 [ 64.908481][ T4954] _copy_from_user+0x1c/0xb0 [ 64.908576][ T4954] get_itimerspec64+0x102/0x1b0 [ 64.908722][ T4954] __x64_sys_timer_settime+0x9a/0x160 [ 64.908840][ T4954] x64_sys_call+0x183e/0x3000 [ 64.908879][ T4954] do_syscall_64+0xc0/0x2a0 [ 64.908908][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.908932][ T4954] RIP: 0033:0x7f040874acb9 [ 64.909003][ T4954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.909091][ T4954] RSP: 002b:00007f0407186028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 64.909116][ T4954] RAX: ffffffffffffffda RBX: 00007f04089c6090 RCX: 00007f040874acb9 [ 64.909134][ T4954] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000000 [ 64.909150][ T4954] RBP: 00007f0407186090 R08: 0000000000000000 R09: 0000000000000000 [ 64.909166][ T4954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.909182][ T4954] R13: 00007f04089c6128 R14: 00007f04089c6090 R15: 00007ffd090b7a98 [ 64.909221][ T4954] [ 65.084793][ T4953] loop8: detected capacity change from 0 to 2048 [ 65.114102][ T4959] loop7: detected capacity change from 0 to 512 [ 65.126678][ T4959] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.144106][ T4953] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 65.243435][ T4972] loop7: detected capacity change from 0 to 512 [ 65.263354][ T4972] EXT4-fs (loop7): orphan cleanup on readonly fs [ 65.283364][ T4972] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.295: bad orphan inode 13 [ 65.377437][ T4972] ext4_test_bit(bit=12, block=18) = 1 [ 65.382905][ T4972] is_bad_inode(inode)=0 [ 65.387152][ T4972] NEXT_ORPHAN(inode)=2130706432 [ 65.392047][ T4972] max_ino=32 [ 65.392060][ T4972] i_nlink=1 [ 65.397117][ T4972] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.407119][ T4972] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 65.434773][ T4972] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 65.459051][ T4972] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.295: bg 0: block 248: padding at end of block bitmap is not set [ 65.474088][ T4972] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.295: Failed to acquire dquot type 1 [ 65.488071][ T4984] loop5: detected capacity change from 0 to 1024 [ 65.517493][ T4984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.532809][ T4984] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.545943][ T4989] 9p: Bad value for 'aname' [ 65.560476][ T4985] loop6: detected capacity change from 0 to 1024 [ 65.565188][ T3600] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /38/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 65.589892][ T4985] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 65.600875][ T4985] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 65.611473][ T3600] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /38/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 65.632054][ T4953] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.634394][ T3600] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 65.663188][ T4953] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 10 with max blocks 8 with error 28 [ 65.675127][ T3600] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /38/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 65.679217][ T4953] EXT4-fs (loop8): This should not happen!! Data will be lost [ 65.679217][ T4953] [ 65.701729][ T3600] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 65.710077][ T4953] EXT4-fs (loop8): Total free blocks count 0 [ 65.730724][ T3600] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /38/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 65.735405][ T4953] EXT4-fs (loop8): Free/Dirty block details [ 65.735421][ T4953] EXT4-fs (loop8): free_blocks=2415919104 [ 65.735507][ T4953] EXT4-fs (loop8): dirty_blocks=8208 [ 65.758963][ T3600] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 65.762624][ T4953] EXT4-fs (loop8): Block reservation details [ 65.768533][ T4985] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 65.773711][ T4953] EXT4-fs (loop8): i_reserved_data_blocks=513 [ 65.806151][ T3600] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /38/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 65.848936][ T4985] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.298: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 65.859282][ T3600] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 65.868562][ T4985] EXT4-fs (loop6): no journal found [ 65.891380][ T4985] EXT4-fs (loop6): can't get journal size [ 65.898361][ T4985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.902494][ T3600] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /38/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 65.977341][ T37] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 3074 with max blocks 2048 with error 28 [ 66.022591][ T3605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.033655][ T4311] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.071787][ T4998] loop8: detected capacity change from 0 to 512 [ 66.089676][ T3689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.115137][ T4998] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.127949][ T4998] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.178525][ T4998] program syz.8.303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.196835][ T5008] netlink: 28 bytes leftover after parsing attributes in process `syz.6.307'. [ 66.251586][ T4331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.306626][ T2119] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.371272][ T2119] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.433650][ T2119] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.511980][ T2119] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.565394][ T5016] chnl_net:caif_netlink_parms(): no params data found [ 66.572913][ T5034] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5034 comm=syz.8.315 [ 66.598691][ T5034] netlink: 4 bytes leftover after parsing attributes in process `syz.8.315'. [ 66.611981][ T5030] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 66.623039][ T5030] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 66.633738][ T5034] veth0_macvtap: left promiscuous mode [ 66.639312][ T5030] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 66.650075][ T5030] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.314: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 66.668309][ T5030] EXT4-fs (loop7): no journal found [ 66.673651][ T5030] EXT4-fs (loop7): can't get journal size [ 66.685538][ T5030] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.713926][ T2119] bridge_slave_1: left allmulticast mode [ 66.719731][ T2119] bridge_slave_1: left promiscuous mode [ 66.725522][ T2119] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.736021][ T2119] bridge_slave_0: left allmulticast mode [ 66.741714][ T2119] bridge_slave_0: left promiscuous mode [ 66.747511][ T2119] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.775569][ T3689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.803929][ T5042] GPT:first_usable_lbas don't match. [ 66.809363][ T5042] GPT:34 != 290 [ 66.812984][ T5042] GPT: Use GNU Parted to correct GPT errors. [ 66.819114][ T5042] loop8: p1 p2 p3 [ 66.864902][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 66.864990][ T29] audit: type=1400 audit(1769187213.262:737): avc: denied { wake_alarm } for pid=5041 comm="syz.8.316" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.894068][ T3012] GPT:first_usable_lbas don't match. [ 66.899442][ T3012] GPT:34 != 290 [ 66.903007][ T3012] GPT: Use GNU Parted to correct GPT errors. [ 66.909236][ T3012] loop8: p1 p2 p3 [ 66.918458][ T2119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.930173][ T2119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.955571][ T2119] bond0 (unregistering): Released all slaves [ 66.964446][ T5016] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.971739][ T5016] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.979419][ T5016] bridge_slave_0: entered allmulticast mode [ 66.985259][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 66.988415][ T3316] udevd[3316]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 67.005853][ T5016] bridge_slave_0: entered promiscuous mode [ 67.011899][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 67.013880][ T5016] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.029004][ T5016] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.036393][ T29] audit: type=1400 audit(1769187213.441:738): avc: denied { shutdown } for pid=5043 comm="syz.7.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.039733][ T5016] bridge_slave_1: entered allmulticast mode [ 67.085453][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 67.097906][ T3316] udevd[3316]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 67.118274][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 67.183711][ T5016] bridge_slave_1: entered promiscuous mode [ 67.209559][ T5052] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5052 comm=syz.8.318 [ 67.222130][ T5052] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5052 comm=syz.8.318 [ 67.270252][ T5046] syz.7.317 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 67.284908][ T5046] CPU: 0 UID: 0 PID: 5046 Comm: syz.7.317 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.284944][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.284961][ T5046] Call Trace: [ 67.285045][ T5046] [ 67.285106][ T5046] __dump_stack+0x1d/0x30 [ 67.285136][ T5046] dump_stack_lvl+0x95/0xd0 [ 67.285270][ T5046] dump_stack+0x15/0x1b [ 67.285318][ T5046] dump_header+0x80/0x240 [ 67.285345][ T5046] oom_kill_process+0x295/0x350 [ 67.285376][ T5046] out_of_memory+0x97d/0xb80 [ 67.285404][ T5046] try_charge_memcg+0x62e/0xa10 [ 67.285476][ T5046] obj_cgroup_charge_pages+0xa6/0x150 [ 67.285522][ T5046] __memcg_kmem_charge_page+0x9e/0x170 [ 67.285563][ T5046] __alloc_frozen_pages_noprof+0x18a/0x350 [ 67.285670][ T5046] alloc_pages_mpol+0xb3/0x260 [ 67.285710][ T5046] alloc_pages_noprof+0x8f/0x130 [ 67.285786][ T5046] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 67.285823][ T5046] __kvmalloc_node_noprof+0x471/0x680 [ 67.285855][ T5046] ? ip_set_alloc+0x24/0x30 [ 67.285949][ T5046] ? ip_set_alloc+0x24/0x30 [ 67.285983][ T5046] ip_set_alloc+0x24/0x30 [ 67.286023][ T5046] hash_netiface_create+0x282/0x740 [ 67.286085][ T5046] ? __pfx_hash_netiface_create+0x10/0x10 [ 67.286125][ T5046] ip_set_create+0x3cf/0x970 [ 67.286154][ T5046] ? __nla_parse+0x40/0x60 [ 67.286247][ T5046] nfnetlink_rcv_msg+0x509/0x5d0 [ 67.286296][ T5046] netlink_rcv_skb+0x123/0x220 [ 67.286399][ T5046] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 67.286441][ T5046] nfnetlink_rcv+0x167/0x1720 [ 67.286540][ T5046] ? put_dec_trunc8+0x119/0x140 [ 67.286650][ T5046] ? put_dec+0xd3/0xe0 [ 67.286675][ T5046] ? _raw_spin_lock_bh+0x56/0xb0 [ 67.286721][ T5046] ? should_fail_ex+0x30/0x280 [ 67.286808][ T5046] ? selinux_nlmsg_lookup+0x99/0x890 [ 67.286840][ T5046] ? __rcu_read_unlock+0x33/0x70 [ 67.286860][ T5046] ? __netlink_lookup+0x276/0x2b0 [ 67.286893][ T5046] netlink_unicast+0x5c0/0x690 [ 67.287011][ T5046] netlink_sendmsg+0x5c8/0x6f0 [ 67.287036][ T5046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.287061][ T5046] __sock_sendmsg+0x145/0x170 [ 67.287088][ T5046] ____sys_sendmsg+0x31e/0x4a0 [ 67.287155][ T5046] ___sys_sendmsg+0x195/0x1e0 [ 67.287198][ T5046] __x64_sys_sendmsg+0xd4/0x160 [ 67.287240][ T5046] x64_sys_call+0x17ba/0x3000 [ 67.287274][ T5046] do_syscall_64+0xc0/0x2a0 [ 67.287334][ T5046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.287364][ T5046] RIP: 0033:0x7f983a08acb9 [ 67.287422][ T5046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.287446][ T5046] RSP: 002b:00007f9838ac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.287473][ T5046] RAX: ffffffffffffffda RBX: 00007f983a306090 RCX: 00007f983a08acb9 [ 67.287519][ T5046] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000005 [ 67.287536][ T5046] RBP: 00007f983a0f8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 67.287570][ T5046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.287587][ T5046] R13: 00007f983a306128 R14: 00007f983a306090 R15: 00007fff41847868 [ 67.287616][ T5046] [ 67.291129][ T29] audit: type=1400 audit(1769187213.669:739): avc: denied { ioctl } for pid=5053 comm="syz.6.320" path="pid:[4026532389]" dev="nsfs" ino=4026532389 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.297354][ T5046] memory: usage 307200kB, limit 307200kB, failcnt 63 [ 67.297373][ T5046] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 67.297390][ T5046] kmem: usage 295480kB, limit 9007199254740988kB, failcnt 0 [ 67.297406][ T5046] Memory cgroup stats for /syz7: [ 67.297816][ T5046] cache 11800576 [ 67.308893][ T29] audit: type=1400 audit(1769187213.679:740): avc: denied { create } for pid=5053 comm="syz.6.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 67.311969][ T5046] rss 200704 [ 67.366687][ T5016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.368532][ T5046] shmem 11755520 [ 67.395909][ T29] audit: type=1400 audit(1769187213.749:741): avc: denied { sys_admin } for pid=5053 comm="syz.6.320" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 67.398381][ T5046] mapped_file 11800576 [ 67.398394][ T5046] dirty 0 [ 67.398404][ T5046] writeback 45056 [ 67.406401][ T5016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.409358][ T5046] workingset_refault_anon 0 [ 67.409371][ T5046] workingset_refault_file 0 [ 67.409380][ T5046] swap 0 [ 67.409389][ T5046] swapcached 0 [ 67.438396][ T29] audit: type=1400 audit(1769187213.828:742): avc: denied { setattr } for pid=5047 comm="syz.8.318" name="tty37" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 67.438587][ T5046] pgpgin 45470 [ 67.771860][ T5046] pgpgout 42540 [ 67.771900][ T5046] pgfault 29703 [ 67.771910][ T5046] pgmajfault 1 [ 67.771920][ T5046] inactive_anon 11956224 [ 67.771931][ T5046] active_anon 0 [ 67.771941][ T5046] inactive_file 0 [ 67.771950][ T5046] active_file 45056 [ 67.771959][ T5046] unevictable 0 [ 67.801092][ T5046] hierarchical_memory_limit 314572800 [ 67.806611][ T5046] hierarchical_memsw_limit 9223372036854771712 [ 67.812803][ T5046] total_cache 11800576 [ 67.816908][ T5046] total_rss 200704 [ 67.820718][ T5046] total_shmem 11755520 [ 67.824842][ T5046] total_mapped_file 11800576 [ 67.829453][ T5046] total_dirty 0 [ 67.833030][ T5046] total_writeback 45056 [ 67.837205][ T5046] total_workingset_refault_anon 0 [ 67.842287][ T5046] total_workingset_refault_file 0 [ 67.847342][ T5046] total_swap 0 [ 67.850724][ T5046] total_swapcached 0 [ 67.854803][ T5046] total_pgpgin 45470 [ 67.858744][ T5046] total_pgpgout 42540 [ 67.862841][ T5046] total_pgfault 29703 [ 67.866892][ T5046] total_pgmajfault 1 [ 67.870799][ T5046] total_inactive_anon 11956224 [ 67.875613][ T5046] total_active_anon 0 [ 67.879610][ T5046] total_inactive_file 0 [ 67.883837][ T5046] total_active_file 45056 [ 67.888183][ T5046] total_unevictable 0 [ 67.892201][ T5046] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.317,pid=5043,uid=0 [ 67.906771][ T5046] Memory cgroup out of memory: Killed process 5044 (syz.7.317) total-vm:94264kB, anon-rss:1332kB, file-rss:22284kB, shmem-rss:11392kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 67.925366][ T5046] syz.7.317 (5046) used greatest stack depth: 8064 bytes left [ 67.959583][ T2119] hsr_slave_0: left promiscuous mode [ 67.973169][ T2119] hsr_slave_1: left promiscuous mode [ 67.979017][ T5044] infiniband : set down [ 67.983413][ T5044] infiniband : added ipvlan0 [ 67.988525][ T5044] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 67.988706][ T5044] infiniband : Couldn't open port 1 [ 67.997411][ T2119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.010132][ T2119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.020604][ T5044] RDS/IB: : added [ 68.024425][ T5044] smc: adding ib device  with port count 1 [ 68.030345][ T5044] smc: ib device  port 1 has no pnetid [ 68.064810][ T2119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.072273][ T2119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.106927][ T2119] veth1_macvtap: left promiscuous mode [ 68.112480][ T2119] veth0_macvtap: left promiscuous mode [ 68.128864][ T2119] veth1_vlan: left promiscuous mode [ 68.136040][ T2119] veth0_vlan: left promiscuous mode [ 68.155789][ T29] audit: type=1400 audit(1769187214.543:743): avc: denied { connect } for pid=5066 comm="syz.6.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.243117][ T2119] team0 (unregistering): Port device team_slave_1 removed [ 68.253282][ T2119] team0 (unregistering): Port device team_slave_0 removed [ 68.291192][ T5016] team0: Port device team_slave_0 added [ 68.302074][ T5016] team0: Port device team_slave_1 added [ 68.339173][ T5016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.346295][ T5016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.372470][ T5016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.385820][ T5016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.392873][ T5016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.418864][ T5016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.466826][ T5016] hsr_slave_0: entered promiscuous mode [ 68.473107][ T5016] hsr_slave_1: entered promiscuous mode [ 68.492195][ T5083] IPv6: Can't replace route, no match found [ 68.498777][ T5016] debugfs: 'hsr0' already exists in 'hsr' [ 68.504566][ T5016] Cannot create hsr debugfs directory [ 68.700105][ T29] audit: type=1326 audit(1769187215.090:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5094 comm="syz.6.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9b96acb9 code=0x7ffc0000 [ 68.749104][ T29] audit: type=1326 audit(1769187215.110:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5094 comm="syz.6.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fda9b96acb9 code=0x7ffc0000 [ 68.772454][ T29] audit: type=1326 audit(1769187215.110:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5094 comm="syz.6.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9b96acb9 code=0x7ffc0000 [ 68.814263][ T5096] set_capacity_and_notify: 2 callbacks suppressed [ 68.814284][ T5096] loop8: detected capacity change from 0 to 1024 [ 68.863921][ T5096] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 68.874923][ T5096] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 68.913366][ T5096] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.927802][ T5096] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #3: comm syz.8.326: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 68.946955][ T5096] EXT4-fs (loop8): no journal found [ 68.952281][ T5096] EXT4-fs (loop8): can't get journal size [ 68.962094][ T5016] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 68.966253][ T5096] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.983835][ T5016] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 69.005094][ T5016] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 69.033736][ T5016] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 69.142398][ T5016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.152898][ T4331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.178577][ T5138] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.190662][ T5016] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.220148][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.227316][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.254776][ T5150] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.289901][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.297051][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.334301][ T5147] bridge0: port 3(syz_tun) entered blocking state [ 69.340923][ T5147] bridge0: port 3(syz_tun) entered disabled state [ 69.355482][ T5147] syz_tun: entered allmulticast mode [ 69.368074][ T5147] syz_tun: entered promiscuous mode [ 69.375957][ T5147] bridge0: port 3(syz_tun) entered blocking state [ 69.382494][ T5147] bridge0: port 3(syz_tun) entered forwarding state [ 69.478317][ T5016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.530286][ T5180] loop4: detected capacity change from 0 to 1024 [ 69.552142][ T5180] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.564812][ T5180] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.583015][ T5180] pim6reg: entered allmulticast mode [ 69.633488][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.674973][ T5200] 9pnet_virtio: no channels available for device ..( [ 69.728914][ T5016] veth0_vlan: entered promiscuous mode [ 69.740129][ T5016] veth1_vlan: entered promiscuous mode [ 69.757309][ T5016] veth0_macvtap: entered promiscuous mode [ 69.765274][ T5016] veth1_macvtap: entered promiscuous mode [ 69.777200][ T5016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.791432][ T5016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.884007][ T37] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.916955][ T37] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.956258][ T37] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.977440][ T37] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.999578][ T5226] FAULT_INJECTION: forcing a failure. [ 69.999578][ T5226] name failslab, interval 1, probability 0, space 0, times 0 [ 70.012377][ T5226] CPU: 0 UID: 0 PID: 5226 Comm: syz.9.311 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.012407][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.012472][ T5226] Call Trace: [ 70.012478][ T5226] [ 70.012488][ T5226] __dump_stack+0x1d/0x30 [ 70.012568][ T5226] dump_stack_lvl+0x95/0xd0 [ 70.012596][ T5226] dump_stack+0x15/0x1b [ 70.012716][ T5226] should_fail_ex+0x263/0x280 [ 70.012743][ T5226] should_failslab+0x8c/0xb0 [ 70.012777][ T5226] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 70.012801][ T5226] ? __alloc_skb+0x2f0/0x4b0 [ 70.012835][ T5226] __alloc_skb+0x2f0/0x4b0 [ 70.012922][ T5226] ? __alloc_skb+0x219/0x4b0 [ 70.012993][ T5226] netlink_alloc_large_skb+0xbf/0xf0 [ 70.013050][ T5226] netlink_sendmsg+0x40c/0x6f0 [ 70.013072][ T5226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.013133][ T5226] __sock_sendmsg+0x145/0x170 [ 70.013160][ T5226] ____sys_sendmsg+0x31e/0x4a0 [ 70.013264][ T5226] ___sys_sendmsg+0x195/0x1e0 [ 70.013315][ T5226] __x64_sys_sendmsg+0xd4/0x160 [ 70.013438][ T5226] x64_sys_call+0x17ba/0x3000 [ 70.013542][ T5226] do_syscall_64+0xc0/0x2a0 [ 70.013564][ T5226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.013593][ T5226] RIP: 0033:0x7fe995d7acb9 [ 70.013613][ T5226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.013709][ T5226] RSP: 002b:00007fe9947d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.013728][ T5226] RAX: ffffffffffffffda RBX: 00007fe995ff5fa0 RCX: 00007fe995d7acb9 [ 70.013742][ T5226] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000001 [ 70.013757][ T5226] RBP: 00007fe9947d7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.013831][ T5226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.013847][ T5226] R13: 00007fe995ff6038 R14: 00007fe995ff5fa0 R15: 00007ffda25986f8 [ 70.013871][ T5226] [ 70.308493][ T5237] netlink: 28 bytes leftover after parsing attributes in process `syz.6.350'. [ 70.317506][ T5237] netlink: 28 bytes leftover after parsing attributes in process `syz.6.350'. [ 70.392817][ T5234] loop7: detected capacity change from 0 to 1024 [ 70.400104][ T5234] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 70.411790][ T5234] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 70.450067][ T5234] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 70.484115][ T5234] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.347: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 70.526258][ T5234] EXT4-fs (loop7): no journal found [ 70.531628][ T5234] EXT4-fs (loop7): can't get journal size [ 70.535518][ T5246] loop6: detected capacity change from 0 to 2048 [ 70.547042][ T5249] loop9: detected capacity change from 0 to 512 [ 70.561981][ T5246] EXT4-fs: dax option not supported [ 70.579075][ T5249] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.355: inode has both inline data and extents flags [ 70.662743][ T5249] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.355: couldn't read orphan inode 15 (err -117) [ 70.798371][ T5249] EXT4-fs error (device loop9): ext4_add_entry:2415: inode #2: comm syz.9.355: Directory hole found for htree leaf block 0 [ 70.843548][ T5249] EXT4-fs error (device loop9): ext4_add_entry:2415: inode #2: comm syz.9.355: Directory hole found for htree leaf block 0 [ 70.879919][ T5016] EXT4-fs unmount: 3 callbacks suppressed [ 70.879979][ T5016] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.936582][ T5279] loop9: detected capacity change from 0 to 512 [ 70.947335][ T5279] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.956104][ T5279] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.986870][ T5279] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.361: Allocating blocks 41-42 which overlap fs metadata [ 71.014266][ T5279] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.361: Allocating blocks 41-42 which overlap fs metadata [ 71.041329][ T5279] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.361: Failed to acquire dquot type 1 [ 71.061580][ T5279] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 71.086413][ T5279] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.361: corrupted inode contents [ 71.111755][ T5279] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #12: comm syz.9.361: mark_inode_dirty error [ 71.133599][ T5279] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.361: corrupted inode contents [ 71.157736][ T5279] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.361: mark_inode_dirty error [ 71.181679][ T5279] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.361: corrupted inode contents [ 71.205141][ T5279] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 71.221631][ T5279] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.361: corrupted inode contents [ 71.293553][ T5279] EXT4-fs error (device loop9): ext4_truncate:4635: inode #12: comm syz.9.361: mark_inode_dirty error [ 71.319723][ T5279] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 71.365868][ T5279] EXT4-fs (loop9): 1 truncate cleaned up [ 71.389162][ T5279] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.557438][ T5257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.604494][ T5016] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.904263][ T5339] loop6: detected capacity change from 0 to 1024 [ 71.911983][ T5339] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 71.923643][ T5339] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 71.964336][ T5339] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 72.033783][ T5339] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.366: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 72.034051][ T5339] EXT4-fs (loop6): no journal found [ 72.034064][ T5339] EXT4-fs (loop6): can't get journal size [ 72.059048][ T5339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.100081][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 72.100096][ T29] audit: type=1400 audit(1769187218.470:770): avc: denied { read } for pid=5353 comm="syz.7.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 72.232232][ T29] audit: type=1326 audit(1769187218.600:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5358 comm="syz.9.373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995d7acb9 code=0x0 [ 72.333981][ T5380] loop9: detected capacity change from 0 to 128 [ 72.342305][ T5380] FAT-fs (loop9): bogus number of reserved sectors [ 72.348925][ T5380] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 72.358370][ T5380] FAT-fs (loop9): Can't find a valid FAT filesystem [ 72.367358][ T5380] tmpfs: Unknown parameter 'siz ;@GE' [ 72.377288][ T29] audit: type=1326 audit(1769187218.739:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.9.375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe995d7acb9 code=0xffff0000 [ 72.482533][ T5383] netlink: 28 bytes leftover after parsing attributes in process `syz.7.376'. [ 72.491496][ T5383] netlink: 28 bytes leftover after parsing attributes in process `syz.7.376'. [ 72.616092][ T29] audit: type=1400 audit(1769187218.978:773): avc: denied { append } for pid=5386 comm="syz.8.378" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.652073][ T3605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.728294][ T29] audit: type=1400 audit(1769187219.087:774): avc: denied { connect } for pid=5390 comm="syz.6.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.849553][ T5387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.879243][ T5387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.903450][ T5387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.942897][ T5387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.004563][ T29] audit: type=1400 audit(1769187219.366:775): avc: denied { setopt } for pid=5394 comm="syz.6.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.054049][ T29] audit: type=1400 audit(1769187219.396:776): avc: denied { ioctl } for pid=5394 comm="syz.6.382" path="socket:[12590]" dev="sockfs" ino=12590 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.102574][ T5387] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.181247][ T5404] loop8: detected capacity change from 0 to 2048 [ 73.226191][ T5405] loop6: detected capacity change from 0 to 512 [ 73.260671][ T5405] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.293026][ T3310] loop8: p2 < > p4 [ 73.297001][ T3310] loop8: partition table partially beyond EOD, truncated [ 73.308547][ T3310] loop8: p2 start 4278190080 is beyond EOD, truncated [ 73.315480][ T3310] loop8: p4 size 8192 extends beyond EOD, truncated [ 73.341722][ T5405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.370825][ T5410] netlink: 'syz.7.385': attribute type 13 has an invalid length. [ 73.403207][ T5405] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.416508][ T5404] loop8: p2 < > p4 [ 73.420389][ T5404] loop8: partition table partially beyond EOD, truncated [ 73.457650][ T5387] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.503853][ T5404] loop8: p2 start 4278190080 is beyond EOD, truncated [ 73.510773][ T5404] loop8: p4 size 8192 extends beyond EOD, truncated [ 73.619438][ T3605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.840224][ T5387] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.088651][ T5387] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.111452][ T29] audit: type=1400 audit(1769187220.471:777): avc: denied { connect } for pid=5433 comm="syz.7.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.739393][ T5446] ip6tnl0: Caught tx_queue_len zero misconfig [ 74.751419][ T2697] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.767892][ T5446] set_capacity_and_notify: 1 callbacks suppressed [ 74.767910][ T5446] loop7: detected capacity change from 0 to 512 [ 74.816663][ T5446] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.842659][ T5446] ext4 filesystem being mounted at /86/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.907021][ T2697] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.938654][ T29] audit: type=1400 audit(1769187221.287:778): avc: denied { ioctl } for pid=5445 comm="syz.7.395" path="/86/file2/cpu.stat" dev="loop7" ino=18 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.964310][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.7.395'. [ 75.038130][ T1641] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.071135][ T3689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.177695][ T323] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.236635][ T5458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.397'. [ 75.236852][ T5461] loop7: detected capacity change from 0 to 128 [ 75.277562][ T5461] /dev/loop7: Can't open blockdev [ 75.307618][ T5466] netlink: 8 bytes leftover after parsing attributes in process `syz.7.399'. [ 75.426555][ T5481] loop7: detected capacity change from 0 to 764 [ 75.454396][ T5481] rock: directory entry would overflow storage [ 75.460646][ T5481] rock: sig=0x5245, size=8, remaining=5 [ 75.480616][ T5469] loop9: detected capacity change from 0 to 512 [ 76.009595][ T29] audit: type=1400 audit(1769187222.353:779): avc: denied { setcurrent } for pid=5498 comm="syz.6.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.031300][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.410'. [ 76.051391][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.410'. [ 76.302134][ T5504] netlink: 27 bytes leftover after parsing attributes in process `syz.9.412'. [ 76.376753][ T3404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3404 comm=kworker/0:3 [ 76.487692][ T5508] netlink: 12 bytes leftover after parsing attributes in process `syz.9.413'. [ 77.238839][ T5550] loop6: detected capacity change from 0 to 2048 [ 77.265797][ T5550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.299167][ T5559] loop7: detected capacity change from 0 to 764 [ 77.316310][ T5554] netlink: 'syz.4.431': attribute type 13 has an invalid length. [ 77.329374][ T5554] gretap0: refused to change device tx_queue_len [ 77.337291][ T5554] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.382167][ T3605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.441308][ T5563] FAULT_INJECTION: forcing a failure. [ 77.441308][ T5563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.455307][ T5563] CPU: 1 UID: 0 PID: 5563 Comm: syz.6.433 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.455336][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.455383][ T5563] Call Trace: [ 77.455391][ T5563] [ 77.455400][ T5563] __dump_stack+0x1d/0x30 [ 77.455430][ T5563] dump_stack_lvl+0x95/0xd0 [ 77.455458][ T5563] dump_stack+0x15/0x1b [ 77.455569][ T5563] should_fail_ex+0x263/0x280 [ 77.455670][ T5563] should_fail+0xb/0x20 [ 77.455698][ T5563] should_fail_usercopy+0x1a/0x20 [ 77.455779][ T5563] _copy_from_user+0x1c/0xb0 [ 77.455816][ T5563] ___sys_sendmsg+0xc1/0x1e0 [ 77.455908][ T5563] __x64_sys_sendmsg+0xd4/0x160 [ 77.455960][ T5563] x64_sys_call+0x17ba/0x3000 [ 77.455987][ T5563] do_syscall_64+0xc0/0x2a0 [ 77.456009][ T5563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.456055][ T5563] RIP: 0033:0x7fda9b96acb9 [ 77.456072][ T5563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.456096][ T5563] RSP: 002b:00007fda9a3c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.456163][ T5563] RAX: ffffffffffffffda RBX: 00007fda9bbe5fa0 RCX: 00007fda9b96acb9 [ 77.456179][ T5563] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c [ 77.456197][ T5563] RBP: 00007fda9a3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 77.456246][ T5563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.456260][ T5563] R13: 00007fda9bbe6038 R14: 00007fda9bbe5fa0 R15: 00007ffe15b0bd18 [ 77.456286][ T5563] [ 77.624675][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 77.624850][ T29] audit: type=1400 audit(1769187223.966:825): avc: denied { connect } for pid=5560 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.664530][ T5567] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 77.675839][ T5561] IPVS: stopping master sync thread 5567 ... [ 77.709035][ T5569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.436'. [ 77.758897][ T5574] netlink: 9 bytes leftover after parsing attributes in process `syz.4.437'. [ 77.773641][ T5569] veth3: entered promiscuous mode [ 77.803983][ T29] audit: type=1400 audit(1769187224.146:826): avc: denied { ioctl } for pid=5578 comm="syz.4.439" path="socket:[13003]" dev="sockfs" ino=13003 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.871458][ T5588] loop9: detected capacity change from 0 to 128 [ 77.917457][ T5590] loop6: detected capacity change from 0 to 2048 [ 78.009251][ T5597] loop4: detected capacity change from 0 to 2048 [ 78.016417][ T5590] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.038150][ T5597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.091618][ T3605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.176725][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.221416][ T29] audit: type=1400 audit(1769187224.554:827): avc: denied { bind } for pid=5607 comm="syz.6.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.258262][ T5611] loop4: detected capacity change from 0 to 128 [ 78.291113][ T29] audit: type=1400 audit(1769187224.554:828): avc: denied { connect } for pid=5607 comm="syz.6.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.311394][ T29] audit: type=1400 audit(1769187224.554:829): avc: denied { setopt } for pid=5607 comm="syz.6.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.331646][ T29] audit: type=1400 audit(1769187224.554:830): avc: denied { write } for pid=5607 comm="syz.6.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.351696][ T29] audit: type=1400 audit(1769187224.614:831): avc: denied { accept } for pid=5612 comm="syz.6.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 78.493330][ T5622] 9p: Bad value for 'rfdno' [ 78.525711][ T29] audit: type=1400 audit(1769187224.863:832): avc: denied { load_policy } for pid=5625 comm="syz.6.453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 78.525763][ T5626] SELinux: policydb version -839680242 does not match my version range 15-35 [ 78.555510][ T5626] SELinux: failed to load policy [ 78.586379][ T29] audit: type=1400 audit(1769187224.923:833): avc: denied { setopt } for pid=5628 comm="syz.6.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.718050][ T29] audit: type=1400 audit(1769187225.053:834): avc: denied { write } for pid=5632 comm="syz.8.456" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 78.751107][ T5633] netlink: 24 bytes leftover after parsing attributes in process `syz.8.456'. [ 78.797851][ T5632] delete_channel: no stack [ 78.822810][ T5629] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.832144][ T5629] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 78.883649][ T5636] EXT4-fs (loop8): orphan cleanup on readonly fs [ 78.897513][ T5636] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.457: bad orphan inode 13 [ 78.923204][ T5636] ext4_test_bit(bit=12, block=18) = 1 [ 78.928719][ T5636] is_bad_inode(inode)=0 [ 78.933107][ T5636] NEXT_ORPHAN(inode)=2130706432 [ 78.938021][ T5636] max_ino=32 [ 78.941271][ T5636] i_nlink=1 [ 78.945869][ T5636] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.960264][ T5636] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 79.041705][ T5636] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 79.053394][ T5642] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.457: bg 0: block 248: padding at end of block bitmap is not set [ 79.068758][ T5642] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.457: Failed to acquire dquot type 1 [ 79.081729][ T5639] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.107933][ T4331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.129109][ T3689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.283806][ T5666] veth2: entered promiscuous mode [ 79.289657][ T5666] veth2: entered allmulticast mode [ 79.316157][ T5669] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 79.360293][ T5675] netlink: 12 bytes leftover after parsing attributes in process `syz.6.471'. [ 79.370080][ T5675] bridge_slave_0: default FDB implementation only supports local addresses [ 79.384661][ T5677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.472'. [ 79.393632][ T5677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.472'. [ 79.442562][ T5681] dummy0: entered promiscuous mode [ 79.466171][ T5681] macsec1: entered allmulticast mode [ 79.480603][ T5681] dummy0: entered allmulticast mode [ 79.497425][ T5681] dummy0: left allmulticast mode [ 79.502433][ T5681] dummy0: left promiscuous mode [ 79.590310][ T5695] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.635692][ T3605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.646358][ T5706] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 79.664323][ T5708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.673694][ T5706] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 79.681408][ T3310] loop4: p1 p3 p4 [ 79.685321][ T3310] loop4: p1 start 11337728 is beyond EOD, truncated [ 79.692020][ T3310] loop4: p3 start 83886088 is beyond EOD, truncated [ 79.698740][ T3310] loop4: p4 size 460544 extends beyond EOD, truncated [ 79.711782][ T5708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.734055][ T5699] loop4: p1 p3 p4 [ 79.738922][ T5699] loop4: p1 start 11337728 is beyond EOD, truncated [ 79.739740][ T5708] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.746699][ T5699] loop4: p3 start 83886088 is beyond EOD, truncated [ 79.763257][ T5699] loop4: p4 size 460544 extends beyond EOD, truncated [ 79.830890][ T3605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.841299][ T3012] loop4: p1 p3 p4 [ 79.847425][ T3012] loop4: p1 start 11337728 is beyond EOD, truncated [ 79.854184][ T3012] loop4: p3 start 83886088 is beyond EOD, truncated [ 79.861038][ T3012] loop4: p4 size 460544 extends beyond EOD, truncated [ 79.953103][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 79.990277][ T5724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=5724 comm=syz.6.491 [ 80.003949][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 80.014157][ T5727] FAULT_INJECTION: forcing a failure. [ 80.014157][ T5727] name failslab, interval 1, probability 0, space 0, times 0 [ 80.020768][ T5724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=5724 comm=syz.6.491 [ 80.026910][ T5727] CPU: 0 UID: 0 PID: 5727 Comm: syz.4.492 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.027096][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.027144][ T5727] Call Trace: [ 80.027168][ T5727] [ 80.027191][ T5727] __dump_stack+0x1d/0x30 [ 80.027215][ T5727] dump_stack_lvl+0x95/0xd0 [ 80.027282][ T5727] dump_stack+0x15/0x1b [ 80.027355][ T5727] should_fail_ex+0x263/0x280 [ 80.027426][ T5727] should_failslab+0x8c/0xb0 [ 80.027567][ T5727] __kmalloc_cache_noprof+0x64/0x4a0 [ 80.027643][ T5727] ? rtnl_newlink+0x5c/0x1370 [ 80.027708][ T5727] ? __pfx_rtnl_newlink+0x10/0x10 [ 80.027834][ T5727] rtnl_newlink+0x5c/0x1370 [ 80.027928][ T5727] ? __memcg_slab_free_hook+0x135/0x230 [ 80.028024][ T5727] ? __rcu_read_unlock+0x4e/0x70 [ 80.028150][ T5727] ? avc_has_perm_noaudit+0xab/0x130 [ 80.028223][ T5727] ? cred_has_capability+0x224/0x290 [ 80.028331][ T5727] ? selinux_capable+0x31/0x40 [ 80.028452][ T5727] ? security_capable+0x7b/0x90 [ 80.028601][ T5727] ? ns_capable+0x7c/0xb0 [ 80.028726][ T5727] ? __pfx_rtnl_newlink+0x10/0x10 [ 80.028793][ T5727] rtnetlink_rcv_msg+0x64b/0x720 [ 80.028877][ T5727] netlink_rcv_skb+0x123/0x220 [ 80.028981][ T5727] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 80.029136][ T5727] rtnetlink_rcv+0x1c/0x30 [ 80.029192][ T5727] netlink_unicast+0x5c0/0x690 [ 80.029297][ T5727] netlink_sendmsg+0x5c8/0x6f0 [ 80.029381][ T5727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.029446][ T5727] __sock_sendmsg+0x145/0x170 [ 80.029526][ T5727] ____sys_sendmsg+0x31e/0x4a0 [ 80.029639][ T5727] ___sys_sendmsg+0x195/0x1e0 [ 80.029902][ T5727] __x64_sys_sendmsg+0xd4/0x160 [ 80.030057][ T5727] x64_sys_call+0x17ba/0x3000 [ 80.030149][ T5727] do_syscall_64+0xc0/0x2a0 [ 80.030215][ T5727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.030321][ T5727] RIP: 0033:0x7f040874acb9 [ 80.030374][ T5727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.030437][ T5727] RSP: 002b:00007f04071a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.030511][ T5727] RAX: ffffffffffffffda RBX: 00007f04089c5fa0 RCX: 00007f040874acb9 [ 80.030633][ T5727] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000004 [ 80.030674][ T5727] RBP: 00007f04071a7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.030709][ T5727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.030743][ T5727] R13: 00007f04089c6038 R14: 00007f04089c5fa0 R15: 00007ffd090b7a98 [ 80.030806][ T5727] [ 80.434994][ T5757] set_capacity_and_notify: 8 callbacks suppressed [ 80.435014][ T5757] loop4: detected capacity change from 0 to 2048 [ 80.453402][ T5753] netdevsim netdevsim9 netdevsim1: entered promiscuous mode [ 80.476181][ T5753] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 80.506473][ T5753] debugfs: 'hsr1' already exists in 'hsr' [ 80.512338][ T5753] Cannot create hsr debugfs directory [ 80.561009][ T5769] netlink: 'syz.6.503': attribute type 3 has an invalid length. [ 80.632865][ T5786] lo: Caught tx_queue_len zero misconfig [ 80.639628][ T5784] xt_bpf: check failed: parse error [ 80.693764][ T5794] IPv6: Can't replace route, no match found [ 80.885129][ T5809] tmpfs: Bad value for 'mpol' [ 81.059625][ T5831] tmpfs: Unknown parameter 'ӕpX`8c~3 *\33p+' [ 81.078966][ T5831] loop7: detected capacity change from 0 to 2048 [ 81.100329][ T5831] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.129586][ T3689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.243722][ T5841] loop7: detected capacity change from 0 to 1024 [ 81.258563][ T5841] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.525: bad orphan inode 134217728 [ 81.272165][ T5841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.302968][ T5847] loop8: detected capacity change from 0 to 764 [ 81.406253][ T5852] netlink: 'syz.8.528': attribute type 7 has an invalid length. [ 81.416010][ T3689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.417147][ T5853] __nla_validate_parse: 8 callbacks suppressed [ 81.417188][ T5853] netlink: 52 bytes leftover after parsing attributes in process `syz.8.528'. [ 81.427658][ T5852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=5852 comm=syz.8.528 [ 81.482788][ T5860] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20001 [ 81.488828][ T5859] netlink: 172 bytes leftover after parsing attributes in process `syz.7.530'. [ 81.586955][ T5869] netlink: 28 bytes leftover after parsing attributes in process `syz.7.535'. [ 81.596643][ T5869] netlink: 28 bytes leftover after parsing attributes in process `syz.7.535'. [ 81.632485][ T5872] netlink: 'syz.6.536': attribute type 2 has an invalid length. [ 81.661791][ T5870] loop4: detected capacity change from 0 to 8192 [ 81.711316][ T5876] loop7: detected capacity change from 0 to 512 [ 81.718401][ T3310] loop4: p1 p2 p4 < > [ 81.722528][ T3310] loop4: partition table partially beyond EOD, truncated [ 81.746741][ T3310] loop4: p1 start 16777216 is beyond EOD, truncated [ 81.753424][ T3310] loop4: p2 size 515840 extends beyond EOD, truncated [ 81.761342][ T3310] loop4: p4 start 16777216 is beyond EOD, truncated [ 81.769869][ T5870] loop4: p1 p2 p4 < > [ 81.774027][ T5870] loop4: partition table partially beyond EOD, truncated [ 81.785167][ T5876] ------------[ cut here ]------------ [ 81.790690][ T5876] EA inode 11 i_nlink=2 [ 81.790707][ T5876] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.7.537/5876 [ 81.801524][ T5870] loop4: p1 start 16777216 is beyond EOD, [ 81.805599][ T5876] Modules linked in: [ 81.805622][ T5876] CPU: 0 UID: 0 PID: 5876 Comm: syz.7.537 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.805647][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.805660][ T5876] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 81.811498][ T5870] truncated [ 81.811506][ T5870] loop4: p2 size 515840 extends beyond EOD, truncated [ 81.815535][ T5876] Code: 11 cf 9b ff 4c 8d 2d 4a aa 3f 05 49 8d 7e 40 e8 c1 85 b7 ff 49 8b 6e 40 4c 89 e7 e8 f5 80 b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 6c bc c5 03 66 66 66 2e 0f 1f 84 [ 81.815624][ T5876] RSP: 0018:ffffc900100ef5a8 EFLAGS: 00010246 [ 81.815654][ T5876] RAX: ffff888102194c90 RBX: ffff8881099b8610 RCX: ffffffff81bc669b [ 81.815673][ T5876] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc10d0 [ 81.815692][ T5876] RBP: 000000000000000b R08: 00018881099b85c3 R09: 0000000000000000 [ 81.815706][ T5876] R10: ffffc900100ef4d8 R11: 0001c900100ef4d8 R12: ffff8881099b85c0 [ 81.815780][ T5876] R13: ffffffff86fc10d0 R14: ffff8881099b8578 R15: 0000000000000001 [ 81.815798][ T5876] FS: 00007f9838ae76c0(0000) GS:ffff8882aeb79000(0000) knlGS:0000000000000000 [ 81.815876][ T5876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.815893][ T5876] CR2: 00007f79ddc26000 CR3: 0000000113f96000 CR4: 00000000003506f0 [ 81.815914][ T5876] Call Trace: [ 81.815922][ T5876] [ 81.815987][ T5876] ext4_xattr_set_entry+0x77c/0x1010 [ 81.816039][ T5876] ext4_xattr_ibody_set+0x184/0x3c0 [ 81.816080][ T5876] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 81.816227][ T5876] __ext4_expand_extra_isize+0x246/0x280 [ 81.836009][ T5870] loop4: p4 start 16777216 is beyond EOD, truncated [ 81.978973][ T5876] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 81.984513][ T5876] ext4_evict_inode+0x7c3/0xd40 [ 81.989578][ T5876] ? __pfx_ext4_evict_inode+0x10/0x10 [ 81.989987][ T5887] loop6: detected capacity change from 0 to 1024 [ 81.995022][ T5876] evict+0x2af/0x510 [ 81.995140][ T5876] ? __dquot_initialize+0x146/0x7c0 [ 81.995181][ T5876] iput+0x4b9/0x650 [ 81.995253][ T5876] ext4_process_orphan+0x1a9/0x1c0 [ 81.995283][ T5876] ext4_orphan_cleanup+0x6a8/0xa00 [ 81.995317][ T5876] ext4_fill_super+0x3476/0x3800 [ 81.995348][ T5876] ? set_blocksize+0x1a3/0x310 [ 81.995437][ T5876] ? setup_bdev_super+0x30e/0x370 [ 81.995462][ T5876] ? __pfx_ext4_fill_super+0x10/0x10 [ 81.995539][ T5876] get_tree_bdev_flags+0x291/0x300 [ 81.995563][ T5876] ? __pfx_ext4_fill_super+0x10/0x10 [ 81.995589][ T5876] get_tree_bdev+0x1f/0x30 [ 81.995610][ T5876] ext4_get_tree+0x1c/0x30 [ 81.995655][ T5876] vfs_get_tree+0x57/0x1d0 [ 81.995679][ T5876] do_new_mount+0x288/0x700 [ 81.995708][ T5876] path_mount+0x4c0/0xb90 [ 81.995733][ T5876] ? user_path_at+0xbf/0x130 [ 82.083722][ T5876] __se_sys_mount+0x28c/0x2e0 [ 82.088636][ T5876] __x64_sys_mount+0x67/0x80 [ 82.093455][ T5876] x64_sys_call+0x2cca/0x3000 [ 82.098354][ T5876] do_syscall_64+0xc0/0x2a0 [ 82.102908][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.108894][ T5876] RIP: 0033:0x7f983a08bf4a [ 82.113360][ T5876] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.134169][ T5876] RSP: 002b:00007f9838ae6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 82.142839][ T5876] RAX: ffffffffffffffda RBX: 00007f9838ae6ee0 RCX: 00007f983a08bf4a [ 82.151024][ T5876] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f9838ae6ea0 [ 82.159221][ T5876] RBP: 0000200000000180 R08: 00007f9838ae6ee0 R09: 0000000000800700 [ 82.167292][ T5876] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 82.175366][ T5876] R13: 00007f9838ae6ea0 R14: 000000000000046f R15: 000000000000002c [ 82.183482][ T5876] [ 82.186581][ T5876] ---[ end trace 0000000000000000 ]--- [ 82.193883][ T5876] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.537: iget: bad extra_isize 90 (inode size 256) [ 82.207483][ T5887] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 82.218548][ T5887] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 82.245305][ T5887] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 82.258451][ T5876] EXT4-fs (loop7): Remounting filesystem read-only [ 82.265385][ T5876] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30) [ 82.274734][ T5887] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.538: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 82.293043][ T5876] EXT4-fs (loop7): 1 orphan inode deleted [ 82.300532][ T5887] EXT4-fs (loop6): no journal found [ 82.305824][ T5887] EXT4-fs (loop6): can't get journal size [ 82.312323][ T5876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.326143][ T5887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.359658][ T3689] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.439520][ T3605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.453501][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.8.544'. [ 82.463439][ T5898] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 82.833520][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 82.833535][ T29] audit: type=1326 audit(1769187229.160:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.8.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e7c8acb9 code=0x7ffc0000 [ 82.877732][ T29] audit: type=1326 audit(1769187229.200:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.8.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f51e7c8acb9 code=0x7ffc0000 [ 82.902819][ T29] audit: type=1400 audit(1769187229.200:891): avc: denied { mount } for pid=5930 comm="syz.8.549" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 82.925615][ T29] audit: type=1326 audit(1769187229.200:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.8.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e7c8acb9 code=0x7ffc0000 [ 82.951056][ T29] audit: type=1326 audit(1769187229.200:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.8.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f51e7c8acb9 code=0x7ffc0000 [ 82.975749][ T29] audit: type=1400 audit(1769187229.200:894): avc: denied { unmount } for pid=5930 comm="syz.8.549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 82.996245][ T29] audit: type=1326 audit(1769187229.200:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.8.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e7c8acb9 code=0x7ffc0000 [ 83.021207][ T29] audit: type=1326 audit(1769187229.200:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.8.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51e7c8acb9 code=0x7ffc0000 [ 83.045009][ T29] audit: type=1326 audit(1769187229.200:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.8.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e7c8acb9 code=0x7ffc0000 [ 83.069175][ T29] audit: type=1326 audit(1769187229.200:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.8.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f51e7c8acb9 code=0x7ffc0000 [ 83.115880][ T5948] netlink: 'syz.7.553': attribute type 33 has an invalid length. [ 83.123744][ T5948] netlink: 152 bytes leftover after parsing attributes in process `syz.7.553'. [ 83.135223][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.7.553'. [ 83.220876][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.7.556'. [ 83.237362][ T5963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.250035][ T5963] bond1 (unregistering): Released all slaves [ 83.290250][ T5965] loop9: detected capacity change from 0 to 1024 [ 83.297763][ T5965] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 83.308780][ T5965] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 83.318790][ T5965] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 83.350806][ T5965] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #3: comm syz.9.555: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 83.369987][ T5965] EXT4-fs (loop9): no journal found [ 83.375325][ T5965] EXT4-fs (loop9): can't get journal size [ 83.384347][ T5965] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.446875][ T5973] loop7: detected capacity change from 0 to 512 [ 83.453732][ T5973] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 83.539043][ T5016] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.624228][ T5987] netlink: 'syz.9.565': attribute type 46 has an invalid length. [ 83.664670][ T5990] netlink: 'syz.4.566': attribute type 33 has an invalid length. [ 83.673199][ T5990] netlink: 152 bytes leftover after parsing attributes in process `syz.4.566'. [ 83.860143][ T6002] loop6: detected capacity change from 0 to 512 [ 83.869599][ T6002] EXT4-fs (loop6): orphan cleanup on readonly fs [ 83.876462][ T6002] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.570: bad orphan inode 13 [ 83.887601][ T6002] ext4_test_bit(bit=12, block=18) = 1 [ 83.893114][ T6002] is_bad_inode(inode)=0 [ 83.897351][ T6002] NEXT_ORPHAN(inode)=2130706432 [ 83.903229][ T6002] max_ino=32 [ 83.906573][ T6002] i_nlink=1 [ 83.914085][ T6002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.931168][ T6002] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 83.942731][ T6005] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.571'. [ 83.952274][ T6005] netlink: zone id is out of range [ 83.957457][ T6005] netlink: zone id is out of range [ 83.963597][ T6005] netlink: zone id is out of range [ 83.968924][ T6002] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 83.980116][ T6002] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.570: bg 0: block 248: padding at end of block bitmap is not set [ 84.001914][ T6002] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.570: Failed to acquire dquot type 1 [ 84.006505][ T6005] netlink: set zone limit has 8 unknown bytes [ 84.042836][ T3605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.075495][ T3012] ================================================================== [ 84.083642][ T3012] BUG: KCSAN: data-race in dont_mount / step_into_slowpath [ 84.090917][ T3012] [ 84.093386][ T3012] read-write to 0xffff888109a2ccc0 of 4 bytes by task 3315 on cpu 0: [ 84.101868][ T3012] dont_mount+0x2a/0x40 [ 84.106063][ T3012] vfs_unlink+0x2ae/0x440 [ 84.110437][ T3012] do_unlinkat+0x1e2/0x4b0 [ 84.114883][ T3012] __x64_sys_unlink+0x2e/0x40 [ 84.119687][ T3012] x64_sys_call+0x2f48/0x3000 [ 84.124426][ T3012] do_syscall_64+0xc0/0x2a0 [ 84.129005][ T3012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.134941][ T3012] [ 84.137391][ T3012] read to 0xffff888109a2ccc0 of 4 bytes by task 3012 on cpu 1: [ 84.145063][ T3012] step_into_slowpath+0x139/0x4c0 [ 84.150283][ T3012] path_lookupat+0x330/0x500 [ 84.155032][ T3012] filename_lookup+0x190/0x390 [ 84.160035][ T3012] do_readlinkat+0x7d/0x340 [ 84.164679][ T3012] __x64_sys_readlink+0x47/0x60 [ 84.169561][ T3012] x64_sys_call+0x2af1/0x3000 [ 84.174469][ T3012] do_syscall_64+0xc0/0x2a0 [ 84.179099][ T3012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.185424][ T3012] [ 84.187800][ T3012] value changed: 0x00300080 -> 0x00004080 [ 84.193545][ T3012] [ 84.195884][ T3012] Reported by Kernel Concurrency Sanitizer on: [ 84.202061][ T3012] CPU: 1 UID: 0 PID: 3012 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 84.212943][ T3012] Tainted: [W]=WARN [ 84.216780][ T3012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.226873][ T3012] ================================================================== [ 84.370195][ T6013] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 84.381259][ T6013] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 84.391748][ T6013] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 84.402553][ T6013] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.573: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 84.420858][ T6013] EXT4-fs (loop6): no journal found [ 84.426179][ T6013] EXT4-fs (loop6): can't get journal size [ 84.433778][ T6013] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.473322][ T3605] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.