last executing test programs: 32.094722673s ago: executing program 2 (id=1249): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x48, 0x33, 0x57}, {0x28, 0x1, 0xf7, 0xfffff00c}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xa052) socket$packet(0x11, 0x2, 0x300) r3 = socket$igmp(0x2, 0x3, 0x2) unshare(0x22020600) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0), 0x4) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x40}}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_int(r6, 0x29, 0x24, 0x0, &(0x7f00000000c0)) pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0x1) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/208, 0xd0}], 0x1, 0xb6dc, 0x0, 0x1e) 31.946607092s ago: executing program 2 (id=1255): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x84, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x6b]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADLINK(r3, &(0x7f0000000140)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x2}, {r0, 0x2005}], 0x2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') 31.1251295s ago: executing program 2 (id=1280): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x2a) 31.088721652s ago: executing program 2 (id=1281): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc00000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000580012800b0001006772657461700000480002800400120006000f0004000000060010004e23000005000900f4000000080005000300000005000800040000000600030000010000060003000000000005000a"], 0xcc}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[], 0x6, 0x2c9, &(0x7f0000000180)="$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") openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="70b1acc6461853c47f1114010029b100000000003700000000458926117100ad3e7c0000002699880e9dfef1d5e6b1684c2a202fc8ed6a40bbda5ad66e346b8445862f619d52d116d59621183a21b0df01135aef308f33ac6b9ae421bcbca2914c8eb07fac45fe66e6e3170bb8742f3b530b1a5e0a66d6ed179d7fceb017710a9ad2e65f713964218cd17d"], 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4044190) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r3, 0xff, 0x1, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffdea) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000640)=ANY=[@ANYRES8=r3, @ANYBLOB="002004", @ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0xfffffffffffffffc, 0x1, 0x8e0}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000500)='net/raw\x00') r8 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x2, 0x1103, 0x21e}, &(0x7f0000000240), &(0x7f0000000340)) io_uring_enter(r8, 0x6efc, 0x3900, 0x2f, 0x0, 0x0) lseek(r7, 0x401, 0x0) 30.840494626s ago: executing program 2 (id=1286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001e008d2a0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00&'], 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x14048010) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000080)={[{@grpid}, {@grpquota}], [{@euid_eq={'euid', 0x3d, r5}}, {@subj_type={'subj_type', 0x3d, '}'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'grpid'}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}]}, 0x4, 0x502, &(0x7f0000000f80)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7fffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f0000000140)={@none, 0x9b, 0xffff, 0x8, 0x0, 0x8, "5bb417083bd6ee5b4aad62644686a47fe27c81bf65ad7c49a79bf029f8db045053d3fdd6cb324ea25fcefde015bc5a61f05b32fa866c0773cae2320a68de0e39b24ed79974d7601ad07fd5ce6256e8f71b43bbe341447bff0ef958d0a63af3caab4c30a8b98e408550f4b16b10c6e71ca58ca518e956d9c120e284872656666e"}) 30.551147453s ago: executing program 2 (id=1291): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r3, 0x180}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x2, 0xffffffffffffffff, 0x233d4cf6, 0x80000}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x2, 0x13, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000000)=0x100, 0x4) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000080)=0xffff, 0x4) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 30.397612282s ago: executing program 32 (id=1291): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r3, 0x180}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x2, 0xffffffffffffffff, 0x233d4cf6, 0x80000}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x2, 0x13, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000000)=0x100, 0x4) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000080)=0xffff, 0x4) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 24.318439658s ago: executing program 4 (id=1348): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x75}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x10, 0x3, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=""/56, 0x38) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 23.814821618s ago: executing program 4 (id=1354): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0x70}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000004f1000000000000063000000000000009500059e00020000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x61, 0x0, 0x0, 0x64}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x9, 0xffe0}, {0xc, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3ce6ed39}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xc, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r6, r6, r6, r6], 0x0, 0x10, 0x200}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40ccc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b0c, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x300, 0x56, 0x0, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90040000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c96", 0x0, 0x2f00, 0x0, 0xe3, 0x0, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed", &(0x7f00000007c0), 0x2, 0x0, 0x10000}, 0x50) 23.473989508s ago: executing program 4 (id=1363): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x30000000, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x0, 0x0, 0x4}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x33}, 0x2, @in6=@private1, 0x0, 0x5}]}]}, 0x17c}}, 0x0) 23.396571982s ago: executing program 4 (id=1364): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80040e, &(0x7f00000003c0)={[{@lazytime}, {@test_dummy_encryption_v1}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") getpid() syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x83, 0x499, &(0x7f0000000840)="$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") r0 = getpid() capset(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000400)={0xff, 0x9, 0xfffff473, 0x9, 0xa47f, 0x8}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r1, 0xfffffffffffffffd, 0xbb) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getdents64(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000340)={&(0x7f00000011c0)={0x13e4, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1150, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x40, 0x4, "02895a813df52fc55f39d06263e6487605213bdac9dbd5da46519a4640c794d6b206f1272a01b72300c05f8efae431402d1d5bd7f0e8f52bfde5af5d"}, @ETHTOOL_A_BITSET_MASK={0xf0, 0x5, "564769484ece89221c6dfb5794d962f0e0d2fbb363a5990399e87a119cac5013eb7c2382065134b20887f0d7b60183bdfd5d6ac15e5852510249b9c0c0dde1b0e67a679dbff4df9d7f11d7f62b3f321dd4d980b9dbd871b85b306a9ce9049d6111667c955602f2c3af3f8e737164e7b49b34a5b9e99530e89de63d71d4942a37343c67cb4a3988a6ca27d138ac1fabe021b7d3bae2b910356d6b13cf55ff209c9132f6529dce16a367ad1fdf0a2f55d1428a2db3eefaacce8a5cce58ed78f873494e2dd7e84460a730f6e1c87992ec00482f01a998b001e4fce893192ebc71ad10a0eedec0e36ee7e9ceb4a2"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffd}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x280, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x24, 0x4, "cab8510341b9244b52a6ce21f7508d3e7f33f935d5c28402f5bcd5284c8b55fd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x50, 0x4, "6d2681eb930ca200e7d2ad9c6c40b63fbb142b803fa027e37c612d690f45bd675fc9d45193e1a0dd5046a84317d6b3b4283a4a20f57fec6f004acf16692824df5370ab5812ae2848d4ce6e5d"}, @ETHTOOL_A_BITSET_VALUE={0x92, 0x4, "93c8898c663188faa315a892a99cbaafdf21df53a2a47b8da8a913d4738ceabb60cc066b59373a2a2a5b144ad29558eef67ea3f3b9a5c80b04c3fdcad0b411e1d80c90343d1cb7522aac0d092d28fc3a5ee014cc8e788ea655afcaec45be3fe6c60b7444349d3283944d80613ba07dcfb36376b9693e45cc2738ac15f9f830005d0ef849d6dd33757a6166802bb0"}, @ETHTOOL_A_BITSET_MASK={0x78, 0x5, "95e009cd93df2a60c6891ece94cafea55db4e58264fdbe0946111895703d40fb5cf82ac296c6ed9f5cda783f12b29e6d8fa96e007295bfafcf32d4886d8baec487fc4873df475e3e80cf3b124c317fbfbb39b54a568ef338f05a9e3d3a776fd19d89cf392ba106fecd6e1d3e8fccddb98ed9bb15"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}, @ETHTOOL_A_BITSET_VALUE={0xec, 0x4, "b3634627edeed6a257759b5b267263e182616a0f1e761fc3a29ff7a15c28196ebe9072f96a12f857b8b5a1c1669ba874b4a3736b92de4edda9ed9a7b34483f485c68da3fff4295a13aa2b1691a2b2fcbba2461e06d92eeb5d3ee05745aba7df445e627931c1527ae0cc101da9884676ba716cfb8078854809218994f64adbd581f7e5ca16ac4c011d84e1da022b1b159a8a103ba8d5aeba7e8dae13ff819377c940dfc78ffeaa257e9091c2f3fa1f58396f0f4c15356b9fabfff2d543b51e29a6ce0b91f794cd4f55325ddb106412194c685167f36d05c7a92802bb4957dbdb83f13631c857cb09b"}]}]}, 0x13e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x240080d5) file_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x1000, 0xcf0e, 0x9, 0xb, 0x4}, 0x18, 0x100) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f000000df00)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x0, 0x1}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x2c, 0x0, 0x1, 0x1}, 0x28) r5 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472618a733d66642c7266646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r7, 0x8040, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) fcntl$notify(r4, 0x402, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 23.060241812s ago: executing program 4 (id=1365): socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x10000000000, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8811}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 22.74851488s ago: executing program 4 (id=1368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000001108116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0xff000000, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x250, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x0, 0x7, 0x0, 0x0, 0x9}}, @common=@inet=@hashlimit2={{0x150}, {'vxcan1\x00', {0x8, 0xcc5, 0x1a, 0x7, 0x17f2, 0x3, 0x38, 0xb0, 0x8}, {0x5}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) socket$packet(0x11, 0x2, 0x300) dup(r0) 22.476229566s ago: executing program 33 (id=1368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000001108116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0xff000000, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x250, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x0, 0x7, 0x0, 0x0, 0x9}}, @common=@inet=@hashlimit2={{0x150}, {'vxcan1\x00', {0x8, 0xcc5, 0x1a, 0x7, 0x17f2, 0x3, 0x38, 0xb0, 0x8}, {0x5}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) socket$packet(0x11, 0x2, 0x300) dup(r0) 3.659061817s ago: executing program 6 (id=1572): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000030000000200000004"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_io_uring_setup(0x6b81, &(0x7f0000000100)={0x0, 0xb170, 0x1000, 0x3, 0x2a8}, &(0x7f00000001c0), &(0x7f0000000200)) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xeedd, 0x400, 0x8, 0xc1, 0x0, r0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x20) 3.541781163s ago: executing program 6 (id=1574): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x801, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) lstat(0x0, &(0x7f0000000780)) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) fadvise64(0xffffffffffffffff, 0x0, 0x1, 0x4) listen(r1, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 3.046413002s ago: executing program 0 (id=1582): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @local}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = dup(r2) getsockopt$bt_hci(r3, 0x0, 0x2, 0x0, 0x0) 2.892658451s ago: executing program 3 (id=1585): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @empty, 0x7ff}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x7fffffff}, @in6={0xa, 0x4e24, 0x7, @empty, 0xfffffffe}], 0x64) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000001c00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x888c}, 0x20000004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x7094, 0x9a, 0x200, 0x38d129bf, 0x800, 0x6, 0x4, 0x55, r6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x81, 0x7}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x38) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r6, 0x0, 0x30}, 0xc) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/126, 0x7e}], 0x1) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private2, 0x5}, 0x1c) 2.892312691s ago: executing program 0 (id=1586): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000000)=0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x2006}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000010c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @empty, [], "6688af0869bd5b47"}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000001c0)=""/167, &(0x7f0000000280)=0xa7) lseek(r1, 0xfffffffffffffff8, 0x2) syz_io_uring_setup(0x31c7, &(0x7f0000000600)={0x0, 0x0, 0x1, 0x2}, 0x0, &(0x7f00000005c0)) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x9, 0x4) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x7, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8864}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 1.662903693s ago: executing program 1 (id=1587): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x578, 0xffffffff, 0x0, 0x220, 0x360, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@rt={{0x138}, {0x7, [0xffffffff, 0x5], 0x8, 0x10, 0x4, [@empty, @dev={0xfe, 0x80, '\x00', 0x41}, @private1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private1, @loopback, @local, @loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x34}, @local, @empty, @mcast2, @private0], 0xe}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0x9, {0x3}}}}, {{@ipv6={@loopback, @empty, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], [0xff000000, 0xff, 0xff, 0xffffff00], 'veth0_to_bridge\x00', 'geneve0\x00', {0xff}, {}, 0xf5, 0x1, 0x0, 0x45}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@hl={{0x28}, {0x1, 0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 'veth0_macvtap\x00'}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, [0x0, 0xff, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], 'hsr0\x00', 'wlan0\x00', {}, {0xff}, 0x6c, 0x1, 0x4, 0x2}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}, {0x36, 0x8}}, @common=@hbh={{0x48}, {0x5, 0x4, 0x1, [0x5, 0x3, 0xfff0, 0x4, 0xb, 0x41a, 0x83, 0x6, 0x41, 0xb, 0x7, 0x0, 0x5, 0x6, 0x2, 0x3], 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x5}, {0x0, 0x4, 0x1}, 0x1, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) futex(0x0, 0x8a, 0x0, 0x0, 0x0, 0x100007) r0 = syz_open_dev$loop(&(0x7f00000010c0), 0x6, 0x458000) ioctl$BLKGETNRZONES(r0, 0x80041285, &(0x7f0000001100)=0x7) clock_getres(0x6, &(0x7f0000000640)) 1.662534493s ago: executing program 6 (id=1588): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@minixdf}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x2) lsetxattr$trusted_overlay_upper(&(0x7f0000000440)='./file1\x00', &(0x7f00000000c0), &(0x7f00000003c0)=ANY=[], 0xfe37, 0x2000000) 1.654277944s ago: executing program 5 (id=1589): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0xffffffffffffffc2, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x0) 1.560528459s ago: executing program 1 (id=1590): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0xc0800) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000100)={{}, 0x2, &(0x7f00000000c0)=[0x80, 0x0], 0x5b8abd03}) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}, 0x2}, 0x1c) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="660a0000000000829c00000000000000850000001a00020095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000180)) (async, rerun: 64) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), r4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000025c0)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x40010) (async, rerun: 32) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102261, 0x200, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) socket$kcm(0x2, 0xa, 0x73) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$kcm(0x2, 0xa, 0x73) (async) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000280)={'bond_slave_0\x00', 0x200}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="440000001000030427bd7000fdffffff00000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a702002400128009000100626f6e640000000014000280080007000e00000008000300e42e0000af782e485b1a8b81aafb1c6596330dde67c751ed75fc2cd9405a1b7a17075642f89b5691cf66827f495c3aeaf74616"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x1) (async) r9 = syz_usbip_server_init(0x2) ioctl$INCFS_IOC_PERMIT_FILL(r9, 0x40046721, &(0x7f0000000200)={r0}) write$binfmt_elf32(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/2246], 0x8c6) 1.553132059s ago: executing program 6 (id=1591): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffb, 0x6, 0x10, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="b6d907270000", 0x0, 0x2, 0x13, 0x1, 0x0}) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x8001, 0x4080) ioctl$BLKGETNRZONES(r3, 0x80041285, 0x0) r4 = syz_clone(0x2180, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000980)='smaps\x00') pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x9) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r7], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', r7, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x26d99000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) 1.510145272s ago: executing program 3 (id=1592): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) open(&(0x7f0000000240)='./file1\x00', 0xc80, 0x10a) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="d79f00000000006d00000000fff1000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="04000000030000000300"/28], 0x50) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000001040)={[{@fat=@codepage={'codepage', 0x3d, '932'}}, {@uni_xlateno}, {@fat=@nfs_stale_rw}, {@fat=@nfs}, {@shortname_lower}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@fat=@check_strict}, {@fat=@errors_continue}, {@shortname_winnt}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_winnt}]}, 0x2a, 0x356, &(0x7f0000000780)="$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") bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000000), &(0x7f0000000140)='%-010d \x00'}, 0x20) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x57a, &(0x7f0000001500)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x2) fadvise64(r5, 0x20007003, 0x400000000000006, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x0, 0xfffffffffffffdaf, 0x0, &(0x7f0000000100)="e0b9547ed387db000000006f5bec", 0x0, 0xe3e, 0x0, 0x1dacf1cba4e1a681, 0xffffffffffffffcc, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x50) 1.345217092s ago: executing program 0 (id=1593): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.344499291s ago: executing program 1 (id=1594): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r0, 0x545c, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x61, 0x0]}}, &(0x7f0000000200)=""/138, 0x1c, 0x8a, 0x0, 0x4b414b75, 0x10000}, 0x28) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r6], 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000002c0)={[{@grpquota}, {@nogrpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@abort}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000300, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xfffffbff, @loopback, 0xa099}, {0xa, 0x4e20, 0x409, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, r9, 0xffffffff}}, 0x48) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x10001, 0x45, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @perf_config_ext={0x100, 0x80000000004}, 0x8a22, 0x4005, 0xb, 0x7, 0x2, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) 1.343426802s ago: executing program 6 (id=1595): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x17bb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x80c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.249394337s ago: executing program 6 (id=1596): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x1, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000bf0000000000000000008500000020000000850000007d0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000002380)=""/192}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000004c0)='./bus/file0\x00', 0x2) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x711000, 0x1a8, 0x22}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000004, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r7, 0x1, 0x0, 0x1000f7) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)}], 0x1}, 0x4000010) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x80}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}], {0xffffffffffffff7f, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}}, 0x24008045) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) renameat2(r0, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000000)='./bus/file0\x00', 0x2) 1.225460239s ago: executing program 5 (id=1597): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x39}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) (fail_nth: 1) 1.20443783s ago: executing program 0 (id=1598): syz_emit_ethernet(0xb6, &(0x7f0000000300)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x7c, 0x2b, 0x0, @local, @local, {[@hopopts={0x3c}, @dstopts={0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x10}, @enc_lim={0x4, 0x1, 0x8}]}], {{0x0, 0xfffd, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "0249c9e007342bd348b2f57a13834b13"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x4, 0xc, 0xe0000000, 0xffffffa3]}, @md5sig={0x13, 0x12, "bfb66967f7907b3cf24edefecbe7fcc0"}, @md5sig={0x13, 0x12, "62b763bd8aa5e356e388f1484e69f8d6"}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = syz_io_uring_setup(0x315b, &(0x7f00000001c0)={0x0, 0x70a1, 0x1040, 0x2, 0x23}, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, 0x0, 0x1) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000021c0)={&(0x7f0000001000)="5f721e56f6540c505cedeb0835b584566750a4b5d90ac18e049b72f9ba76a937c27aa0342ccc03c3a64b2172e9bf91fcc36a7ff141bd483718bea9870562738e1ebc95df6f202cebe06b4ab20b39ec8a8e22b04cbf7046d3d1bb9253897ec9e7ecded85349ae31c7ab64c801a7c6f4b232516aa399e2ff4ea64ad69145f98ebcf03be6c11cce47b1789d071cdb0dfb43a5ae2410164adcfc8a962d95a3b965ffffffff9b9cbe1de5a85a7950bba4d0c4fc802ce312cc32115a88cefff95a540c3b4768496f50ae952f9cdf361f7a421ed93bed609c6cb1254c1c77d50000001e8c0000", &(0x7f0000001100)=""/46, &(0x7f0000001140), &(0x7f0000001180)="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", 0x5, 0x1, 0x4}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x248102, 0xd0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) r7 = socket$kcm(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000440)=r8, 0x4) getsockopt$sock_buf(r7, 0x1, 0x1a, 0x0, &(0x7f0000000040)) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r9, @ANYBLOB="050427bd7000fcdbdf250100010008000100", @ANYRES32=r10, @ANYRESHEX=r6], 0xd0}, 0x1, 0x0, 0x0, 0x48894}, 0x20004080) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) 1.03374378s ago: executing program 5 (id=1599): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x801, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) lstat(0x0, &(0x7f0000000780)) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) fadvise64(0xffffffffffffffff, 0x0, 0x1, 0x4) listen(r1, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 906.673117ms ago: executing program 3 (id=1600): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x10000000000, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@rand_addr=0x64010101, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r1 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 853.13494ms ago: executing program 0 (id=1601): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000000c0)=""/225) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 676.436851ms ago: executing program 3 (id=1602): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_io_uring_setup(0x2152, &(0x7f0000000840)={0x0, 0x4660, 0x1000, 0xfffffffe, 0xa85}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0xfffffdc9}, 0x0, 0x40}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(0xffffffffffffffff, 0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00", 0x3d}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) write(0xffffffffffffffff, &(0x7f0000000100)="afc3ef5da1", 0x5) creat(&(0x7f0000000080)='./bus\x00', 0x154) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') r10 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r10, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 417.257426ms ago: executing program 1 (id=1603): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGABS0(r0, 0x80184520, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0xd1b7, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000fc0), 0x0, 0x5) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000540), 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003bc0)='net/xfrm_stat\x00') writev(r3, &(0x7f00000051c0)=[{0x0}], 0x1) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000000340)="f8f634506ee676b249486272cdbc89a91092158f9429f6eeb17d452272cbd4350068ed1eacffcc54d70c4b7dfada70d7e653ae95b4ea7e8164a5d85f0651fde8f19ddb896e33c8eac97aa5efcccb3c8d5c9cf4c4e67449cac81b90fb59e79e68c53e1b8ff79b2d3f50de98", 0x6b, 0x400c085, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000004c0)=@req={0x28, &(0x7f00000003c0)={'netpci0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r8}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000580)) close(r9) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000008085000000a800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) 260.308345ms ago: executing program 3 (id=1604): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r0, 0x0, 0x8000002) 228.499377ms ago: executing program 3 (id=1605): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGABS0(r0, 0x80184520, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0xd1b7, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000fc0), 0x0, 0x5) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000540), 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000003bc0)='net/xfrm_stat\x00') writev(r3, &(0x7f00000051c0)=[{&(0x7f0000004100)="32e2146007", 0x5}], 0x1) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000000340)="f8f634506ee676b249486272cdbc89a91092158f9429f6eeb17d452272cbd4350068ed1eacffcc54d70c4b7dfada70d7e653ae95b4ea7e8164a5d85f0651fde8f19ddb896e33c8eac97aa5efcccb3c8d5c9cf4c4e67449cac81b90fb59e79e68c53e1b8ff79b2d3f50de98", 0x6b, 0x400c085, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000004c0)=@req={0x28, &(0x7f00000003c0)={'netpci0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r8}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000580)) close(r9) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000008085000000a800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) 208.556357ms ago: executing program 1 (id=1606): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x2800, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 149.060701ms ago: executing program 1 (id=1607): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0xffffffffffffffc2, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x0) 146.849051ms ago: executing program 5 (id=1608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x3c}, 0x1, 0x5000000}, 0x0) 40.692478ms ago: executing program 5 (id=1609): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(0xffffffffffffffff) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={0x0, 0x14}}, 0x4000) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) 1.13327ms ago: executing program 0 (id=1610): unshare(0x6a040000) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x6, 0x3}, 0x102824, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x12) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff14) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a00060001117e6d92600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6e001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79811835d3a71d85667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000011008af26ca6823a45b8f3ef47b9daff4270dff3beac799e87bd711ac353", 0xd8}], 0x1}, 0x94) 0s ago: executing program 5 (id=1611): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001a00)=@newtfilter={0x1080, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @filter_kind_options=@f_route={{0xa}, {0xb7c, 0x2, [@TCA_ROUTE4_ACT={0x1fc, 0x6, [@m_xt={0xe0, 0x17, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x8c, 0x6, "495c62ef6742e9d960d0d849ec1b1cce0ee11d661a4e8835b1d0cb4112df914447d3a3af311103e9be67459154db4cc862a448b12c77b27c178d6a305b23419eceed528f92ba8e769c31e23ed2cf8d21f9544f4dd191b20aa1de70c97e9d972b3d8479406cfa14d593f0c6292ebf38bbf8c12261b5584ab1b73fa3ee88ec80053f9254201b880f24"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x54, 0x19, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x5, 0x0, 0x4, 0x9}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0xc4, 0x11, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffe}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x1, 0xffffffffffffffff, 0x0, 0x6}}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3ff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x81}]}]}, {0x4d, 0x6, "f6db5bb1f069c981ee3b6c911e8bdcc3a4593634c3a03e2077749b2a81e6ad1591cc7df4e670974644ea337b1a67a411c138655d5893b781c3e54f998a67c2e0fbf3b8e47f28823327"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x49823ae67e162ab6, 0x1}}}}]}, @TCA_ROUTE4_ACT={0x144, 0x6, [@m_xt={0x140, 0xb, 0x0, 0x0, {{0x7}, {0x98, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x94, 0x6, {0x200, 'nat\x00', 0x80, 0x2, "a0e2fdd26d13ec4f9ac32d2b7d80ec93aee9635c698c7ef15d940b7943a3117928ce382521fc753843653de3a6bf16e3b1d2b1f7e1c59596c2ac0f28e3b8816e0eaac599d67393f96e9c780d3266c634cc79a0c3672926b5bab518bd38be2be9cb97c52114319e994848"}}]}, {0x81, 0x6, "960a3cd0904d910665033bc98d66820b16e7bab49ed227231394b17aae66ede8a8abf50c1fc79ad402b1f3cdb3320212c7b2c8ece760599eee3ac0e418d59d3d1df9d76d905ecf919bdd0df7edbdf9252d7a2eec0fbb2c73dc404ae4e97f861089159b4fabf640f51af6bc06035dfe054fc0141740ac19f9262afd0d12"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x18}, @TCA_ROUTE4_TO={0x8, 0x2, 0x37}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5f}, @TCA_ROUTE4_POLICE={0x820, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffa, 0x0, 0xda4, 0x3, 0x3f94, 0x7ff, 0x1, 0xfff, 0x4, 0x2, 0x9, 0x13, 0x0, 0x8001, 0x8001, 0xb, 0xb, 0x494, 0x8, 0x8, 0x7, 0x0, 0xb, 0x1, 0xc, 0x2426, 0x4, 0xad3d, 0x0, 0x1, 0xc, 0xc, 0x7ff, 0x6, 0x10000, 0xd36, 0x8000, 0x9, 0xffff0000, 0x1, 0x3, 0x9, 0x8, 0x1, 0x8000, 0x1, 0x0, 0x101, 0x5, 0x6, 0x3, 0x77, 0xb, 0xffff, 0x77da, 0x0, 0x10001, 0x1, 0x2, 0x401, 0x7, 0x5, 0x1, 0x6f, 0x401, 0x5, 0x27, 0x8, 0x1, 0x858, 0x2b, 0x3, 0x0, 0xad4e, 0x1, 0xc1, 0x9, 0x3, 0x5, 0x9, 0x912, 0x400, 0x80000001, 0x6, 0x2, 0x7f, 0x10c2, 0x2, 0x4, 0x6, 0x7fff, 0xfff, 0x3844, 0x8, 0x7, 0x8e, 0x2, 0x400, 0x4, 0x3, 0x3, 0x7, 0x9, 0x5, 0x7, 0x800, 0x8, 0x9, 0x9, 0x100000, 0x6ed8, 0x5, 0x0, 0x9, 0xff, 0x200, 0xa0000000, 0x800, 0x3, 0x80000000, 0x3, 0xb, 0x5, 0x0, 0x840, 0x8, 0x80000001, 0x5, 0x5, 0x3, 0x3, 0x7, 0xfffffff9, 0x9, 0x4, 0xc10, 0x2, 0xfffffffa, 0x5, 0xc9, 0xfffffffe, 0x4, 0x4000, 0x1000, 0xf, 0x0, 0x8, 0x8, 0x1c00, 0xdaa, 0x9, 0x5, 0x4, 0x200, 0x1, 0x0, 0x0, 0x4, 0x9, 0x7fffffff, 0x8, 0x9e, 0x2, 0x2, 0x9, 0x6, 0xa, 0x214c, 0x4a6a, 0x7, 0x5, 0x10001, 0x6, 0x9, 0xd, 0x7, 0x8, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, 0xffffc4c2, 0x81, 0xe, 0x800000, 0x7, 0x4, 0x4, 0x9, 0x1000000, 0x3ff, 0x80000001, 0x7ff, 0x6, 0x6, 0xe, 0x9, 0x7ff, 0x1, 0x8, 0x5afa, 0x10, 0x7, 0xe, 0xfffffffd, 0x8, 0x1, 0x9, 0xfffff001, 0xffffffff, 0x53, 0x5, 0x3, 0x3, 0x9, 0x3, 0x8, 0xa, 0xfffffff8, 0x1, 0x0, 0x8, 0x5, 0x1, 0x0, 0xd, 0x5, 0x81, 0x0, 0x3, 0x4, 0x10, 0x5, 0x2, 0x7, 0x6, 0x6, 0x3, 0x4, 0x9, 0x3, 0xffffffff, 0x5, 0x620c, 0x3, 0x8001, 0x0, 0x4, 0x212, 0x0, 0x5, 0x1ff, 0x8, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400, 0xeb9, 0x1ff, 0x7, 0x2, 0x2, 0x9, 0xfffff822, 0x9, 0x10001, 0x1, 0x5, 0x80000001, 0x7, 0xe95, 0x1, 0x4, 0x33a, 0xf208, 0x6, 0x8, 0xc557, 0x7, 0x1, 0x77, 0xf, 0x1, 0xfffffffb, 0x3, 0x1ff, 0xb40, 0x8, 0xba, 0x0, 0x6, 0x4, 0x1, 0x5, 0x5728, 0x700, 0x401, 0x6, 0x4, 0x6, 0x1, 0x6, 0x7fffffff, 0xde5, 0x6c, 0x7, 0xa, 0x7fffffff, 0x5, 0x326, 0xb, 0x3, 0xfffffffe, 0x1, 0x2, 0xf7100000, 0x7, 0x9, 0x4, 0x6, 0xff, 0x4, 0x1000, 0x2, 0xfa, 0x8, 0xa, 0x6, 0x1, 0x99, 0xc, 0x1, 0x0, 0x7ff, 0x4, 0x3, 0x0, 0x0, 0x3, 0xa, 0x0, 0x9f, 0x18a, 0x7fff, 0xb, 0xc0000000, 0x8, 0x5, 0x8, 0x1, 0xab6, 0x7, 0x5, 0x6, 0x6, 0x17, 0x12000, 0x80, 0xffffffff, 0xa, 0xfffffffc, 0xfffffff4, 0xfffffffa, 0x5, 0x96, 0x80, 0x80000001, 0x8, 0x6, 0x5, 0x4, 0x1, 0x4, 0x4, 0x400, 0x4, 0x285, 0x1, 0x0, 0x4, 0x6, 0x6, 0xfff, 0x1, 0x5, 0x2, 0x2, 0x200, 0x401, 0x6c, 0x5, 0x180, 0x6c24, 0x6, 0x7ff, 0x0, 0x10, 0x5, 0xfffffff2, 0xc78, 0x4, 0x1, 0x7, 0x1000, 0x80, 0x1, 0xc603, 0x770315c9, 0x80000001, 0x2, 0x8001, 0x7, 0x0, 0xb, 0x8, 0x6, 0x0, 0x7ff, 0xf, 0x4, 0x9, 0x1ff, 0x7fff, 0x5e4, 0x3, 0x460735c8, 0x100, 0x3, 0x4, 0x5, 0x7fffffff, 0xffff, 0x3ff, 0x4, 0x2, 0xb52, 0x1, 0x8000, 0x6, 0x7f, 0x0, 0x100, 0x8000, 0x5, 0x8, 0x0, 0x8, 0x6, 0x3, 0x5, 0x68bb, 0x0, 0x7fff, 0xa000000, 0x1ff, 0x96, 0x1000, 0x9, 0x7, 0xe, 0x40, 0x4, 0xf, 0x8000, 0x3, 0x1, 0x5, 0xfffffc00, 0x7, 0x2, 0x8, 0x6, 0x8, 0x5, 0xf, 0x1, 0x0, 0x2, 0x0, 0x6, 0x10001, 0xd3b, 0x8, 0xb, 0x3, 0x9, 0x1e7bcd26, 0x40, 0x7, 0x0, 0x5, 0x6, 0x8, 0x0, 0x8, 0x4, 0x2, 0x6, 0x7, 0xfffffff7, 0x8, 0xfffffff9, 0x4, 0x363, 0x4, 0x3, 0xffff, 0x9, 0xcff, 0xffffffff, 0x6, 0x85]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x4a4, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0xfff2}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x8, 0x8, 0x8, 0xc510}, {0x1, 0x2, 0x5, 0x5}]}}, @TCA_BPF_ACT={0x474, 0x1, [@m_ife={0x34, 0x19, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x43c, 0x3, 0x0, 0x0, {{0xb}, {0x410, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xe6, 0x9, 0x3, 0x5, 0x8000, 0xa, 0x4, 0x0, 0x6, 0x0, 0x974, 0x1, 0x400, 0x9, 0x5, 0x8, 0xa0, 0x3f, 0x7, 0x8, 0x2, 0x800, 0x8, 0xcbf3, 0x1, 0x9, 0x101, 0x7ff, 0x5, 0x5, 0x5, 0x2, 0xf9, 0x9, 0xfff, 0xffffffe4, 0x10, 0x7, 0x9, 0x8, 0x0, 0x9, 0x201, 0x9, 0xf5, 0x7, 0x9, 0x4, 0x5, 0xa1, 0x50000, 0x5, 0x7fffffff, 0x10, 0x77be, 0x2c9, 0x400, 0xf, 0x10, 0x8, 0x3, 0x200, 0xacfa, 0x15b1, 0x0, 0x8, 0x200, 0x3, 0x80, 0xffff, 0xaef, 0x7309, 0x5, 0x11d, 0xf683, 0x200, 0x4, 0x1, 0x1, 0x5, 0x7ff, 0x7, 0x0, 0x0, 0x4, 0x9, 0x6, 0x1, 0x2, 0x8, 0x0, 0x4, 0x80000000, 0x10001, 0x9, 0xd8a, 0x0, 0xe, 0x3ff, 0x5, 0x0, 0x9, 0x9, 0x6, 0x3, 0x3ff, 0x0, 0xf756, 0x7, 0xffff, 0x4, 0x6, 0x7, 0xe, 0x2, 0x1, 0xb, 0xf, 0x200000, 0xfff, 0xe, 0x7, 0xe, 0x10000, 0xed6, 0x2, 0x920c, 0x614, 0x0, 0x9, 0x81, 0x0, 0x1, 0x8, 0x8, 0x4e, 0x7ff000, 0x5, 0x8000, 0xeb, 0xd1, 0x6, 0x7fffffff, 0x80000000, 0xac, 0x0, 0x999, 0xa, 0x7, 0x100, 0x0, 0x4, 0x2, 0xc2, 0x7, 0x80, 0xa000000, 0xfffff001, 0xa, 0x8, 0x3, 0x4, 0x0, 0x2, 0x400, 0x100, 0xe, 0x0, 0x1ff, 0x7, 0x10, 0xc, 0x1, 0x1, 0x101, 0x6, 0x775e, 0x2, 0x1, 0x7fa, 0x9, 0x64f, 0xc, 0x7, 0x5eb, 0x9, 0x0, 0x5, 0x3, 0x29, 0x1, 0x8, 0x0, 0x84c7, 0x7fffffff, 0x40, 0xffff, 0x7, 0x80, 0x4, 0x37, 0x8, 0xa, 0x81, 0x8000, 0x1, 0x80000001, 0x7, 0x1200, 0xc39, 0x69, 0xb, 0x4e67, 0x7, 0x64, 0xfffffff9, 0x6, 0x3ec8, 0x86e, 0x3, 0xfffffffd, 0x4, 0x8, 0x6, 0x10000, 0x9, 0x1c00, 0x5, 0x9, 0x5, 0x7f, 0x2, 0x9, 0x2, 0x10, 0x0, 0x1906, 0x5, 0x200004, 0x5, 0x4, 0x5, 0x6, 0x2, 0x64, 0x3, 0x8, 0x5, 0x100, 0x4, 0x0, 0xffff8001, 0xf, 0x0, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf42}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}]}]}}]}, 0x1080}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): 27.165235][ T7124] ext4_test_bit(bit=10, block=4) = 1 [ 127.173099][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 127.173124][ C0] EXT4-fs (loop3): initial error at time 2000000022: ext4_orphan_get:1417 [ 127.173163][ C0] EXT4-fs (loop3): last error at time 2000000022: ext4_orphan_get:1417 [ 127.204184][ T7124] is_bad_inode(inode)=0 [ 127.208542][ T7124] NEXT_ORPHAN(inode)=2080374784 [ 127.209145][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.213567][ T7124] max_ino=32 [ 127.226788][ T7124] i_nlink=0 [ 127.230074][ T7124] EXT4-fs (loop3): 1 truncate cleaned up [ 127.236299][ T7124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.260792][ T28] audit: type=1400 audit(2000000022.360:1115): avc: denied { setopt } for pid=7123 comm="syz.3.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.285145][ T28] audit: type=1400 audit(2000000022.380:1116): avc: denied { bind } for pid=7123 comm="syz.3.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.287250][ T7129] loop4: detected capacity change from 0 to 1024 [ 127.305667][ T28] audit: type=1400 audit(2000000022.380:1117): avc: denied { write } for pid=7123 comm="syz.3.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 127.331724][ T28] audit: type=1400 audit(2000000022.380:1118): avc: denied { read } for pid=7123 comm="syz.3.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 127.357902][ T7132] loop0: detected capacity change from 0 to 128 [ 127.383896][ T7129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.417324][ T28] audit: type=1400 audit(2000000022.510:1119): avc: denied { setopt } for pid=7136 comm="syz.1.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.425195][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 127.507158][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.564858][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1119'. [ 127.988799][ T7142] 8021q: VLANs not supported on nlmon0 [ 128.269933][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.372858][ T7168] loop4: detected capacity change from 0 to 512 [ 128.394859][ T7168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.408644][ T7168] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.425051][ T7168] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1128: corrupted xattr block 33: overlapping e_value [ 128.447365][ T7168] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 128.460244][ T7168] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1128: corrupted xattr block 33: overlapping e_value [ 128.474802][ T7158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.492658][ T7168] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 128.617523][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.644138][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 129.020255][ T7207] dvmrp6: entered allmulticast mode [ 129.497853][ T7213] loop2: detected capacity change from 0 to 512 [ 129.573305][ T7213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.649310][ T7213] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.670469][ T7220] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 129.712965][ T7213] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1146: corrupted xattr block 33: overlapping e_value [ 129.747305][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 129.747366][ T28] audit: type=1400 audit(2000000024.840:1127): avc: denied { connect } for pid=7219 comm="syz.4.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 129.815072][ T7223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1151'. [ 129.824537][ T7213] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 129.840826][ T7223] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7223 comm=syz.4.1151 [ 129.857321][ T28] audit: type=1400 audit(2000000024.950:1128): avc: denied { setopt } for pid=7225 comm="syz.3.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.887878][ T7213] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1146: corrupted xattr block 33: overlapping e_value [ 130.146470][ T7213] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 130.196866][ T7236] loop0: detected capacity change from 0 to 1024 [ 130.402703][ T7242] loop4: detected capacity change from 0 to 128 [ 130.572507][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.627666][ T28] audit: type=1400 audit(2000000025.720:1129): avc: denied { write } for pid=7245 comm="syz.4.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 130.881669][ T28] audit: type=1400 audit(2000000025.980:1130): avc: denied { write } for pid=7258 comm="syz.0.1162" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 130.925533][ T7260] loop0: detected capacity change from 0 to 512 [ 130.943250][ T7260] EXT4-fs error (device loop0): ext4_get_journal_inode:5865: comm syz.0.1162: inode #1792: comm syz.0.1162: iget: illegal inode # [ 130.969156][ T7260] loop0: lost filesystem error report for type 5 error -117 [ 130.979076][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 130.993079][ C1] EXT4-fs (loop0): initial error at time 2000000026: ext4_get_journal_inode:5865 [ 131.002335][ C1] EXT4-fs (loop0): last error at time 2000000026: ext4_get_journal_inode:5865 [ 131.014783][ T7260] EXT4-fs (loop0): Remounting filesystem read-only [ 131.021965][ T7260] EXT4-fs (loop0): no journal found [ 131.029106][ T7260] EXT4-fs (loop0): can't get journal size [ 131.037272][ T7265] loop3: detected capacity change from 0 to 8192 [ 131.044394][ T7260] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 131.069869][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.080070][ T7260] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 131.092589][ T7260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.121453][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.149643][ T28] audit: type=1326 audit(2000000026.250:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="syz.0.1162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff9b45bf79 code=0x0 [ 131.204491][ T7260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.397905][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1170'. [ 131.423137][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1170'. [ 131.463247][ T28] audit: type=1400 audit(2000000026.560:1132): avc: denied { setopt } for pid=7288 comm="syz.3.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.483889][ T28] audit: type=1400 audit(2000000026.560:1133): avc: denied { read } for pid=7288 comm="syz.3.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.815992][ T7299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.846687][ T7306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1177'. [ 131.953334][ T5565] Bluetooth: hci0: Frame reassembly failed (-84) [ 131.961156][ T28] audit: type=1400 audit(2000000026.940:1134): avc: denied { create } for pid=7304 comm="syz.2.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 131.982428][ T28] audit: type=1400 audit(2000000026.940:1135): avc: denied { write } for pid=7304 comm="syz.2.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 132.003270][ T28] audit: type=1400 audit(2000000027.060:1136): avc: denied { setopt } for pid=7298 comm="syz.0.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.040900][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.252444][ T7320] set_capacity_and_notify: 3 callbacks suppressed [ 132.252472][ T7320] loop0: detected capacity change from 0 to 512 [ 132.276045][ T7320] EXT4-fs: dax option not supported [ 132.412186][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 132.441301][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 132.442150][ T7332] loop0: detected capacity change from 0 to 512 [ 132.480355][ T7332] EXT4-fs: Mount option(s) incompatible with ext2 [ 132.606664][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 132.651917][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 132.715051][ T7353] loop2: detected capacity change from 0 to 128 [ 132.726760][ T7353] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 132.739939][ T7353] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.762081][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.812025][ T7388] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 133.909918][ T3561] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.110381][ T7409] xt_socket: unknown flags 0x4c [ 134.159919][ T7405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1211'. [ 134.219018][ T7411] : renamed from vlan0 (while UP) [ 134.224833][ T7413] netlink: 'syz.3.1215': attribute type 9 has an invalid length. [ 134.253856][ T7416] loop3: detected capacity change from 0 to 512 [ 134.263470][ T7416] EXT4-fs: Ignoring removed orlov option [ 134.270282][ T7416] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.280418][ T7416] EXT4-fs (loop3): orphan cleanup on readonly fs [ 134.287568][ T7416] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1216: bg 0: block 248: padding at end of block bitmap is not set [ 134.302433][ T7416] loop3: lost filesystem error report for type 5 error -117 [ 134.302725][ T7416] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.1216: Failed to acquire dquot type 1 [ 134.310319][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 134.310339][ C1] EXT4-fs (loop3): last error at time 2000000029: ext4_validate_block_bitmap:441 [ 134.333494][ T7414] netlink: 'syz.0.1214': attribute type 1 has an invalid length. [ 134.340939][ T7416] loop3: lost filesystem error report for type 5 error -117 [ 134.346452][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1214'. [ 134.346658][ T7416] EXT4-fs (loop3): 1 truncate cleaned up [ 134.378554][ T7414] bond2: entered promiscuous mode [ 134.383875][ T7414] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.391766][ T7416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.410802][ T7416] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 134.431162][ T7421] loop4: detected capacity change from 0 to 256 [ 134.441661][ T7416] EXT4-fs error (device loop3): __ext4_remount:6806: comm syz.3.1216: Abort forced by user [ 134.452820][ T7416] EXT4-fs (loop3): Remounting filesystem read-only [ 134.459482][ T7416] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 134.467996][ T7416] ext4 filesystem being remounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.519785][ T7426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1219'. [ 134.530730][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 134.559603][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.700346][ T7436] syzkaller0: entered promiscuous mode [ 134.706329][ T7436] syzkaller0: entered allmulticast mode [ 134.752136][ T7438] loop4: detected capacity change from 0 to 1024 [ 134.789653][ T7438] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.820864][ T7438] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2041c01c, mo2=0002] [ 134.838676][ T7438] System zones: 0-1, 3-36 [ 134.869528][ T7449] loop0: detected capacity change from 0 to 1024 [ 134.881236][ T7449] EXT4-fs: Ignoring removed oldalloc option [ 134.904137][ T7438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.960007][ T7449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.117241][ T7469] loop2: detected capacity change from 0 to 512 [ 135.121500][ T3565] IPVS: starting estimator thread 0... [ 135.125414][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.163012][ T7469] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.179942][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.203626][ T7469] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1233: bad orphan inode 131083 [ 135.214765][ T7469] loop2: lost filesystem error report for type 5 error -117 [ 135.225170][ T7469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.229815][ T7470] IPVS: using max 2832 ests per chain, 141600 per kthread [ 135.451104][ T7487] netlink: 'syz.4.1240': attribute type 21 has an invalid length. [ 135.467226][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1240'. [ 135.477154][ T7487] tipc: Started in network mode [ 135.481375][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'. [ 135.483001][ T7487] tipc: Node identity ac1414aa, cluster identity 4711 [ 135.509569][ T7487] tipc: Enabled bearer , priority 10 [ 135.517706][ T7469] hsr_slave_0: left promiscuous mode [ 135.533876][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 135.533893][ T28] audit: type=1400 audit(2000000030.620:1179): avc: denied { setopt } for pid=7495 comm="syz.3.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 135.589962][ T7469] hsr_slave_1: left promiscuous mode [ 135.735360][ T7509] loop3: detected capacity change from 0 to 128 [ 135.746100][ T7509] loop3: detected capacity change from 0 to 512 [ 135.760918][ T7499] netlink: 'syz.4.1240': attribute type 12 has an invalid length. [ 135.778003][ T7509] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1244: inode has both inline data and extents flags [ 135.806971][ T7509] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 135.807116][ T7509] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1244: couldn't read orphan inode 15 (err -117) [ 135.816470][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 135.816491][ C0] EXT4-fs (loop3): initial error at time 2000000030: ext4_orphan_get:1391: inode 15 [ 135.816516][ C0] EXT4-fs (loop3): last error at time 2000000030: ext4_orphan_get:1391: inode 15 [ 135.829939][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.836522][ T7509] loop3: lost filesystem error report for type 5 error -117 [ 135.868837][ T7509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.935648][ T7516] netlink: 'syz.2.1245': attribute type 7 has an invalid length. [ 135.944048][ T28] audit: type=1400 audit(2000000031.030:1180): avc: denied { append } for pid=7515 comm="syz.2.1245" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.012288][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.051440][ T7524] syz_tun: entered allmulticast mode [ 136.109514][ T7524] syz_tun: left allmulticast mode [ 136.205240][ T7540] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.241937][ T7544] macvlan2: entered allmulticast mode [ 136.248236][ T7544] vlan1: entered allmulticast mode [ 136.269682][ T7544] veth0_vlan: entered allmulticast mode [ 136.302833][ T7546] EXT4-fs: Mount option(s) incompatible with ext3 [ 136.334410][ T7554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.395498][ T7560] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.418411][ T28] audit: type=1400 audit(2000000031.510:1181): avc: denied { lock } for pid=7556 comm="syz.0.1264" path="socket:[18662]" dev="sockfs" ino=18662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.444036][ T3625] loop1: p1 p2 p3 [ 136.447907][ T3625] loop1: p1 size 4719617 extends beyond EOD, truncated [ 136.458318][ T3625] loop1: p3 start 117772289 is beyond EOD, truncated [ 136.468486][ T7554] loop1: p1 p2 p3 [ 136.472641][ T7554] loop1: p1 size 4719617 extends beyond EOD, truncated [ 136.480816][ T7554] loop1: p3 start 117772289 is beyond EOD, truncated [ 136.510058][ T3351] tipc: Node number set to 2886997162 [ 136.741239][ T28] audit: type=1400 audit(2000000031.840:1182): avc: denied { create } for pid=7581 comm="syz.3.1275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 136.763961][ T28] audit: type=1400 audit(2000000031.840:1183): avc: denied { create } for pid=7581 comm="syz.3.1275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 136.786726][ T28] audit: type=1400 audit(2000000031.840:1184): avc: denied { write } for pid=7581 comm="syz.3.1275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 136.808403][ T28] audit: type=1400 audit(2000000031.840:1185): avc: denied { read } for pid=7581 comm="syz.3.1275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 136.852323][ T7590] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.865857][ T7590] EXT4-fs (loop3): 1 truncate cleaned up [ 136.872229][ T7590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.929697][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.232800][ T3319] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 137.315072][ T3319] FAT-fs (loop2): Filesystem has been set read-only [ 137.321857][ T7618] set_capacity_and_notify: 7 callbacks suppressed [ 137.325780][ T7618] loop4: detected capacity change from 0 to 1024 [ 137.348604][ T7618] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 137.351496][ T3319] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 137.358647][ T7618] System zones: 0-1, 3-36 [ 137.408474][ T7618] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1289: bad orphan inode 134217728 [ 137.430937][ T7618] loop4: lost filesystem error report for type 5 error -117 [ 137.432147][ T7618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.476565][ T28] audit: type=1400 audit(2000000032.570:1186): avc: denied { mounton } for pid=7616 comm="syz.4.1289" path="/proc/698/task" dev="proc" ino=18791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 137.504826][ T7618] netlink: 'syz.4.1289': attribute type 1 has an invalid length. [ 137.537325][ T7626] netlink: 'syz.0.1290': attribute type 31 has an invalid length. [ 137.546727][ T7615] __nla_validate_parse: 5 callbacks suppressed [ 137.546799][ T7615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1288'. [ 137.607762][ T5565] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.693792][ T5565] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.709784][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.745139][ T7634] loop4: detected capacity change from 0 to 512 [ 137.753817][ T5565] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.797032][ T7634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 137.822701][ T5565] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.852785][ T7634] ext4 filesystem being mounted at /277/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.864112][ T7645] netlink: 'syz.1.1296': attribute type 25 has an invalid length. [ 137.896481][ T7634] FAULT_INJECTION: forcing a failure. [ 137.896481][ T7634] name failslab, interval 1, probability 0, space 0, times 0 [ 137.909397][ T7634] CPU: 1 UID: 0 PID: 7634 Comm: syz.4.1294 Tainted: G W syzkaller #0 PREEMPT(full) [ 137.909432][ T7634] Tainted: [W]=WARN [ 137.909440][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.909487][ T7634] Call Trace: [ 137.909494][ T7634] [ 137.909502][ T7634] __dump_stack+0x1d/0x30 [ 137.909530][ T7634] dump_stack_lvl+0x95/0xd0 [ 137.909633][ T7634] dump_stack+0x15/0x1b [ 137.909658][ T7634] should_fail_ex+0x263/0x280 [ 137.909685][ T7634] should_failslab+0x8c/0xb0 [ 137.909756][ T7634] kmem_cache_alloc_noprof+0x66/0x400 [ 137.909785][ T7634] ? __es_insert_extent+0x508/0xee0 [ 137.909809][ T7634] __es_insert_extent+0x508/0xee0 [ 137.909899][ T7634] ? folio_mark_accessed+0x236/0x3a0 [ 137.909920][ T7634] ? find_get_block_common+0x672/0x8a0 [ 137.910004][ T7634] ext4_es_cache_extent+0x37e/0x5d0 [ 137.910103][ T7634] ? bdev_getblk+0x35a/0x3f0 [ 137.910129][ T7634] ext4_find_extent+0x336/0x7a0 [ 137.910155][ T7634] ext4_ext_map_blocks+0x10d/0x2fb0 [ 137.910179][ T7634] ? percpu_counter_add_batch+0xb6/0x130 [ 137.910209][ T7634] ? bdev_getblk+0x35a/0x3f0 [ 137.910233][ T7634] ext4_map_query_blocks+0xb2/0x550 [ 137.910331][ T7634] ? ext4_es_lookup_extent+0x3ae/0x570 [ 137.910364][ T7634] ext4_map_blocks+0x306/0x970 [ 137.910392][ T7634] _ext4_get_block+0x117/0x370 [ 137.910415][ T7634] ext4_get_block_unwritten+0x2a/0xb0 [ 137.910492][ T7634] ext4_block_write_begin+0x650/0xcf0 [ 137.910526][ T7634] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 137.910551][ T7634] ? folio_mapping+0xb9/0xe0 [ 137.910647][ T7634] ext4_write_begin+0x636/0xea0 [ 137.910675][ T7634] ext4_da_write_begin+0x1f0/0x6c0 [ 137.910694][ T7634] ? inode_to_bdi+0x47/0xa0 [ 137.910740][ T7634] ? balance_dirty_pages_ratelimited_flags+0x420/0x800 [ 137.910772][ T7634] generic_perform_write+0x183/0x490 [ 137.910796][ T7634] ? __mark_inode_dirty+0x49d/0x7d0 [ 137.910967][ T7634] ext4_buffered_write_iter+0x1ee/0x3c0 [ 137.910998][ T7634] ? ext4_file_write_iter+0x100/0xfa0 [ 137.911024][ T7634] ext4_file_write_iter+0x380/0xfa0 [ 137.911056][ T7634] ? _parse_integer_limit+0x170/0x190 [ 137.911076][ T7634] ? avc_policy_seqno+0x15/0x30 [ 137.911100][ T7634] do_iter_readv_writev+0x4fd/0x5a0 [ 137.911138][ T7634] vfs_writev+0x2e1/0x900 [ 137.911233][ T7634] __se_sys_pwritev2+0xfc/0x1c0 [ 137.911265][ T7634] __x64_sys_pwritev2+0x67/0x80 [ 137.911292][ T7634] x64_sys_call+0xe07/0x3020 [ 137.911364][ T7634] do_syscall_64+0x12c/0x370 [ 137.911392][ T7634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.911416][ T7634] RIP: 0033:0x7f7fd6c3bf79 [ 137.911482][ T7634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.911499][ T7634] RSP: 002b:00007f7fd5697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 137.911520][ T7634] RAX: ffffffffffffffda RBX: 00007f7fd6eb5fa0 RCX: 00007f7fd6c3bf79 [ 137.911598][ T7634] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004 [ 137.911610][ T7634] RBP: 00007f7fd5697090 R08: 0000000000000005 R09: 0000000000000000 [ 137.911622][ T7634] R10: 00000000000007ff R11: 0000000000000246 R12: 0000000000000001 [ 137.911636][ T7634] R13: 00007f7fd6eb6038 R14: 00007f7fd6eb5fa0 R15: 00007fff507c3ad8 [ 137.911715][ T7634] [ 138.333955][ T28] audit: type=1400 audit(2000000033.390:1187): avc: denied { setopt } for pid=7647 comm="syz.1.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 138.369568][ T5565] bridge_slave_1: left allmulticast mode [ 138.391168][ T5565] bridge_slave_1: left promiscuous mode [ 138.407765][ T5565] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.429307][ T5565] bridge_slave_0: left allmulticast mode [ 138.441307][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 138.449200][ T5565] bridge_slave_0: left promiscuous mode [ 138.456739][ T5565] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.521710][ T7666] FAULT_INJECTION: forcing a failure. [ 138.521710][ T7666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.559416][ T7666] CPU: 1 UID: 0 PID: 7666 Comm: syz.4.1300 Tainted: G W syzkaller #0 PREEMPT(full) [ 138.559454][ T7666] Tainted: [W]=WARN [ 138.559461][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 138.559474][ T7666] Call Trace: [ 138.559547][ T7666] [ 138.559555][ T7666] __dump_stack+0x1d/0x30 [ 138.559584][ T7666] dump_stack_lvl+0x95/0xd0 [ 138.559605][ T7666] dump_stack+0x15/0x1b [ 138.559706][ T7666] should_fail_ex+0x263/0x280 [ 138.559732][ T7666] should_fail+0xb/0x20 [ 138.559755][ T7666] should_fail_usercopy+0x1a/0x20 [ 138.559803][ T7666] _copy_to_user+0x20/0xa0 [ 138.559831][ T7666] simple_read_from_buffer+0xb5/0x130 [ 138.559867][ T7666] proc_fail_nth_read+0x10e/0x150 [ 138.559903][ T7666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.559930][ T7666] vfs_read+0x1ab/0x7f0 [ 138.559957][ T7666] ? __rcu_read_unlock+0x4e/0x70 [ 138.559992][ T7666] ? __fget_files+0x184/0x1c0 [ 138.560050][ T7666] ? mutex_lock+0x57/0x90 [ 138.560078][ T7666] ksys_read+0xdc/0x1a0 [ 138.560173][ T7666] __x64_sys_read+0x40/0x50 [ 138.560219][ T7666] x64_sys_call+0x2886/0x3020 [ 138.560248][ T7666] do_syscall_64+0x12c/0x370 [ 138.560294][ T7666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.560319][ T7666] RIP: 0033:0x7f7fd6bfc84e [ 138.560338][ T7666] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 138.560357][ T7666] RSP: 002b:00007f7fd5696fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.560377][ T7666] RAX: ffffffffffffffda RBX: 00007f7fd56976c0 RCX: 00007f7fd6bfc84e [ 138.560390][ T7666] RDX: 000000000000000f RSI: 00007f7fd56970a0 RDI: 0000000000000011 [ 138.560448][ T7666] RBP: 00007f7fd5697090 R08: 0000000000000000 R09: 0000000000000000 [ 138.560462][ T7666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.560551][ T7666] R13: 00007f7fd6eb6038 R14: 00007f7fd6eb5fa0 R15: 00007fff507c3ad8 [ 138.560572][ T7666] [ 138.942280][ T5565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.955501][ T5565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.970373][ T5565] bond0 (unregistering): Released all slaves [ 138.987296][ T5565] bond1 (unregistering): Released all slaves [ 139.045192][ T5565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.066596][ T5565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.204029][ T7663] syz.1.1302 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 139.204221][ T7669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1303'. [ 139.238381][ T7663] CPU: 1 UID: 0 PID: 7663 Comm: syz.1.1302 Tainted: G W syzkaller #0 PREEMPT(full) [ 139.238413][ T7663] Tainted: [W]=WARN [ 139.238419][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.238506][ T7663] Call Trace: [ 139.238514][ T7663] [ 139.238522][ T7663] __dump_stack+0x1d/0x30 [ 139.238547][ T7663] dump_stack_lvl+0x95/0xd0 [ 139.238576][ T7663] dump_stack+0x15/0x1b [ 139.238600][ T7663] dump_header+0x80/0x240 [ 139.238626][ T7663] oom_kill_process+0x295/0x350 [ 139.238663][ T7663] out_of_memory+0x97d/0xb80 [ 139.238728][ T7663] try_charge_memcg+0x62e/0xa10 [ 139.238810][ T7663] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 139.238835][ T7663] __swap_cache_prepare_and_add+0x386/0x530 [ 139.238862][ T7663] swap_cache_alloc_folio+0xa2/0x120 [ 139.238965][ T7663] swap_cluster_readahead+0x36b/0x3d0 [ 139.238990][ T7663] swapin_readahead+0xde/0x840 [ 139.239010][ T7663] ? __rcu_read_unlock+0x4e/0x70 [ 139.239027][ T7663] ? __perf_event_task_sched_in+0xa65/0xad0 [ 139.239081][ T7663] ? __list_add_valid_or_report+0x38/0xe0 [ 139.239113][ T7663] ? __rcu_read_unlock+0x4e/0x70 [ 139.239133][ T7663] ? swap_cache_get_folio+0x26f/0x280 [ 139.239217][ T7663] do_swap_page+0x309/0x2210 [ 139.239245][ T7663] ? __schedule+0x85a/0xd40 [ 139.239323][ T7663] ? __rcu_read_lock+0x36/0x50 [ 139.239341][ T7663] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 139.239365][ T7663] handle_mm_fault+0xb40/0x3020 [ 139.239404][ T7663] ? vma_start_read+0x1c7/0x2c0 [ 139.239466][ T7663] do_user_addr_fault+0x62f/0x1050 [ 139.239496][ T7663] ? trace_page_fault_user+0x1f/0xe0 [ 139.239528][ T7663] exc_page_fault+0x62/0xa0 [ 139.239593][ T7663] asm_exc_page_fault+0x26/0x30 [ 139.239615][ T7663] RIP: 0033:0x7fee7b3ac84e [ 139.239633][ T7663] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 139.239653][ T7663] RSP: 002b:00007ffc77048588 EFLAGS: 00010246 [ 139.239673][ T7663] RAX: 0000000000000000 RBX: 000055556445a500 RCX: 00007fee7b3ac84e [ 139.239687][ T7663] RDX: 00007ffc770485e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.239700][ T7663] RBP: 00007fee7b667da0 R08: 0000000000000000 R09: 0000000000000000 [ 139.239716][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000022025 [ 139.239729][ T7663] R13: 00007fee7b66609c R14: 0000000000021f21 R15: 00007ffc77048710 [ 139.239747][ T7663] [ 139.499266][ T7663] memory: usage 240636kB, limit 307200kB, failcnt 11649 [ 139.519254][ T7663] memory+swap: usage 198440kB, limit 9007199254740988kB, failcnt 0 [ 139.537513][ T7663] kmem: usage 159192kB, limit 9007199254740988kB, failcnt 0 [ 139.555679][ T7663] Memory cgroup stats for /syz1: [ 139.555948][ T7663] cache 0 [ 139.565998][ T7663] rss 16384 [ 139.579153][ T7663] shmem 0 [ 139.589246][ T7663] mapped_file 0 [ 139.605324][ T7663] dirty 0 [ 139.610646][ T7663] writeback 0 [ 139.617253][ T7663] workingset_refault_anon 71 [ 139.631214][ T5565] team0 (unregistering): Port device team_slave_1 removed [ 139.632327][ T7663] workingset_refault_file 2261 [ 139.659646][ T5565] team0 (unregistering): Port device team_slave_0 removed [ 139.669127][ T7663] swap 180224 [ 139.672540][ T7663] swapcached 7503872 [ 139.676444][ T7663] pgpgin 125553 [ 139.681280][ T7663] pgpgout 125548 [ 139.684917][ T7663] pgfault 100740 [ 139.688865][ T7663] pgmajfault 62 [ 139.699118][ T7663] inactive_anon 0 [ 139.702893][ T7663] active_anon 8192 [ 139.707316][ T7663] inactive_file 0 [ 139.716551][ T7663] active_file 0 [ 139.723386][ T7663] unevictable 0 [ 139.726905][ T7663] hierarchical_memory_limit 314572800 [ 139.734187][ T7663] hierarchical_memsw_limit 9223372036854771712 [ 139.741108][ T7663] total_cache 0 [ 139.751385][ T7663] total_rss 16384 [ 139.755203][ T7663] total_shmem 0 [ 139.762892][ T7663] total_mapped_file 0 [ 139.767091][ T7663] total_dirty 0 [ 139.771577][ T7663] total_writeback 0 [ 139.775565][ T7663] total_workingset_refault_anon 71 [ 139.781468][ T7663] total_workingset_refault_file 2261 [ 139.788963][ T7663] total_swap 180224 [ 139.793015][ T7663] total_swapcached 7503872 [ 139.797574][ T7663] total_pgpgin 125553 [ 139.802232][ T7663] total_pgpgout 125548 [ 139.816109][ T7663] total_pgfault 100740 [ 139.822176][ T7663] total_pgmajfault 62 [ 139.826402][ T7663] total_inactive_anon 0 [ 139.845193][ T7663] total_active_anon 8192 [ 139.854324][ T7663] total_inactive_file 0 [ 139.868600][ T7663] total_active_file 0 [ 139.879124][ T7663] total_unevictable 0 [ 139.894435][ T7663] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1302,pid=7663,uid=0 [ 139.913900][ T7642] chnl_net:caif_netlink_parms(): no params data found [ 139.929122][ T7663] Memory cgroup out of memory: Killed process 7663 (syz.1.1302) total-vm:94156kB, anon-rss:1240kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 139.992024][ T28] audit: type=1400 audit(2000000035.090:1188): avc: denied { relabelfrom } for pid=7697 comm="syz.4.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 140.009851][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'. [ 140.022163][ T7699] syzkaller0: entered allmulticast mode [ 140.032435][ T5565] IPVS: stop unused estimator thread 0... [ 140.062618][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.072161][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.079644][ T7642] bridge_slave_0: entered allmulticast mode [ 140.091914][ T7642] bridge_slave_0: entered promiscuous mode [ 140.113144][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.120560][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.127864][ T7642] bridge_slave_1: entered allmulticast mode [ 140.135808][ T7642] bridge_slave_1: entered promiscuous mode [ 140.181191][ T7642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.208602][ T7642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.253042][ T7731] loop4: detected capacity change from 0 to 1024 [ 140.261159][ T7642] team0: Port device team_slave_0 added [ 140.268133][ T7642] team0: Port device team_slave_1 added [ 140.291848][ T7731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.296252][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.321174][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.351083][ T7642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.372891][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.380874][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.416846][ T7642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.456227][ T7642] hsr_slave_0: entered promiscuous mode [ 140.463141][ T7642] hsr_slave_1: entered promiscuous mode [ 140.469735][ T7642] debugfs: 'hsr0' already exists in 'hsr' [ 140.475487][ T7642] Cannot create hsr debugfs directory [ 140.641663][ T7642] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.662996][ T7731] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.1312: inode #524290: comm syz.4.1312: iget: illegal inode # [ 140.686329][ T7731] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1312: error while reading EA inode 524290 err=-117 [ 140.842090][ T7642] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.891444][ T7762] loop0: detected capacity change from 0 to 128 [ 141.076511][ T7642] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.103821][ T7642] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.267704][ T7781] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1317'. [ 141.293127][ T7642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.327275][ T7642] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.338132][ T5559] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.345496][ T5559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.355543][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1315'. [ 141.386386][ T5575] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.393561][ T5575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.433666][ T7642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.464954][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.522160][ T7784] syz.1.1318 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 141.570714][ T7784] CPU: 1 UID: 0 PID: 7784 Comm: syz.1.1318 Tainted: G W syzkaller #0 PREEMPT(full) [ 141.570760][ T7784] Tainted: [W]=WARN [ 141.570768][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.570830][ T7784] Call Trace: [ 141.570837][ T7784] [ 141.570845][ T7784] __dump_stack+0x1d/0x30 [ 141.570935][ T7784] dump_stack_lvl+0x95/0xd0 [ 141.571077][ T7784] dump_stack+0x15/0x1b [ 141.571102][ T7784] dump_header+0x80/0x240 [ 141.571127][ T7784] oom_kill_process+0x295/0x350 [ 141.571200][ T7784] out_of_memory+0x97d/0xb80 [ 141.571241][ T7784] try_charge_memcg+0x62e/0xa10 [ 141.571279][ T7784] obj_cgroup_charge_pages+0x23/0xc0 [ 141.571302][ T7784] __memcg_kmem_charge_page+0x9e/0x170 [ 141.571328][ T7784] __alloc_frozen_pages_noprof+0x18a/0x360 [ 141.571458][ T7784] alloc_pages_mpol+0xb3/0x260 [ 141.571487][ T7784] alloc_pages_noprof+0x8f/0x130 [ 141.571514][ T7784] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 141.571549][ T7784] __kvmalloc_node_noprof+0x3d4/0x650 [ 141.571682][ T7784] ? ip_set_alloc+0x24/0x30 [ 141.571708][ T7784] ? ip_set_alloc+0x24/0x30 [ 141.571742][ T7784] ip_set_alloc+0x24/0x30 [ 141.571768][ T7784] hash_netiface_create+0x282/0x740 [ 141.571795][ T7784] ? __pfx_hash_netiface_create+0x10/0x10 [ 141.571834][ T7784] ip_set_create+0x3cf/0x970 [ 141.571945][ T7784] ? __nla_parse+0x40/0x60 [ 141.571975][ T7784] nfnetlink_rcv_msg+0x509/0x5d0 [ 141.572016][ T7784] netlink_rcv_skb+0x123/0x220 [ 141.572114][ T7784] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 141.572147][ T7784] nfnetlink_rcv+0x167/0x1720 [ 141.572172][ T7784] ? __kfree_skb+0x109/0x150 [ 141.572198][ T7784] ? nlmon_xmit+0x4f/0x60 [ 141.572281][ T7784] ? consume_skb+0x4b/0x160 [ 141.572306][ T7784] ? nlmon_xmit+0x4f/0x60 [ 141.572372][ T7784] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 141.572451][ T7784] ? __dev_queue_xmit+0x1393/0x1f40 [ 141.572479][ T7784] ? __dev_queue_xmit+0x148/0x1f40 [ 141.572509][ T7784] ? ref_tracker_free+0x37d/0x3e0 [ 141.572567][ T7784] ? __netlink_deliver_tap+0x4dc/0x500 [ 141.572600][ T7784] netlink_unicast+0x5c0/0x690 [ 141.572625][ T7784] netlink_sendmsg+0x5c8/0x6f0 [ 141.572802][ T7784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.572848][ T7784] ____sys_sendmsg+0x5af/0x600 [ 141.572882][ T7784] ___sys_sendmsg+0x195/0x1e0 [ 141.572979][ T7784] __x64_sys_sendmsg+0xd4/0x160 [ 141.573011][ T7784] x64_sys_call+0x194c/0x3020 [ 141.573042][ T7784] do_syscall_64+0x12c/0x370 [ 141.573082][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.573107][ T7784] RIP: 0033:0x7fee7b3ebf79 [ 141.573127][ T7784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.573145][ T7784] RSP: 002b:00007fee79e3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.573236][ T7784] RAX: ffffffffffffffda RBX: 00007fee7b665fa0 RCX: 00007fee7b3ebf79 [ 141.573252][ T7784] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 141.573266][ T7784] RBP: 00007fee7b4827e0 R08: 0000000000000000 R09: 0000000000000000 [ 141.573298][ T7784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.573313][ T7784] R13: 00007fee7b666038 R14: 00007fee7b665fa0 R15: 00007ffc770484a8 [ 141.573348][ T7784] [ 141.573823][ T7784] memory: usage 259580kB, limit 307200kB, failcnt 11785 [ 141.949098][ T7784] memory+swap: usage 195512kB, limit 9007199254740988kB, failcnt 0 [ 141.957146][ T7784] kmem: usage 194928kB, limit 9007199254740988kB, failcnt 0 [ 141.999077][ T7784] Memory cgroup stats for /syz1: [ 141.999447][ T7784] cache 4096 [ 142.025017][ T7784] rss 32768 [ 142.028371][ T7784] shmem 0 [ 142.046853][ T7784] mapped_file 4096 [ 142.069406][ T7784] dirty 0 [ 142.072496][ T7784] writeback 0 [ 142.099107][ T7784] workingset_refault_anon 97 [ 142.119504][ T7642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.121962][ T7784] workingset_refault_file 2390 [ 142.132453][ T7784] swap 159744 [ 142.135811][ T7784] swapcached 7622656 [ 142.144995][ T7807] bond3: Removing last arp target with arp_interval on [ 142.152112][ T7784] pgpgin 125854 [ 142.156089][ T7807] bond3: entered promiscuous mode [ 142.159943][ T7784] pgpgout 125844 [ 142.165306][ T7784] pgfault 101181 [ 142.169544][ T7784] pgmajfault 79 [ 142.169568][ T7807] bond3: entered allmulticast mode [ 142.173264][ T7784] inactive_anon 8192 [ 142.178601][ T7807] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.204983][ T7784] active_anon 28672 [ 142.213551][ T7784] inactive_file 0 [ 142.222640][ T7784] active_file 4096 [ 142.226400][ T7784] unevictable 0 [ 142.226560][ T7815] loop3: detected capacity change from 0 to 128 [ 142.230328][ T7784] hierarchical_memory_limit 314572800 [ 142.242281][ T7784] hierarchical_memsw_limit 9223372036854771712 [ 142.248815][ T7784] total_cache 4096 [ 142.260439][ T7784] total_rss 32768 [ 142.272321][ T7784] total_shmem 0 [ 142.275918][ T7784] total_mapped_file 4096 [ 142.280311][ T7784] total_dirty 0 [ 142.283965][ T7784] total_writeback 0 [ 142.288755][ T7784] total_workingset_refault_anon 97 [ 142.294096][ T7784] total_workingset_refault_file 2390 [ 142.299882][ T7784] total_swap 159744 [ 142.304113][ T7784] total_swapcached 7622656 [ 142.309245][ T7784] total_pgpgin 125854 [ 142.313440][ T7784] total_pgpgout 125844 [ 142.318097][ T7784] total_pgfault 101181 [ 142.322593][ T7784] total_pgmajfault 79 [ 142.326751][ T7784] total_inactive_anon 8192 [ 142.331453][ T7784] total_active_anon 28672 [ 142.335949][ T7784] total_inactive_file 0 [ 142.360840][ T7784] total_active_file 4096 [ 142.373895][ T7784] total_unevictable 0 [ 142.378141][ T7784] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1318,pid=7783,uid=0 [ 142.394872][ T7784] Memory cgroup out of memory: Killed process 7783 (syz.1.1318) total-vm:94024kB, anon-rss:1328kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 142.466119][ T7642] veth0_vlan: entered promiscuous mode [ 142.492495][ T7642] veth1_vlan: entered promiscuous mode [ 142.512537][ T7834] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 142.512571][ T7834] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 142.513127][ T7834] vhci_hcd vhci_hcd.0: Device attached [ 142.514329][ T7642] veth0_macvtap: entered promiscuous mode [ 142.516525][ T7642] veth1_macvtap: entered promiscuous mode [ 142.519641][ T7836] vhci_hcd: cannot find the pending unlink 128 [ 142.523647][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.561039][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 142.561054][ T28] audit: type=1400 audit(2000000037.660:1191): avc: denied { write } for pid=7831 comm="syz.3.1327" name="file0" dev="tmpfs" ino=1479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.578682][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.635920][ T7836] vhci_hcd: connection closed [ 142.639394][ T5575] vhci_hcd vhci_hcd.0: stop threads [ 142.639417][ T5575] vhci_hcd vhci_hcd.0: release socket [ 142.644526][ T28] audit: type=1400 audit(2000000037.700:1192): avc: denied { open } for pid=7831 comm="syz.3.1327" path="/275/file0" dev="tmpfs" ino=1479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.652453][ T5575] vhci_hcd vhci_hcd.0: disconnect device [ 142.655510][ T28] audit: type=1400 audit(2000000037.710:1193): avc: denied { ioctl } for pid=7831 comm="syz.3.1327" path="/275/file0" dev="tmpfs" ino=1479 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 142.689165][ T5571] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.727611][ T5571] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.727710][ T5571] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.727801][ T5571] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.781127][ T7845] loop5: detected capacity change from 0 to 512 [ 142.792703][ T7845] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 142.792961][ T7845] EXT4-fs warning (device loop5): read_mmp_block:111: Error -74 while reading MMP block 17 [ 142.820645][ T7845] loop5: detected capacity change from 0 to 2048 [ 142.840996][ T7845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.874368][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1292'. [ 142.915943][ T7642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.007543][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1331'. [ 143.020944][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1331'. [ 143.042331][ T7860] loop3: detected capacity change from 0 to 2048 [ 143.095300][ T7864] loop3: detected capacity change from 0 to 128 [ 143.221673][ T7873] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1339'. [ 143.238800][ T28] audit: type=1400 audit(2000000038.330:1194): avc: denied { create } for pid=7872 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 143.329332][ T28] audit: type=1400 audit(2000000038.360:1195): avc: denied { sys_admin } for pid=7872 comm="syz.3.1339" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 143.358033][ T7886] loop0: detected capacity change from 0 to 128 [ 143.486903][ T28] audit: type=1326 audit(2000000038.580:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7894 comm="syz.1.1346" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee7b3ebf79 code=0x0 [ 143.572610][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1344'. [ 144.032144][ T7906] loop5: detected capacity change from 0 to 128 [ 144.094205][ T7909] loop1: detected capacity change from 0 to 1024 [ 144.101298][ T7909] EXT4-fs: Ignoring removed orlov option [ 144.107714][ T7909] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 144.124483][ T7909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.294791][ T7914] loop0: detected capacity change from 0 to 2048 [ 144.385097][ T7914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.411226][ T28] audit: type=1400 audit(2000000039.512:1197): avc: denied { read } for pid=7913 comm="syz.0.1351" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 144.450071][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.468204][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.493321][ T7918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1354'. [ 144.536795][ T28] audit: type=1400 audit(2000000039.632:1198): avc: denied { mounton } for pid=7939 comm="syz.0.1357" path="mnt:[4026532370]" dev="nsfs" ino=4026532370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 144.633068][ T7951] loop1: detected capacity change from 0 to 512 [ 144.646646][ T7954] netlink: 'syz.0.1361': attribute type 16 has an invalid length. [ 144.656330][ T7951] EXT4-fs (loop1): orphan cleanup on readonly fs [ 144.664544][ T7951] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.1362: corrupted inode contents [ 144.687827][ T7954] netlink: 'syz.0.1361': attribute type 17 has an invalid length. [ 144.701062][ T7958] loop4: detected capacity change from 0 to 512 [ 144.707752][ T7958] EXT4-fs: test_dummy_encryption option not supported [ 144.715822][ T7951] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.716151][ T7951] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #16: comm syz.1.1362: mark_inode_dirty error [ 144.725603][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 144.725628][ C1] EXT4-fs (loop1): initial error at time 2000000039: ext4_do_update_inode:5569: inode 16 [ 144.725657][ C1] EXT4-fs (loop1): last error at time 2000000039: ext4_do_update_inode:5569: inode 16 [ 144.795004][ T7951] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.795337][ T7951] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.1362: corrupted inode contents [ 144.840648][ T7951] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.840852][ T7951] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.1362: mark_inode_dirty error [ 144.876293][ T7958] EXT4-fs (loop4): 1 truncate cleaned up [ 144.892839][ T7951] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.899510][ T7951] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.1362: corrupted inode contents [ 144.901171][ T7958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.908812][ T7951] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 144.924302][ T7958] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.1364: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 144.963194][ T7958] EXT4-fs (loop4): Remounting filesystem read-only [ 144.963217][ T7954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.970011][ T7951] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 144.995862][ T7951] loop1: lost filesystem error report for type 5 error -117 [ 144.996084][ T7951] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #16: comm syz.1.1362: corrupted inode contents [ 145.000198][ T7958] 9p: Bad value for 'rfdno' [ 145.003514][ T7951] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.015781][ T28] audit: type=1400 audit(2000000040.102:1199): avc: denied { mounton } for pid=7957 comm="syz.4.1364" path="/296/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.056513][ T28] audit: type=1400 audit(2000000040.132:1200): avc: denied { unlink } for pid=3318 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 145.057696][ T7951] EXT4-fs error (device loop1): ext4_truncate:4587: inode #16: comm syz.1.1362: mark_inode_dirty error [ 145.100356][ T7951] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 145.100642][ T7951] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 145.120017][ T7951] loop1: lost filesystem error report for type 5 error -117 [ 145.120472][ T7951] EXT4-fs (loop1): 1 truncate cleaned up [ 145.135205][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7039: comm kworker/u8:2: Failed to release dquot type 1 [ 145.147709][ T36] loop1: lost filesystem error report for type 5 error -117 [ 145.149603][ T7951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.291848][ T7962] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.306643][ T7966] EXT4-fs: Ignoring removed orlov option [ 145.314588][ T7966] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 145.331711][ T7966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.346226][ T7966] FAULT_INJECTION: forcing a failure. [ 145.346226][ T7966] name failslab, interval 1, probability 0, space 0, times 0 [ 145.360236][ T7966] CPU: 0 UID: 0 PID: 7966 Comm: syz.3.1367 Tainted: G W syzkaller #0 PREEMPT(full) [ 145.360318][ T7966] Tainted: [W]=WARN [ 145.360325][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 145.360360][ T7966] Call Trace: [ 145.360366][ T7966] [ 145.360374][ T7966] __dump_stack+0x1d/0x30 [ 145.360434][ T7966] dump_stack_lvl+0x95/0xd0 [ 145.360469][ T7966] dump_stack+0x15/0x1b [ 145.360488][ T7966] should_fail_ex+0x263/0x280 [ 145.360561][ T7966] should_failslab+0x8c/0xb0 [ 145.360667][ T7966] kmem_cache_alloc_noprof+0x66/0x400 [ 145.360771][ T7966] ? ext4_mb_new_blocks+0x2f0/0x1f50 [ 145.360801][ T7966] ext4_mb_new_blocks+0x2f0/0x1f50 [ 145.360886][ T7966] ? iput+0x353/0x580 [ 145.360911][ T7966] ext4_new_meta_blocks+0x102/0x1f0 [ 145.360945][ T7966] ext4_xattr_block_set+0x13ab/0x1a60 [ 145.361020][ T7966] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 145.361045][ T7966] ? ext4_expand_extra_isize_ea+0x7db/0x11a0 [ 145.361077][ T7966] ext4_expand_extra_isize_ea+0xba5/0x11a0 [ 145.361167][ T7966] __ext4_expand_extra_isize+0x246/0x280 [ 145.361204][ T7966] __ext4_mark_inode_dirty+0x29b/0x400 [ 145.361233][ T7966] ext4_dirty_inode+0x92/0xc0 [ 145.361296][ T7966] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 145.361329][ T7966] __mark_inode_dirty+0x16f/0x7d0 [ 145.361355][ T7966] file_update_time_flags+0x29b/0x2e0 [ 145.361383][ T7966] file_modified+0x3d/0x50 [ 145.361487][ T7966] ext4_buffered_write_iter+0x1d0/0x3c0 [ 145.361577][ T7966] ext4_file_write_iter+0x380/0xfa0 [ 145.361608][ T7966] ? kstrtouint_from_user+0xa8/0xf0 [ 145.361637][ T7966] ? selinux_file_permission+0x1f2/0x690 [ 145.361730][ T7966] ? proc_fail_nth_write+0x13b/0x160 [ 145.361753][ T7966] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 145.361788][ T7966] vfs_write+0x5a6/0x9f0 [ 145.361823][ T7966] __x64_sys_pwrite64+0xfd/0x150 [ 145.361854][ T7966] x64_sys_call+0xa2a/0x3020 [ 145.361951][ T7966] do_syscall_64+0x12c/0x370 [ 145.362031][ T7966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.362057][ T7966] RIP: 0033:0x7f3e7133bf79 [ 145.362075][ T7966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.362093][ T7966] RSP: 002b:00007f3e6fd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 145.362150][ T7966] RAX: ffffffffffffffda RBX: 00007f3e715b5fa0 RCX: 00007f3e7133bf79 [ 145.362166][ T7966] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000007 [ 145.362230][ T7966] RBP: 00007f3e6fd97090 R08: 0000000000000000 R09: 0000000000000000 [ 145.362242][ T7966] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000001 [ 145.362254][ T7966] R13: 00007f3e715b6038 R14: 00007f3e715b5fa0 R15: 00007ffc349bab68 [ 145.362321][ T7966] [ 145.731294][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.933820][ T7990] netlink: 'syz.5.1373': attribute type 1 has an invalid length. [ 145.988096][ T7972] chnl_net:caif_netlink_parms(): no params data found [ 146.063183][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1374'. [ 146.081080][ T7972] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.088594][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.097453][ T7972] bridge_slave_0: entered allmulticast mode [ 146.104557][ T7972] bridge_slave_0: entered promiscuous mode [ 146.150851][ T7972] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.158017][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.175522][ T7972] bridge_slave_1: entered allmulticast mode [ 146.193743][ T7972] bridge_slave_1: entered promiscuous mode [ 146.261565][ T7972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.285995][ T7972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.332802][ T7972] team0: Port device team_slave_0 added [ 146.340587][ T7972] team0: Port device team_slave_1 added [ 146.371053][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.379255][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.407681][ T7972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.420272][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.428789][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.457803][ T7972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.489857][ T7972] hsr_slave_0: entered promiscuous mode [ 146.496060][ T7972] hsr_slave_1: entered promiscuous mode [ 146.502204][ T7972] debugfs: 'hsr0' already exists in 'hsr' [ 146.508070][ T7972] Cannot create hsr debugfs directory [ 146.628598][ T7972] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 146.638422][ T7972] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 146.648359][ T7972] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 146.675051][ T7972] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 146.747736][ T8023] pimreg: entered allmulticast mode [ 146.798438][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.824653][ T7972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.836593][ T8015] tap0: tun_chr_ioctl cmd 1074025677 [ 146.842355][ T8015] tap0: linktype set to 776 [ 146.859278][ T7972] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.871551][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.878812][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.891424][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.898826][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.937854][ T7972] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.956557][ T7972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.974162][ T8030] syzkaller1: entered promiscuous mode [ 146.979944][ T8030] syzkaller1: entered allmulticast mode [ 146.991670][ T8030] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 147.030884][ T7972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.239221][ T7972] veth0_vlan: entered promiscuous mode [ 147.248431][ T7972] veth1_vlan: entered promiscuous mode [ 147.278124][ T7972] veth0_macvtap: entered promiscuous mode [ 147.287852][ T7972] veth1_macvtap: entered promiscuous mode [ 147.313305][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.330243][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.347540][ T5571] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.358181][ T5571] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.370050][ T5571] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.385358][ T5571] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.545607][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1395'. [ 147.554896][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1395'. [ 147.646839][ T8080] hub 8-0:1.0: USB hub found [ 147.651992][ T8080] hub 8-0:1.0: 8 ports detected [ 147.664613][ T8080] netlink: 'syz.5.1394': attribute type 36 has an invalid length. [ 147.679682][ T8080] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 147.689634][ T8080] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 147.702988][ T8080] netlink: 'syz.5.1394': attribute type 10 has an invalid length. [ 147.713512][ T8080] macvlan1: entered allmulticast mode [ 147.722619][ T8080] veth1_vlan: entered allmulticast mode [ 147.734486][ T8080] team0: Port device macvlan1 added [ 148.214797][ T8091] set_capacity_and_notify: 3 callbacks suppressed [ 148.214811][ T8091] loop0: detected capacity change from 0 to 1024 [ 148.245154][ T8091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.315680][ T8105] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1399: missing EA_INODE flag [ 148.328513][ T8105] EXT4-fs (loop0): Remounting filesystem read-only [ 148.460558][ T8125] loop5: detected capacity change from 0 to 512 [ 148.484920][ T8125] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.522362][ T8125] __quota_error: 6 callbacks suppressed [ 148.522457][ T8125] Quota error (device loop5): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 148.539859][ T8125] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 148.706511][ T7642] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 148.812144][ T8159] loop5: detected capacity change from 0 to 1024 [ 148.858357][ T8161] loop6: detected capacity change from 0 to 512 [ 148.885376][ T8159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.907659][ T8159] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1406: missing EA_INODE flag [ 148.937105][ T8159] EXT4-fs (loop5): Remounting filesystem read-only [ 148.967749][ T7642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.968552][ T8161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.000358][ T8161] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.030179][ T8181] loop5: detected capacity change from 0 to 512 [ 149.037223][ T8181] ext2: Unknown parameter 'obj_role' [ 149.168279][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.168499][ T7972] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.337273][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1415'. [ 149.396725][ T28] audit: type=1400 audit(2000000044.492:1206): avc: denied { mount } for pid=8214 comm="syz.6.1415" name="/" dev="ramfs" ino=22053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 149.420840][ T28] audit: type=1400 audit(2000000044.492:1207): avc: denied { getopt } for pid=8214 comm="syz.6.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 149.635917][ T8231] loop5: detected capacity change from 0 to 8192 [ 150.089943][ T28] audit: type=1400 audit(2000000045.192:1208): avc: denied { unmount } for pid=7972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 150.272009][ T8238] loop0: detected capacity change from 0 to 128 [ 150.402429][ T8244] loop6: detected capacity change from 0 to 8192 [ 150.622664][ T8238] bio_check_eod: 19 callbacks suppressed [ 150.622681][ T8238] syz.0.1422: attempt to access beyond end of device [ 150.622681][ T8238] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 150.789281][ T8238] syz.0.1422: attempt to access beyond end of device [ 150.789281][ T8238] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 150.803755][ T8238] syz.0.1422: attempt to access beyond end of device [ 150.803755][ T8238] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 150.817894][ T8238] syz.0.1422: attempt to access beyond end of device [ 150.817894][ T8238] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 150.836345][ T8238] syz.0.1422: attempt to access beyond end of device [ 150.836345][ T8238] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 150.850792][ T8238] syz.0.1422: attempt to access beyond end of device [ 150.850792][ T8238] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 150.892489][ T8238] syz.0.1422: attempt to access beyond end of device [ 150.892489][ T8238] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 150.953754][ T8238] syz.0.1422: attempt to access beyond end of device [ 150.953754][ T8238] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 151.003952][ T8238] syz.0.1422: attempt to access beyond end of device [ 151.003952][ T8238] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 151.063331][ T8238] syz.0.1422: attempt to access beyond end of device [ 151.063331][ T8238] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 151.092696][ T28] audit: type=1400 audit(2000000046.162:1209): avc: denied { ioctl } for pid=8247 comm="syz.1.1425" path="socket:[22093]" dev="sockfs" ino=22093 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.128028][ T28] audit: type=1400 audit(2000000046.162:1210): avc: denied { read } for pid=8247 comm="syz.1.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.159358][ T9] IPVS: starting estimator thread 0... [ 151.168755][ T8251] loop1: detected capacity change from 0 to 512 [ 151.178672][ T8251] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 151.229920][ T8251] EXT4-fs (loop1): 1 truncate cleaned up [ 151.236030][ T8251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.259208][ T8252] IPVS: using max 2544 ests per chain, 127200 per kthread [ 151.275227][ T8259] FAULT_INJECTION: forcing a failure. [ 151.275227][ T8259] name failslab, interval 1, probability 0, space 0, times 0 [ 151.326943][ T8259] CPU: 1 UID: 0 PID: 8259 Comm: syz.6.1428 Tainted: G W syzkaller #0 PREEMPT(full) [ 151.326995][ T8259] Tainted: [W]=WARN [ 151.327047][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.327060][ T8259] Call Trace: [ 151.327067][ T8259] [ 151.327074][ T8259] __dump_stack+0x1d/0x30 [ 151.327103][ T8259] dump_stack_lvl+0x95/0xd0 [ 151.327128][ T8259] dump_stack+0x15/0x1b [ 151.327151][ T8259] should_fail_ex+0x263/0x280 [ 151.327226][ T8259] should_failslab+0x8c/0xb0 [ 151.327260][ T8259] __kmalloc_cache_node_noprof+0x6b/0x480 [ 151.327283][ T8259] ? __get_vm_area_node+0x106/0x1d0 [ 151.327307][ T8259] __get_vm_area_node+0x106/0x1d0 [ 151.327352][ T8259] __vmalloc_node_range_noprof+0x291/0x12b0 [ 151.327376][ T8259] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 151.327413][ T8259] ? __rcu_read_unlock+0x4e/0x70 [ 151.327503][ T8259] ? avc_has_perm_noaudit+0xab/0x130 [ 151.327533][ T8259] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 151.327613][ T8259] __vmalloc_noprof+0xa4/0xf0 [ 151.327666][ T8259] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 151.327698][ T8259] bpf_prog_alloc_no_stats+0x47/0x390 [ 151.327749][ T8259] ? bpf_prog_alloc+0x2a/0x150 [ 151.327910][ T8259] bpf_prog_alloc+0x3c/0x150 [ 151.327962][ T8259] bpf_prog_load+0x506/0x1140 [ 151.327989][ T8259] ? security_bpf+0x2b/0x90 [ 151.328017][ T8259] __sys_bpf+0x505/0x7e0 [ 151.328122][ T8259] __x64_sys_bpf+0x41/0x50 [ 151.328170][ T8259] x64_sys_call+0x10cb/0x3020 [ 151.328232][ T8259] do_syscall_64+0x12c/0x370 [ 151.328266][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.328367][ T8259] RIP: 0033:0x7f65edacbf79 [ 151.328462][ T8259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.328506][ T8259] RSP: 002b:00007f65ec51f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.328530][ T8259] RAX: ffffffffffffffda RBX: 00007f65edd45fa0 RCX: 00007f65edacbf79 [ 151.328545][ T8259] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 151.328585][ T8259] RBP: 00007f65ec51f090 R08: 0000000000000000 R09: 0000000000000000 [ 151.328599][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.328613][ T8259] R13: 00007f65edd46038 R14: 00007f65edd45fa0 R15: 00007ffd4687d6f8 [ 151.328633][ T8259] [ 151.328809][ T8259] syz.6.1428: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 151.614828][ T8259] CPU: 1 UID: 0 PID: 8259 Comm: syz.6.1428 Tainted: G W syzkaller #0 PREEMPT(full) [ 151.614862][ T8259] Tainted: [W]=WARN [ 151.614869][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.614883][ T8259] Call Trace: [ 151.614957][ T8259] [ 151.614965][ T8259] __dump_stack+0x1d/0x30 [ 151.615042][ T8259] dump_stack_lvl+0x95/0xd0 [ 151.615096][ T8259] dump_stack+0x15/0x1b [ 151.615119][ T8259] warn_alloc+0x145/0x1c0 [ 151.615201][ T8259] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 151.615228][ T8259] ? __rcu_read_unlock+0x4e/0x70 [ 151.615249][ T8259] ? avc_has_perm_noaudit+0xab/0x130 [ 151.615277][ T8259] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 151.615348][ T8259] __vmalloc_noprof+0xa4/0xf0 [ 151.615439][ T8259] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 151.615509][ T8259] bpf_prog_alloc_no_stats+0x47/0x390 [ 151.615588][ T8259] ? bpf_prog_alloc+0x2a/0x150 [ 151.615668][ T8259] bpf_prog_alloc+0x3c/0x150 [ 151.615699][ T8259] bpf_prog_load+0x506/0x1140 [ 151.615726][ T8259] ? security_bpf+0x2b/0x90 [ 151.615756][ T8259] __sys_bpf+0x505/0x7e0 [ 151.615824][ T8259] __x64_sys_bpf+0x41/0x50 [ 151.615854][ T8259] x64_sys_call+0x10cb/0x3020 [ 151.615909][ T8259] do_syscall_64+0x12c/0x370 [ 151.615942][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.615972][ T8259] RIP: 0033:0x7f65edacbf79 [ 151.616015][ T8259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.616035][ T8259] RSP: 002b:00007f65ec51f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.616057][ T8259] RAX: ffffffffffffffda RBX: 00007f65edd45fa0 RCX: 00007f65edacbf79 [ 151.616072][ T8259] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 151.616127][ T8259] RBP: 00007f65ec51f090 R08: 0000000000000000 R09: 0000000000000000 [ 151.616141][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.616155][ T8259] R13: 00007f65edd46038 R14: 00007f65edd45fa0 R15: 00007ffd4687d6f8 [ 151.616174][ T8259] [ 151.616364][ T8259] Mem-Info: [ 151.865008][ T8259] active_anon:44925 inactive_anon:0 isolated_anon:0 [ 151.865008][ T8259] active_file:18173 inactive_file:11723 isolated_file:0 [ 151.865008][ T8259] unevictable:0 dirty:521 writeback:1 [ 151.865008][ T8259] slab_reclaimable:3710 slab_unreclaimable:20298 [ 151.865008][ T8259] mapped:32939 shmem:36592 pagetables:3431 [ 151.865008][ T8259] sec_pagetables:0 bounce:0 [ 151.865008][ T8259] kernel_misc_reclaimable:0 [ 151.865008][ T8259] free:1817540 free_pcp:21036 free_cma:0 [ 151.929282][ T8259] Node 0 active_anon:179744kB inactive_anon:0kB active_file:72716kB inactive_file:46908kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131752kB dirty:2060kB writeback:0kB shmem:146392kB kernel_stack:4448kB pagetables:13828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 151.958618][ T8259] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.998481][ T8259] lowmem_reserve[]: 0 2879 7857 7857 [ 152.007531][ T8259] Node 0 DMA32 free:2944792kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948316kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 152.041326][ T8259] lowmem_reserve[]: 0 0 4978 4978 [ 152.046553][ T8259] Node 0 Normal free:4310240kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:179744kB inactive_anon:0kB active_file:72716kB inactive_file:46908kB unevictable:0kB writepending:2060kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:80036kB local_pcp:51284kB free_cma:0kB [ 152.081901][ T8259] lowmem_reserve[]: 0 0 0 0 [ 152.086580][ T8259] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 152.106855][ T8259] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 2*64kB (M) 4*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944792kB [ 152.124752][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.134095][ T8259] Node 0 Normal: 546*4kB (UME) 349*8kB (UM) 67*16kB (UM) 195*32kB (UME) 159*64kB (UME) 195*128kB (UM) 164*256kB (UME) 112*512kB (UME) 120*1024kB (UME) 77*2048kB (UME) 948*4096kB (UM) = 4310336kB [ 152.184451][ T28] audit: type=1400 audit(2000000047.262:1211): avc: denied { relabelfrom } for pid=8276 comm="syz.1.1430" name="NETLINK" dev="sockfs" ino=22126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.232077][ T8259] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 152.272092][ T28] audit: type=1400 audit(2000000047.272:1212): avc: denied { relabelto } for pid=8276 comm="syz.1.1430" name="NETLINK" dev="sockfs" ino=22126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 152.297545][ T8259] 66435 total pagecache pages [ 152.315346][ T8283] loop5: detected capacity change from 0 to 512 [ 152.327106][ T8283] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.338212][ T8259] 2 pages in swap cache [ 152.343387][ T8283] EXT4-fs (loop5): 1 truncate cleaned up [ 152.352075][ T8283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.365026][ T8259] Free swap = 124988kB [ 152.379607][ T8259] Total swap = 124996kB [ 152.383809][ T8259] 2097051 pages RAM [ 152.389169][ T8259] 0 pages HighMem/MovableOnly [ 152.394079][ T8259] 81572 pages reserved [ 152.416030][ T7642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.504963][ T8286] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.542194][ T8277] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 152.581785][ T8277] FAT-fs (loop1): Filesystem has been set read-only [ 152.594039][ T8277] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 152.607916][ T8277] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 152.656321][ T8295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.668497][ T8295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.712989][ T28] audit: type=1400 audit(2000000047.792:1213): avc: denied { append } for pid=8296 comm="syz.1.1437" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 152.757522][ T28] audit: type=1400 audit(2000000047.812:1214): avc: denied { ioctl } for pid=8296 comm="syz.1.1437" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22149 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 152.789239][ T8295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.800343][ T8295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.911841][ T8318] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 152.920749][ T8318] System zones: 0-1, 3-36 [ 152.950244][ T8318] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1440: bad orphan inode 134217728 [ 152.971076][ T8318] loop1: lost filesystem error report for type 5 error -117 [ 152.971631][ T8318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.086267][ T8332] SELinux: security_context_str_to_sid (unconfined_usmackfsfloor=lt{uY(Μ:v_?BAА%3֎Rww/锺J$bJe<,fsuuid=2ee7,errors=continue) failed with errno=-22 [ 153.181619][ T8333] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1441'. [ 153.417330][ T8354] set_capacity_and_notify: 3 callbacks suppressed [ 153.417351][ T8354] loop5: detected capacity change from 0 to 1024 [ 153.449421][ T8354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.488894][ T8354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 153.530410][ T8354] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.549253][ T8354] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.1446: lblock 0 mapped to illegal pblock 0 (length 6) [ 153.563142][ T8354] EXT4-fs (loop5): Remounting filesystem read-only [ 153.648506][ T8371] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 153.679147][ T8371] @0: renamed from bond_slave_1 (while UP) [ 153.843199][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.261017][ T7642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 154.321834][ T8396] loop0: detected capacity change from 0 to 128 [ 154.336768][ T28] audit: type=1400 audit(2000000049.432:1215): avc: denied { remount } for pid=8395 comm="syz.0.1452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 154.393524][ T8400] loop0: detected capacity change from 0 to 128 [ 154.403021][ T28] audit: type=1400 audit(2000000049.472:1216): avc: denied { append } for pid=8395 comm="syz.0.1452" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.429208][ T28] audit: type=1400 audit(2000000049.502:1217): avc: denied { write } for pid=8398 comm="syz.5.1453" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 154.510801][ T28] audit: type=1326 audit(2000000049.612:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9b45bf79 code=0x7ffc0000 [ 154.543714][ T28] audit: type=1326 audit(2000000049.612:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7eff9b45bf79 code=0x7ffc0000 [ 154.580342][ T28] audit: type=1326 audit(2000000049.612:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9b45bf79 code=0x7ffc0000 [ 154.614327][ T8408] loop5: detected capacity change from 0 to 128 [ 154.625258][ T28] audit: type=1326 audit(2000000049.612:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff9b45bf79 code=0x7ffc0000 [ 154.641078][ T8410] loop6: detected capacity change from 0 to 256 [ 154.668640][ T28] audit: type=1326 audit(2000000049.612:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9b45bf79 code=0x7ffc0000 [ 154.696094][ T28] audit: type=1326 audit(2000000049.612:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff9b45bf79 code=0x7ffc0000 [ 154.723308][ T28] audit: type=1326 audit(2000000049.612:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8399 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9b45bf79 code=0x7ffc0000 [ 154.931842][ T8435] loop5: detected capacity change from 0 to 128 [ 155.016760][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1461'. [ 155.040384][ T8443] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1467'. [ 155.070327][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1470'. [ 155.119530][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1472'. [ 155.134411][ T8451] bond1: option ad_user_port_key: invalid value (1136) [ 155.142318][ T8451] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 155.142522][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1470'. [ 155.161205][ T8451] bond1 (unregistering): Released all slaves [ 155.203856][ T8458] sock: sock_set_timeout: `syz.1.1474' (pid 8458) tries to set negative timeout [ 155.246582][ T8461] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1475'. [ 155.257534][ T8462] loop6: detected capacity change from 0 to 128 [ 155.299344][ T8464] loop1: detected capacity change from 0 to 1764 [ 155.325199][ T8464] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.365192][ T8467] netlink: 8210 bytes leftover after parsing attributes in process `syz.1.1477'. [ 156.000943][ T8464] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.014795][ T8474] loop0: detected capacity change from 0 to 512 [ 156.046204][ T8474] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 156.081370][ T8464] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.190412][ T8474] loop0: detected capacity change from 0 to 8192 [ 156.217478][ T8474] bio_check_eod: 35 callbacks suppressed [ 156.217494][ T8474] syz.0.1481: attempt to access beyond end of device [ 156.217494][ T8474] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 156.238742][ T8464] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.251357][ T8474] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 156.289091][ T8474] FAT-fs (loop0): Filesystem has been set read-only [ 156.309629][ T8486] syz.0.1481: attempt to access beyond end of device [ 156.309629][ T8486] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 156.325816][ T8474] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 156.340154][ T5569] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.358610][ T8486] Buffer I/O error on dev loop0, logical block 57847, async page read [ 156.377123][ T5569] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.386862][ T5569] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.409650][ T8474] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 156.418540][ T8486] syz.0.1481: attempt to access beyond end of device [ 156.418540][ T8486] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 156.436696][ T5569] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.443286][ T8486] Buffer I/O error on dev loop0, logical block 57847, async page read [ 156.571065][ T8497] 9p: Bad value for 'wfdno' [ 156.827039][ T8511] GUP no longer grows the stack in syz.0.1490 (8511): 200000006000-200000008000 (200000004000) [ 156.838161][ T8511] CPU: 0 UID: 0 PID: 8511 Comm: syz.0.1490 Tainted: G W syzkaller #0 PREEMPT(full) [ 156.838198][ T8511] Tainted: [W]=WARN [ 156.838206][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.838221][ T8511] Call Trace: [ 156.838230][ T8511] [ 156.838240][ T8511] __dump_stack+0x1d/0x30 [ 156.838324][ T8511] dump_stack_lvl+0x95/0xd0 [ 156.838346][ T8511] dump_stack+0x15/0x1b [ 156.838372][ T8511] fixup_user_fault+0x4fb/0x550 [ 156.838411][ T8511] fault_in_user_writeable+0x5c/0xc0 [ 156.838434][ T8511] futex_lock_pi+0x60b/0x7e0 [ 156.838529][ T8511] ? __pfx_futex_wake_mark+0x10/0x10 [ 156.838564][ T8511] do_futex+0x21f/0x380 [ 156.838622][ T8511] __se_sys_futex+0x2f6/0x370 [ 156.838661][ T8511] ? xfd_validate_state+0x45/0xf0 [ 156.838687][ T8511] __x64_sys_futex+0x78/0x90 [ 156.838711][ T8511] x64_sys_call+0x24ab/0x3020 [ 156.838763][ T8511] do_syscall_64+0x12c/0x370 [ 156.838793][ T8511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.838811][ T8511] RIP: 0033:0x7eff9b45bf79 [ 156.838826][ T8511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.838961][ T8511] RSP: 002b:00007eff99e6d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 156.838987][ T8511] RAX: ffffffffffffffda RBX: 00007eff9b6d6180 RCX: 00007eff9b45bf79 [ 156.839002][ T8511] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 156.839109][ T8511] RBP: 00007eff9b4f27e0 R08: 0000000000000000 R09: 0000000000000000 [ 156.839120][ T8511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.839131][ T8511] R13: 00007eff9b6d6218 R14: 00007eff9b6d6180 R15: 00007fffb3ddabd8 [ 156.839147][ T8511] [ 157.203525][ T8496] FAULT_INJECTION: forcing a failure. [ 157.203525][ T8496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.260016][ T8496] CPU: 0 UID: 0 PID: 8496 Comm: syz.3.1487 Tainted: G W syzkaller #0 PREEMPT(full) [ 157.260128][ T8496] Tainted: [W]=WARN [ 157.260135][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.260149][ T8496] Call Trace: [ 157.260159][ T8496] [ 157.260168][ T8496] __dump_stack+0x1d/0x30 [ 157.260199][ T8496] dump_stack_lvl+0x95/0xd0 [ 157.260258][ T8496] dump_stack+0x15/0x1b [ 157.260278][ T8496] should_fail_ex+0x263/0x280 [ 157.260344][ T8496] should_fail+0xb/0x20 [ 157.260366][ T8496] should_fail_usercopy+0x1a/0x20 [ 157.260413][ T8496] _copy_from_user+0x1c/0xb0 [ 157.260437][ T8496] kstrtouint_from_user+0x69/0xf0 [ 157.260459][ T8496] proc_fail_nth_write+0x50/0x160 [ 157.260487][ T8496] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 157.260591][ T8496] vfs_write+0x269/0x9f0 [ 157.260638][ T8496] ? __rcu_read_unlock+0x4e/0x70 [ 157.260659][ T8496] ? __fget_files+0x184/0x1c0 [ 157.260678][ T8496] ? mutex_lock+0x57/0x90 [ 157.260759][ T8496] ksys_write+0xdc/0x1a0 [ 157.260787][ T8496] __x64_sys_write+0x40/0x50 [ 157.260819][ T8496] x64_sys_call+0x27e1/0x3020 [ 157.260848][ T8496] do_syscall_64+0x12c/0x370 [ 157.260925][ T8496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.260950][ T8496] RIP: 0033:0x7f3e712fc84e [ 157.260966][ T8496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.260983][ T8496] RSP: 002b:00007f3e6fd96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 157.261009][ T8496] RAX: ffffffffffffffda RBX: 00007f3e6fd976c0 RCX: 00007f3e712fc84e [ 157.261026][ T8496] RDX: 0000000000000001 RSI: 00007f3e6fd970a0 RDI: 0000000000000006 [ 157.261040][ T8496] RBP: 00007f3e6fd97090 R08: 0000000000000000 R09: 0000000000000000 [ 157.261103][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.261115][ T8496] R13: 00007f3e715b6038 R14: 00007f3e715b5fa0 R15: 00007ffc349bab68 [ 157.261131][ T8496] [ 157.640381][ T8524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1493'. [ 157.656610][ T8526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.660171][ T8528] FAULT_INJECTION: forcing a failure. [ 157.660171][ T8528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.685889][ T8526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.745361][ T8528] CPU: 0 UID: 0 PID: 8528 Comm: syz.3.1495 Tainted: G W syzkaller #0 PREEMPT(full) [ 157.745458][ T8528] Tainted: [W]=WARN [ 157.745467][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.745522][ T8528] Call Trace: [ 157.745530][ T8528] [ 157.745538][ T8528] __dump_stack+0x1d/0x30 [ 157.745568][ T8528] dump_stack_lvl+0x95/0xd0 [ 157.745608][ T8528] dump_stack+0x15/0x1b [ 157.745626][ T8528] should_fail_ex+0x263/0x280 [ 157.745657][ T8528] should_fail+0xb/0x20 [ 157.745675][ T8528] should_fail_usercopy+0x1a/0x20 [ 157.745831][ T8528] _copy_to_user+0x20/0xa0 [ 157.745864][ T8528] simple_read_from_buffer+0xb5/0x130 [ 157.745969][ T8528] proc_fail_nth_read+0x10e/0x150 [ 157.745992][ T8528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.746013][ T8528] vfs_read+0x1ab/0x7f0 [ 157.746053][ T8528] ? __rcu_read_unlock+0x4e/0x70 [ 157.746071][ T8528] ? __fget_files+0x184/0x1c0 [ 157.746131][ T8528] ? mutex_lock+0x57/0x90 [ 157.746203][ T8528] ksys_read+0xdc/0x1a0 [ 157.746235][ T8528] __x64_sys_read+0x40/0x50 [ 157.746326][ T8528] x64_sys_call+0x2886/0x3020 [ 157.746391][ T8528] do_syscall_64+0x12c/0x370 [ 157.746429][ T8528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.746453][ T8528] RIP: 0033:0x7f3e712fc84e [ 157.746468][ T8528] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.746529][ T8528] RSP: 002b:00007f3e6fd96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.746553][ T8528] RAX: ffffffffffffffda RBX: 00007f3e6fd976c0 RCX: 00007f3e712fc84e [ 157.746566][ T8528] RDX: 000000000000000f RSI: 00007f3e6fd970a0 RDI: 0000000000000004 [ 157.746578][ T8528] RBP: 00007f3e6fd97090 R08: 0000000000000000 R09: 0000000000000000 [ 157.746639][ T8528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.746715][ T8528] R13: 00007f3e715b6038 R14: 00007f3e715b5fa0 R15: 00007ffc349bab68 [ 157.746732][ T8528] [ 158.000454][ T8532] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1497'. [ 158.098942][ T8512] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 158.108044][ T8512] EXT4-fs (loop5): orphan cleanup on readonly fs [ 158.130475][ T8519] vfat: Unknown parameter 'ni_xlate' [ 158.131049][ T7972] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.179190][ T8535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.199228][ T8535] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.234967][ T8512] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1492: corrupted inode contents [ 158.261093][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.270417][ T8512] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 158.280725][ T8512] EXT4-fs (loop5): Remounting filesystem read-only [ 158.290006][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 158.290029][ C1] EXT4-fs (loop5): initial error at time 2000000053: ext4_do_update_inode:5569: inode 16 [ 158.290060][ C1] EXT4-fs (loop5): last error at time 2000000053: ext4_do_update_inode:5569: inode 16 [ 158.348170][ T8512] EXT4-fs (loop5): 1 truncate cleaned up [ 158.355360][ T5577] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 158.366388][ T5577] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 158.380475][ T8548] EXT4-fs: Ignoring removed oldalloc option [ 158.386983][ T5577] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 158.398130][ T8512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.428887][ T8548] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1504: Parent and EA inode have the same ino 15 [ 158.491715][ T8552] set_capacity_and_notify: 6 callbacks suppressed [ 158.491814][ T8552] loop6: detected capacity change from 0 to 512 [ 158.509383][ T8548] loop0: lost filesystem error report for type 5 error -117 [ 158.509609][ T8548] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1504: Parent and EA inode have the same ino 15 [ 158.529478][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 158.529501][ C0] EXT4-fs (loop0): initial error at time 2000000053: ext4_xattr_inode_iget:437 [ 158.529522][ C0] EXT4-fs (loop0): last error at time 2000000053: ext4_xattr_inode_iget:437 [ 158.619095][ T8548] loop0: lost filesystem error report for type 5 error -117 [ 158.619421][ T8548] EXT4-fs (loop0): 1 orphan inode deleted [ 158.639515][ T8548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.666365][ T8552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.681163][ T8548] EXT4-fs error (device loop0): ext4_rename:3810: inode #15: comm syz.0.1504: target of rename is already freed [ 158.709055][ T8552] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.739647][ T8552] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.762460][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.835018][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1503'. [ 158.994693][ T8566] loop6: detected capacity change from 0 to 2048 [ 159.060027][ T7642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.131356][ T8566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.152209][ T8566] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.282248][ T8566] FAULT_INJECTION: forcing a failure. [ 159.282248][ T8566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.388714][ T8566] CPU: 1 UID: 0 PID: 8566 Comm: syz.6.1508 Tainted: G W syzkaller #0 PREEMPT(full) [ 159.388748][ T8566] Tainted: [W]=WARN [ 159.388756][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 159.388770][ T8566] Call Trace: [ 159.388778][ T8566] [ 159.388787][ T8566] __dump_stack+0x1d/0x30 [ 159.388899][ T8566] dump_stack_lvl+0x95/0xd0 [ 159.388981][ T8566] dump_stack+0x15/0x1b [ 159.389005][ T8566] should_fail_ex+0x263/0x280 [ 159.389032][ T8566] should_fail+0xb/0x20 [ 159.389056][ T8566] should_fail_usercopy+0x1a/0x20 [ 159.389166][ T8566] _copy_from_user+0x1c/0xb0 [ 159.389322][ T8566] vmemdup_user+0x5e/0xd0 [ 159.389356][ T8566] path_setxattrat+0x1b1/0x310 [ 159.389454][ T8566] __x64_sys_lsetxattr+0x71/0x90 [ 159.389479][ T8566] x64_sys_call+0x1300/0x3020 [ 159.389501][ T8566] do_syscall_64+0x12c/0x370 [ 159.389530][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.389616][ T8566] RIP: 0033:0x7f65edacbf79 [ 159.389630][ T8566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.389713][ T8566] RSP: 002b:00007f65ec51f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 159.389734][ T8566] RAX: ffffffffffffffda RBX: 00007f65edd45fa0 RCX: 00007f65edacbf79 [ 159.389750][ T8566] RDX: 00002000000001c0 RSI: 0000200000000000 RDI: 0000200000000100 [ 159.389764][ T8566] RBP: 00007f65ec51f090 R08: 0000000000000000 R09: 0000000000000000 [ 159.389776][ T8566] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000001 [ 159.389788][ T8566] R13: 00007f65edd46038 R14: 00007f65edd45fa0 R15: 00007ffd4687d6f8 [ 159.389920][ T8566] [ 159.606022][ T7972] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.654765][ T8573] loop3: detected capacity change from 0 to 4096 [ 159.656092][ T8575] syzkaller1: entered promiscuous mode [ 159.675978][ T8575] syzkaller1: entered allmulticast mode [ 159.685595][ T8575] ipvlan1: entered promiscuous mode [ 159.746013][ T8575] ipvlan1: entered allmulticast mode [ 159.751607][ T8575] veth0_vlan: entered allmulticast mode [ 159.758768][ T8573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.774404][ T8580] pimreg: entered allmulticast mode [ 159.779987][ T8580] pimreg: left allmulticast mode [ 159.867913][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.963220][ T8592] syzkaller0: entered promiscuous mode [ 159.968862][ T8592] syzkaller0: entered allmulticast mode [ 159.988012][ T8594] loop3: detected capacity change from 0 to 512 [ 160.011699][ T8594] EXT4-fs (loop3): orphan cleanup on readonly fs [ 160.025651][ T8594] __quota_error: 34 callbacks suppressed [ 160.025670][ T8594] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (1579008 > 6144). [ 160.060918][ T8594] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 160.110358][ T8594] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 160.129829][ T8594] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1515: couldn't read orphan inode 26 (err -116) [ 160.165539][ T8594] loop3: lost filesystem error report for type 5 error -116 [ 160.166012][ T8594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.288768][ T8603] FAULT_INJECTION: forcing a failure. [ 160.288768][ T8603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.310365][ T8603] CPU: 1 UID: 0 PID: 8603 Comm: syz.0.1522 Tainted: G W syzkaller #0 PREEMPT(full) [ 160.310402][ T8603] Tainted: [W]=WARN [ 160.310413][ T8603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.310475][ T8603] Call Trace: [ 160.310482][ T8603] [ 160.310491][ T8603] __dump_stack+0x1d/0x30 [ 160.310535][ T8603] dump_stack_lvl+0x95/0xd0 [ 160.310561][ T8603] dump_stack+0x15/0x1b [ 160.310584][ T8603] should_fail_ex+0x263/0x280 [ 160.310696][ T8603] should_fail+0xb/0x20 [ 160.310717][ T8603] should_fail_usercopy+0x1a/0x20 [ 160.310795][ T8603] _copy_from_user+0x1c/0xb0 [ 160.310824][ T8603] do_semtimedop+0x152/0x220 [ 160.310894][ T8603] __x64_sys_semop+0x41/0x50 [ 160.310919][ T8603] x64_sys_call+0x2b04/0x3020 [ 160.310947][ T8603] do_syscall_64+0x12c/0x370 [ 160.311040][ T8603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.311105][ T8603] RIP: 0033:0x7eff9b45bf79 [ 160.311124][ T8603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.311145][ T8603] RSP: 002b:00007eff99eaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 160.311170][ T8603] RAX: ffffffffffffffda RBX: 00007eff9b6d5fa0 RCX: 00007eff9b45bf79 [ 160.311205][ T8603] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000000 [ 160.311219][ T8603] RBP: 00007eff99eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 160.311257][ T8603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.311352][ T8603] R13: 00007eff9b6d6038 R14: 00007eff9b6d5fa0 R15: 00007fffb3ddabd8 [ 160.311369][ T8603] [ 160.498478][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.521109][ T28] audit: type=1400 audit(2000000055.622:1253): avc: denied { map } for pid=8609 comm="syz.6.1524" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 160.576896][ T28] audit: type=1400 audit(2000000055.652:1254): avc: denied { execute } for pid=8609 comm="syz.6.1524" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 160.601797][ T28] audit: type=1326 audit(2000000055.652:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.0.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9b45bf79 code=0x7ffc0000 [ 160.656142][ T28] audit: type=1326 audit(2000000055.652:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.0.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7eff9b45bf79 code=0x7ffc0000 [ 160.692288][ T28] audit: type=1326 audit(2000000055.652:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.0.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9b45bf79 code=0x7ffc0000 [ 160.716874][ T28] audit: type=1326 audit(2000000055.652:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.0.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7eff9b45bf79 code=0x7ffc0000 [ 160.743851][ T28] audit: type=1326 audit(2000000055.652:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.0.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9b45bf79 code=0x7ffc0000 [ 160.768085][ T28] audit: type=1326 audit(2000000055.652:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.0.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7eff9b45bf79 code=0x7ffc0000 [ 160.799176][ T28] audit: type=1326 audit(2000000055.652:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8611 comm="syz.0.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9b45bf79 code=0x7ffc0000 [ 160.876435][ T8625] loop3: detected capacity change from 0 to 128 [ 160.886087][ T8626] FAULT_INJECTION: forcing a failure. [ 160.886087][ T8626] name failslab, interval 1, probability 0, space 0, times 0 [ 160.902507][ T8626] CPU: 1 UID: 0 PID: 8626 Comm: syz.5.1529 Tainted: G W syzkaller #0 PREEMPT(full) [ 160.902538][ T8626] Tainted: [W]=WARN [ 160.902546][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.902558][ T8626] Call Trace: [ 160.902567][ T8626] [ 160.902576][ T8626] __dump_stack+0x1d/0x30 [ 160.902641][ T8626] dump_stack_lvl+0x95/0xd0 [ 160.902661][ T8626] dump_stack+0x15/0x1b [ 160.902681][ T8626] should_fail_ex+0x263/0x280 [ 160.902702][ T8626] ? __hw_addr_add_ex+0x15b/0x3b0 [ 160.902724][ T8626] should_failslab+0x8c/0xb0 [ 160.902753][ T8626] __kmalloc_cache_noprof+0x5f/0x410 [ 160.902775][ T8626] __hw_addr_add_ex+0x15b/0x3b0 [ 160.902853][ T8626] ? __pfx_tun_setup+0x10/0x10 [ 160.902874][ T8626] dev_addr_init+0xb1/0x120 [ 160.902904][ T8626] alloc_netdev_mqs+0x1ca/0xa40 [ 160.902929][ T8626] tun_set_iff+0x42c/0x8a0 [ 160.903072][ T8626] __tun_chr_ioctl+0x65e/0x14d0 [ 160.903138][ T8626] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 160.903161][ T8626] tun_chr_ioctl+0x27/0x40 [ 160.903179][ T8626] __se_sys_ioctl+0xce/0x140 [ 160.903205][ T8626] __x64_sys_ioctl+0x43/0x50 [ 160.903301][ T8626] x64_sys_call+0x1563/0x3020 [ 160.903324][ T8626] do_syscall_64+0x12c/0x370 [ 160.903365][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.903384][ T8626] RIP: 0033:0x7f75a114bf79 [ 160.903400][ T8626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.903418][ T8626] RSP: 002b:00007f759fb9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.903438][ T8626] RAX: ffffffffffffffda RBX: 00007f75a13c5fa0 RCX: 00007f75a114bf79 [ 160.903458][ T8626] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000006 [ 160.903474][ T8626] RBP: 00007f759fb9f090 R08: 0000000000000000 R09: 0000000000000000 [ 160.903489][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.903502][ T8626] R13: 00007f75a13c6038 R14: 00007f75a13c5fa0 R15: 00007ffd8db978e8 [ 160.903521][ T8626] [ 161.335324][ T8643] __nla_validate_parse: 1 callbacks suppressed [ 161.335383][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1538'. [ 161.761308][ T8659] syzkaller1: entered promiscuous mode [ 161.761448][ T8659] syzkaller1: entered allmulticast mode [ 161.878543][ T8663] FAULT_INJECTION: forcing a failure. [ 161.878543][ T8663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.878619][ T8663] CPU: 0 UID: 0 PID: 8663 Comm: syz.3.1543 Tainted: G W syzkaller #0 PREEMPT(full) [ 161.878665][ T8663] Tainted: [W]=WARN [ 161.878671][ T8663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 161.878689][ T8663] Call Trace: [ 161.878696][ T8663] [ 161.878709][ T8663] __dump_stack+0x1d/0x30 [ 161.878806][ T8663] dump_stack_lvl+0x95/0xd0 [ 161.878827][ T8663] dump_stack+0x15/0x1b [ 161.878850][ T8663] should_fail_ex+0x263/0x280 [ 161.878885][ T8663] should_fail+0xb/0x20 [ 161.878906][ T8663] should_fail_usercopy+0x1a/0x20 [ 161.878934][ T8663] _copy_from_user+0x1c/0xb0 [ 161.879011][ T8663] __sys_bpf+0x183/0x7e0 [ 161.879050][ T8663] __x64_sys_bpf+0x41/0x50 [ 161.879118][ T8663] x64_sys_call+0x10cb/0x3020 [ 161.879147][ T8663] do_syscall_64+0x12c/0x370 [ 161.879180][ T8663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.879270][ T8663] RIP: 0033:0x7f3e7133bf79 [ 161.879289][ T8663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.879308][ T8663] RSP: 002b:00007f3e6fd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.879329][ T8663] RAX: ffffffffffffffda RBX: 00007f3e715b5fa0 RCX: 00007f3e7133bf79 [ 161.879342][ T8663] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 161.879359][ T8663] RBP: 00007f3e6fd97090 R08: 0000000000000000 R09: 0000000000000000 [ 161.879397][ T8663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.879440][ T8663] R13: 00007f3e715b6038 R14: 00007f3e715b5fa0 R15: 00007ffc349bab68 [ 161.879457][ T8663] [ 162.314437][ T8669] loop0: detected capacity change from 0 to 2048 [ 162.346659][ T8669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.407535][ T8675] FAULT_INJECTION: forcing a failure. [ 162.407535][ T8675] name failslab, interval 1, probability 0, space 0, times 0 [ 162.452809][ T8669] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1544: bg 0: block 234: padding at end of block bitmap is not set [ 162.499104][ T8675] CPU: 0 UID: 0 PID: 8675 Comm: syz.3.1547 Tainted: G W syzkaller #0 PREEMPT(full) [ 162.499136][ T8675] Tainted: [W]=WARN [ 162.499186][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 162.499197][ T8675] Call Trace: [ 162.499205][ T8675] [ 162.499214][ T8675] __dump_stack+0x1d/0x30 [ 162.499240][ T8675] dump_stack_lvl+0x95/0xd0 [ 162.499284][ T8675] dump_stack+0x15/0x1b [ 162.499302][ T8675] should_fail_ex+0x263/0x280 [ 162.499324][ T8675] should_failslab+0x8c/0xb0 [ 162.499351][ T8675] __kvmalloc_node_noprof+0x155/0x650 [ 162.499397][ T8675] ? io_alloc_cache_init+0x36/0xb0 [ 162.499427][ T8675] io_alloc_cache_init+0x36/0xb0 [ 162.499450][ T8675] io_ring_ctx_alloc+0x2e2/0x670 [ 162.499480][ T8675] io_uring_create+0x50/0x510 [ 162.499509][ T8675] ? memchr_inv+0x30/0x2f0 [ 162.499546][ T8675] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 162.499582][ T8675] __x64_sys_io_uring_setup+0x31/0x40 [ 162.499648][ T8675] x64_sys_call+0x2962/0x3020 [ 162.499670][ T8675] do_syscall_64+0x12c/0x370 [ 162.499724][ T8675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.499759][ T8675] RIP: 0033:0x7f3e7133bf79 [ 162.499774][ T8675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.499792][ T8675] RSP: 002b:00007f3e6fd96fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 162.499817][ T8675] RAX: ffffffffffffffda RBX: 00007f3e715b5fa0 RCX: 00007f3e7133bf79 [ 162.499833][ T8675] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000022f [ 162.499848][ T8675] RBP: 0000200000000080 R08: 0000000000000000 R09: 0000000000000000 [ 162.499994][ T8675] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 162.500008][ T8675] R13: 0000000000000000 R14: 000000000000022f R15: 0000000000000000 [ 162.500026][ T8675] [ 162.971031][ T8694] FAULT_INJECTION: forcing a failure. [ 162.971031][ T8694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.033041][ T8694] CPU: 0 UID: 0 PID: 8694 Comm: syz.1.1552 Tainted: G W syzkaller #0 PREEMPT(full) [ 163.033095][ T8694] Tainted: [W]=WARN [ 163.033102][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.033114][ T8694] Call Trace: [ 163.033122][ T8694] [ 163.033131][ T8694] __dump_stack+0x1d/0x30 [ 163.033160][ T8694] dump_stack_lvl+0x95/0xd0 [ 163.033212][ T8694] dump_stack+0x15/0x1b [ 163.033230][ T8694] should_fail_ex+0x263/0x280 [ 163.033274][ T8694] should_fail+0xb/0x20 [ 163.033294][ T8694] should_fail_usercopy+0x1a/0x20 [ 163.033316][ T8694] _copy_to_user+0x20/0xa0 [ 163.033348][ T8694] rfkill_fop_read+0x1bb/0x2c0 [ 163.033369][ T8694] ? __pfx_rfkill_fop_read+0x10/0x10 [ 163.033495][ T8694] vfs_read+0x1ab/0x7f0 [ 163.033542][ T8694] ? __rcu_read_unlock+0x4e/0x70 [ 163.033560][ T8694] ? __fget_files+0x184/0x1c0 [ 163.033580][ T8694] ksys_read+0xdc/0x1a0 [ 163.033605][ T8694] __x64_sys_read+0x40/0x50 [ 163.033678][ T8694] x64_sys_call+0x2886/0x3020 [ 163.033705][ T8694] do_syscall_64+0x12c/0x370 [ 163.033807][ T8694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.033831][ T8694] RIP: 0033:0x7fee7b3ebf79 [ 163.033849][ T8694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.033970][ T8694] RSP: 002b:00007fee79e3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.033994][ T8694] RAX: ffffffffffffffda RBX: 00007fee7b665fa0 RCX: 00007fee7b3ebf79 [ 163.034011][ T8694] RDX: 0000000000000008 RSI: 0000200000000200 RDI: 0000000000000004 [ 163.034025][ T8694] RBP: 00007fee79e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 163.034039][ T8694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.034119][ T8694] R13: 00007fee7b666038 R14: 00007fee7b665fa0 R15: 00007ffc770484a8 [ 163.034149][ T8694] [ 163.261395][ T8669] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 101 with error 28 [ 163.275236][ T5577] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 572 with error 28 [ 163.279546][ T8669] EXT4-fs (loop0): This should not happen!! Data will be lost [ 163.279546][ T8669] [ 163.287818][ T5577] EXT4-fs (loop0): This should not happen!! Data will be lost [ 163.287818][ T5577] [ 163.316992][ T5577] EXT4-fs (loop0): Total free blocks count 0 [ 163.375991][ T8669] EXT4-fs (loop0): Total free blocks count 0 [ 163.389083][ T8669] EXT4-fs (loop0): Free/Dirty block details [ 163.436984][ T5577] EXT4-fs (loop0): Free/Dirty block details [ 163.443415][ T5577] EXT4-fs (loop0): free_blocks=0 [ 164.009584][ T8717] loop0: detected capacity change from 0 to 128 [ 164.064211][ T8725] loop3: detected capacity change from 0 to 128 [ 164.227093][ T8741] loop3: detected capacity change from 0 to 164 [ 164.298641][ T8743] loop6: detected capacity change from 0 to 512 [ 164.343245][ T8743] EXT4-fs (loop6): first meta block group too large: 2 (group descriptor block count 1) [ 164.355609][ T8747] loop5: detected capacity change from 0 to 512 [ 164.372095][ T8747] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1570: corrupted in-inode xattr: bad e_name length [ 164.388808][ T8747] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.389042][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 164.404673][ C1] EXT4-fs (loop5): initial error at time 2000000059: ext4_iget_extra_inode:5025: inode 15 [ 164.407463][ T8747] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1570: couldn't read orphan inode 15 (err -117) [ 164.414718][ C1] EXT4-fs (loop5): last error at time 2000000059: ext4_iget_extra_inode:5025: inode 15 [ 164.437729][ T8747] loop5: lost filesystem error report for type 5 error -117 [ 164.438343][ T8747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.463862][ T8747] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1570: dx entry: limit 0 != root limit 125 [ 164.475913][ T8747] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1570: Corrupt directory, running e2fsck is recommended [ 164.505059][ T8747] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1570: dx entry: limit 0 != root limit 125 [ 164.517001][ T8747] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1570: Corrupt directory, running e2fsck is recommended [ 164.532020][ T8747] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 3: comm syz.5.1570: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 164.554304][ T8753] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 3: comm syz.5.1570: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 164.589908][ T8747] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 3: comm syz.5.1570: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 164.645576][ T8747] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 3: comm syz.5.1570: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 164.659508][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'. [ 164.693406][ T7642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.921182][ T8776] netlink: 'syz.5.1579': attribute type 39 has an invalid length. [ 164.932033][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 164.951380][ T8783] bond4: option mode: invalid value (255) [ 164.958629][ T8783] bond4 (unregistering): Released all slaves [ 165.077623][ T8790] 9p: Bad value for 'rfdno' [ 165.200467][ T8794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=8794 comm=syz.0.1586 [ 165.222986][ T8794] netlink: 'syz.0.1586': attribute type 13 has an invalid length. [ 165.513351][ T8797] loop5: detected capacity change from 0 to 8192 [ 166.153084][ T8795] FAULT_INJECTION: forcing a failure. [ 166.153084][ T8795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.166499][ T8795] CPU: 0 UID: 0 PID: 8795 Comm: syz.5.1583 Tainted: G W syzkaller #0 PREEMPT(full) [ 166.166535][ T8795] Tainted: [W]=WARN [ 166.166543][ T8795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.166631][ T8795] Call Trace: [ 166.166637][ T8795] [ 166.166655][ T8795] __dump_stack+0x1d/0x30 [ 166.166754][ T8795] dump_stack_lvl+0x95/0xd0 [ 166.166776][ T8795] dump_stack+0x15/0x1b [ 166.166797][ T8795] should_fail_ex+0x263/0x280 [ 166.166818][ T8795] ? __pfx_fat_dir_ioctl+0x10/0x10 [ 166.166852][ T8795] should_fail+0xb/0x20 [ 166.166874][ T8795] should_fail_usercopy+0x1a/0x20 [ 166.166900][ T8795] _copy_from_user+0x1c/0xb0 [ 166.166947][ T8795] fat_generic_ioctl+0x299/0x800 [ 166.166966][ T8795] ? do_vfs_ioctl+0x84f/0xe70 [ 166.166991][ T8795] ? __pfx_fat_dir_ioctl+0x10/0x10 [ 166.167019][ T8795] fat_dir_ioctl+0xc4/0x1f0 [ 166.167133][ T8795] ? __fget_files+0x184/0x1c0 [ 166.167152][ T8795] ? mutex_lock+0x57/0x90 [ 166.167175][ T8795] ? __pfx_fat_dir_ioctl+0x10/0x10 [ 166.167215][ T8795] __se_sys_ioctl+0xce/0x140 [ 166.167246][ T8795] __x64_sys_ioctl+0x43/0x50 [ 166.167277][ T8795] x64_sys_call+0x1563/0x3020 [ 166.167384][ T8795] do_syscall_64+0x12c/0x370 [ 166.167443][ T8795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.167523][ T8795] RIP: 0033:0x7f75a114bf79 [ 166.167542][ T8795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.167563][ T8795] RSP: 002b:00007f759fb7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.167582][ T8795] RAX: ffffffffffffffda RBX: 00007f75a13c6090 RCX: 00007f75a114bf79 [ 166.167598][ T8795] RDX: 0000200000000040 RSI: 00000000c0185879 RDI: 0000000000000006 [ 166.167613][ T8795] RBP: 00007f759fb7e090 R08: 0000000000000000 R09: 0000000000000000 [ 166.167669][ T8795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.167683][ T8795] R13: 00007f75a13c6128 R14: 00007f75a13c6090 R15: 00007ffd8db978e8 [ 166.167703][ T8795] [ 166.487312][ T8802] loop6: detected capacity change from 0 to 4096 [ 166.532510][ T8802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.565966][ T7972] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.640269][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 166.640289][ T28] audit: type=1400 audit(2000000061.732:1284): avc: denied { associate } for pid=8819 comm="syz.6.1591" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 166.649423][ T8820] loop3: detected capacity change from 0 to 256 [ 166.691857][ T8794] vlan1: left allmulticast mode [ 166.693268][ T8820] FAT-fs (loop3): codepage cp932 not found [ 166.696921][ T8794] veth0_vlan: left allmulticast mode [ 166.739262][ T28] audit: type=1400 audit(2000000061.832:1285): avc: denied { ioctl } for pid=8816 comm="syz.6.1591" path="socket:[23308]" dev="sockfs" ino=23308 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.785665][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.797825][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.807147][ T8820] xt_bpf: check failed: parse error [ 166.813083][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.822328][ T8831] loop6: detected capacity change from 0 to 512 [ 166.830383][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.834188][ T8820] loop3: detected capacity change from 0 to 1024 [ 166.855233][ T8831] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.912735][ T8840] FAULT_INJECTION: forcing a failure. [ 166.912735][ T8840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.926396][ T8831] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.942462][ T8840] CPU: 1 UID: 0 PID: 8840 Comm: syz.5.1597 Tainted: G W syzkaller #0 PREEMPT(full) [ 166.942499][ T8840] Tainted: [W]=WARN [ 166.942507][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.942519][ T8840] Call Trace: [ 166.942525][ T8840] [ 166.942532][ T8840] __dump_stack+0x1d/0x30 [ 166.942619][ T8840] dump_stack_lvl+0x95/0xd0 [ 166.942691][ T8840] dump_stack+0x15/0x1b [ 166.942782][ T8840] should_fail_ex+0x263/0x280 [ 166.942806][ T8840] should_fail+0xb/0x20 [ 166.942902][ T8840] should_fail_usercopy+0x1a/0x20 [ 166.942927][ T8840] _copy_from_user+0x1c/0xb0 [ 166.942957][ T8840] ___sys_sendmsg+0xc1/0x1e0 [ 166.942995][ T8840] __x64_sys_sendmsg+0xd4/0x160 [ 166.943062][ T8840] x64_sys_call+0x194c/0x3020 [ 166.943165][ T8840] do_syscall_64+0x12c/0x370 [ 166.943219][ T8840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.943300][ T8840] RIP: 0033:0x7f75a114bf79 [ 166.943317][ T8840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.943333][ T8840] RSP: 002b:00007f759fb9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.943356][ T8840] RAX: ffffffffffffffda RBX: 00007f75a13c5fa0 RCX: 00007f75a114bf79 [ 166.943371][ T8840] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 166.943448][ T8840] RBP: 00007f759fb9f090 R08: 0000000000000000 R09: 0000000000000000 [ 166.943462][ T8840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.943475][ T8840] R13: 00007f75a13c6038 R14: 00007f75a13c5fa0 R15: 00007ffd8db978e8 [ 166.943495][ T8840] [ 166.952289][ T8820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.276247][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.322851][ T8855] netlink: 'syz.0.1601': attribute type 39 has an invalid length. [ 167.995188][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1607'. [ 168.127487][ T8878] ================================================================== [ 168.135713][ T8878] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 168.143384][ T8878] [ 168.145804][ T8878] write to 0xffff888104ffb200 of 8 bytes by task 8876 on cpu 0: [ 168.153539][ T8878] mas_wmb_replace+0x13ce/0x1610 [ 168.158705][ T8878] mas_wr_store_entry+0x16b6/0x2ed0 [ 168.163938][ T8878] mas_store_prealloc+0x72e/0xa70 [ 168.169082][ T8878] vma_complete+0x3c7/0x850 [ 168.173710][ T8878] __split_vma+0x5db/0x640 [ 168.178148][ T8878] vma_modify+0xbc9/0xd00 [ 168.182484][ T8878] vma_modify_flags+0x182/0x210 [ 168.187358][ T8878] mprotect_fixup+0x312/0x5d0 [ 168.192130][ T8878] do_mprotect_pkey+0x67b/0x920 [ 168.197085][ T8878] __x64_sys_mprotect+0x48/0x60 [ 168.202032][ T8878] x64_sys_call+0x2768/0x3020 [ 168.206718][ T8878] do_syscall_64+0x12c/0x370 [ 168.211317][ T8878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.217487][ T8878] [ 168.219831][ T8878] read to 0xffff888104ffb200 of 8 bytes by task 8878 on cpu 1: [ 168.227550][ T8878] mas_state_walk+0x485/0x650 [ 168.232322][ T8878] mas_walk+0x60/0x150 [ 168.236400][ T8878] lock_vma_under_rcu+0xc9/0x210 [ 168.241336][ T8878] do_user_addr_fault+0x232/0x1050 [ 168.246461][ T8878] exc_page_fault+0x62/0xa0 [ 168.250970][ T8878] asm_exc_page_fault+0x26/0x30 [ 168.255824][ T8878] [ 168.258143][ T8878] value changed: 0xffff8881023afa0e -> 0xffff888104ffb200 [ 168.265257][ T8878] [ 168.267581][ T8878] Reported by Kernel Concurrency Sanitizer on: [ 168.273732][ T8878] CPU: 1 UID: 0 PID: 8878 Comm: syz.0.1610 Tainted: G W syzkaller #0 PREEMPT(full) [ 168.284733][ T8878] Tainted: [W]=WARN [ 168.288708][ T8878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.298851][ T8878] ================================================================== [ 168.665655][ T7972] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.