last executing test programs: 7m51.766536423s ago: executing program 0 (id=282): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$rtc(0xffffff9c, 0x0, 0xa200, 0x0) syz_clone3(&(0x7f0000000900)={0x203801200, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x800, &(0x7f0000000380)=0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) 7m50.73739675s ago: executing program 0 (id=289): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x800, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x1000, 0x809, 0x34e}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7m49.858227281s ago: executing program 0 (id=293): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59cf27bd704b082a5800080000001400018008000900520000000800050002000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000010000000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000074109dff3483a9713af42694099b40e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bff", 0xd8}], 0x1}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 7m49.698633706s ago: executing program 0 (id=295): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)="37f9dc253c51ff83c208f061fb9de9621a1bd7e7ceb44f368e6ad0677460bcf08dac0aa19503a0e08680883a8c460413cf2fcdffab7c147e307dbce81400bf747cdf1c567d6a2d6b4cb91d938f9281495a0a8c1215e9d57eb568ab8bb3c001a7fbff25470dd290c8cce278ace8c849d7c3e9287ef7d6c032d1afee26279f28e8a4", 0x81, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x8800, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000580)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x209, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c5442, 0xb2) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xfffffffffdffffff}) syz_clone(0x43b00000, 0x0, 0x5b, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x58) 7m49.453751795s ago: executing program 0 (id=296): io_setup(0x2278, &(0x7f0000000180)=0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) write$UHID_CREATE2(r5, &(0x7f00000002c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0xbf, 0x1, 0x0, 0x2, 0x5, 0x1, "6a83e4c0a399a72a3506fb49742b63e5067e316593d4a2e9e2c1ca7e344fd4898d9c242a71fa4185e1f091059a9893403880cbbd68e8bb835525212df1225ff81bd90c1937c1096503d96eff69f86f486e90d48ba776b453795a45fe989addeceb92ec9df9e64fd064448e8daf9e4adc2f438e477eb09353b5c33e0b10b12e8319804171bba86ed4c92900b159d5c31f7e3d43fd8d4dda06613a0389073ddae0e919e9dee0602b52bffd6268df0b4149ca26b45f9096e229f89ad3f7896bf2"}}, 0x1d7) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x8, 0x43, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, 0x8, 0x8, 0x5, 0x6}}) io_submit(r0, 0x2, &(0x7f0000000100)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r4, &(0x7f00000000c0)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = semget(0x3, 0x7, 0x204) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xfffe, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r8 = socket(0x2, 0x3, 0xff) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r8, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/23, 0x5dc}], 0x84, 0x0, 0x0, 0x4c880}, 0x8000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) semtimedop(r7, &(0x7f0000000100)=[{0x0, 0x3, 0x1000}, {0x0, 0x623}, {0x4, 0x5080, 0x1000}], 0x3, &(0x7f0000000080)={r9, r10+60000000}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000001000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a3200000000140004800800024000000000080001400000e5ff0900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7m48.300633386s ago: executing program 0 (id=304): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x800, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x1000, 0x809, 0x34e}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7m48.264545477s ago: executing program 32 (id=304): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x800, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x1000, 0x809, 0x34e}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m48.440466415s ago: executing program 2 (id=2537): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2208880, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x41, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x142) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x1c1202, 0x147) write(r3, &(0x7f00000001c0)="6b6b8e9fbceab4880a7bad620277319e475d5aeee489eef3046ddc54820e109a7712a2c8b65b7f568ae1a9", 0x2b) sendfile(r3, r1, 0x0, 0x3ffff) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbfbbbbbbbb8a0a63cdec5908060001080006040001aaaa"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m46.892505809s ago: executing program 2 (id=2551): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) eventfd2(0x0, 0x0) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x804000, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) fchdir(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(r4, &(0x7f00000000c0)="d04a", 0x2, 0x4fecf) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000380)=0x1000000, 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abdb7f458fc00000000", @ANYRES32, @ANYBLOB="0100000000c000001c00128009000100626f6e64000000000c0002800500010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) 1m45.838690907s ago: executing program 2 (id=2556): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d69") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1m45.802026068s ago: executing program 2 (id=2557): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fsetxattr$security_capability(r6, &(0x7f0000000e00), 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x120488f, &(0x7f0000001f80)=ANY=[], 0x81, 0x65b, &(0x7f00000007c0)="$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") r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$packet_int(r7, 0x107, 0x11, &(0x7f0000000200)=0x7, 0x4) write$cgroup_int(r7, &(0x7f0000000040)=0xfe8e, 0x12) 1m43.19472335s ago: executing program 2 (id=2569): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@getqdisc={0x30, 0x26, 0x2, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffe0, 0xffff}, {0x8, 0xfff2}, {0xf, 0xfff2}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x40004) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000180), 0x4) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c00000002060500000000000000000007000005050004000300000009707f351f797a32000000000c00078005001500000000000500050002000000050001000600000015000300686173683a69702c706f72742c6e6574000000004c50c9dd386479a922d750e23fc0931d0beea76b6078b25a73c58a36e7614ca83513cb8ded4e03b4346605a58349df98"], 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8937, &(0x7f0000000000)={'hsr0\x00', @random="010000201000"}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) 1m42.596475691s ago: executing program 2 (id=2577): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001500192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1m26.717408243s ago: executing program 33 (id=2577): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001500192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 14.161139879s ago: executing program 4 (id=2959): socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x500) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0131010000000000400012800e00010069703665727370616e0000002c000280140005f6ff000000000000000000ffff7f00000108001500b9c20a00040012000500160001"], 0x60}}, 0x0) 12.384373592s ago: executing program 6 (id=2966): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fsetxattr$security_capability(r6, &(0x7f0000000e00), 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x120488f, &(0x7f0000001f80)=ANY=[], 0x81, 0x65b, &(0x7f00000007c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000200)=0x7, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xfe8e, 0x12) 10.256739618s ago: executing program 4 (id=2971): socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x500) 6.638347255s ago: executing program 4 (id=2976): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd704004350000020001002000000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000300000000000000000001fc010000000000014e2307144e2300054c697ee43876a41152ebffba35b1c9a14fcf51b4e2d7a22734de70cbc92d2ed5d526cbaf4dd73ffae28900b3e23562922bb6e8000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d46c000000ac1414bb0000000000000000000000000000000000000000224b0000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = creat(&(0x7f0000000040)='./bus\x00', 0xa8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000010, 0x11, r5, 0x10000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f000035b000/0x400000)=nil, 0x400000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) r7 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x8000, 0x0) read$char_usb(r10, &(0x7f00000002c0)=""/66, 0x42) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r7}) 6.310455437s ago: executing program 5 (id=2980): socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x500) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0131010000000000400012800e00010069703665727370616e0000002c000280140005f6ff000000000000000000ffff7f00000108001500b9c20a00040012000500160001"], 0x60}}, 0x0) 5.920585371s ago: executing program 6 (id=2982): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x3, [{0xf, 0x5}, {0x8, 0x3}, {0x3, 0x3}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0xf, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x30, 0x0, 0x0, 0x61]}}, 0x0, 0x6a}, 0x28) 5.836887504s ago: executing program 6 (id=2984): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x50) r2 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x1000, 0x809, 0x34e}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x15, 0x0, @fd_index=0x2, 0x7ba3, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x40000000, 0x0, 0x0) 5.835914334s ago: executing program 6 (id=2986): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x50002, 0xf) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) io_uring_setup(0x1a8, &(0x7f00000000c0)={0x0, 0x20fca0, 0x0, 0x2000003, 0x122f}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_io_uring_setup(0x132a, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@lazytime}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="680000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000080000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c000800080008000000fff00c0015"], 0x68}}, 0x4004040) fallocate(r1, 0x0, 0x0, 0x8fffb) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x40, 0x701, 0x2, 0x10001, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x67, 0x0, 0x3, 0x29, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x7, 0x4a, [@multicast2]}]}}}}}) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff003c3a00fc020000000000000000000000000000ff0200000000000000000000000000010200908b780000000060000000000011000000000000000000000000000000000000000000000000000000ffffe000000117c17f0791710007008800"], 0x0) socket$netlink(0x10, 0x3, 0x0) 5.821770764s ago: executing program 4 (id=2988): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x3, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) r1 = socket$kcm(0x11, 0xa, 0x300) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) iopl(0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000001b80), 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001d80)=0xffffffffffffffff, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x100) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000001f80), 0x2) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x51, 0x1, 0x4, {0x0, 0x1}, {0x69, 0x2}, @cond=[{0x5, 0x3, 0x63d, 0x8003, 0x3ecb, 0x9}, {0x0, 0xd83c, 0x4, 0x4, 0x1ab1, 0xe04}]}) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r8, 0x11b, 0x1, &(0x7f0000000140), &(0x7f00000001c0)=0x80) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 5.439611938s ago: executing program 1 (id=2992): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x50002, 0xf) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) io_uring_setup(0x1a8, &(0x7f00000000c0)={0x0, 0x20fca0, 0x0, 0x2000003, 0x122f}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_io_uring_setup(0x132a, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@lazytime}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x68}}, 0x4004040) fallocate(r1, 0x0, 0x0, 0x8fffb) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x40, 0x701, 0x2, 0x10001, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x67, 0x0, 0x3, 0x29, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x7, 0x4a, [@multicast2]}]}}}}}) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff003c3a00fc020000000000000000000000000000ff0200000000000000000000000000010200908b780000000060000000000011000000000000000000000000000000000000000000000000000000ffffe000000117c17f0791710007008800"], 0x0) socket$netlink(0x10, 0x3, 0x0) 4.228730491s ago: executing program 5 (id=2993): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b04000000000034f27c76000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000a000100aa"], 0x48}}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008090000ac1414aa08000600010000"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$can_j1939(0x1d, 0x2, 0x7) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000100)={0x100024, 0x2000f8, 0x80000}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r6, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}], 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@ipv6header={{0x28}, {0x5a, 0x2, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r8 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x88, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net\x00') getdents64(r9, 0x0, 0x0) ioctl$TCSETA(r9, 0x5406, &(0x7f00000001c0)={0x1ff5, 0x1f, 0x3, 0x4, 0x5, "a8bd18acc768bbb9"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2.635830237s ago: executing program 3 (id=2994): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b04000000000034f27c76000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000a000100aa"], 0x48}}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008090000ac1414aa08000600010000"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$can_j1939(0x1d, 0x2, 0x7) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000100)={0x100024, 0x2000f8, 0x80000}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}], 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@ipv6header={{0x28}, {0x5a, 0x2, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r8 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x88, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net\x00') getdents64(r9, 0x0, 0x0) ioctl$TCSETA(r9, 0x5406, &(0x7f00000001c0)={0x1ff5, 0x1f, 0x3, 0x4, 0x5, "a8bd18acc768bbb9"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2.626714827s ago: executing program 6 (id=2995): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2208880, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x41, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x142) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x1c1202, 0x147) write(r5, &(0x7f00000001c0)="6b6b8e9fbceab4880a7bad620277319e475d5aeee489eef3046ddc54820e109a7712a2c8b65b7f568ae1a9", 0x2b) sendfile(r5, r1, 0x0, 0x3ffff) socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbfbbbbbbbb8a0a63cdec5908060001080006040001aaaa"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.593026699s ago: executing program 5 (id=2996): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x21, 0x2, 0xa) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac030000000000008500000033000000"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[], 0x0) 2.54354556s ago: executing program 4 (id=2997): socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x500) 2.528212741s ago: executing program 5 (id=2998): openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0x10efe}, 0x14) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xcc1, 0xc) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e20, 0xd, @mcast1, 0x401}}}, 0x90) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb4") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000100)=""/120, 0x78}) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) 2.394641995s ago: executing program 1 (id=2999): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x21, 0x2, 0xa) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x76) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, 0x0, &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[], 0x0) 2.325568348s ago: executing program 5 (id=3000): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd704004350000020001002000000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000300000000000000000001fc010000000000014e2307144e2300054c697ee43876a41152ebffba35b1c9a14fcf51b4e2d7a22734de70cbc92d2ed5d526cbaf4dd73ffae28900b3e23562922bb6e8000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d46c000000ac1414bb0000000000000000000000000000000000000000224b0000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = creat(&(0x7f0000000040)='./bus\x00', 0xa8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000010, 0x11, r5, 0x10000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f000035b000/0x400000)=nil, 0x400000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x10044009) syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.25429364s ago: executing program 3 (id=3001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 2.232905642s ago: executing program 1 (id=3002): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x21, 0x2, 0xa) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x76) socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[], 0x0) 2.185424593s ago: executing program 3 (id=3003): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd704004350000020001002000000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000300000000000000000001fc010000000000014e2307144e2300054c697ee43876a41152ebffba35b1c9a14fcf51b4e2d7a22734de70cbc92d2ed5d526cbaf4dd73ffae28900b3e23562922bb6e8000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d46c000000ac1414bb0000000000000000000000000000000000000000224b0000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = creat(&(0x7f0000000040)='./bus\x00', 0xa8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000010, 0x11, r5, 0x10000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f000035b000/0x400000)=nil, 0x400000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x10044009) syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x8000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.166656074s ago: executing program 1 (id=3004): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpgrp(0x0) ioprio_get$pid(0x2, r0) syz_open_procfs(r0, &(0x7f0000000140)='net/protocols\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x441, 0x11001}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x3c}}, 0x0) 2.087184037s ago: executing program 1 (id=3005): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x50002, 0xf) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) io_uring_setup(0x1a8, &(0x7f00000000c0)={0x0, 0x20fca0, 0x0, 0x2000003, 0x122f}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_io_uring_setup(0x132a, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@lazytime}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="680000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000080000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c000800080008000000fff00c0015"], 0x68}}, 0x4004040) fallocate(r1, 0x0, 0x0, 0x8fffb) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x40, 0x701, 0x2, 0x10001, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x67, 0x0, 0x3, 0x29, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x7, 0x4a, [@multicast2]}]}}}}}) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff003c3a00fc020000000000000000000000000000ff0200000000000000000000000000010200908b780000000060000000000011000000000000000000000000000000000000000000000000000000ffffe000000117c17f0791710007008800"], 0x0) socket$netlink(0x10, 0x3, 0x0) 1.855197835s ago: executing program 5 (id=3006): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x10a0, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='.\x00') mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20021}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x54}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x10a0, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) waitid(0x2, 0x0, 0x0, 0x4, 0x0) (async) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='.\x00') (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20021}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x54}}, 0x0) (async) 1.12441374s ago: executing program 3 (id=3007): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b04000000000034f27c76000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000a000100aa"], 0x48}}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008090000ac1414aa08000600010000"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$can_j1939(0x1d, 0x2, 0x7) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000100)={0x100024, 0x2000f8, 0x80000}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r6, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}], 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@ipv6header={{0x28}, {0x5a, 0x2, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r8 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x88, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net\x00') getdents64(r9, 0x0, 0x0) ioctl$TCSETA(r9, 0x5406, &(0x7f00000001c0)={0x1ff5, 0x1f, 0x3, 0x4, 0x5, "a8bd18acc768bbb9"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 876.49472ms ago: executing program 3 (id=3008): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x21, 0x2, 0xa) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac030000000000008500000033000000"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[], 0x0) 821.663202ms ago: executing program 3 (id=3009): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x50002, 0xf) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) io_uring_setup(0x1a8, &(0x7f00000000c0)={0x0, 0x20fca0, 0x0, 0x2000003, 0x122f}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_io_uring_setup(0x132a, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@lazytime}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x68}}, 0x4004040) fallocate(r1, 0x0, 0x0, 0x8fffb) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x40, 0x701, 0x2, 0x10001, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x67, 0x0, 0x3, 0x29, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x7, 0x4a, [@multicast2]}]}}}}}) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff003c3a00fc020000000000000000000000000000ff0200000000000000000000000000010200908b780000000060000000000011000000000000000000000000000000000000000000000000000000ffffe000000117c17f0791710007008800"], 0x0) socket$netlink(0x10, 0x3, 0x0) 616.767359ms ago: executing program 4 (id=3010): symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x8a, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x8, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000000)) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x4001, &(0x7f00000005c0), 0x1, 0x50a, &(0x7f0000000600)="$eJzs3U1vG08ZAPBnnbf+25SmUF4vRHAoCOo4jkhbBKI9QxFvV1Si1nGiOHEUO6JJLu0HQEICJC5AEeJevgCq4IbEnV7aExJCqjiABDejXW/SkNhNSpOslP39pIlnPKlnNtWTmR1PPAGU1nREPI6I8Yj4TkRcyZ9P8hR3+in9vp25Z0tpSqLX++4/kqy+OfdsKfb9m9Sl9MtoxK2I+MNIEl9/crjdztb2ykKr1djIyzPd1fWZztb2jeXVhWaj2Vibm5+v3azXa/O1E7vWV7/62zc//+27P/rlpZt/ir/+vJXEnZjM6/Zfx0mZjun8ZzK21070fzTx/ZNurCAj+fVc2/dcMlpgh3gnlYj4cER8Jov/KzES/vMA4Lzr9XrR631tfxkAOOfS+//JSCrVfC1gMiqVarW/hnctLlZa7U73C4vtzbWHka1hTcVYZXG51ajla4VTMZak5dks/6ZcP1Cei4irEfHTiQ+ycvVBu/Ww0JkPAJTXpQPj/78m+uM/AHDOXSi6AwDAmTP+A0D5GP8BoHyM/wBQPsZ/ACgf4z8AlI/xHwBK5Vv37qWpt5N//vVau7m8srR+u16rrm4+qD5ob6xXm+12M/vEntWjX6/Vbq/P1mPz0Uy30enOdLa276+2N9e697PP9b7fGDuDawIA3u7qp5+/SCLi8Zc/yFLkZ4FEdmoFcJ5Viu4AUJiRojsAFMZpX1Be7vGB5Ij6oVuEfnzyfQHOxvVPWv+HsrL+D+Vl/R/Ky/o/lFevlzjzHwBKpuj5BwBw9rzHD9j/B+UzmaWkUs33Ak1GpVKtRlyOiKkYSxaXW41aRHwoIv4yMTaRlmeL7jQA8F46W9srC61WY0NGRkZmL1P0bybgtL0J+qJ7AgAAAAAAAAAAAAAAAAAAAAAAAAAAAOdPc+7Z0m4qui/A2Xh9t3+4Xxr3O3nq14zGaPZ4ITsj9OI/k7zcl0TEyAm0Px0RX3z99Ctpivz30Am8LHAMj59ExCcGjf9JdjbgVH7y58H4T2P/8gm0P32gLP7h7Bw//iv/E/+VrK7/mM4Frv2f7Yt/AAA4O9n8/wdT04Pm/6Pv+dofOcb3mP8DAADA6Xt+NyLuDHr/r5Lfmw9+//9CtkPo/bn/h+Ls7v/bObT/r7K3/29kyP6/jx6zjT8/ffH7YXX79/+lKW1/dy8gcLpeP4n41Oig+E/24j8ZEv8fO2YbP3n5238PqxP/UJzeryOux+D435XmZrqr6zOdre0by6sLzUazsTY3P1+7Wa/X5mszi8utRv51YBt//N2N/wxrX/xDcdLx/+KQ+D9q/v/xY7Zx+9arXwyr2x//61d/9tXD8V/5+3jyvexPjcbzZx4tdLsbsxHjyTcOP19/l6uHctmNkd0YSuP/c58dfP/f39O/O/8/vP9/On9Mg/BtYVdtLv1wWN3R8Q+cljT+Hx4x/g+7///SMdtovOz9Zlid+T8AAAAAAAAAAAAAAAAAAAAAAAAAAADnUWdre2Wh1WpsnGKm6GsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKL8NwAA//+71f46") syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086a1606410a600180400000000000000000000db000000000000ff02000000000000000000000000000116410000000000000708000000010002000000a1f65e5bff971a4cf52d9ec4a500000000009f960132d3de9e938161c552774d19c4913dd71050b1503c9250f4a95bcfb736000611fbe862d2814fc2ae26117eac6085f91187a7be50f39853ae51c6b4ec95efa7dc923ba6a1fb974815e9e93ac4a8d0d047b812c3556491ace5536af4280f68c6558a7dccc1436cf28d34ff18c222f773"], 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x200, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a2f00000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = syz_io_uring_setup(0x3d, &(0x7f0000000580)={0x0, 0xaa9d, 0x2, 0x1, 0xba}, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, 0x0, 0x1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r6, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 487.594253ms ago: executing program 6 (id=3011): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4800000010004b04000000000034f27c76000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008000800810000000a000100aa"], 0x48}}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008090000ac1414aa08000600010000"], 0x38}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$can_j1939(0x1d, 0x2, 0x7) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000100)={0x100024, 0x2000f8, 0x80000}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}], 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@ipv6header={{0x28}, {0x5a, 0x2, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r8 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x88, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net\x00') getdents64(r9, 0x0, 0x0) ioctl$TCSETA(r9, 0x5406, &(0x7f00000001c0)={0x1ff5, 0x1f, 0x3, 0x4, 0x5, "a8bd18acc768bbb9"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 0s ago: executing program 1 (id=3012): r0 = socket$kcm(0xa, 0x922000000003, 0x11) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x4000043}, 0x4005) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x10000, 0x2, 0x1ff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r7, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002dbd7040fcdbdf251b00000008009a0002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r6, @ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x20008015) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8000001}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x10001) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "addf7ccffd914d4f51b57b3f80ff847f", '\x00', "0100d2b730030004"}, 0x28) kernel console output (not intermixed with test programs): 9353][T12208] siw: device registration error -23 [ 423.403094][T12208] smc: net device gretap0 erased user defined pnetid SYZ0 [ 423.605052][T12221] loop2: detected capacity change from 0 to 512 [ 423.652237][T12221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.704294][T12221] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.744368][T12232] netlink: 'syz.1.2402': attribute type 8 has an invalid length. [ 423.777532][ T28] audit: type=1400 audit(1774676183.288:1059): avc: denied { create } for pid=12220 comm="syz.2.2399" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 423.901503][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.030402][ T28] audit: type=1400 audit(1774676183.288:1060): avc: denied { rmdir } for pid=12220 comm="syz.2.2399" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 424.168536][T12243] loop1: detected capacity change from 0 to 2048 [ 424.232651][T12243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.261874][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.287915][T12245] loop3: detected capacity change from 0 to 128 [ 425.024093][ T28] audit: type=1400 audit(1774676183.698:1061): avc: denied { create } for pid=12240 comm="syz.2.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 425.044068][ T28] audit: type=1326 audit(1774676183.848:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12242 comm="syz.1.2406" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda8438c799 code=0x0 [ 426.013732][T12259] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 426.272798][T12263] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2408'. [ 427.389665][T12273] loop4: detected capacity change from 0 to 512 [ 427.531814][T12273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.559694][T12273] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.572145][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2413'. [ 427.601193][T12270] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2411: corrupted xattr block 33: invalid checksum [ 427.646264][T12270] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 427.689015][T12270] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2411: corrupted xattr block 33: invalid checksum [ 427.730688][T12270] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 427.770564][T12270] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2411: corrupted xattr block 33: invalid checksum [ 427.784335][ T28] audit: type=1400 audit(1774676187.278:1063): avc: denied { write } for pid=12267 comm="syz.4.2411" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 427.828846][T12270] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 427.849160][ T28] audit: type=1400 audit(1774676187.358:1064): avc: denied { open } for pid=12267 comm="syz.4.2411" path="/508/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 427.873780][T12270] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2411: corrupted xattr block 33: invalid checksum [ 427.903295][T12270] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2411: corrupted xattr block 33: invalid checksum [ 427.930439][T12270] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 427.968765][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.040000][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.183070][T12291] vxcan2: entered allmulticast mode [ 428.191368][T12289] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2421'. [ 428.232145][T12301] loop4: detected capacity change from 0 to 512 [ 428.251853][T12301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 428.286104][ T28] audit: type=1400 audit(1774676187.798:1065): avc: denied { execmod } for pid=12288 comm="syz.3.2421" path="/464/blkio.bfq.io_merged" dev="tmpfs" ino=2441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 428.319715][T12301] siw: device registration error -23 [ 428.330054][ T28] audit: type=1400 audit(1774676187.828:1066): avc: denied { execute } for pid=12288 comm="syz.3.2421" path="/464/blkio.bfq.io_merged" dev="tmpfs" ino=2441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 428.576758][T12313] netlink: 16146 bytes leftover after parsing attributes in process `syz.2.2426'. [ 428.648693][T12319] loop2: detected capacity change from 0 to 256 [ 428.678812][T12319] FAT-fs (loop2): codepage cp852 not found [ 428.795551][T12322] loop1: detected capacity change from 0 to 2048 [ 428.823635][T12322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.845836][T12327] loop3: detected capacity change from 0 to 512 [ 428.873184][T12327] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 428.914910][ T28] audit: type=1326 audit(1774676188.428:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.1.2429" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda8438c799 code=0x0 [ 428.959195][T12327] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 428.968543][T12327] System zones: 1-12 [ 428.979859][T12327] EXT4-fs (loop3): orphan cleanup on readonly fs [ 429.117956][T12327] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2430: bg 0: block 361: padding at end of block bitmap is not set [ 429.141771][T12327] loop3: lost filesystem error report for type 5 error -117 [ 429.142122][T12327] EXT4-fs (loop3): Remounting filesystem read-only [ 429.156165][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 429.156185][ C1] EXT4-fs (loop3): initial error at time 1774676188: ext4_validate_block_bitmap:441 [ 429.156206][ C1] EXT4-fs (loop3): last error at time 1774676188: ext4_validate_block_bitmap:441 [ 429.247101][T12332] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 429.959964][T12327] EXT4-fs (loop3): 1 truncate cleaned up [ 429.969082][T12327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 430.309787][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 430.331062][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.762419][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.859557][T12342] netlink: 'syz.2.2435': attribute type 8 has an invalid length. [ 430.914977][T12350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2435'. [ 430.928055][T12350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2435'. [ 430.929897][ T28] audit: type=1326 audit(1774676190.448:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12348 comm="syz.5.2437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb40794c799 code=0x0 [ 430.965350][T12347] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2436'. [ 431.132068][T12362] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2438'. [ 432.146929][T12361] loop1: detected capacity change from 0 to 512 [ 432.986290][T12361] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 433.129728][T12361] EXT4-fs (loop1): 1 truncate cleaned up [ 433.151815][T12361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.165618][ T28] audit: type=1326 audit(1774676192.678:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12377 comm="syz.5.2444" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb40794c799 code=0x0 [ 433.212600][ T28] audit: type=1400 audit(1774676192.718:1070): avc: denied { map } for pid=12358 comm="syz.1.2439" path="/471/file2/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 433.260314][ T28] audit: type=1400 audit(1774676192.718:1071): avc: denied { execute } for pid=12358 comm="syz.1.2439" path="/471/file2/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 433.625504][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.403619][T12389] loop1: detected capacity change from 0 to 256 [ 434.442245][T12389] FAT-fs (loop1): codepage cp852 not found [ 437.800046][ T28] audit: type=1400 audit(1774676197.308:1072): avc: denied { sys_module } for pid=12400 comm="syz.4.2451" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 437.862530][ T28] audit: type=1400 audit(1774676197.338:1073): avc: denied { mounton } for pid=12394 comm="syz.2.2449" path="/proc/1376/task" dev="proc" ino=32910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 438.640579][T12434] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2448'. [ 441.326920][T12442] loop2: detected capacity change from 0 to 1024 [ 441.333766][T12442] EXT4-fs: test_dummy_encryption option not supported [ 442.386066][T12446] loop2: detected capacity change from 0 to 512 [ 442.505046][T12446] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 442.604214][ T28] audit: type=1400 audit(1774676202.068:1074): avc: denied { create } for pid=12444 comm="syz.1.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 443.056277][ T28] audit: type=1400 audit(1774676202.078:1075): avc: denied { ioctl } for pid=12444 comm="syz.1.2456" path="socket:[32952]" dev="sockfs" ino=32952 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 443.107535][ T28] audit: type=1400 audit(1774676202.078:1076): avc: denied { write } for pid=12444 comm="syz.1.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 443.179687][T12455] loop1: detected capacity change from 0 to 128 [ 444.515107][T12455] syz.1.2459: attempt to access beyond end of device [ 444.515107][T12455] loop1: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 444.567086][T12455] syz.1.2459: attempt to access beyond end of device [ 444.567086][T12455] loop1: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 444.610783][T12455] syz.1.2459: attempt to access beyond end of device [ 444.610783][T12455] loop1: rw=2049, sector=202, nr_sectors = 16 limit=128 [ 444.647443][T12455] syz.1.2459: attempt to access beyond end of device [ 444.647443][T12455] loop1: rw=2049, sector=234, nr_sectors = 16 limit=128 [ 444.670577][T12470] loop4: detected capacity change from 0 to 164 [ 444.680962][T12470] rock: directory entry would overflow storage [ 444.687173][T12470] rock: sig=0x66, size=4, remaining=3 [ 444.700752][T12470] rock: directory entry would overflow storage [ 444.706996][T12470] rock: sig=0x66, size=4, remaining=3 [ 444.713860][T12470] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 444.722293][T12470] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 444.739666][T12471] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2463'. [ 444.749965][T12455] syz.1.2459: attempt to access beyond end of device [ 444.749965][T12455] loop1: rw=2049, sector=154, nr_sectors = 16 limit=128 [ 444.773032][T12455] syz.1.2459: attempt to access beyond end of device [ 444.773032][T12455] loop1: rw=2049, sector=218, nr_sectors = 16 limit=128 [ 444.788665][T12455] syz.1.2459: attempt to access beyond end of device [ 444.788665][T12455] loop1: rw=2049, sector=186, nr_sectors = 16 limit=128 [ 447.391605][T12479] loop3: detected capacity change from 0 to 164 [ 447.423160][T12479] rock: directory entry would overflow storage [ 447.429467][T12479] rock: sig=0x66, size=4, remaining=3 [ 447.437166][T12479] rock: directory entry would overflow storage [ 447.444064][T12479] rock: sig=0x66, size=4, remaining=3 [ 447.457230][T12479] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 447.464971][T12479] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 448.340214][T12488] loop2: detected capacity change from 0 to 1024 [ 448.356155][T12488] EXT4-fs: test_dummy_encryption option not supported [ 449.387533][T12502] loop4: detected capacity change from 0 to 164 [ 449.907708][T12504] loop2: detected capacity change from 0 to 512 [ 449.933134][T12504] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 450.009062][T12502] rock: directory entry would overflow storage [ 450.015862][T12502] rock: sig=0x66, size=4, remaining=3 [ 450.122823][T12491] rock: directory entry would overflow storage [ 450.129139][T12491] rock: sig=0x66, size=4, remaining=3 [ 450.136199][T12491] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 450.143920][T12491] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 451.693070][T12529] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2478'. [ 451.704006][T12526] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2477'. [ 451.711348][ T28] audit: type=1400 audit(1774676211.218:1077): avc: denied { create } for pid=12530 comm="syz.3.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 451.736900][ T28] audit: type=1400 audit(1774676211.218:1078): avc: denied { write } for pid=12530 comm="syz.3.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 452.868579][T12548] loop2: detected capacity change from 0 to 164 [ 452.877180][T12548] rock: directory entry would overflow storage [ 452.883465][T12548] rock: sig=0x66, size=4, remaining=3 [ 452.893335][T12548] rock: directory entry would overflow storage [ 452.899557][T12548] rock: sig=0x66, size=4, remaining=3 [ 452.907013][T12548] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 452.914693][T12548] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 454.561763][T12553] loop1: detected capacity change from 0 to 128 [ 454.619971][ T28] audit: type=1326 audit(1774676214.128:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12557 comm="syz.5.2487" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb40794c799 code=0x0 [ 454.658818][T12562] loop3: detected capacity change from 0 to 1024 [ 454.672943][T12562] EXT4-fs: test_dummy_encryption option not supported [ 454.846755][T12569] gtp0: entered promiscuous mode [ 454.856610][T12569] gtp0: entered allmulticast mode [ 454.862143][T12569] team0: Device gtp0 is of different type [ 455.992801][T12572] loop3: detected capacity change from 0 to 512 [ 456.005922][T12572] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 458.706365][T12594] loop1: detected capacity change from 0 to 128 [ 459.768667][T12610] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2498'. [ 459.849361][T12616] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2500'. [ 459.911275][T12619] netlink: zone id is out of range [ 459.967411][T12596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2495'. [ 459.978877][ T28] audit: type=1400 audit(1774676219.498:1080): avc: denied { audit_write } for pid=12618 comm="syz.5.2501" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 460.001452][T12596] loop2: detected capacity change from 0 to 512 [ 460.010859][T12622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=12622 comm=syz.5.2501 [ 460.023875][T12622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=12622 comm=syz.5.2501 [ 460.054982][ T28] audit: type=1107 audit(1774676219.498:1081): pid=12618 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ø¾' [ 460.209010][T12631] loop4: detected capacity change from 0 to 128 [ 460.259595][T12634] netlink: 'syz.3.2506': attribute type 8 has an invalid length. [ 460.361617][T12638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2506'. [ 460.415884][T12638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2506'. [ 460.458192][T12645] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2508'. [ 460.921788][T12635] syz.4.2505: attempt to access beyond end of device [ 460.921788][T12635] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 460.953831][T12635] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 461.464913][T12663] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2512'. [ 461.745534][T12671] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2515'. [ 462.486215][T12683] netlink: 'syz.4.2519': attribute type 8 has an invalid length. [ 462.499575][T12685] loop1: detected capacity change from 0 to 1024 [ 462.508364][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2519'. [ 462.517191][T12685] EXT4-fs: test_dummy_encryption option not supported [ 462.575760][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2519'. [ 462.779822][T12702] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 462.905839][T12703] loop1: detected capacity change from 0 to 512 [ 462.917746][T12703] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 463.216044][T12710] loop4: detected capacity change from 0 to 1024 [ 463.245040][T12710] EXT4-fs: test_dummy_encryption option not supported [ 464.497656][T12713] loop4: detected capacity change from 0 to 512 [ 464.504230][T12713] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 464.865917][T12720] loop1: detected capacity change from 0 to 2048 [ 464.983180][T12721] loop2: detected capacity change from 0 to 512 [ 465.020575][T12720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.040836][T12721] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 465.100606][T12721] EXT4-fs (loop2): 1 truncate cleaned up [ 465.111874][ T28] audit: type=1326 audit(1774676224.618:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12719 comm="syz.1.2527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda8438c799 code=0x0 [ 465.145561][T12721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.373591][T12728] loop3: detected capacity change from 0 to 2048 [ 465.919700][T12730] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 466.280950][T12741] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2531'. [ 466.299724][ T28] audit: type=1400 audit(1774676225.808:1083): avc: denied { read } for pid=12736 comm="syz.4.2530" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 466.334532][ T28] audit: type=1400 audit(1774676225.838:1084): avc: denied { open } for pid=12736 comm="syz.4.2530" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 466.360057][T12728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.390077][ T28] audit: type=1326 audit(1774676225.898:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.3.2528" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd34454c799 code=0x0 [ 466.429393][T12743] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 466.436043][T12743] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 466.584208][T12743] vhci_hcd vhci_hcd.0: Device attached [ 467.419637][ T3421] usb 10-1: SetAddress Request (2) to port 0 [ 467.432569][T12750] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 467.493276][T12746] vhci_hcd: connection closed [ 467.493705][ T4315] vhci_hcd vhci_hcd.4: stop threads [ 467.511148][ T4315] vhci_hcd vhci_hcd.4: release socket [ 467.522972][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.717015][ T4315] vhci_hcd vhci_hcd.4: disconnect device [ 467.789670][ T3421] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 467.810309][ T3421] usb 10-1: enqueue for inactive port 0 [ 467.815963][ T3421] usb 10-1: enqueue for inactive port 0 [ 467.823985][ T3421] usb 10-1: enqueue for inactive port 0 [ 467.839322][T12755] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2534'. [ 467.854128][T12681] syz.2.2518 (12681) used greatest stack depth: 6528 bytes left [ 467.868426][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.931117][T12759] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 468.121659][ T28] audit: type=1400 audit(1774676227.638:1086): avc: denied { bind } for pid=12761 comm="syz.2.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 468.166314][ T28] audit: type=1400 audit(1774676227.668:1087): avc: denied { setopt } for pid=12761 comm="syz.2.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 468.223751][T12767] loop2: detected capacity change from 0 to 128 [ 468.240485][ T28] audit: type=1400 audit(1774676227.668:1088): avc: denied { nlmsg_read } for pid=12761 comm="syz.2.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 468.447209][T12774] netlink: 'syz.4.2539': attribute type 8 has an invalid length. [ 468.501118][T12775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2539'. [ 468.546386][T12775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2539'. [ 468.584950][T12771] syz.2.2537: attempt to access beyond end of device [ 468.584950][T12771] loop2: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 468.650603][T12771] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 468.787527][T12780] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2540'. [ 468.860396][ T3421] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 468.881010][ T3421] usb 10-1: enqueue for inactive port 0 [ 468.886646][ T3421] usb 10-1: enqueue for inactive port 0 [ 468.892269][ T3421] usb 10-1: enqueue for inactive port 0 [ 469.007919][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.102483][T12788] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2544'. [ 469.423783][T12799] loop3: detected capacity change from 0 to 2048 [ 469.607827][T12802] loop4: detected capacity change from 0 to 128 [ 469.615589][T12799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.707450][T12808] netlink: 'syz.5.2550': attribute type 8 has an invalid length. [ 469.710644][ T28] audit: type=1326 audit(1774676229.218:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.3.2543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd34454c799 code=0x0 [ 469.761490][T12810] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2550'. [ 469.876625][T12812] loop2: detected capacity change from 0 to 256 [ 469.913938][T12810] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2550'. [ 470.043611][T12822] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 470.342434][T12825] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2554'. [ 470.375521][T12826] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2553'. [ 470.445338][T12812] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 470.477225][T12812] FAT-fs (loop2): Filesystem has been set read-only [ 470.494640][T12812] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 470.517912][T12811] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 470.533022][T12812] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 470.554126][T12811] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 470.574342][T12812] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 470.596185][T12811] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 470.613773][T12812] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 470.635030][T12811] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 470.652507][T12812] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 471.631018][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.704185][T12842] netlink: 'syz.3.2558': attribute type 8 has an invalid length. [ 471.729620][T12843] loop2: detected capacity change from 0 to 164 [ 471.741546][T12843] rock: directory entry would overflow storage [ 471.747896][T12843] rock: sig=0x66, size=4, remaining=3 [ 471.756195][T12843] rock: directory entry would overflow storage [ 471.762566][T12843] rock: sig=0x66, size=4, remaining=3 [ 471.768897][T12843] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 471.776708][T12843] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 471.808572][T12844] __nla_validate_parse: 1 callbacks suppressed [ 471.808602][T12844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2558'. [ 471.873225][T12844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2558'. [ 471.908516][ T3421] usb usb10-port1: attempt power cycle [ 471.998296][T12849] netlink: 'syz.5.2559': attribute type 8 has an invalid length. [ 472.048472][T12853] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2559'. [ 472.309290][T12863] loop3: detected capacity change from 0 to 512 [ 472.318680][T12863] EXT4-fs: Ignoring removed nobh option [ 472.328971][T12863] ext4: Unknown parameter 'sysvgroups./file0' [ 472.910149][T12853] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2559'. [ 473.341970][T12877] netlink: 'syz.3.2566': attribute type 8 has an invalid length. [ 473.391613][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2566'. [ 473.436458][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2566'. [ 473.542705][T12887] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2570'. [ 473.554601][T12883] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2568'. [ 473.765527][T12888] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2569'. [ 473.961183][T12903] netlink: 'syz.1.2574': attribute type 8 has an invalid length. [ 474.011455][T12909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2574'. [ 474.185079][T12919] loop4: detected capacity change from 0 to 1024 [ 474.200575][T12919] EXT4-fs: test_dummy_encryption option not supported [ 474.296888][T12925] netlink: 'syz.5.2581': attribute type 8 has an invalid length. [ 474.548246][T12928] loop4: detected capacity change from 0 to 512 [ 474.571768][T12928] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 474.884865][ T3421] usb usb10-port1: unable to enumerate USB device [ 476.655415][ T28] audit: type=1400 audit(1774676236.168:1090): avc: denied { connect } for pid=12938 comm="syz.1.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 479.271033][T12966] __nla_validate_parse: 4 callbacks suppressed [ 479.271060][T12966] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2588'. [ 479.374708][T12969] loop3: detected capacity change from 0 to 1024 [ 479.396161][T12969] EXT4-fs: test_dummy_encryption option not supported [ 481.065752][T12971] loop3: detected capacity change from 0 to 512 [ 481.185447][T12971] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 481.372096][T12973] netlink: 'syz.5.2591': attribute type 8 has an invalid length. [ 481.419937][T12975] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2591'. [ 481.441364][T12975] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2591'. [ 481.614582][T12980] loop4: detected capacity change from 0 to 164 [ 481.632064][T12980] iso9660: Unknown parameter '0xffffffffffffffffÿÿÿÿ18446744073709551615ÿÿÿÿÿ' [ 481.723318][T12982] netlink: 'syz.4.2593': attribute type 8 has an invalid length. [ 481.781192][T12983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2593'. [ 481.819779][T12983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2593'. [ 483.644825][T13009] FAULT_INJECTION: forcing a failure. [ 483.644825][T13009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.704941][T13009] CPU: 1 UID: 0 PID: 13009 Comm: syz.4.2599 Tainted: G W syzkaller #0 PREEMPT(full) [ 483.705055][T13009] Tainted: [W]=WARN [ 483.705062][T13009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 483.705076][T13009] Call Trace: [ 483.705082][T13009] [ 483.705090][T13009] __dump_stack+0x1d/0x30 [ 483.705124][T13009] dump_stack_lvl+0x95/0xd0 [ 483.705153][T13009] dump_stack+0x15/0x1b [ 483.705206][T13009] should_fail_ex+0x263/0x280 [ 483.705243][T13009] should_fail+0xb/0x20 [ 483.705274][T13009] should_fail_usercopy+0x1a/0x20 [ 483.705307][T13009] _copy_to_user+0x20/0xa0 [ 483.705485][T13009] simple_read_from_buffer+0xb5/0x130 [ 483.705542][T13009] proc_fail_nth_read+0x10e/0x150 [ 483.705585][T13009] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 483.705651][T13009] vfs_read+0x1ab/0x7f0 [ 483.705694][T13009] ? __rcu_read_unlock+0x4e/0x70 [ 483.705724][T13009] ? __fget_files+0x184/0x1c0 [ 483.705766][T13009] ? mutex_lock+0x57/0x90 [ 483.705872][T13009] ksys_read+0xdc/0x1a0 [ 483.705893][T13009] __x64_sys_read+0x40/0x50 [ 483.705917][T13009] x64_sys_call+0x2886/0x3020 [ 483.705954][T13009] do_syscall_64+0x12c/0x370 [ 483.705985][T13009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.706051][T13009] RIP: 0033:0x7fe07143cfce [ 483.706066][T13009] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 483.706085][T13009] RSP: 002b:00007fe06fed6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 483.706138][T13009] RAX: ffffffffffffffda RBX: 00007fe06fed76c0 RCX: 00007fe07143cfce [ 483.706153][T13009] RDX: 000000000000000f RSI: 00007fe06fed70a0 RDI: 0000000000000003 [ 483.706165][T13009] RBP: 00007fe06fed7090 R08: 0000000000000000 R09: 0000000000000000 [ 483.706233][T13009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.706246][T13009] R13: 00007fe0716f6038 R14: 00007fe0716f5fa0 R15: 00007fffc1fe6a28 [ 483.706267][T13009] [ 484.024854][ T28] audit: type=1400 audit(1774676243.538:1091): avc: denied { getopt } for pid=12995 comm="syz.3.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 484.416942][T13015] loop1: detected capacity change from 0 to 1024 [ 484.459342][T13015] EXT4-fs: Ignoring removed bh option [ 484.622147][T13015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.327604][T13033] loop3: detected capacity change from 0 to 1024 [ 488.346864][T13033] EXT4-fs: test_dummy_encryption option not supported [ 488.763297][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.901986][T13040] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2606'. [ 490.601053][T13052] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2607'. [ 492.628772][T13064] loop3: detected capacity change from 0 to 164 [ 492.719409][T13064] rock: directory entry would overflow storage [ 492.726218][T13064] rock: sig=0x66, size=4, remaining=3 [ 492.753970][T13064] rock: directory entry would overflow storage [ 492.760894][T13064] rock: sig=0x66, size=4, remaining=3 [ 492.771777][T13064] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 492.783633][T13064] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 493.069507][ T28] audit: type=1326 audit(1774676252.578:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.5.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40794c799 code=0x7ffc0000 [ 493.272224][T13069] tap0: tun_chr_ioctl cmd 1074025677 [ 493.320510][T13069] tap0: linktype set to 778 [ 493.330457][ T28] audit: type=1326 audit(1774676252.578:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.5.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40794c799 code=0x7ffc0000 [ 493.361557][ T28] audit: type=1326 audit(1774676252.578:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.5.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40794c799 code=0x7ffc0000 [ 493.450538][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2611'. [ 493.515609][T13076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.608465][T13080] loop1: detected capacity change from 0 to 1024 [ 493.635805][T13080] EXT4-fs: test_dummy_encryption option not supported [ 494.344515][ T28] audit: type=1326 audit(1774676252.578:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.5.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40794c799 code=0x7ffc0000 [ 494.369482][ T28] audit: type=1326 audit(1774676252.578:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.5.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fb40794c799 code=0x7ffc0000 [ 494.403505][T13086] loop1: detected capacity change from 0 to 512 [ 494.413861][T13086] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 494.675463][T13072] chnl_net:caif_netlink_parms(): no params data found [ 494.762408][T13072] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.779822][T13072] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.788717][T13072] bridge_slave_0: entered allmulticast mode [ 494.795882][T13072] bridge_slave_0: entered promiscuous mode [ 494.815181][ T28] audit: type=1326 audit(1774676252.578:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.5.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40794c799 code=0x7ffc0000 [ 494.839236][ T28] audit: type=1326 audit(1774676252.578:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.5.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40794c799 code=0x7ffc0000 [ 494.863850][ T28] audit: type=1326 audit(1774676252.578:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.5.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40794c799 code=0x7ffc0000 [ 494.887796][ T28] audit: type=1326 audit(1774676252.578:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.5.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40794c799 code=0x7ffc0000 [ 494.911641][ T28] audit: type=1326 audit(1774676252.578:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.5.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb40794c799 code=0x7ffc0000 [ 495.372302][T13072] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.389278][T13097] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2615'. [ 495.405067][T13072] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.427048][T13099] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2616'. [ 495.440524][T13072] bridge_slave_1: entered allmulticast mode [ 495.457748][T13072] bridge_slave_1: entered promiscuous mode [ 495.508783][T13072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.548870][T13072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.871164][T13072] team0: Port device team_slave_0 added [ 495.899098][T13072] team0: Port device team_slave_1 added [ 495.933156][T13108] netlink: 'syz.3.2619': attribute type 8 has an invalid length. [ 495.952748][T13072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.959748][T13072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.987179][T13111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2619'. [ 495.988186][T13072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.006992][T13110] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2620'. [ 496.019339][T13111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2619'. [ 496.234583][T13122] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2623'. [ 496.247962][T13072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.274853][T13072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.276258][T13123] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2622'. [ 496.337240][T13072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.366800][T13123] 0ªî{X¹¦: renamed from gretap0 [ 496.507809][T13123] 0ªî{X¹¦: entered allmulticast mode [ 496.531648][T13123] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 496.563913][T13133] FAULT_INJECTION: forcing a failure. [ 496.563913][T13133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.592576][T13133] CPU: 1 UID: 0 PID: 13133 Comm: syz.1.2627 Tainted: G W syzkaller #0 PREEMPT(full) [ 496.592616][T13133] Tainted: [W]=WARN [ 496.592625][T13133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.592641][T13133] Call Trace: [ 496.592648][T13133] [ 496.592657][T13133] __dump_stack+0x1d/0x30 [ 496.592745][T13133] dump_stack_lvl+0x95/0xd0 [ 496.592770][T13133] dump_stack+0x15/0x1b [ 496.592792][T13133] should_fail_ex+0x263/0x280 [ 496.592841][T13133] should_fail+0xb/0x20 [ 496.592866][T13133] should_fail_usercopy+0x1a/0x20 [ 496.592947][T13133] _copy_from_user+0x1c/0xb0 [ 496.592988][T13133] kstrtouint_from_user+0x69/0xf0 [ 496.593021][T13133] proc_fail_nth_write+0x50/0x160 [ 496.593138][T13133] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 496.593174][T13133] vfs_write+0x269/0x9f0 [ 496.593267][T13133] ? __rcu_read_unlock+0x4e/0x70 [ 496.593296][T13133] ? __fget_files+0x184/0x1c0 [ 496.593329][T13133] ? mutex_lock+0x57/0x90 [ 496.593365][T13133] ksys_write+0xdc/0x1a0 [ 496.593414][T13133] __x64_sys_write+0x40/0x50 [ 496.593439][T13133] x64_sys_call+0x27e1/0x3020 [ 496.593491][T13133] do_syscall_64+0x12c/0x370 [ 496.593660][T13133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.593710][T13133] RIP: 0033:0x7fda8434cfce [ 496.593738][T13133] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 496.593756][T13133] RSP: 002b:00007fda82ddefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 496.593854][T13133] RAX: ffffffffffffffda RBX: 00007fda82ddf6c0 RCX: 00007fda8434cfce [ 496.593873][T13133] RDX: 0000000000000001 RSI: 00007fda82ddf0a0 RDI: 0000000000000004 [ 496.593890][T13133] RBP: 00007fda82ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 496.593908][T13133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.593925][T13133] R13: 00007fda84606038 R14: 00007fda84605fa0 R15: 00007ffd95af54b8 [ 496.593947][T13133] [ 496.616147][T13072] hsr_slave_0: entered promiscuous mode [ 496.687619][T13135] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2628'. [ 496.765335][T13072] hsr_slave_1: entered promiscuous mode [ 496.831255][T13072] debugfs: 'hsr0' already exists in 'hsr' [ 496.837080][T13072] Cannot create hsr debugfs directory [ 496.855206][T13138] loop3: detected capacity change from 0 to 1024 [ 496.862747][T13138] EXT4-fs: test_dummy_encryption option not supported [ 496.943987][T13142] FAULT_INJECTION: forcing a failure. [ 496.943987][T13142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.030570][T13142] CPU: 1 UID: 0 PID: 13142 Comm: syz.1.2630 Tainted: G W syzkaller #0 PREEMPT(full) [ 497.030612][T13142] Tainted: [W]=WARN [ 497.030622][T13142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.030638][T13142] Call Trace: [ 497.030715][T13142] [ 497.030724][T13142] __dump_stack+0x1d/0x30 [ 497.030759][T13142] dump_stack_lvl+0x95/0xd0 [ 497.030790][T13142] dump_stack+0x15/0x1b [ 497.030819][T13142] should_fail_ex+0x263/0x280 [ 497.030881][T13142] should_fail+0xb/0x20 [ 497.030912][T13142] should_fail_usercopy+0x1a/0x20 [ 497.030950][T13142] _copy_from_user+0x1c/0xb0 [ 497.030991][T13142] kstrtouint_from_user+0x69/0xf0 [ 497.031073][T13142] proc_fail_nth_write+0x50/0x160 [ 497.031112][T13142] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 497.031175][T13142] vfs_write+0x269/0x9f0 [ 497.031193][T13142] ? __rcu_read_unlock+0x4e/0x70 [ 497.031218][T13142] ? __fget_files+0x184/0x1c0 [ 497.031279][T13142] ? mutex_lock+0x57/0x90 [ 497.031382][T13142] ksys_write+0xdc/0x1a0 [ 497.031402][T13142] __x64_sys_write+0x40/0x50 [ 497.031480][T13142] x64_sys_call+0x27e1/0x3020 [ 497.031547][T13142] do_syscall_64+0x12c/0x370 [ 497.031578][T13142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.031669][T13142] RIP: 0033:0x7fda8434cfce [ 497.031691][T13142] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 497.031713][T13142] RSP: 002b:00007fda82dbdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 497.031739][T13142] RAX: ffffffffffffffda RBX: 00007fda82dbe6c0 RCX: 00007fda8434cfce [ 497.031815][T13142] RDX: 0000000000000001 RSI: 00007fda82dbe0a0 RDI: 0000000000000003 [ 497.031829][T13142] RBP: 00007fda82dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 497.031842][T13142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.031854][T13142] R13: 00007fda84606128 R14: 00007fda84606090 R15: 00007ffd95af54b8 [ 497.031925][T13142] [ 497.125674][T13149] netlink: 'syz.5.2632': attribute type 8 has an invalid length. [ 497.232051][T13151] loop3: detected capacity change from 0 to 512 [ 497.235862][T13151] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 497.349470][T13155] netlink: 'syz.1.2633': attribute type 8 has an invalid length. [ 497.759221][T13169] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 497.781968][T13072] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 497.812609][T13072] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 497.824907][T13072] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 497.835125][T13072] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 498.230333][ T28] kauditd_printk_skb: 110 callbacks suppressed [ 498.230363][ T28] audit: type=1326 audit(1774676257.688:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13187 comm="syz.3.2640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd34454c799 code=0x0 [ 498.345922][ T28] audit: type=1400 audit(1774676257.858:1213): avc: denied { ioctl } for pid=13187 comm="syz.3.2640" path="/" dev="configfs" ino=1003 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 498.955930][T13072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.968881][T13072] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.209519][T13200] loop3: detected capacity change from 0 to 128 [ 499.226381][T13072] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 499.243194][T13072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 499.351690][ T7965] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.358869][ T7965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.369891][ T7965] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.376998][ T7965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.497393][T13072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.746779][T13072] veth0_vlan: entered promiscuous mode [ 499.764895][T13072] veth1_vlan: entered promiscuous mode [ 499.801673][T13072] veth0_macvtap: entered promiscuous mode [ 499.819698][T13072] veth1_macvtap: entered promiscuous mode [ 499.847402][T13072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.865173][T13072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.887340][ T4315] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.908571][ T4315] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.939494][T13200] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 499.954187][T13200] ext4 filesystem being mounted at /514/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 500.003236][ T4315] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.014926][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 500.030351][ T4315] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.046648][T13227] netlink: 'syz.4.2646': attribute type 8 has an invalid length. [ 500.085772][ T28] audit: type=1400 audit(1774676259.588:1214): avc: denied { mounton } for pid=13072 comm="syz-executor" path="/root/syzkaller.K8hojE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=35489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 500.164909][T13237] loop1: detected capacity change from 0 to 1024 [ 500.179186][ T28] audit: type=1400 audit(1774676259.598:1215): avc: denied { mount } for pid=13072 comm="syz-executor" name="/" dev="gadgetfs" ino=3531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 500.179613][T13237] EXT4-fs: test_dummy_encryption option not supported [ 500.539841][T13246] loop1: detected capacity change from 0 to 512 [ 500.552827][T13246] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 501.086559][T13252] loop3: detected capacity change from 0 to 2048 [ 501.143399][T13252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.181062][ T28] audit: type=1326 audit(1774676260.698:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13251 comm="syz.3.2650" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd34454c799 code=0x0 [ 501.209787][T13256] netlink: 580 bytes leftover after parsing attributes in process `syz.6.2651'. [ 501.223227][T13256] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2651'. [ 501.233219][ T28] audit: type=1326 audit(1774676260.728:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb856c799 code=0x7ffc0000 [ 501.448674][T13259] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2652'. [ 502.103390][ T28] audit: type=1326 audit(1774676260.728:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb856c799 code=0x7ffc0000 [ 502.136126][T13261] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 502.409598][T13266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2654'. [ 502.429014][ T28] audit: type=1326 audit(1774676260.728:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb856c799 code=0x7ffc0000 [ 502.466647][T13266] TCP: TCP_TX_DELAY enabled [ 502.606528][ T28] audit: type=1326 audit(1774676260.728:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb856c799 code=0x7ffc0000 [ 503.342140][ T28] audit: type=1326 audit(1774676260.728:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdeb856c799 code=0x7ffc0000 [ 503.597645][ T28] audit: type=1326 audit(1774676260.728:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb856c799 code=0x7ffc0000 [ 503.624409][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.634103][ T28] audit: type=1326 audit(1774676260.728:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb856c799 code=0x7ffc0000 [ 503.693810][ T28] audit: type=1326 audit(1774676260.728:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb856c799 code=0x7ffc0000 [ 503.900673][T13279] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2658'. [ 503.926996][ T28] audit: type=1326 audit(1774676260.728:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb856c799 code=0x7ffc0000 [ 503.954097][ T28] audit: type=1326 audit(1774676260.728:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdeb856c799 code=0x7ffc0000 [ 503.978045][ T28] audit: type=1326 audit(1774676260.728:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb856c799 code=0x7ffc0000 [ 504.012318][ T28] audit: type=1326 audit(1774676260.728:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb856c799 code=0x7ffc0000 [ 504.040664][ T28] audit: type=1326 audit(1774676260.728:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb856c799 code=0x7ffc0000 [ 504.084702][ T28] audit: type=1326 audit(1774676260.728:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13255 comm="syz.6.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb856c799 code=0x7ffc0000 [ 505.106276][T13299] loop4: detected capacity change from 0 to 1024 [ 505.136030][T13299] EXT4-fs: test_dummy_encryption option not supported [ 505.174433][T13301] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2663'. [ 505.391663][T13305] netlink: 'syz.6.2664': attribute type 8 has an invalid length. [ 505.546767][T13306] loop4: detected capacity change from 0 to 512 [ 505.559802][T13306] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 506.104761][T13312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2665'. [ 506.179750][T13318] netlink: 'syz.3.2668': attribute type 8 has an invalid length. [ 506.241952][T13320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2668'. [ 506.264900][T13320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2668'. [ 506.503744][T13329] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2670'. [ 506.622849][T13330] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2669'. [ 507.209454][T13334] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2671'. [ 507.235638][T13333] FAULT_INJECTION: forcing a failure. [ 507.235638][T13333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.269203][T13336] loop1: detected capacity change from 0 to 2048 [ 507.308492][T13333] CPU: 1 UID: 0 PID: 13333 Comm: syz.4.2671 Tainted: G W syzkaller #0 PREEMPT(full) [ 507.308557][T13333] Tainted: [W]=WARN [ 507.308566][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 507.308582][T13333] Call Trace: [ 507.308589][T13333] [ 507.308599][T13333] __dump_stack+0x1d/0x30 [ 507.308645][T13333] dump_stack_lvl+0x95/0xd0 [ 507.308677][T13333] dump_stack+0x15/0x1b [ 507.308771][T13333] should_fail_ex+0x263/0x280 [ 507.308809][T13333] should_fail+0xb/0x20 [ 507.308842][T13333] should_fail_usercopy+0x1a/0x20 [ 507.308885][T13333] _copy_to_iter+0xd2/0xea0 [ 507.308925][T13333] ? __skb_try_recv_from_queue+0x3d6/0x440 [ 507.309035][T13333] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 507.309080][T13333] __skb_datagram_iter+0xc6/0x680 [ 507.309139][T13333] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 507.309188][T13333] skb_copy_datagram_iter+0x3f/0x120 [ 507.309263][T13333] netlink_recvmsg+0x1a8/0x550 [ 507.309313][T13333] ? __pfx_netlink_recvmsg+0x10/0x10 [ 507.309403][T13333] sock_recvmsg+0xf5/0x120 [ 507.309437][T13333] sock_read_iter+0x169/0x1b0 [ 507.309477][T13333] vfs_read+0x6c0/0x7f0 [ 507.309587][T13333] ? __pfx_sock_read_iter+0x10/0x10 [ 507.309618][T13333] ksys_read+0xdc/0x1a0 [ 507.309641][T13333] __x64_sys_read+0x40/0x50 [ 507.309668][T13333] x64_sys_call+0x2886/0x3020 [ 507.309701][T13333] do_syscall_64+0x12c/0x370 [ 507.309797][T13333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.309826][T13333] RIP: 0033:0x7fe07147c799 [ 507.309912][T13333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.309937][T13333] RSP: 002b:00007fe06fed7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 507.309963][T13333] RAX: ffffffffffffffda RBX: 00007fe0716f5fa0 RCX: 00007fe07147c799 [ 507.309982][T13333] RDX: 0000000000000072 RSI: 0000200000000100 RDI: 0000000000000003 [ 507.310007][T13333] RBP: 00007fe06fed7090 R08: 0000000000000000 R09: 0000000000000000 [ 507.310025][T13333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.310042][T13333] R13: 00007fe0716f6038 R14: 00007fe0716f5fa0 R15: 00007fffc1fe6a28 [ 507.310071][T13333] [ 507.722032][T13336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.519987][T13355] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 510.746584][T13369] loop3: detected capacity change from 0 to 1024 [ 510.781370][T13369] EXT4-fs: test_dummy_encryption option not supported [ 511.056580][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.224405][T13379] loop3: detected capacity change from 0 to 512 [ 511.250605][T13379] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 511.730296][ T28] kauditd_printk_skb: 172 callbacks suppressed [ 511.730315][ T28] audit: type=1400 audit(1774676271.228:1403): avc: denied { map } for pid=13384 comm="syz.5.2684" path="socket:[36068]" dev="sockfs" ino=36068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 511.934383][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2687'. [ 512.334961][ T28] audit: type=1400 audit(1774676271.848:1404): avc: denied { setattr } for pid=13391 comm="syz.1.2687" name="task" dev="proc" ino=36104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 512.784629][T13419] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2691'. [ 512.865315][T13418] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2693'. [ 512.915693][T13423] FAULT_INJECTION: forcing a failure. [ 512.915693][T13423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.952354][T13423] CPU: 1 UID: 0 PID: 13423 Comm: syz.1.2694 Tainted: G W syzkaller #0 PREEMPT(full) [ 512.952400][T13423] Tainted: [W]=WARN [ 512.952410][T13423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 512.952427][T13423] Call Trace: [ 512.952435][T13423] [ 512.952442][T13423] __dump_stack+0x1d/0x30 [ 512.952470][T13423] dump_stack_lvl+0x95/0xd0 [ 512.952626][T13423] dump_stack+0x15/0x1b [ 512.952649][T13423] should_fail_ex+0x263/0x280 [ 512.952686][T13423] should_fail+0xb/0x20 [ 512.952805][T13423] should_fail_usercopy+0x1a/0x20 [ 512.952835][T13423] _copy_from_user+0x1c/0xb0 [ 512.952873][T13423] ucma_write+0xd8/0x260 [ 512.952918][T13423] ? __pfx_ucma_write+0x10/0x10 [ 512.952949][T13423] vfs_write+0x269/0x9f0 [ 512.952970][T13423] ? __rcu_read_unlock+0x4e/0x70 [ 512.953015][T13423] ? __fget_files+0x184/0x1c0 [ 512.953084][T13423] ksys_write+0xdc/0x1a0 [ 512.953118][T13423] __x64_sys_write+0x40/0x50 [ 512.953146][T13423] x64_sys_call+0x27e1/0x3020 [ 512.953220][T13423] do_syscall_64+0x12c/0x370 [ 512.953256][T13423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.953280][T13423] RIP: 0033:0x7fda8438c799 [ 512.953322][T13423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.953347][T13423] RSP: 002b:00007fda82ddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 512.953372][T13423] RAX: ffffffffffffffda RBX: 00007fda84605fa0 RCX: 00007fda8438c799 [ 512.953389][T13423] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000003 [ 512.953411][T13423] RBP: 00007fda82ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 512.953429][T13423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.953441][T13423] R13: 00007fda84606038 R14: 00007fda84605fa0 R15: 00007ffd95af54b8 [ 512.953468][T13423] [ 513.400967][T13433] loop6: detected capacity change from 0 to 128 [ 513.418895][T13433] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 513.452382][T13433] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 513.455432][T13435] loop1: detected capacity change from 0 to 2048 [ 513.481227][T13433] netlink: 'syz.6.2699': attribute type 1 has an invalid length. [ 513.499372][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2699'. [ 513.549164][T13435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.561620][T13072] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 513.612336][T13442] FAULT_INJECTION: forcing a failure. [ 513.612336][T13442] name failslab, interval 1, probability 0, space 0, times 0 [ 513.651222][ T28] audit: type=1326 audit(1774676273.158:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13434 comm="syz.1.2698" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda8438c799 code=0x0 [ 513.686306][T13442] CPU: 0 UID: 0 PID: 13442 Comm: syz.6.2700 Tainted: G W syzkaller #0 PREEMPT(full) [ 513.686391][T13442] Tainted: [W]=WARN [ 513.686398][T13442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 513.686452][T13442] Call Trace: [ 513.686461][T13442] [ 513.686472][T13442] __dump_stack+0x1d/0x30 [ 513.686562][T13442] dump_stack_lvl+0x95/0xd0 [ 513.686596][T13442] dump_stack+0x15/0x1b [ 513.686626][T13442] should_fail_ex+0x263/0x280 [ 513.686676][T13442] should_failslab+0x8c/0xb0 [ 513.686702][T13442] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 513.686735][T13442] ? __alloc_skb+0x2d6/0x690 [ 513.686816][T13442] __alloc_skb+0x2d6/0x690 [ 513.686914][T13442] ? __alloc_skb+0x200/0x690 [ 513.686952][T13442] netlink_alloc_large_skb+0xbf/0xf0 [ 513.686987][T13442] netlink_sendmsg+0x40c/0x6f0 [ 513.687045][T13442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.687184][T13442] ____sys_sendmsg+0x563/0x5b0 [ 513.687229][T13442] ___sys_sendmsg+0x195/0x1e0 [ 513.687345][T13442] __x64_sys_sendmsg+0xd4/0x160 [ 513.687459][T13442] x64_sys_call+0x194c/0x3020 [ 513.687493][T13442] do_syscall_64+0x12c/0x370 [ 513.687743][T13442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.687773][T13442] RIP: 0033:0x7fdeb856c799 [ 513.687794][T13442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.687875][T13442] RSP: 002b:00007fdeb6fc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.687899][T13442] RAX: ffffffffffffffda RBX: 00007fdeb87e5fa0 RCX: 00007fdeb856c799 [ 513.687966][T13442] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 513.687984][T13442] RBP: 00007fdeb6fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 513.688002][T13442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.688056][T13442] R13: 00007fdeb87e6038 R14: 00007fdeb87e5fa0 R15: 00007ffd5a747bf8 [ 513.688078][T13442] [ 514.046813][T13450] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2703'. [ 514.155016][T13455] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 515.134724][T13463] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2704'. [ 515.319365][T13470] loop4: detected capacity change from 0 to 2048 [ 515.431712][T13470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.520300][ T28] audit: type=1326 audit(1774676274.998:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13469 comm="syz.4.2706" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe07147c799 code=0x0 [ 515.717256][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.729094][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 515.786284][T13477] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 516.010307][T13475] loop3: detected capacity change from 0 to 8192 [ 516.058201][T13475] vfat: Unknown parameter '' [ 516.282824][T13480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2707'. [ 516.601958][T13482] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2709'. [ 516.728170][T13485] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2708'. [ 517.231388][T13490] dummy0 speed is unknown, defaulting to 1000 [ 517.248944][T13490] dummy0 speed is unknown, defaulting to 1000 [ 517.265500][T13490] dummy0 speed is unknown, defaulting to 1000 [ 517.322132][T13490] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 517.411755][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.472915][T13495] loop4: detected capacity change from 0 to 256 [ 517.534480][T13495] FAT-fs (loop4): codepage cp852 not found [ 518.070334][T13490] dummy0 speed is unknown, defaulting to 1000 [ 518.091338][T13490] dummy0 speed is unknown, defaulting to 1000 [ 518.126663][T13490] dummy0 speed is unknown, defaulting to 1000 [ 518.145545][T13490] dummy0 speed is unknown, defaulting to 1000 [ 518.152343][T13508] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2717'. [ 518.169395][T13490] dummy0 speed is unknown, defaulting to 1000 [ 518.186327][T13490] dummy0 speed is unknown, defaulting to 1000 [ 518.198882][ T28] audit: type=1400 audit(1774676277.708:1407): avc: denied { read } for pid=13509 comm="syz.1.2718" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 518.241971][T13510] loop1: detected capacity change from 0 to 128 [ 518.309010][ T28] audit: type=1400 audit(1774676277.708:1408): avc: denied { open } for pid=13509 comm="syz.1.2718" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 518.353490][T13516] syz.1.2718: attempt to access beyond end of device [ 518.353490][T13516] loop1: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 518.761315][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2723'. [ 519.274282][T13536] loop3: detected capacity change from 0 to 1024 [ 519.304065][T13536] EXT4-fs: test_dummy_encryption option not supported [ 519.658837][T13539] loop4: detected capacity change from 0 to 256 [ 519.710407][T13539] FAT-fs (loop4): codepage cp852 not found [ 520.591152][T13547] loop3: detected capacity change from 0 to 512 [ 520.604547][T13547] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 520.747682][T13549] loop1: detected capacity change from 0 to 512 [ 520.766778][T13551] netlink: 'syz.5.2730': attribute type 66 has an invalid length. [ 521.304153][T13549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 521.325794][T13549] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 521.361121][T13549] EXT4-fs (loop1): 1 truncate cleaned up [ 521.376219][T13549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.430601][T13549] FAULT_INJECTION: forcing a failure. [ 521.430601][T13549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.460282][T13549] CPU: 1 UID: 0 PID: 13549 Comm: syz.1.2729 Tainted: G W syzkaller #0 PREEMPT(full) [ 521.460402][T13549] Tainted: [W]=WARN [ 521.460410][T13549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.460427][T13549] Call Trace: [ 521.460435][T13549] [ 521.460446][T13549] __dump_stack+0x1d/0x30 [ 521.460532][T13549] dump_stack_lvl+0x95/0xd0 [ 521.460561][T13549] dump_stack+0x15/0x1b [ 521.460586][T13549] should_fail_ex+0x263/0x280 [ 521.460661][T13549] should_fail+0xb/0x20 [ 521.460692][T13549] should_fail_usercopy+0x1a/0x20 [ 521.460726][T13549] _copy_to_user+0x20/0xa0 [ 521.460785][T13549] simple_read_from_buffer+0xb5/0x130 [ 521.460816][T13549] proc_fail_nth_read+0x10e/0x150 [ 521.460886][T13549] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 521.460925][T13549] vfs_read+0x1ab/0x7f0 [ 521.461029][T13549] ? __rcu_read_unlock+0x4e/0x70 [ 521.461055][T13549] ? __fget_files+0x184/0x1c0 [ 521.461080][T13549] ? mutex_lock+0x57/0x90 [ 521.461117][T13549] ksys_read+0xdc/0x1a0 [ 521.461139][T13549] __x64_sys_read+0x40/0x50 [ 521.461183][T13549] x64_sys_call+0x2886/0x3020 [ 521.461211][T13549] do_syscall_64+0x12c/0x370 [ 521.461241][T13549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.461306][T13549] RIP: 0033:0x7fda8434cfce [ 521.461322][T13549] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 521.461345][T13549] RSP: 002b:00007fda82ddefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 521.461392][T13549] RAX: ffffffffffffffda RBX: 00007fda82ddf6c0 RCX: 00007fda8434cfce [ 521.461406][T13549] RDX: 000000000000000f RSI: 00007fda82ddf0a0 RDI: 0000000000000004 [ 521.461496][T13549] RBP: 00007fda82ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 521.461513][T13549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.461548][T13549] R13: 00007fda84606038 R14: 00007fda84605fa0 R15: 00007ffd95af54b8 [ 521.461570][T13549] [ 521.890301][ T28] audit: type=1400 audit(1774676281.388:1409): avc: denied { create } for pid=13559 comm="syz.4.2732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 522.073358][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.363581][T13570] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2734'. [ 522.866803][T13593] loop4: detected capacity change from 0 to 256 [ 523.483398][T13608] loop1: detected capacity change from 0 to 1024 [ 523.500737][T13608] EXT4-fs: test_dummy_encryption option not supported [ 523.667908][T13605] loop6: detected capacity change from 0 to 8192 [ 523.932086][T13593] FAT-fs (loop4): codepage cp852 not found [ 524.397592][T13610] loop1: detected capacity change from 0 to 512 [ 524.406448][T13610] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 524.466711][T13612] loop3: detected capacity change from 0 to 2048 [ 524.548011][ T28] audit: type=1400 audit(1774676284.038:1410): avc: denied { watch } for pid=13604 comm="syz.6.2746" path="/15/file0" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 525.235876][T13612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.294659][ T28] audit: type=1400 audit(1774676284.808:1411): avc: denied { listen } for pid=13623 comm="syz.6.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 525.317682][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2749'. [ 525.339523][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2749'. [ 525.372288][ T28] audit: type=1326 audit(1774676284.848:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13611 comm="syz.3.2748" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd34454c799 code=0x0 [ 525.405264][ T30] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.430656][ T30] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.580474][ T30] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.894589][T13632] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 525.912853][ T30] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.949806][T13629] loop6: detected capacity change from 0 to 512 [ 526.007320][T13629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 526.066228][T13629] siw: device registration error -23 [ 526.109262][T13637] loop1: detected capacity change from 0 to 512 [ 526.138972][T13637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.196532][T13637] ext4 filesystem being mounted at /545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.922677][T13072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.463137][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.482439][T13655] loop6: detected capacity change from 0 to 164 [ 527.492648][T13655] rock: directory entry would overflow storage [ 527.498910][T13655] rock: sig=0x66, size=4, remaining=3 [ 527.510273][T13655] rock: directory entry would overflow storage [ 527.516657][T13655] rock: sig=0x66, size=4, remaining=3 [ 527.522940][T13655] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 527.531424][T13655] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 528.566048][T13671] loop3: detected capacity change from 0 to 128 [ 528.774420][T13672] syz.3.2756: attempt to access beyond end of device [ 528.774420][T13672] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 528.788356][T13672] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 528.869195][T13681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2762'. [ 528.885201][T13682] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2761'. [ 528.980097][T13688] loop3: detected capacity change from 0 to 128 [ 530.068157][T13698] syz.3.2763: attempt to access beyond end of device [ 530.068157][T13698] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 530.081916][T13698] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 530.101850][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.189316][T13709] batadv_slave_1: entered promiscuous mode [ 530.208508][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2772'. [ 530.218933][T13709] batadv_slave_1 (unregistering): left promiscuous mode [ 530.245584][T13709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.261569][T13711] loop3: detected capacity change from 0 to 128 [ 530.329189][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2767'. [ 530.382362][T13713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2767'. [ 530.441561][T13713] loop1: detected capacity change from 0 to 512 [ 530.479115][T13713] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 530.628178][T13714] syz.3.2771: attempt to access beyond end of device [ 530.628178][T13714] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 530.670121][T13714] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 531.207682][T13736] syzkaller0: entered promiscuous mode [ 531.213602][T13736] syzkaller0: entered allmulticast mode [ 531.426238][T13744] netlink: 'syz.4.2780': attribute type 2 has an invalid length. [ 531.461279][T13744] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2780'. [ 531.469479][T13751] loop1: detected capacity change from 0 to 2048 [ 531.545682][T13751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.563305][ T28] audit: type=1326 audit(1774676291.078:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13750 comm="syz.1.2782" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda8438c799 code=0x0 [ 531.703015][T13756] FAULT_INJECTION: forcing a failure. [ 531.703015][T13756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.933206][T13758] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 532.708958][T13756] CPU: 0 UID: 0 PID: 13756 Comm: syz.6.2776 Tainted: G W syzkaller #0 PREEMPT(full) [ 532.709080][T13756] Tainted: [W]=WARN [ 532.709087][T13756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.709101][T13756] Call Trace: [ 532.709108][T13756] [ 532.709118][T13756] __dump_stack+0x1d/0x30 [ 532.709154][T13756] dump_stack_lvl+0x95/0xd0 [ 532.709189][T13756] dump_stack+0x15/0x1b [ 532.709214][T13756] should_fail_ex+0x263/0x280 [ 532.709333][T13756] should_fail+0xb/0x20 [ 532.709363][T13756] should_fail_usercopy+0x1a/0x20 [ 532.709450][T13756] _copy_from_user+0x1c/0xb0 [ 532.709562][T13756] copy_from_bpfptr+0x5c/0x90 [ 532.709592][T13756] bpf_prog_load+0x73a/0x1140 [ 532.709623][T13756] ? security_bpf+0x2b/0x90 [ 532.709650][T13756] __sys_bpf+0x505/0x7e0 [ 532.709716][T13756] __x64_sys_bpf+0x41/0x50 [ 532.709755][T13756] x64_sys_call+0x10cb/0x3020 [ 532.709820][T13756] do_syscall_64+0x12c/0x370 [ 532.709856][T13756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.709886][T13756] RIP: 0033:0x7fdeb856c799 [ 532.709904][T13756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.709923][T13756] RSP: 002b:00007fdeb6fc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.709951][T13756] RAX: ffffffffffffffda RBX: 00007fdeb87e5fa0 RCX: 00007fdeb856c799 [ 532.709967][T13756] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 532.709984][T13756] RBP: 00007fdeb6fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 532.710001][T13756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.710018][T13756] R13: 00007fdeb87e6038 R14: 00007fdeb87e5fa0 R15: 00007ffd5a747bf8 [ 532.710046][T13756] [ 532.898381][T13744] batman_adv: batadv0: Removing interface: dummy0 [ 533.457250][T13762] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 533.488968][T13762] netlink: 'syz.4.2784': attribute type 10 has an invalid length. [ 533.526635][T13765] netlink: 'syz.3.2785': attribute type 8 has an invalid length. [ 533.611214][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.675314][T13778] netlink: 'syz.1.2788': attribute type 8 has an invalid length. [ 533.734300][T13762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.744209][T13762] bond0: entered promiscuous mode [ 533.749294][T13762] bond_slave_0: entered promiscuous mode [ 533.755298][T13762] bond_slave_1: entered promiscuous mode [ 533.762085][T13762] team0: Port device bond0 added [ 533.804897][T13783] loop4: detected capacity change from 0 to 512 [ 533.830680][T13783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.867539][T13783] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 534.147229][T13792] syzkaller0: entered promiscuous mode [ 534.167983][T13795] loop6: detected capacity change from 0 to 1024 [ 534.170483][T13792] syzkaller0: entered allmulticast mode [ 534.201697][T13795] EXT4-fs: Ignoring removed mblk_io_submit option [ 534.209010][T13795] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 534.218015][T13795] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 534.232607][T13795] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.2793: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 534.252286][T13795] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 534.252447][T13795] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2793: couldn't read orphan inode 11 (err -117) [ 534.261637][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 534.261658][ C0] EXT4-fs (loop6): initial error at time 1774676293: ext4_ext_check_inode:521: inode 11 [ 534.261704][ C0] EXT4-fs (loop6): last error at time 1774676293: ext4_ext_check_inode:521: inode 11 [ 534.300566][T13795] loop6: lost filesystem error report for type 5 error -117 [ 534.301073][T13795] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.341650][T13754] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 534.386449][T13798] Quota error (device loop6): write_blk: dquota write failed [ 534.394179][T13798] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 534.404586][T13798] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.2793: Failed to acquire dquot type 0 [ 534.430766][ T28] audit: type=1400 audit(1774676293.928:1414): avc: denied { create } for pid=13794 comm="syz.6.2793" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 534.475836][T13798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.478175][T13795] can0: slcan on ttyS3. [ 534.525900][T13798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.577287][T13808] loop1: detected capacity change from 0 to 2048 [ 534.590448][T13795] can0 (unregistered): slcan off ttyS3. [ 534.686425][T13808] Alternate GPT is invalid, using primary GPT. [ 534.693130][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.704574][T13808] loop1: p2 p3 p7 [ 534.729794][ T3001] Alternate GPT is invalid, using primary GPT. [ 534.737852][ T3001] loop1: p2 p3 p7 [ 534.759821][T13825] netlink: 'syz.4.2800': attribute type 8 has an invalid length. [ 534.801023][ T8334] udevd[8334]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 534.812312][ T8336] udevd[8336]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 534.888003][ T8383] udevd[8383]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 534.905910][ T28] audit: type=1400 audit(1774676294.418:1415): avc: denied { ioctl } for pid=13826 comm="syz.5.2802" path="socket:[37469]" dev="sockfs" ino=37469 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 534.946819][ T8334] udevd[8334]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 534.959367][ T8383] udevd[8383]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 534.979109][T13834] udevd[13834]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 535.091120][T13838] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2804'. [ 535.169852][T13865] syzkaller0: entered promiscuous mode [ 535.175511][T13865] syzkaller0: entered allmulticast mode [ 535.221102][T13871] FAULT_INJECTION: forcing a failure. [ 535.221102][T13871] name failslab, interval 1, probability 0, space 0, times 0 [ 535.225285][T13873] netlink: 'syz.5.2809': attribute type 8 has an invalid length. [ 535.239699][T13871] CPU: 0 UID: 0 PID: 13871 Comm: syz.1.2808 Tainted: G W syzkaller #0 PREEMPT(full) [ 535.239808][T13871] Tainted: [W]=WARN [ 535.239829][T13871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 535.239874][T13871] Call Trace: [ 535.239895][T13871] [ 535.239917][T13871] __dump_stack+0x1d/0x30 [ 535.240013][T13871] dump_stack_lvl+0x95/0xd0 [ 535.240128][T13871] dump_stack+0x15/0x1b [ 535.240204][T13871] should_fail_ex+0x263/0x280 [ 535.240437][T13871] should_failslab+0x8c/0xb0 [ 535.240542][T13871] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 535.240627][T13871] ? __alloc_skb+0x2d6/0x690 [ 535.240767][T13871] __alloc_skb+0x2d6/0x690 [ 535.240862][T13871] ? __alloc_skb+0x200/0x690 [ 535.240960][T13871] netlink_alloc_large_skb+0xbf/0xf0 [ 535.241127][T13871] netlink_sendmsg+0x40c/0x6f0 [ 535.241336][T13871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.241455][T13871] ____sys_sendmsg+0x563/0x5b0 [ 535.241665][T13871] ___sys_sendmsg+0x195/0x1e0 [ 535.241824][T13871] __x64_sys_sendmsg+0xd4/0x160 [ 535.242059][T13871] x64_sys_call+0x194c/0x3020 [ 535.242159][T13871] do_syscall_64+0x12c/0x370 [ 535.242252][T13871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.242399][T13871] RIP: 0033:0x7fda8438c799 [ 535.242460][T13871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.242523][T13871] RSP: 002b:00007fda82ddf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.242596][T13871] RAX: ffffffffffffffda RBX: 00007fda84605fa0 RCX: 00007fda8438c799 [ 535.242641][T13871] RDX: 0000000000000810 RSI: 0000200000000000 RDI: 0000000000000004 [ 535.242686][T13871] RBP: 00007fda82ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 535.242805][T13871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.242846][T13871] R13: 00007fda84606038 R14: 00007fda84605fa0 R15: 00007ffd95af54b8 [ 535.242928][T13871] [ 535.280923][T13874] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2809'. [ 535.400465][ T28] audit: type=1400 audit(1774676294.878:1416): avc: denied { getopt } for pid=13875 comm="syz.1.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 535.459531][T13874] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2809'. [ 535.503636][T13072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.521150][ T56] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-8 [ 535.539604][ T56] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 0 [ 535.563312][ T56] loop6: lost filesystem error report for type 5 error -117 [ 535.666311][ T28] audit: type=1326 audit(1774676295.178:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.3.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34454c799 code=0x7ffc0000 [ 535.725631][T13898] netlink: 'syz.5.2816': attribute type 8 has an invalid length. [ 535.735364][ T28] audit: type=1326 audit(1774676295.178:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.3.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34454c799 code=0x7ffc0000 [ 535.775804][ T28] audit: type=1326 audit(1774676295.178:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.3.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd34454c799 code=0x7ffc0000 [ 535.791839][T13902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2816'. [ 535.827597][T13902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2816'. [ 535.920493][T13906] loop4: detected capacity change from 0 to 128 [ 536.091583][T13914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2822'. [ 536.145464][T13915] loop4: detected capacity change from 0 to 128 [ 536.182959][T13918] loop1: detected capacity change from 0 to 164 [ 536.192144][T13918] rock: directory entry would overflow storage [ 536.198381][T13918] rock: sig=0x66, size=4, remaining=3 [ 536.735727][T13921] syz.4.2821: attempt to access beyond end of device [ 536.735727][T13921] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 536.749620][T13921] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 536.987844][ T28] kauditd_printk_skb: 388 callbacks suppressed [ 536.987859][ T28] audit: type=1326 audit(1774676296.498:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.3.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd34454c799 code=0x7ffc0000 [ 537.229685][T13937] netlink: 'syz.4.2828': attribute type 8 has an invalid length. [ 537.335918][T13937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2828'. [ 537.349976][T13937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2828'. [ 537.372047][T13946] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 537.872718][T13951] dummy0 speed is unknown, defaulting to 1000 [ 537.958449][T13963] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2831'. [ 538.009955][T13951] chnl_net:caif_netlink_parms(): no params data found [ 538.118130][T13967] netlink: 'syz.3.2832': attribute type 8 has an invalid length. [ 538.145395][T13976] xt_hashlimit: size too large, truncated to 1048576 [ 538.171902][T13977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2832'. [ 538.191396][T13977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2832'. [ 538.241608][ T28] audit: type=1400 audit(1774676297.758:1809): avc: denied { mount } for pid=13980 comm="syz.1.2837" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 538.290918][T13981] loop1: detected capacity change from 0 to 1024 [ 538.299649][T13951] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.328936][T13981] EXT4-fs (loop1): stripe (100) is not aligned with cluster size (16), stripe is disabled [ 538.339688][T13951] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.347452][T13951] bridge_slave_0: entered allmulticast mode [ 538.365254][T13951] bridge_slave_0: entered promiscuous mode [ 538.375394][T13981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.389109][T13951] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.406546][T13951] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.413875][T13951] bridge_slave_1: entered allmulticast mode [ 538.420846][T13951] bridge_slave_1: entered promiscuous mode [ 538.442022][T13951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.453038][T13951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.475298][T13951] team0: Port device team_slave_0 added [ 538.482383][T13951] team0: Port device team_slave_1 added [ 538.499706][T13951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.506803][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.532882][T13951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.544701][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2839'. [ 538.555051][T13951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.571849][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.602903][T13995] loop6: detected capacity change from 0 to 512 [ 538.642128][T13997] xt_hashlimit: size too large, truncated to 1048576 [ 538.660672][T13951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.661487][T13951] hsr_slave_0: entered promiscuous mode [ 539.667615][T13951] hsr_slave_1: entered promiscuous mode [ 539.675640][T13951] debugfs: 'hsr0' already exists in 'hsr' [ 539.681792][T13951] Cannot create hsr debugfs directory [ 539.880558][ T28] audit: type=1400 audit(1774676299.338:1810): avc: denied { watch watch_reads } for pid=14016 comm="syz.5.2844" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 540.071231][T14026] netlink: 'syz.5.2847': attribute type 8 has an invalid length. [ 540.378261][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.422732][ T28] audit: type=1400 audit(1774676299.938:1811): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 540.444519][T13951] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 540.483186][T13951] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 540.503079][ T28] audit: type=1400 audit(1774676300.018:1812): avc: denied { ioctl } for pid=14041 comm="syz.1.2850" path="socket:[39070]" dev="sockfs" ino=39070 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 540.503585][T13951] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 540.553654][T14042] loop1: detected capacity change from 0 to 1024 [ 540.583353][T14042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.586867][T14048] __nla_validate_parse: 5 callbacks suppressed [ 540.586918][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2852'. [ 540.621331][T14042] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.2850: Allocating blocks 449-513 which overlap fs metadata [ 540.636955][T14042] EXT4-fs (loop1): pa ffff888107f2c310: logic 64, phys. 193, len 20 [ 540.645041][T14042] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 4 [ 540.673324][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2852'. [ 540.694675][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.706331][T13951] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 540.803914][T13951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.838708][T13951] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.861462][T14061] netlink: 'syz.5.2855': attribute type 8 has an invalid length. [ 540.899300][ T7965] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.906482][ T7965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.918237][T14062] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2855'. [ 540.923755][ T7965] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.931140][T14062] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2855'. [ 540.934489][ T7965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.121264][T13951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.158104][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2851'. [ 541.247578][T13951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.467720][T14088] loop3: detected capacity change from 0 to 128 [ 541.491678][T13951] veth0_vlan: entered promiscuous mode [ 541.501242][T13951] veth1_vlan: entered promiscuous mode [ 541.519046][T13951] veth0_macvtap: entered promiscuous mode [ 541.528468][T13951] veth1_macvtap: entered promiscuous mode [ 541.544187][T13951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.557726][T13951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.571854][ T7965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.600309][ T7965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.609090][ T7965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.680564][ T28] audit: type=1400 audit(1774676301.188:1813): avc: denied { ioctl } for pid=14092 comm="syz.6.2859" path="socket:[38267]" dev="sockfs" ino=38267 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 541.724660][ T28] audit: type=1400 audit(1774676301.188:1814): avc: denied { write } for pid=14092 comm="syz.6.2859" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 541.766510][ T28] audit: type=1400 audit(1774676301.188:1815): avc: denied { accept } for pid=14092 comm="syz.6.2859" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 541.808336][ T7965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.873113][T14098] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2861'. [ 541.928141][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2863'. [ 541.939124][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2863'. [ 541.967181][ T28] audit: type=1400 audit(1774676301.478:1816): avc: denied { setopt } for pid=14106 comm="syz.1.2863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 542.003156][ T28] audit: type=1400 audit(1774676301.518:1817): avc: denied { map } for pid=14086 comm="syz.3.2857" path="pipe:[2554]" dev="pipefs" ino=2554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 542.202413][ T28] audit: type=1326 audit(1774676301.668:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14116 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70741c799 code=0x7ffc0000 [ 542.227027][ T28] audit: type=1326 audit(1774676301.668:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14116 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70741c799 code=0x7ffc0000 [ 542.304606][T14122] random: crng reseeded on system resumption [ 542.306843][ T28] audit: type=1326 audit(1774676301.668:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14116 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70741c799 code=0x7ffc0000 [ 542.349176][T14122] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 542.366192][ T28] audit: type=1326 audit(1774676301.668:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14116 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70741c799 code=0x7ffc0000 [ 542.392021][T14122] bond3 (unregistering): Released all slaves [ 542.436770][ T28] audit: type=1326 audit(1774676301.668:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14116 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe70741c799 code=0x7ffc0000 [ 542.468271][ T28] audit: type=1326 audit(1774676301.668:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14116 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70741c799 code=0x7ffc0000 [ 542.540566][ T28] audit: type=1326 audit(1774676301.668:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14116 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70741c799 code=0x7ffc0000 [ 542.598596][ T28] audit: type=1326 audit(1774676301.668:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14116 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70741c799 code=0x7ffc0000 [ 543.143566][ T28] audit: type=1326 audit(1774676301.668:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14116 comm="syz.4.2867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70741c799 code=0x7ffc0000 [ 543.263380][T14130] loop3: detected capacity change from 0 to 128 [ 543.367962][T14135] netlink: 'syz.4.2872': attribute type 8 has an invalid length. [ 543.424812][T14140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2872'. [ 543.470035][T14140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2872'. [ 543.598619][T14136] syz.3.2869: attempt to access beyond end of device [ 543.598619][T14136] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 543.613052][T14136] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 543.656124][T14152] loop4: detected capacity change from 0 to 128 [ 543.857017][T14153] syz.4.2876: attempt to access beyond end of device [ 543.857017][T14153] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 543.870991][T14153] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 544.167542][T14167] loop3: detected capacity change from 0 to 128 [ 544.512002][T14177] pim6reg: entered allmulticast mode [ 544.521871][T14177] loop4: detected capacity change from 0 to 512 [ 544.531683][T14177] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 544.540721][T14177] System zones: 0-2, 18-18, 34-34 [ 544.548123][T14177] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 544.563555][T14177] EXT4-fs (loop4): Remounting filesystem read-only [ 544.570270][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 544.576760][ C0] EXT4-fs (loop4): initial error at time 1774676304: ext4_mb_generate_buddy:1315 [ 544.585967][ C0] EXT4-fs (loop4): last error at time 1774676304: ext4_mb_generate_buddy:1315 [ 544.595295][T14177] EXT4-fs (loop4): 1 truncate cleaned up [ 544.602036][T14177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.615027][ T7965] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 544.618026][T14177] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 544.626138][ T7965] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 544.626171][ T7965] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 544.658818][T14177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.780811][T14189] loop4: detected capacity change from 0 to 2048 [ 544.808820][T14189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.161531][T14201] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 546.958249][T13951] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.983154][T14206] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2892'. [ 547.043401][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 547.043421][ T28] audit: type=1400 audit(1774676306.558:1928): avc: denied { create } for pid=14210 comm="syz.6.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 547.102024][T14214] loop4: detected capacity change from 0 to 128 [ 547.803952][T14242] loop3: detected capacity change from 0 to 2048 [ 547.846991][T14242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.943415][ T28] audit: type=1326 audit(1774676307.458:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14238 comm="syz.3.2903" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd34454c799 code=0x0 [ 549.664095][T14253] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 551.057191][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.092413][T14266] loop4: detected capacity change from 0 to 256 [ 551.140424][T14268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2910'. [ 551.150932][T14266] FAT-fs (loop4): codepage cp852 not found [ 551.245750][ T28] audit: type=1400 audit(1774676310.758:1930): avc: denied { cmd } for pid=14272 comm="syz.5.2911" path="socket:[38612]" dev="sockfs" ino=38612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 551.458044][T14284] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 552.334984][T14290] loop1: detected capacity change from 0 to 256 [ 553.319878][T14295] loop6: detected capacity change from 0 to 2048 [ 553.496731][T14290] FAT-fs (loop1): codepage cp852 not found [ 553.704402][T14295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.721053][ T28] audit: type=1326 audit(1774676314.238:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14294 comm="syz.6.2916" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdeb856c799 code=0x0 [ 554.898004][T14312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2921'. [ 554.956634][T14317] loop3: detected capacity change from 0 to 1024 [ 554.991245][ T28] audit: type=1400 audit(1774676314.508:1932): avc: denied { getopt } for pid=14311 comm="syz.5.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 555.001363][T14317] EXT4-fs: test_dummy_encryption option not supported [ 555.388054][T14332] loop3: detected capacity change from 0 to 512 [ 555.400235][T14332] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 556.173734][T14333] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 556.430359][T14334] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 557.312998][T14342] loop1: detected capacity change from 0 to 1024 [ 557.321437][T14342] EXT4-fs: test_dummy_encryption option not supported [ 557.757257][T13072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.912658][ T28] audit: type=1400 audit(1774676317.428:1933): avc: denied { setcheckreqprot } for pid=14338 comm="syz.4.2924" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 557.973907][ T28] audit: type=1400 audit(1774676317.488:1934): avc: denied { getopt } for pid=14347 comm="syz.3.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 558.097373][T14354] loop1: detected capacity change from 0 to 512 [ 558.109184][T14354] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 558.524275][T14358] loop3: detected capacity change from 0 to 8192 [ 558.583724][T14365] ªªªªªª: renamed from vlan0 [ 558.615916][T14365] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2933'. [ 558.632544][T14365] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2933'. [ 558.828210][T14377] loop4: detected capacity change from 0 to 2048 [ 558.903665][ T28] audit: type=1400 audit(1774676317.698:1935): avc: denied { nlmsg_write } for pid=14347 comm="syz.3.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 558.925849][ T28] audit: type=1400 audit(1774676318.308:1936): avc: denied { create } for pid=14371 comm="syz.4.2936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 558.952611][T14377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.404678][T14385] loop3: detected capacity change from 0 to 128 [ 559.490354][ T28] audit: type=1326 audit(1774676318.948:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14376 comm="syz.4.2937" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe70741c799 code=0x0 [ 559.744740][T14396] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 559.967971][T14386] syz.3.2938: attempt to access beyond end of device [ 559.967971][T14386] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 559.981773][T14386] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 560.814913][T14405] dummy0 speed is unknown, defaulting to 1000 [ 561.055735][T14405] chnl_net:caif_netlink_parms(): no params data found [ 561.222001][T14405] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.229116][T14405] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.241387][T13951] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.251443][T14405] bridge_slave_0: entered allmulticast mode [ 561.258099][T14405] bridge_slave_0: entered promiscuous mode [ 561.294217][T14405] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.307389][T14405] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.314860][T14405] bridge_slave_1: entered allmulticast mode [ 561.316221][T14422] loop4: detected capacity change from 0 to 128 [ 561.326652][T14405] bridge_slave_1: entered promiscuous mode [ 561.346394][T14405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.357637][T14405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.407876][T14405] team0: Port device team_slave_0 added [ 561.415105][T14405] team0: Port device team_slave_1 added [ 561.451593][T14405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.470386][T14405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.507066][T14405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.519619][T14431] netlink: 'syz.3.2948': attribute type 8 has an invalid length. [ 561.538949][T14405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.547246][T14405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.576163][T14435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2948'. [ 561.586424][T14435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2948'. [ 561.598811][T14405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.705577][T14442] loop1: detected capacity change from 0 to 128 [ 561.767172][T14405] hsr_slave_0: entered promiscuous mode [ 561.775909][T14405] hsr_slave_1: entered promiscuous mode [ 561.784533][T14405] debugfs: 'hsr0' already exists in 'hsr' [ 561.790593][T14405] Cannot create hsr debugfs directory [ 561.798426][ T28] audit: type=1400 audit(1774676321.308:1938): avc: denied { read } for pid=14443 comm="syz.3.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 561.870784][T14433] dummy0 speed is unknown, defaulting to 1000 [ 561.916129][T14427] syz.4.2946: attempt to access beyond end of device [ 561.916129][T14427] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 561.951463][T14427] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 562.084492][T14458] loop6: detected capacity change from 0 to 2048 [ 562.137670][T14445] syz.1.2950: attempt to access beyond end of device [ 562.137670][T14445] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 562.152135][T14445] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 562.204935][T14458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.218900][T14464] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2956'. [ 562.283153][ T28] audit: type=1326 audit(1774676321.798:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14457 comm="syz.6.2955" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdeb856c799 code=0x0 [ 562.477185][T14474] loop3: detected capacity change from 0 to 256 [ 562.568607][T14478] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 562.821127][T14474] FAT-fs (loop3): codepage cp852 not found [ 562.873758][T14405] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 562.956096][T14480] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2961'. [ 562.966342][T14405] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 562.986730][T14405] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 563.157782][T14405] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 563.416071][T14492] loop1: detected capacity change from 0 to 128 [ 563.436764][T14405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.492796][T14495] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2963'. [ 563.503383][T14405] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.551189][ T7965] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.558313][ T7965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.596481][ T7965] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.603727][ T7965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.772476][T14499] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2964'. [ 563.802930][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2965'. [ 563.853730][T14505] FAULT_INJECTION: forcing a failure. [ 563.853730][T14505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.869294][T14405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.918229][T14505] CPU: 1 UID: 0 PID: 14505 Comm: syz.3.2965 Tainted: G W syzkaller #0 PREEMPT(full) [ 563.918269][T14505] Tainted: [W]=WARN [ 563.918278][T14505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.918296][T14505] Call Trace: [ 563.918304][T14505] [ 563.918353][T14505] __dump_stack+0x1d/0x30 [ 563.918390][T14505] dump_stack_lvl+0x95/0xd0 [ 563.918423][T14505] dump_stack+0x15/0x1b [ 563.918449][T14505] should_fail_ex+0x263/0x280 [ 563.918509][T14505] should_fail+0xb/0x20 [ 563.918542][T14505] should_fail_usercopy+0x1a/0x20 [ 563.918591][T14505] _copy_from_iter+0xcf/0xea0 [ 563.918628][T14505] ? avc_has_perm+0x101/0x190 [ 563.918747][T14505] tun_get_user+0x15f/0x27c0 [ 563.918847][T14505] ? __rcu_read_unlock+0x4e/0x70 [ 563.918873][T14505] ? ref_tracker_alloc+0x1eb/0x2f0 [ 563.918949][T14505] tun_chr_write_iter+0x15e/0x210 [ 563.918981][T14505] do_iter_readv_writev+0x4fd/0x5a0 [ 563.919008][T14505] vfs_writev+0x2e1/0x900 [ 563.919046][T14505] do_writev+0xe9/0x210 [ 563.919109][T14505] __x64_sys_writev+0x45/0x50 [ 563.919136][T14505] x64_sys_call+0x1c0c/0x3020 [ 563.919167][T14505] do_syscall_64+0x12c/0x370 [ 563.919218][T14505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.919252][T14505] RIP: 0033:0x7fd34454c799 [ 563.919273][T14505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.919292][T14505] RSP: 002b:00007fd342f86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 563.919336][T14505] RAX: ffffffffffffffda RBX: 00007fd3447c6090 RCX: 00007fd34454c799 [ 563.919351][T14505] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003 [ 563.919429][T14505] RBP: 00007fd342f86090 R08: 0000000000000000 R09: 0000000000000000 [ 563.919446][T14505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.919463][T14505] R13: 00007fd3447c6128 R14: 00007fd3447c6090 R15: 00007fff140c3568 [ 563.919545][T14505] [ 564.252883][T13072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.363304][T14516] loop1: detected capacity change from 0 to 1024 [ 564.370149][T14516] EXT4-fs: test_dummy_encryption option not supported [ 564.445901][T14405] veth0_vlan: entered promiscuous mode [ 564.457076][T14405] veth1_vlan: entered promiscuous mode [ 564.472484][T14405] veth0_macvtap: entered promiscuous mode [ 564.481351][T14405] veth1_macvtap: entered promiscuous mode [ 564.494173][T14405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.503298][T14405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.771807][T14528] loop1: detected capacity change from 0 to 512 [ 564.780650][T14528] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 565.970620][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.390643][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.399473][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.413817][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.608937][T14546] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2974'. [ 566.783858][T14551] loop3: detected capacity change from 0 to 2048 [ 566.804108][T14543] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2973'. [ 566.954382][T14557] loop6: detected capacity change from 0 to 164 [ 567.330622][T14557] rock: directory entry would overflow storage [ 567.337356][T14557] rock: sig=0x66, size=4, remaining=3 [ 567.386166][T14551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.778908][ T28] audit: type=1326 audit(1774676327.288:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14550 comm="syz.3.2975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd34454c799 code=0x0 [ 568.795364][T14560] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 570.024353][T14565] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2976'. [ 570.286700][T14574] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.293851][T14574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.634141][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.816104][T14592] loop1: detected capacity change from 0 to 512 [ 570.832606][T14592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.854698][ T28] audit: type=1400 audit(1774676330.368:1941): avc: denied { setattr } for pid=14591 comm="syz.1.2987" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 570.895650][T14600] loop6: detected capacity change from 0 to 2048 [ 570.959094][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.960008][T14600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.993075][T14607] syzkaller0: entered promiscuous mode [ 571.007029][T14607] syzkaller0: entered allmulticast mode [ 571.081352][ T28] audit: type=1400 audit(1774676330.598:1942): avc: denied { setopt } for pid=14608 comm="syz.1.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 571.214061][ T28] audit: type=1326 audit(1774676330.728:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14599 comm="syz.6.2986" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdeb856c799 code=0x0 [ 571.241172][T14615] loop1: detected capacity change from 0 to 2048 [ 571.262180][T14615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.285058][ T28] audit: type=1326 audit(1774676330.798:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14614 comm="syz.1.2992" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda8438c799 code=0x0 [ 571.574381][T14622] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 572.752239][T14623] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 573.308568][T14625] netlink: 'syz.5.2993': attribute type 8 has an invalid length. [ 573.359233][T14626] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2993'. [ 573.369717][T14626] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2993'. [ 574.015754][T14629] netlink: 'syz.3.2994': attribute type 8 has an invalid length. [ 574.066809][T14632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2994'. [ 574.179040][T14632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2994'. [ 574.203258][T13072] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.234389][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.312511][T14641] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3000'. [ 574.499594][T14655] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3003'. [ 574.581726][T14659] loop1: detected capacity change from 0 to 2048 [ 574.652814][T14659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.694386][ T28] audit: type=1326 audit(1774676334.208:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.1.3005" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda8438c799 code=0x0 [ 574.723760][T14663] loop6: detected capacity change from 0 to 128 [ 575.012259][T14672] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 575.520708][T14677] netlink: 'syz.3.3007': attribute type 8 has an invalid length. [ 575.573002][T14678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3007'. [ 575.602641][T14678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3007'. [ 575.847970][T14685] loop3: detected capacity change from 0 to 2048 [ 575.891974][T14685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.922097][ T28] audit: type=1326 audit(1774676335.438:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14684 comm="syz.3.3009" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd34454c799 code=0x0 [ 576.100028][T14692] loop4: detected capacity change from 0 to 512 [ 576.596150][T14694] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 576.629665][T14692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 576.647934][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.667605][T14692] siw: device registration error -23 [ 576.780099][T14698] netlink: 'syz.6.3011': attribute type 8 has an invalid length. [ 576.830545][T14699] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3011'. [ 576.853575][T14699] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3011'. [ 576.895662][ T35] ================================================================== [ 576.903820][ T35] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 576.912291][ T35] [ 576.914637][ T35] read-write to 0xffff88810048bdc8 of 8 bytes by task 3312 on cpu 0: [ 576.922823][ T35] __filemap_remove_folio+0x218/0x310 [ 576.928243][ T35] __remove_mapping+0x390/0x4c0 [ 576.933136][ T35] remove_mapping+0x22/0x90 [ 576.937668][ T35] mapping_try_invalidate+0x293/0x430 [ 576.943078][ T35] invalidate_mapping_pages+0x27/0x40 [ 576.948488][ T35] invalidate_bdev+0x58/0x70 [ 576.953103][ T35] ext4_put_super+0x624/0x7d0 [ 576.957814][ T35] generic_shutdown_super+0xee/0x220 [ 576.963133][ T35] kill_block_super+0x2a/0x70 [ 576.967831][ T35] ext4_kill_sb+0x42/0x80 [ 576.972184][ T35] deactivate_locked_super+0x75/0x1c0 [ 576.977600][ T35] deactivate_super+0x97/0xa0 [ 576.982376][ T35] cleanup_mnt+0x2bb/0x330 [ 576.986843][ T35] __cleanup_mnt+0x19/0x20 [ 576.991296][ T35] task_work_run+0x130/0x1a0 [ 576.995910][ T35] exit_to_user_mode_loop+0x1f4/0x6f0 [ 577.001311][ T35] do_syscall_64+0x249/0x370 [ 577.005936][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.011852][ T35] [ 577.014206][ T35] read to 0xffff88810048bdc8 of 8 bytes by task 35 on cpu 1: [ 577.021598][ T35] nr_blockdev_pages+0x7e/0xd0 [ 577.026401][ T35] si_meminfo+0x87/0xd0 [ 577.030587][ T35] update_defense_level+0x47/0x5d0 [ 577.035729][ T35] defense_work_handler+0x1f/0x80 [ 577.040787][ T35] process_scheduled_works+0x513/0xa10 [ 577.046290][ T35] worker_thread+0x58a/0x780 [ 577.050923][ T35] kthread+0x22a/0x280 [ 577.055022][ T35] ret_from_fork+0x150/0x360 [ 577.059654][ T35] ret_from_fork_asm+0x1a/0x30 [ 577.064459][ T35] [ 577.066794][ T35] value changed: 0x000000000000000c -> 0x000000000000000b [ 577.073914][ T35] [ 577.076260][ T35] Reported by Kernel Concurrency Sanitizer on: [ 577.082432][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/1:1 Tainted: G W syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 577.093222][ T35] Tainted: [W]=WARN [ 577.097040][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 577.107139][ T35] Workqueue: events_long defense_work_handler [ 577.113240][ T35] ================================================================== [ 577.797405][T14703] syz_tun (unregistering): left promiscuous mode [ 577.855477][ T30] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.933484][ T30] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.014694][ T30] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.074293][ T30] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.100186][T14689] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.205632][ T30] bridge_slave_1: left allmulticast mode [ 578.212575][ T30] bridge_slave_1: left promiscuous mode [ 578.218342][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.234022][ T30] bridge_slave_0: left allmulticast mode [ 578.239825][ T30] bridge_slave_0: left promiscuous mode [ 578.246721][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.436784][T14693] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.452492][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.463422][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.473224][ T30] bond0 (unregistering): Released all slaves [ 578.482094][T14693] syz_tun (unregistering): left promiscuous mode [ 578.523001][ T30] hsr_slave_0: left promiscuous mode [ 578.528728][ T30] hsr_slave_1: left promiscuous mode [ 578.534873][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.542617][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.551098][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.558509][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.570594][ T30] veth1_macvtap: left promiscuous mode [ 578.576173][ T30] veth0_macvtap: left promiscuous mode [ 578.582562][ T30] veth1_vlan: left promiscuous mode [ 578.587858][ T30] veth0_vlan: left promiscuous mode [ 578.741039][ T30] team0 (unregistering): Port device team_slave_1 removed [ 578.751617][ T30] team0 (unregistering): Port device team_slave_0 removed [ 579.073768][ T30] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.084113][ T30] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.154353][ T30] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.164760][ T30] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.223159][ T30] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.233508][ T30] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.303889][ T30] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.314382][ T30] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.389178][ T30] bridge_slave_1: left allmulticast mode [ 579.394958][ T30] bridge_slave_1: left promiscuous mode [ 579.401375][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.409256][ T30] bridge_slave_0: left allmulticast mode [ 579.415002][ T30] bridge_slave_0: left promiscuous mode [ 579.420769][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.582658][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.593689][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.603204][ T30] bond0 (unregistering): Released all slaves [ 579.635293][ T30] hsr_slave_0: left promiscuous mode [ 579.641117][ T30] hsr_slave_1: left promiscuous mode [ 579.646981][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.654674][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.662844][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.670520][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.681975][ T30] veth1_vlan: left promiscuous mode [ 579.687269][ T30] veth0_vlan: left promiscuous mode [ 579.766423][ T30] team0 (unregistering): Port device team_slave_1 removed [ 579.777381][ T30] team0 (unregistering): Port device team_slave_0 removed [ 580.084869][ T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.133738][ T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.176204][ T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.243168][ T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.312468][ T30] bridge_slave_1: left allmulticast mode [ 580.318165][ T30] bridge_slave_1: left promiscuous mode [ 580.323932][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.332504][ T30] bridge_slave_0: left allmulticast mode [ 580.338191][ T30] bridge_slave_0: left promiscuous mode [ 580.344358][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.462592][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.472749][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.483130][ T30] bond0 (unregistering): Released all slaves [ 580.507874][ T30] hsr_slave_0: left promiscuous mode [ 580.514575][ T30] hsr_slave_1: left promiscuous mode [ 580.520383][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.527833][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.535646][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.544080][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.556360][ T30] veth1_macvtap: left promiscuous mode [ 580.562103][ T30] veth0_macvtap: left promiscuous mode [ 580.567810][ T30] veth1_vlan: left promiscuous mode [ 580.573987][ T30] veth0_vlan: left promiscuous mode [ 580.624067][ T30] pim6reg (unregistering): left allmulticast mode [ 580.661194][ T30] team0 (unregistering): Port device team_slave_1 removed [ 580.673050][ T30] team0 (unregistering): Port device team_slave_0 removed